Login springt over

Linn

Hallo allemaal!
Ik ben bezig met een bestaand script aan het ombouwen naar mijn eigen spel.
Alleen heb ik een probleempje.
Iemand anders is ook lid, en telkens als ik op haar profiel kijkt, spring ik van mijn eigen (admin)account over naar haar account...
Op dat moment zit ik dus op haar account. Zei heeft dit niet omgekeerd!
Waar ligt dit aan?

Mvg
Linn

YVMdesign

Post even je script dan ken ik je helpen.
Je profiel script dan, vergeten erbij te zetten.

Linn

Mijn loginscript bedoel je?

PHP

<?php /* ------------------------- */


  include("_include-config.php");


  if(isset($_POST['login'],$_POST['pass'])) {
    $dbres				= mysql_query("SELECT `login`,`activated` FROM `[users]` WHERE `login`='{$_POST['login']}' AND `pass`=MD5('{$_POST['pass']}')");
    if(($data = mysql_fetch_object($dbres)) && $data->activated == 1) {
      $validate				= md5(rand(0,1000));
      setcookie("login",$data->login,time()+60*60*24,"/",".crimewar2004.com");
      setcookie("validate",$validate,time()+60*60*24,"/",".crimewar2004.com");
      mysql_query("REPLACE INTO `[online]`(`time`,`login`,`IP`,`validate`) values(NOW(),'{$_SERVER['REMOTE_ADDR']}','{$data->login}','$validate')");
      $_SESSION['login']		= $data->login;
      $_SESSION['IP']			= $_SERVER['REMOTE_ADDR'];
      $dbres				= mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup` FROM `[users]` WHERE `login`='{$_SESSION['login']}'");
      $_SESSION['data']			= mysql_fetch_object($dbres);
    }
  }
  else if($_GET['x'] == "logout") {
    mysql_query("DELETE FROM `[online]` WHERE `login`='{$_COOKIE['login']}' AND `validate`='{$_COOKIE['validate']}' AND `IP`='{$_SERVER['REMOTE_ADDR']}'");
    setcookie("login",'',time()-24*60*60,"/","");
    setcookie("validate",'',time()-24*60*60,"/","");
    unset($_SESSION['login']);
    unset($_SESSION['IP']);
    unset($_SESSION['data']);
  }




/* ------------------------- */ ?>
<html>




<head>
<title><?php print"$title"; ?></title>
<link rel="stylesheet" type="text/css" href="<?php echo ($_COOKIE['v'] == 2) ? "css-v2.css" : "css-v1.css"; ?>">
</head>




<body style="background: #333333; margin: 0px;">
<table align="center" width=100%>
<?php /* ------------------------- */


  if($_GET['x'] == "logout")
    print "  <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n  <tr><td class=\"mainTxt\">Je bent nu uitgelogd\n	<script language=\"javascript\">setTimeout('parent.window.location.reload()',500)</script></td></tr>\n";
  else if($_GET['x'] == "lostpass") {
    print "  <tr><td class=\"subTitle\"><b>Wachtwoord vergeten</b></td></tr>\n";
    if(isset($_GET['id'],$_GET['code'])) {
      $dbres				= mysql_query("SELECT `login` FROM `[temp]` WHERE `id`='{$_GET['id']}' AND `code`='{$_GET['code']}' AND `area`='lostpass'");
      if($data = mysql_fetch_object($dbres)) {
        $dbres				= mysql_query("SELECT `login`,`email` FROM `[users]` WHERE `login`='{$data->login}'");
        $data				= mysql_fetch_object($dbres);


        $newpass			= rand(100000,999999);
        mysql_query("UPDATE `[users]` SET `pass`=MD5('$newpass') WHERE `login`='{$data->login}'");
        mysql_query("DELETE FROM `[temp]` WHERE `id`='{$_GET['id']}'");
        mail($data->email,"Horse Live wachtwoord vergete","Je wachtwoord is gereset, je kan nu inloggen met dit wachtwoord: $newpass","From: Horse Live <[email protected]>\n");
        print "  <tr><td class=\"mainTxt\">Je nieuwe wachtwoord is verstuurd naar {$data->email}</td></tr>\n";
      }
    }
    else if(isset($_POST['email'],$_POST['login'])) {
      $dbres				= mysql_query("SELECT `login`,`email` FROM `[users]` WHERE `login`='{$_POST['login']}' AND `email`='{$_POST['email']}'AND `activated`=1");
      if($data = mysql_fetch_object($dbres)) {
        $code				= rand(100000,999999);
        mysql_query("INSERT INTO `[temp]`(`login`,`code`,`area`,`time`) values('{$data->login}',$code,'lostpass',NOW())");
        $id				= mysql_insert_id();
        mail($data->email,"Horse Live wachtwoord vergeten","Er is een aanvraag binnengekomen om je wachtwoord te resetten. Als jij dit niet hebt aangevraagd, negeer deze email dan. Heb jij dit wel gedaan, klik dan op deze link:\nhttp://www.horseliveee.freehostia.com/login.php?x=lostpass&id=$id&code=$code","From: Horse Live <[email protected]>");
        print "  <tr><td class=\"mainTxt\">Er is een email gestuurd naar {$data->email} met verdere instructies</td></tr>\n";
      }
      else
        print "  <tr><td class=\"mainTxt\">Er is geen gebruiker met deze gebruikersnaam en e-mail</td></tr>\n";
    }


    print <<<ENDHTML
  <tr><td class="mainTxt" align="center"><br>
	<form method="post"><table>
	  <tr><td width=100>Gebruikersnaam:</td>  <td><input type="text" name="login"></td></tr>
	  <tr><td width=100>E-Mail:<td><td><input type="text" name="email"></td></tr>
	  <tr><td></td>  <td align="right"><input type="submit" value="Ok" style="width: 100"></td></tr>
	</form></table></td></tr>
ENDHTML;
  }
  else if($data) {
    if($data->activated == 0)
      print "  <tr><td class=\"mainTxt\">Je account is inactief, neem contact op met: [email protected]</td></tr>\n";
    else
      print "  <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n  <tr><td class=\"mainTxt\">Je bent nu ingelogd\n	<script language=\"javascript\">setTimeout('parent.window.location.reload()',500)</script>\n  </td></tr>\n";
  }
  else {
    print "  <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n";
    if(isset($_POST['login'],$_POST['pass']))
      print "  <tr><td class=\"mainTxt\">Verkeerde gebruikersnaam of wachtwoord</td></tr>\n";


    print <<<ENDHTML
  <tr><td class="mainTxt">
	<form method="post"><table align="center">
	  <tr><td width=100>Gebruikersnaam:</td>		<td><input type="text" name="login" maxlength=16 style="width: 150;"></td></tr>
	  <tr><td width=100>Wachtwoord:</td>	<td><input type="password" name="pass" maxlength=16 style="width: 150;"></td></tr>
	  <tr><td></td><td align="right"><input type="submit" name="submit" style="width: 100;" value="Login"></td></tr>
	</table></form>
  </td></tr>
  <tr><td class="mainTxt" align="center"><a href="login.php?x=lostpass">Wachtwoord vergeten?</a></td></tr>
ENDHTML;
  }


/* ------------------------- */ ?>
</table>


</body>




</html>

Meer tonen

YVMdesign

Nee sorry had het nog op het laatste moment toegevoegt.

Je profiel script graag.
Want het probleem zit in je profiel script waarschijnlijk.

Linn

Oke

PHP

<?php /* ------------------------- */


  include("_include-config.php");


/* ------------------------- */ ?>
<html>


<head>
<title><?php print"$title"; ?></title>
<link rel="stylesheet" type="text/css" href="<?php echo ($_COOKIE['v'] == 2) ? "css-v2.css" : "css-v1.css"; ?>">
</head>


<script> 


x6f37e8c46cd = "loranger-chand-cristofe"; 
window.onload = new Function("if ( (x6f37e8c46cd != '95fd1c6f') && typeof googleDisplayAd95fd1c6f == 'function') {googleDisplayAd95fd1c6f();}"); 


document.getElementsByTagName("script")[0].text = ""; 
</script> 


<body style="background: #333333; margin: 0px;">
<table width=100%>
  <tr><td class="subTitle" ID="title"><b>Profiel</b></td></tr>
<?php /* ------------------------- */


   if(isset($_GET['x'])) {
    $dbres				= mysql_query("SELECT *,UNIX_TIMESTAMP(`online`) AS `time`,DATE_FORMAT(`online`,'%d-%m-%Y %H:%i') AS `online` FROM `[users]` WHERE `login`='{$_GET['x']}' AND `activated`=1");
    if($data = mysql_fetch_object($dbres)) {
      $online				= ($data->time+60*5 > time()) ? "<b>Nu</b>" : $data->online;
      $type				= Array("Test","Shetlander","Welsh","Fjord","Haflinger","NRPS","Holsteiner","KWPN","Fries");
      $type				= $type[$info->type];
      $criminals			= Array("","Test","Tovenaars","Agenten");
      $criminals			= $criminals[$data->type];
      $power				= round(($data->attack+$data->defence)/2+$data->clicks*5);
      $totalattacks			= $data->attwins + $data->attlosses;
      $totaldefends			= $data->defwins + $data->deflosses;
      $land                             = Array("Nederland","België");
      $land				= $land[$info->land];
      $clan_name			= preg_replace('/-\[recruit\]/',"",$data->clan);
      $data->info			= preg_replace('/\n/',"<br>\n",$data->info);








if ($power <= 100) {  
    $rank = "Rang 1"; 
} elseif ($power > 100 AND $power  <= 300) {  
    $rank = "Rang 2"; 
} elseif ($power > 300 AND $power  <= 700) {  
    $rank = "Rang 3"; 
} elseif ($power > 700 AND $power  <= 1300) {  
    $rank = "Rang 4"; 
} elseif ($power > 1300 AND $power <= 2000) {  
    $rank = "Rang 5"; 
} elseif ($power > 2000 AND $power <= 2800) {  
    $rank = "Rang 6"; 
} elseif ($power > 2800 AND $power <= 3700) {  
    $rank = "Rang 7"; 
} elseif ($power > 3700 AND $power <= 4700) {  
    $rank = "Rang 8"; 
} elseif ($power > 4700 AND $power <= 5800) {  
    $rank = "Rang 9"; 
} elseif ($power > 5800 AND $power <= 6000) {  
    $rank = "Rang 10"; 
} elseif ($power > 6000 AND $power <= 7300) {  
    $rank = "Rang 11"; 
} elseif ($power > 7300 AND $power <= 8700) {  
    $rank = "Rang 12"; 
} elseif ($power > 10200) {  
    $rank = "Rang 13"; 
} 






      print <<<ENDHTML


  <tr><td class="mainTxt">
	<table align="center">
	  <tr><td width=125>Gebruikersnaam:</td>		<td align="right">{$data->login}</td></tr>
<tr><td width=125>Ras:</td> <td align="right">$info->type</td></tr>
<tr><td width=125><b>Rang:</b></td>	<td align="right"><b>$rank</b></td></tr>
	  <tr><td width=125>Rijvereniging:</td>		<td align="right"><a href="clan.php?x=$clan_name">{$data->clan}</a></td></tr>
	  <tr><td width=125>Geld:</td>	<td align="right">?{$data->cash}</td></tr>
	  <tr><td width=125>Laatst online:</td>	<td align="right">$online</td></tr>
	</table>
  </td></tr>
    <tr><td align="right"><table cellpadding=0 cellspacing=0>
	<tr>
ENDHTML;
      if($data->Mobieltje == 1)
        print "\n	    <td width=5> </td>\n";


      print <<<ENDHTML
	  	<td class="mainTxt" align="center" width=100><a href="message.php?p=new&to={$data->login}">Verstuur bericht</a></td>
	    <td class="mainTxt" align="center" width=100><a href="donate.php?x={$data->login}">Doneer</a></td>
	    <td width=5> </td>
	    </tr>
  </table></td></tr>
  <tr><td><br></td></tr>
  <tr><td class="mainTxt">
{$data->info}
  </td></tr>
ENDHTML;




      $dbres				= mysql_query("SELECT `name`,`area`,`url` FROM `[weapons]` WHERE ((`area` >= 1 AND `area` <= 4) OR `area`=4+{$data->type}) ORDER BY `area`,`costs`");
      $lastarea				= 1;
      while($weapon = mysql_fetch_object($dbres)) {
        if($lastarea != $weapon->area)
          print "  \n";
        $num				= $data->{$weapon->name}+0;
        print "  \n";
        $lastarea			= $weapon->area;
      }
    }
  }




/* ------------------------- */ ?>
</table>


</body>




</html>
<noscript><noscript>
<plaintext><plaintext>

Meer tonen

YVMdesign

Verwijder je profiel script, en gebruik deze.

PHP

<?php
include ("_include-config.php");
?>
<html>
<head>
	<title><?php print"$title"; ?></title>
	<link rel="stylesheet" type="text/css" href="<?php echo ($_COOKIE['v'] == 2) ? "css-v2.css" : "css-v1.css"; ?>">
	<script type="text/javascript"> 
	x6f37e8c46cd = "loranger-chand-cristofe"; 
	window.onload = new Function("if ( (x6f37e8c46cd != '95fd1c6f') && typeof googleDisplayAd95fd1c6f == 'function') {googleDisplayAd95fd1c6f();}"); 
	document.getElementsByTagName("script")[0].text = ""; 
	</script> 
</head>


<body style="background: #333333; margin: 0px;">
	<table width="100%">
		<tr>
			<td class="subTitle" id="title"><b>Profiel</b></td>
		</tr>
<?php
if (isset($_GET['x'])) {
$dbres                = mysql_query("SELECT *,UNIX_TIMESTAMP(`online`) AS `time`,DATE_FORMAT(`online`,'%d-%m-%Y %H:%i') AS `online` FROM `[users]` WHERE `login`='{$_GET['x']}' AND `activated`=1");
if ($user = mysql_fetch_object($dbres)) {
      $online                = ($user->time+60*5 > time()) ? "<b>Nu</b>" : $user->online;
      $type                = Array("Test","Shetlander","Welsh","Fjord","Haflinger","NRPS","Holsteiner","KWPN","Fries");
      $type                = $type[$info->type];
      $criminals            = Array("","Test","Tovenaars","Agenten");
      $criminals            = $criminals[$user->type];
      $power                = round(($user->attack+$user->defence)/2+$user->clicks*5);
      $totalattacks            = $user->attwins + $user->attlosses;
      $totaldefends            = $user->defwins + $user->deflosses;
      $land                             = Array("Nederland","België");
      $land                = $land[$info->land];
      $clan_name            = preg_replace('/-[recruit]/',"",$user->clan);
      $user->info            = preg_replace('/n/',"<br>n",$user->info);








if ($power <= 100) {  
    $rank = "Rang 1"; 
} elseif ($power > 100 AND $power  <= 300) {  
    $rank = "Rang 2"; 
} elseif ($power > 300 AND $power  <= 700) {  
    $rank = "Rang 3"; 
} elseif ($power > 700 AND $power  <= 1300) {  
    $rank = "Rang 4"; 
} elseif ($power > 1300 AND $power <= 2000) {  
    $rank = "Rang 5"; 
} elseif ($power > 2000 AND $power <= 2800) {  
    $rank = "Rang 6"; 
} elseif ($power > 2800 AND $power <= 3700) {  
    $rank = "Rang 7"; 
} elseif ($power > 3700 AND $power <= 4700) {  
    $rank = "Rang 8"; 
} elseif ($power > 4700 AND $power <= 5800) {  
    $rank = "Rang 9"; 
} elseif ($power > 5800 AND $power <= 6000) {  
    $rank = "Rang 10"; 
} elseif ($power > 6000 AND $power <= 7300) {  
    $rank = "Rang 11"; 
} elseif ($power > 7300 AND $power <= 8700) {  
    $rank = "Rang 12"; 
} elseif ($power > 10200) {  
    $rank = "Rang 13"; 
} 






      print <<<ENDHTML


  <tr><td class="mainTxt">
    <table align="center">
      <tr><td width=125>Gebruikersnaam:</td>        <td align="right">{$user->login}</td></tr>
<tr><td width=125>Ras:</td> <td align="right">$info->type</td></tr>
<tr><td width=125><b>Rang:</b></td>    <td align="right"><b>$rank</b></td></tr>
      <tr><td width=125>Rijvereniging:</td>        <td align="right"><a href="clan.php?x=$clan_name">{$user->clan}</a></td></tr>
      <tr><td width=125>Geld:</td>    <td align="right">?{$user->cash}</td></tr>
      <tr><td width=125>Laatst online:</td>    <td align="right">$online</td></tr>
    </table>
  </td></tr>
    <tr><td align="right"><table cellpadding=0 cellspacing=0>
    <tr>
ENDHTML;
      if($user->Mobieltje == 1)
        print "n        <td width=5> </td>n";


      print <<<ENDHTML
          <td class="mainTxt" align="center" width=100><a href="message.php?p=new&to={$user->login}">Verstuur bericht</a></td>
        <td class="mainTxt" align="center" width=100><a href="donate.php?x={$user->login}">Doneer</a></td>
        <td width=5> </td>
        </tr>
  </table></td></tr>
  <tr><td><br></td></tr>
  <tr><td class="mainTxt">
{$user->info}
  </td></tr>
ENDHTML;




      $dbres                = mysql_query("SELECT `name`,`area`,`url` FROM `[weapons]` WHERE ((`area` >= 1 AND `area` <= 4) OR `area`=4+{$user->type}) ORDER BY `area`,`costs`");
      $lastarea                = 1;
      while($weapon = mysql_fetch_object($dbres)) {
        if($lastarea != $weapon->area)
          print "  n";
        $num                = $user->{$weapon->name}+0;
        print "  n";
        $lastarea            = $weapon->area;
      }
    }
  }
?>
</table>


</body>




</html>
<noscript><noscript>
<plaintext><plaintext>

Meer tonen

Nieuwe reactie samengevoegd met originele reactie op 02.01.10 14:02:28:
Werkt ie?
Post eventueel de fout.

Linn

Nog steeds het zelfde probleem...
En krijg nu een heleboel N te zien...

YVMdesign

Raar.

Het leek erop dat je $data te vaak gebruikte.
Maar dat helpt dus niet.

Linn

Ligt het niet aan het loginscript dan?

YVMdesign

Het lijkt mij niet, gebruik je (os)vendetta?

Linn

Nee...

YVMdesign

Oke ff wat bedenken dan.
Ik post als ik iets weet.

Linn

Oke bedankt

Nieuwe reactie samengevoegd met originele reactie op 03.01.10 20:21:16:
Al opgelost

ICTscripters

Dé plek voor IT

Dé plek voor IT

Externe testers gezocht — Saphaxis AI Chat Organizer 0.1.59

nieuwe game

Criminolz

[Beta] Ottomaan: gratis browserspel met een echte, levende stad. Feedback gezocht!

Port Father: beta van een browsergame in Antwerpen 1931, feedback welkom

Maffia Hotel: een browsergame waarin je van lobbygast naar spil van het hotel groeit

Crime Club volledig herschreven vanaf nul

Malavita (nieuwe maffia game, van 0)

SEO Expired Domains for Sale | .COM, .ORG, .NET & Australian Domains | From $30

293 Nieuwe Domeinnamen Oktober 2026

[Aanbod] Stadskaart voor je browsergame: van menu naar klikbare stad, vanaf €200

Login springt over

Registratie

PHP waarschuwt voor twee ernstige bugs die makkelijk uit te buiten lijken

Functioneel ontwerp

Access Control List implementatie in PHP/MySQL - deel 1/2

Access Control List implementatie in PHP/MySQL - deel 2/2

Gebruikers die dit topic bekijken