X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Fmodules%2Fchk_login.php;h=a96bc1d65161a3d31f33dbbb85eb73bf3bbd7dd4;hp=14a9ee7a4c5d646e59807a9c60a05869081bf278;hb=f7f6e55ee0d90558ad773ce6168767c0af816696;hpb=307a4e11763f0914e73dc756b219356e1c29ab25
diff --git a/inc/modules/chk_login.php b/inc/modules/chk_login.php
index 14a9ee7a4c..a96bc1d651 100644
--- a/inc/modules/chk_login.php
+++ b/inc/modules/chk_login.php
@@ -32,55 +32,82 @@
************************************************************************/
// Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
-{
+if (!defined('__SECURITY')) {
$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
require($INC);
}
+// @TODO Replace with own template!
OPEN_TABLE("500", "guest_login_header dashed", "center");
-
-OUTPUT_HTML("
".VALIDATING_LOGIN."
");
+OUTPUT_HTML("
".VALIDATING_LOGIN."
");
if (!empty($GLOBALS['userid']) && (isSessionVariableSet('u_hash')) && (isSessionVariableSet('lifetime'))) {
+ // Login failtures are supported since 0.4.7
+ // Do we have 0.4.7 of sql_patches or later?
+ $ADD = "";
+ if (GET_EXT_VERSION("sql_patches") >= "0.4.7") {
+ // Load them here
+ $ADD = ", login_failtures, UNIX_TIMESTAMP(last_failture) AS last_failture";
+ } // END - if
+
// Get theme from profile
- $result = SQL_QUERY_ESC("SELECT curr_theme FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
- array($GLOBALS['userid']), __FILE__, __LINE__);
- list($NewTheme) = SQL_FETCHROW($result);
+ $result = SQL_QUERY_ESC("SELECT curr_theme".$ADD." FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
+ array($GLOBALS['userid']), __FILE__, __LINE__);
+
+ // Load data
+ $data = SQL_FETCHARRAY($result);
+
+ // Free result
SQL_FREERESULT($result);
// Change to new theme
- set_session("mxchange_theme", $NewTheme);
+ set_session("mxchange_theme", $data['curr_theme']);
+
+ // Remmeber login failtures if available
+ if (GET_EXT_VERSION("sql_patches") >= "0.4.7") {
+ // Reset login failtures
+ SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data
+SET login_failtures=0, last_failture='0000-00-00 00:00:00'
+WHERE userid=%s
+LIMIT 1",
+ array($GLOBALS['userid']), __FILE__, __LINE__);
+ // Store it in session
+ set_session('mxchange_member_failtures', $data['login_failtures']);
+ set_session('mxchange_member_last_fail', $data['last_failture']);
+ } // END - if
+
+ // Bonus is not given by default ;-)
$bonus = false;
if ((GET_EXT_VERSION("sql_patches") >= "0.2.8") && (GET_EXT_VERSION("bonus") >= "0.2.1") && ($_CONFIG['bonus_login_yn'] == "N") && ($_CONFIG['bonus_login_yn'] == "Y")) {
- // Update last login
+ // Update last login if far enougth away
$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data
SET last_login=UNIX_TIMESTAMP()
-WHERE userid=%d AND last_login < (UNIX_TIMESTAMP() - %d)
-LIMIT 1", array($GLOBALS['userid'], $_CONFIG['login_timeout']),
- __FILE__, __LINE__);
- if (SQL_AFFECTEDROWS($link) == 1) $bonus = true;
- }
- if (($bonus) && ($_GET['mode'] == "bonus") && (EXT_IS_ACTIVE("bonus"))) {
+WHERE userid=%s AND last_login < (UNIX_TIMESTAMP() - %s)
+LIMIT 1",
+ array(
+ $GLOBALS['userid'],
+ $_CONFIG['login_timeout']
+ ), __FILE__, __LINE__
+ );
+ if (SQL_AFFECTEDROWS() == 1) $bonus = true;
+ } // END - if
+
+ if (($bonus) && ($_GET['mode'] == "bonus") && (EXT_IS_ACTIVE("bonus"))) {
// Output message with added points
- OUTPUT_HTML("
+ OUTPUT_HTML("
".BONUS_LOGIN_BONUS_ADDED_1."
- ".TRANSLATE_COMMA($_CONFIG['login_bonus'])." ".POINTS."
+ ".TRANSLATE_COMMA($_CONFIG['login_bonus'])." ".POINTS."
".BONUS_LOGIN_BONUS_ADDED_2."
-");
- }
- elseif (EXT_IS_ACTIVE("bonus"))
- {
+");
+ } elseif (EXT_IS_ACTIVE("bonus")) {
// No login bonus added!
- OUTPUT_HTML("".BONUS_LOGIN_BONUS_NOT_ADDED."");
+ OUTPUT_HTML("".BONUS_LOGIN_BONUS_NOT_ADDED."");
}
// Redirect to member area
LOAD_TEMPLATE("member_login_js");
-}
- else
-{
+} else {
// Login failed!
LOAD_TEMPLATE("login_failed_js");
}