X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fchk_login.php;h=016ecc249a85f62700138a3980c5d00f1609af46;hb=0226aea588ae0b433e4c2c17b23f79885c2d0da5;hp=9be4517da900ab7d470195e236f3d02463c3aeb2;hpb=d0ab0382dd73638f0bc13a1a3d6f117ec11a203e;p=mailer.git
diff --git a/inc/modules/chk_login.php b/inc/modules/chk_login.php
index 9be4517da9..016ecc249a 100644
--- a/inc/modules/chk_login.php
+++ b/inc/modules/chk_login.php
@@ -32,64 +32,87 @@
************************************************************************/
// Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
-{
+if (!defined('__SECURITY')) {
$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
require($INC);
}
-OPEN_TABLE("500", "guest_login_header dashed", "center");
+// Initial message part
+$MSG = "{--VALIDATING_LOGIN--}";
-OUTPUT_HTML ("
".VALIDATING_LOGIN."
");
+if (!empty($GLOBALS['userid']) && (isSessionVariableSet('u_hash'))) {
+ // Login failures are supported since 0.4.7
+ // Do we have 0.4.7 of sql_patches or later?
+ $ADD = "";
+ if (GET_EXT_VERSION("sql_patches") >= "0.6.1") {
+ // Load them here
+ $ADD = ", login_failures, UNIX_TIMESTAMP(last_failure) AS last_failure";
+ } // END - if
-if (!empty($GLOBALS['userid']) && !empty($_COOKIE['u_hash']) && !empty($_COOKIE['lifetime']))
-{
// Get theme from profile
- $result = SQL_QUERY_ESC("SELECT curr_theme FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
- array($GLOBALS['userid']), __FILE__, __LINE__);
- list($NewTheme) = SQL_FETCHROW($result);
+ $result = SQL_QUERY_ESC("SELECT curr_theme".$ADD." FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
+ array($GLOBALS['userid']), __FILE__, __LINE__);
+
+ // Load data
+ $data = SQL_FETCHARRAY($result);
+
+ // Free result
SQL_FREERESULT($result);
// Change to new theme
- @setcookie("mxchange_theme", $NewTheme, (time() + 60*60*24*365), COOKIE_PATH);
- $_COOKIE['mxchange_theme'] = $NewTheme;
+ set_session('mxchange_theme', $data['curr_theme']);
+
+ // Remmeber login failures if available
+ if (GET_EXT_VERSION("sql_patches") >= "0.6.1") {
+ // Reset login failures
+ SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data`
+SET login_failures=0, last_failure='0000-00-00 00:00:00'
+WHERE userid=%s
+LIMIT 1",
+ array($GLOBALS['userid']), __FILE__, __LINE__);
+
+ // Store it in session
+ set_session('mxchange_member_failures', $data['login_failures']);
+ set_session('mxchange_member_last_fail', $data['last_failure']);
+ } // END - if
+ // Bonus is not given by default ;-)
$bonus = false;
- die("
".print_r($CONFIG, true).""); - if ((GET_EXT_VERSION("sql_patches") >= "0.2.8") && (GET_EXT_VERSION("bonus") >= "0.2.1")) { - // Update last login - $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data + if ((GET_EXT_VERSION("sql_patches") >= "0.2.8") && (GET_EXT_VERSION("bonus") >= "0.2.1") && (getConfig('bonus_login_yn') == "Y")) { + // Update last login if far enougth away + SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET last_login=UNIX_TIMESTAMP() -WHERE userid=%d AND last_login < (UNIX_TIMESTAMP() - %d) -LIMIT 1", array($GLOBALS['userid'], $CONFIG['login_timeout']), - __FILE__, __LINE__); - if (SQL_AFFECTEDROWS($link) == 1) $bonus = true; - } - if (($bonus) && ($_GET['mode'] == "bonus") && (EXT_IS_ACTIVE("bonus"))) { +WHERE userid=%s AND last_login < (UNIX_TIMESTAMP() - %s) +LIMIT 1", + array( + $GLOBALS['userid'], + getConfig('login_timeout') + ), __FILE__, __LINE__ + ); + if (SQL_AFFECTEDROWS() == 1) $bonus = true; + } // END - if + + if (($bonus) && ($_GET['mode'] == "bonus") && (EXT_IS_ACTIVE("bonus"))) { // Output message with added points - OUTPUT_HTML(" - ".BONUS_LOGIN_BONUS_ADDED_1." - ".TRANSLATE_COMMA($CONFIG['login_bonus'])." ".POINTS." - ".BONUS_LOGIN_BONUS_ADDED_2." -"); - } - elseif (EXT_IS_ACTIVE("bonus")) - { + $MSG .= "