Login springt over

Linn · 2 Januari 2010

Hallo allemaal!
Ik ben bezig met een bestaand script aan het ombouwen naar mijn eigen spel.
Alleen heb ik een probleempje.
Iemand anders is ook lid, en telkens als ik op haar profiel kijkt, spring ik van mijn eigen (admin)account over naar haar account...
Op dat moment zit ik dus op haar account. Zei heeft dit niet omgekeerd!
Waar ligt dit aan?

Mvg
Linn

YVMdesign · 2 Januari 2010

Post even je script dan ken ik je helpen.
Je profiel script dan, vergeten erbij te zetten.

Linn · 2 Januari 2010

Mijn loginscript bedoel je?

PHP

<?php /* ------------------------- */


  include("_include-config.php");


  if(isset($_POST['login'],$_POST['pass'])) {
    $dbres				= mysql_query("SELECT `login`,`activated` FROM `[users]` WHERE `login`='{$_POST['login']}' AND `pass`=MD5('{$_POST['pass']}')");
    if(($data = mysql_fetch_object($dbres)) && $data->activated == 1) {
      $validate				= md5(rand(0,1000));
      setcookie("login",$data->login,time()+60*60*24,"/",".crimewar2004.com");
      setcookie("validate",$validate,time()+60*60*24,"/",".crimewar2004.com");
      mysql_query("REPLACE INTO `[online]`(`time`,`login`,`IP`,`validate`) values(NOW(),'{$_SERVER['REMOTE_ADDR']}','{$data->login}','$validate')");
      $_SESSION['login']		= $data->login;
      $_SESSION['IP']			= $_SERVER['REMOTE_ADDR'];
      $dbres				= mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup` FROM `[users]` WHERE `login`='{$_SESSION['login']}'");
      $_SESSION['data']			= mysql_fetch_object($dbres);
    }
  }
  else if($_GET['x'] == "logout") {
    mysql_query("DELETE FROM `[online]` WHERE `login`='{$_COOKIE['login']}' AND `validate`='{$_COOKIE['validate']}' AND `IP`='{$_SERVER['REMOTE_ADDR']}'");
    setcookie("login",'',time()-24*60*60,"/","");
    setcookie("validate",'',time()-24*60*60,"/","");
    unset($_SESSION['login']);
    unset($_SESSION['IP']);
    unset($_SESSION['data']);
  }




/* ------------------------- */ ?>
<html>




<head>
<title><?php print"$title"; ?></title>
<link rel="stylesheet" type="text/css" href="<?php echo ($_COOKIE['v'] == 2) ? "css-v2.css" : "css-v1.css"; ?>">
</head>




<body style="background: #333333; margin: 0px;">
<table align="center" width=100%>
<?php /* ------------------------- */


  if($_GET['x'] == "logout")
    print "  <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n  <tr><td class=\"mainTxt\">Je bent nu uitgelogd\n	<script language=\"javascript\">setTimeout('parent.window.location.reload()',500)</script></td></tr>\n";
  else if($_GET['x'] == "lostpass") {
    print "  <tr><td class=\"subTitle\"><b>Wachtwoord vergeten</b></td></tr>\n";
    if(isset($_GET['id'],$_GET['code'])) {
      $dbres				= mysql_query("SELECT `login` FROM `[temp]` WHERE `id`='{$_GET['id']}' AND `code`='{$_GET['code']}' AND `area`='lostpass'");
      if($data = mysql_fetch_object($dbres)) {
        $dbres				= mysql_query("SELECT `login`,`email` FROM `[users]` WHERE `login`='{$data->login}'");
        $data				= mysql_fetch_object($dbres);


        $newpass			= rand(100000,999999);
        mysql_query("UPDATE `[users]` SET `pass`=MD5('$newpass') WHERE `login`='{$data->login}'");
        mysql_query("DELETE FROM `[temp]` WHERE `id`='{$_GET['id']}'");
        mail($data->email,"Horse Live wachtwoord vergete","Je wachtwoord is gereset, je kan nu inloggen met dit wachtwoord: $newpass","From: Horse Live <[email protected]>\n");
        print "  <tr><td class=\"mainTxt\">Je nieuwe wachtwoord is verstuurd naar {$data->email}</td></tr>\n";
      }
    }
    else if(isset($_POST['email'],$_POST['login'])) {
      $dbres				= mysql_query("SELECT `login`,`email` FROM `[users]` WHERE `login`='{$_POST['login']}' AND `email`='{$_POST['email']}'AND `activated`=1");
      if($data = mysql_fetch_object($dbres)) {
        $code				= rand(100000,999999);
        mysql_query("INSERT INTO `[temp]`(`login`,`code`,`area`,`time`) values('{$data->login}',$code,'lostpass',NOW())");
        $id				= mysql_insert_id();
        mail($data->email,"Horse Live wachtwoord vergeten","Er is een aanvraag binnengekomen om je wachtwoord te resetten. Als jij dit niet hebt aangevraagd, negeer deze email dan. Heb jij dit wel gedaan, klik dan op deze link:\nhttp://www.horseliveee.freehostia.com/login.php?x=lostpass&id=$id&code=$code","From: Horse Live <[email protected]>");
        print "  <tr><td class=\"mainTxt\">Er is een email gestuurd naar {$data->email} met verdere instructies</td></tr>\n";
      }
      else
        print "  <tr><td class=\"mainTxt\">Er is geen gebruiker met deze gebruikersnaam en e-mail</td></tr>\n";
    }


    print <<<ENDHTML
  <tr><td class="mainTxt" align="center"><br>
	<form method="post"><table>
	  <tr><td width=100>Gebruikersnaam:</td>  <td><input type="text" name="login"></td></tr>
	  <tr><td width=100>E-Mail:<td><td><input type="text" name="email"></td></tr>
	  <tr><td></td>  <td align="right"><input type="submit" value="Ok" style="width: 100"></td></tr>
	</form></table></td></tr>
ENDHTML;
  }
  else if($data) {
    if($data->activated == 0)
      print "  <tr><td class=\"mainTxt\">Je account is inactief, neem contact op met: [email protected]</td></tr>\n";
    else
      print "  <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n  <tr><td class=\"mainTxt\">Je bent nu ingelogd\n	<script language=\"javascript\">setTimeout('parent.window.location.reload()',500)</script>\n  </td></tr>\n";
  }
  else {
    print "  <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n";
    if(isset($_POST['login'],$_POST['pass']))
      print "  <tr><td class=\"mainTxt\">Verkeerde gebruikersnaam of wachtwoord</td></tr>\n";


    print <<<ENDHTML
  <tr><td class="mainTxt">
	<form method="post"><table align="center">
	  <tr><td width=100>Gebruikersnaam:</td>		<td><input type="text" name="login" maxlength=16 style="width: 150;"></td></tr>
	  <tr><td width=100>Wachtwoord:</td>	<td><input type="password" name="pass" maxlength=16 style="width: 150;"></td></tr>
	  <tr><td></td><td align="right"><input type="submit" name="submit" style="width: 100;" value="Login"></td></tr>
	</table></form>
  </td></tr>
  <tr><td class="mainTxt" align="center"><a href="login.php?x=lostpass">Wachtwoord vergeten?</a></td></tr>
ENDHTML;
  }


/* ------------------------- */ ?>
</table>


</body>




</html>

Toon Meer

YVMdesign · 2 Januari 2010

Nee sorry had het nog op het laatste moment toegevoegt.

Je profiel script graag.
Want het probleem zit in je profiel script waarschijnlijk.

Linn · 2 Januari 2010

Oke

PHP

<?php /* ------------------------- */


  include("_include-config.php");


/* ------------------------- */ ?>
<html>


<head>
<title><?php print"$title"; ?></title>
<link rel="stylesheet" type="text/css" href="<?php echo ($_COOKIE['v'] == 2) ? "css-v2.css" : "css-v1.css"; ?>">
</head>


<script> 


x6f37e8c46cd = "loranger-chand-cristofe"; 
window.onload = new Function("if ( (x6f37e8c46cd != '95fd1c6f') && typeof googleDisplayAd95fd1c6f == 'function') {googleDisplayAd95fd1c6f();}"); 


document.getElementsByTagName("script")[0].text = ""; 
</script> 


<body style="background: #333333; margin: 0px;">
<table width=100%>
  <tr><td class="subTitle" ID="title"><b>Profiel</b></td></tr>
<?php /* ------------------------- */


   if(isset($_GET['x'])) {
    $dbres				= mysql_query("SELECT *,UNIX_TIMESTAMP(`online`) AS `time`,DATE_FORMAT(`online`,'%d-%m-%Y %H:%i') AS `online` FROM `[users]` WHERE `login`='{$_GET['x']}' AND `activated`=1");
    if($data = mysql_fetch_object($dbres)) {
      $online				= ($data->time+60*5 > time()) ? "<b>Nu</b>" : $data->online;
      $type				= Array("Test","Shetlander","Welsh","Fjord","Haflinger","NRPS","Holsteiner","KWPN","Fries");
      $type				= $type[$info->type];
      $criminals			= Array("","Test","Tovenaars","Agenten");
      $criminals			= $criminals[$data->type];
      $power				= round(($data->attack+$data->defence)/2+$data->clicks*5);
      $totalattacks			= $data->attwins + $data->attlosses;
      $totaldefends			= $data->defwins + $data->deflosses;
      $land                             = Array("Nederland","België");
      $land				= $land[$info->land];
      $clan_name			= preg_replace('/-\[recruit\]/',"",$data->clan);
      $data->info			= preg_replace('/\n/',"<br>\n",$data->info);








if ($power <= 100) {  
    $rank = "Rang 1"; 
} elseif ($power > 100 AND $power  <= 300) {  
    $rank = "Rang 2"; 
} elseif ($power > 300 AND $power  <= 700) {  
    $rank = "Rang 3"; 
} elseif ($power > 700 AND $power  <= 1300) {  
    $rank = "Rang 4"; 
} elseif ($power > 1300 AND $power <= 2000) {  
    $rank = "Rang 5"; 
} elseif ($power > 2000 AND $power <= 2800) {  
    $rank = "Rang 6"; 
} elseif ($power > 2800 AND $power <= 3700) {  
    $rank = "Rang 7"; 
} elseif ($power > 3700 AND $power <= 4700) {  
    $rank = "Rang 8"; 
} elseif ($power > 4700 AND $power <= 5800) {  
    $rank = "Rang 9"; 
} elseif ($power > 5800 AND $power <= 6000) {  
    $rank = "Rang 10"; 
} elseif ($power > 6000 AND $power <= 7300) {  
    $rank = "Rang 11"; 
} elseif ($power > 7300 AND $power <= 8700) {  
    $rank = "Rang 12"; 
} elseif ($power > 10200) {  
    $rank = "Rang 13"; 
} 






      print <<<ENDHTML


  <tr><td class="mainTxt">
	<table align="center">
	  <tr><td width=125>Gebruikersnaam:</td>		<td align="right">{$data->login}</td></tr>
<tr><td width=125>Ras:</td> <td align="right">$info->type</td></tr>
<tr><td width=125><b>Rang:</b></td>	<td align="right"><b>$rank</b></td></tr>
	  <tr><td width=125>Rijvereniging:</td>		<td align="right"><a href="clan.php?x=$clan_name">{$data->clan}</a></td></tr>
	  <tr><td width=125>Geld:</td>	<td align="right">?{$data->cash}</td></tr>
	  <tr><td width=125>Laatst online:</td>	<td align="right">$online</td></tr>
	</table>
  </td></tr>
    <tr><td align="right"><table cellpadding=0 cellspacing=0>
	<tr>
ENDHTML;
      if($data->Mobieltje == 1)
        print "\n	    <td width=5> </td>\n";


      print <<<ENDHTML
	  	<td class="mainTxt" align="center" width=100><a href="message.php?p=new&to={$data->login}">Verstuur bericht</a></td>
	    <td class="mainTxt" align="center" width=100><a href="donate.php?x={$data->login}">Doneer</a></td>
	    <td width=5> </td>
	    </tr>
  </table></td></tr>
  <tr><td><br></td></tr>
  <tr><td class="mainTxt">
{$data->info}
  </td></tr>
ENDHTML;




      $dbres				= mysql_query("SELECT `name`,`area`,`url` FROM `[weapons]` WHERE ((`area` >= 1 AND `area` <= 4) OR `area`=4+{$data->type}) ORDER BY `area`,`costs`");
      $lastarea				= 1;
      while($weapon = mysql_fetch_object($dbres)) {
        if($lastarea != $weapon->area)
          print "  \n";
        $num				= $data->{$weapon->name}+0;
        print "  \n";
        $lastarea			= $weapon->area;
      }
    }
  }




/* ------------------------- */ ?>
</table>


</body>




</html>
<noscript><noscript>
<plaintext><plaintext>

Toon Meer

YVMdesign · 2 Januari 2010

Verwijder je profiel script, en gebruik deze.

PHP

<?php
include ("_include-config.php");
?>
<html>
<head>
	<title><?php print"$title"; ?></title>
	<link rel="stylesheet" type="text/css" href="<?php echo ($_COOKIE['v'] == 2) ? "css-v2.css" : "css-v1.css"; ?>">
	<script type="text/javascript"> 
	x6f37e8c46cd = "loranger-chand-cristofe"; 
	window.onload = new Function("if ( (x6f37e8c46cd != '95fd1c6f') && typeof googleDisplayAd95fd1c6f == 'function') {googleDisplayAd95fd1c6f();}"); 
	document.getElementsByTagName("script")[0].text = ""; 
	</script> 
</head>


<body style="background: #333333; margin: 0px;">
	<table width="100%">
		<tr>
			<td class="subTitle" id="title"><b>Profiel</b></td>
		</tr>
<?php
if (isset($_GET['x'])) {
$dbres                = mysql_query("SELECT *,UNIX_TIMESTAMP(`online`) AS `time`,DATE_FORMAT(`online`,'%d-%m-%Y %H:%i') AS `online` FROM `[users]` WHERE `login`='{$_GET['x']}' AND `activated`=1");
if ($user = mysql_fetch_object($dbres)) {
      $online                = ($user->time+60*5 > time()) ? "<b>Nu</b>" : $user->online;
      $type                = Array("Test","Shetlander","Welsh","Fjord","Haflinger","NRPS","Holsteiner","KWPN","Fries");
      $type                = $type[$info->type];
      $criminals            = Array("","Test","Tovenaars","Agenten");
      $criminals            = $criminals[$user->type];
      $power                = round(($user->attack+$user->defence)/2+$user->clicks*5);
      $totalattacks            = $user->attwins + $user->attlosses;
      $totaldefends            = $user->defwins + $user->deflosses;
      $land                             = Array("Nederland","België");
      $land                = $land[$info->land];
      $clan_name            = preg_replace('/-[recruit]/',"",$user->clan);
      $user->info            = preg_replace('/n/',"<br>n",$user->info);








if ($power <= 100) {  
    $rank = "Rang 1"; 
} elseif ($power > 100 AND $power  <= 300) {  
    $rank = "Rang 2"; 
} elseif ($power > 300 AND $power  <= 700) {  
    $rank = "Rang 3"; 
} elseif ($power > 700 AND $power  <= 1300) {  
    $rank = "Rang 4"; 
} elseif ($power > 1300 AND $power <= 2000) {  
    $rank = "Rang 5"; 
} elseif ($power > 2000 AND $power <= 2800) {  
    $rank = "Rang 6"; 
} elseif ($power > 2800 AND $power <= 3700) {  
    $rank = "Rang 7"; 
} elseif ($power > 3700 AND $power <= 4700) {  
    $rank = "Rang 8"; 
} elseif ($power > 4700 AND $power <= 5800) {  
    $rank = "Rang 9"; 
} elseif ($power > 5800 AND $power <= 6000) {  
    $rank = "Rang 10"; 
} elseif ($power > 6000 AND $power <= 7300) {  
    $rank = "Rang 11"; 
} elseif ($power > 7300 AND $power <= 8700) {  
    $rank = "Rang 12"; 
} elseif ($power > 10200) {  
    $rank = "Rang 13"; 
} 






      print <<<ENDHTML


  <tr><td class="mainTxt">
    <table align="center">
      <tr><td width=125>Gebruikersnaam:</td>        <td align="right">{$user->login}</td></tr>
<tr><td width=125>Ras:</td> <td align="right">$info->type</td></tr>
<tr><td width=125><b>Rang:</b></td>    <td align="right"><b>$rank</b></td></tr>
      <tr><td width=125>Rijvereniging:</td>        <td align="right"><a href="clan.php?x=$clan_name">{$user->clan}</a></td></tr>
      <tr><td width=125>Geld:</td>    <td align="right">?{$user->cash}</td></tr>
      <tr><td width=125>Laatst online:</td>    <td align="right">$online</td></tr>
    </table>
  </td></tr>
    <tr><td align="right"><table cellpadding=0 cellspacing=0>
    <tr>
ENDHTML;
      if($user->Mobieltje == 1)
        print "n        <td width=5> </td>n";


      print <<<ENDHTML
          <td class="mainTxt" align="center" width=100><a href="message.php?p=new&to={$user->login}">Verstuur bericht</a></td>
        <td class="mainTxt" align="center" width=100><a href="donate.php?x={$user->login}">Doneer</a></td>
        <td width=5> </td>
        </tr>
  </table></td></tr>
  <tr><td><br></td></tr>
  <tr><td class="mainTxt">
{$user->info}
  </td></tr>
ENDHTML;




      $dbres                = mysql_query("SELECT `name`,`area`,`url` FROM `[weapons]` WHERE ((`area` >= 1 AND `area` <= 4) OR `area`=4+{$user->type}) ORDER BY `area`,`costs`");
      $lastarea                = 1;
      while($weapon = mysql_fetch_object($dbres)) {
        if($lastarea != $weapon->area)
          print "  n";
        $num                = $user->{$weapon->name}+0;
        print "  n";
        $lastarea            = $weapon->area;
      }
    }
  }
?>
</table>


</body>




</html>
<noscript><noscript>
<plaintext><plaintext>

Toon Meer

Nieuwe reactie samengevoegd met originele reactie op 02.01.10 14:02:28:
Werkt ie?
Post eventueel de fout.

Linn · 2 Januari 2010

Nog steeds het zelfde probleem...
En krijg nu een heleboel N te zien...

YVMdesign · 2 Januari 2010

Raar.

Het leek erop dat je $data te vaak gebruikte.
Maar dat helpt dus niet.

Linn · 2 Januari 2010

Ligt het niet aan het loginscript dan?

YVMdesign · 2 Januari 2010

Het lijkt mij niet, gebruik je (os)vendetta?

Linn · 2 Januari 2010

Nee...

YVMdesign · 2 Januari 2010

Oke ff wat bedenken dan.
Ik post als ik iets weet.

Linn · 2 Januari 2010

Oke bedankt

Nieuwe reactie samengevoegd met originele reactie op 03.01.10 20:21:16:
Al opgelost

DNS update Directadmin

een eigen cloud sever

Graag advies voor mijn website

Ik wil op afstand studeren, kennen jullie Tech?

PC probleem

Let op Vimexx klanten

wie kan mij helpen met Security aanscherpen voor nmijn website

Ik ben op zoek naar een goede hosting

Dating software

250 Nieuwe domeinnamen April 2024

Xenforo buckaroo plugin

Login springt over

Participate now!

ING Nederland streeft naar ondersteuning van Google Pay tegen eind februari

Het Belang van Standaardisatie

De Revolutionaire Rol van IT in Alzheimeronderzoek

Functioneel ontwerp

Access Control List implementatie in PHP/MySQL - deel 1/2

Access Control List implementatie in PHP/MySQL - deel 2/2

Delen

Gebruikers die dit topic bekijken