login.php

Ga naar de documentatie van deze file.

<?php
/***************************************************************************
 *   Copyright (C) 2007 by Damian Bodde and Peter Wessels                  *
 *   damian@elsw.de  peter1wessels@gmail.com                               *
 *                                                                         *
 *   This program is free software; you can redistribute it and/or modify  *
 *   it under the terms of the GNU General Public License as published by  *
 *   the Free Software Foundation; either version 2 of the License, or     *
 *   (at your option) any later version.                                   *
 *                                                                         *
 *   This program is distributed in the hope that it will be useful,       *
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of        *
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
 *   GNU General Public License for more details.                          *
 *                                                                         *
 *   You should have received a copy of the GNU General Public License     *
 *   along with this program; if not, write to the                         *
 *   Free Software Foundation, Inc.,                                       *
 *   59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
 ***************************************************************************/
?>

<?php

if(isset($_GET['action']))
{
                $action = $_GET['action'];
}
else
{
                $action = "main";
}

if($action == "main")
{
                if(isset($_SESSION['nick']))
                {
                                session_destroy();
                                echo "<meta http-equiv=\"refresh\" content=\"0; URL=index.php\">";
                                exit();
                }
                if($_POST['login'] == true)
                {
                                $username = strip_tags(mysql_real_escape_string($_POST['naam']));
                                $passwort = md5(strip_tags(mysql_real_escape_string($_POST['pass'])));
                                
                                if(!$username || !$passwort)
                                {
                                                $meldung = "Je dient wel alles in te vullen.";
                                }
                                
                                if(!$melding)
                                {
                                                $sql = ("SELECT id,name, pass, status FROM users WHERE name='$username'");
                                                $result = mysql_query($sql) or die(mysql_error());
                                                if(mysql_num_rows($result) < 1)
                                                {
                                                                $meldung.= "Deze gebruiker bestaat niet.";
                                                }
                                                if(!$meldung)
                                                {
                                                                $row = mysql_fetch_array($result);
                                                                
                                                                $sql = ("SELECT fails FROM users WHERE name='$username'");
                                                                $result = mysql_query($sql) or die(mysql_error());
                                                                $rod = mysql_fetch_array($result);
                                                                $fail_versuche = $rod[0];
                                                                
                                                                if($fail_versuche > 3)
                                                                {
                                                                                $meldung.= "Het account is geblokkeerd. Contacteer de Admin";
                                                                }
                                                                
                                                                if(!$meldung)
                                                                {
                                                                                if($row['pass'] != $passwort)
                                                                                {
                                                                                                $fail = $fail_versuche + 1;
                                                                                                $meldung.= "Je wachtwoord is verkeerd";
                                                                                                $sql = ("UPDATE users SET fails='$fail' WHERE name='$username'");
                                                                                                mysql_query($sql) or die(mysql_error());
                                                                                }
                                                                }
                                                                
                                                                if(!$meldung)
                                                                {
                                                                                $_SESSION['nick'] = $username;
                                                                                $_SESSION['level'] = $row['level'];
                                                                                $_SESSION['userid'] = $row['id'];
                                                                                if($row['status'] == "banned")
                                                                                {
                                                                                                $meldung.= "Je bent verbannen!";
                                                                                }
                                                                                if(!$meldung)
                                                                                {
                                                                                                $sql = ("UPDATE users SET lastip='$ip', lastlogin=NOW(), fails='0' WHERE name='$username'");
                                                                                                mysql_query($sql) or die(mysql_error());
                                                                                                echo login_correct;
                                                                                                echo "<meta http-equiv=\"refresh\" content=\"0; URL=index.php\">";
                                                                                                exit();
                                                                                }
                                                                }
                                                }
                                }
                }
                ?>
                <form action=index.php?menu=login&action=main method=post>
                                <?=$meldung;?>
                                <table>
                                                <tr>
                                                                <td>Gebruikersnaam:</td>
                                                                <td>:</td>
                                                                <td><input type=name class=input name=naam>
                                                </tr><tr>
                                                                <td>Wachtwoord:</td>
                                                                <td>:</td>
                                                                <td><input type=password class=input name=pass>
                                                </tr>
                                </table>
                                <input type=submit value=Inloggen name=login>
                </form>
                <?php
}

---