hey.
ben nu even bezig aan een vriend zijn site.
hij heeft osvendetta.
alleen de login zit foutje in alleen we komen er niet uit hoe het komt.
heb al het script 15x na gekeken en vind het gwn niet hij zit wel op gratise host dus mss daardoor:)
script
PHP
<?php
include("config.php");
if(isset($_POST['login'],$_POST['password'])) {
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`online`) AS `online` FROM `users` WHERE `login`='{$_POST['login']}' AND `pass`=MD5('{$_POST['password']}')");
if(($data = mysql_fetch_object($dbres)) && $data->activated == 1) {
}
}
?>
<html>
<head>
<title> <?php echo $sitename; ?> </title>
<link rel="stylesheet" type="text/css" href="style.css">
</head>
<table align="center" width="100%">
<?php
if($_GET['x'] == "logout"){
session_unset($_SESSION['pass']);
session_destroy($_SESSION['login']);
session_unset($_SESSION['pass']);
session_destroy($_SESSION['login']);
?>
<html>
<head>
<meta http-equiv="Refresh" content="3; url=index.php" />
</head>
<body>
<table width="100%" align="center">
<tr><td class="subTitle"><b>Uitloggen</b></td></tr>
<tr><td> </td></tr>
<tr><td class="mainTxt"><img src="images/icons/Tasks.png" alt="Succesvol uitgelogd" width="128" heigt="128"><br />
<br />
U bent nu uitgelogd. Een ogenblik geduld.<br />
<a href="index.php" title="Index.php"><strong>Wacht niet</strong></a>
</td>
</tr>
</table>
</body>
</html>
<?php
}
else if($_GET['x'] == "lostpass") {
if(isset($_GET['id'],$_GET['code'])) {
$dbres = mysql_query("SELECT `login` FROM `temp` WHERE `id`='{$_GET['id']}' AND `code`='{$_GET['code']}' AND `area`='lostpass'");
if($data = mysql_fetch_object($dbres)) {
$dbres = mysql_query("SELECT `login`,`email` FROM `users` WHERE `login`='{$data->login}'");
$data = mysql_fetch_object($dbres);
$sitename1 = $sitename; // Haalt de sitenaam op uit gegevens.php
$noreply1 = $noreply; // Haalt het noreply emailadres op uit gegevens.php
$siteurl = $sitelink; // Haalt de URL van de site op uit gegevens.php
$newpass = rand(100000,999999);
mysql_query("UPDATE `users` SET `pass`=MD5('{$newpass}') WHERE `login`='{$data->login}'");
mysql_query("DELETE FROM `temp` WHERE `id`='{$_GET['id']}'");
mail($data->email,"$sitename1 Wachtwoord","Uw wachtwoord is gereset, je kan nu inloggen met: $newpass","From: $sitename1 <$noreply1>\n");
print "Je nieuwe wachtwoord is verstuurt naar {$data->email}.\n";
}
}
else if(isset($_POST['email'],$_POST['login'])) {
$dbres = mysql_query("SELECT `login`,`email` FROM `users` WHERE `login`='{$_POST['login']}' AND `email`='{$_POST['email']}'AND `activated`=1");
if($data = mysql_fetch_object($dbres)) {
$code = rand(1000000000,9999999999);
mysql_query("INSERT INTO `temp`(`login`,`code`,`area`,`time`) values('{$data->login}',$code,'lostpass',NOW())");
$id = mysql_insert_id();
mail($data->email,"$sitename1 Wachtwoord","Vraag uw wachtwoord op deze link aan. \n $siteurl/login.php?x=lostpass&id=$id&code=$code \n\r\n Kan u er niet op klikken ? Selecteer de URL dan.","From: $sitename1 <$noreply1>");
print "Er is een email met verdere instructies gestuurd naar: {$data->email}.\n";
}
else
print "De gebruikersnaam komt niet overeen met het e-mailadres. Vul alles juist in.\n";
}
?>
<tr><td align="center">
<form method="post">
<table width="100%" align="center">
<tr>
<td class="subTitle"><b>Wachtwoord Vergeten</b></td>
</tr>
<tr><td> </td></tr>
<tr>
<td class="mainTxt"><table width="100%">
<tr>
<td width="49%"><div align="right">Gebruikersnaam:</div></td>
<td width="2%"> </td>
<td width="49%"><input type="text" name="login"></td>
</tr>
<tr>
<td width="49%"><div align="right">E-mailadres:</div></td>
<td width="2%"> </td>
<td width="49%"><input type="text" name="email"></td>
</tr>
<tr>
<td> <div align="center"> </div></td>
<td> </td>
<td><input name="submit" type="submit" style="width: 100" value="Ok"></td>
</tr>
</table></table>
</form></td>
</tr>
<?php
}
elseif($data) {
$time = time();
/*if (($time - $data->online) < 60) {
print "Je moet 60 seconden wachten voordat je weer kan inloggen.\n";
exit;
}*/
if($data->activated == 0) {
print "Je acount is nog niet geactiveerd.\n";
}
else {
$_SESSION['login'] = $_POST['login'];
$ip = $_SERVER['REMOTE_ADDR'];
$dbres = mysql_query("SELECT * FROM `multiple` WHERE `ip`='$ip'");
$allo = mysql_fetch_object($dbres);
$allo = ($allo->allo == 1) ? 1 : 0;
$exi = mysql_num_rows(mysql_query("SELECT * FROM `iplog` WHERE `ip`='$ip' AND `login`='{$_POST['login']}'"));
if ($exi == 1) {
mysql_query("UPDATE `iplog` SET `time`=NOW() WHERE `login`='{$_POST['login']}' AND `ip`='$ip'");
}
else {
mysql_query("INSERT INTO `iplog`(`login`,`ip`,`time`,`allo`,`status`) values('{$_POST['login']}','$ip',NOW(),'$allo','{$data->status}')");
}
?>
<html>
<head>
<meta http-equiv="Refresh" content="3;url=index.php" />
</head>
<body>
<table width="100%" align="center">
<tr><td class="subTitle"><b>Inloggen</b></td></tr>
<tr><td> </td></tr>
<tr><td class="mainTxt"><img src="images/icons/Tasks.png" alt="Succesvol ingelogd" width="128" heigt="128"><br />
<br />
U bent nu ingelogd. Een ogenblik geduld.<br />
<a href="index.php" title="Index.php"><strong>Wacht niet</strong></a>
</td>
</tr>
</body>
</html>
<?php
}
}
else {
if(isset($_POST['login'],$_POST['pass']))
print "Verkeerde gebruikersnaam/wachtwoord ingevuld.\n";
?>
<tr>
<td>
<form method="post">
<table width="100%" align="center">
<tr>
<td class="subTitle"><b>Inloggen</b></td>
</tr>
<tr><td> </td></tr>
<tr>
<td class="mainTxt"><table width="100%">
<tr>
<td width="49%"><div align="right">Gebruikersnaam:</div></td>
<td width="2%"> </td>
<td width="49%"><input type="text" name="login" maxlength="16" width="150"></td>
</tr>
<tr>
<td width="49%"><div align="right">Wachtwoord:</div></td>
<td width="2%"> </td>
<td width="49%"><input type="password" name="password" maxlength="16" width="150"></td>
</tr>
<tr>
<td></td>
<td></td>
<td><input type="submit" name="submit" width="150" value="Login"></td>
</tr>
<tr>
<td colspan="3" align="center"> <a href="login.php?x=lostpass" title="">Wachtwoord
vergeten?</a></td>
</tr>
</table></table>
</form>
</td>
</tr>
</table>
<?php
}
include("viewbanner.php");
?>
</body>
</html>
</table>
