It concerns login to my site and deals with passwords and such. I have commented out anything I don't want publically known that is also irrelevant. As for the actual setcookie part, I uploaded the '123' test, with identical results as to the normal data it has. Namely, what I previously mentioned.
Code:
<?php
function mysql_fetch_rowsarr($result, $numass=MYSQL_BOTH) {
$got=array();
mysql_data_seek($result, 0);
while ($row = mysql_fetch_array($result, $numass)) {
array_push($got, $row);
}
return $got;
}
require_once("scripts/mysqllogin.php");
if (isset($_GET['page']))
$page = $_GET['page'];
else
$page = 'index';
if (!file_exists("pages/$page.php"))
$page = 'index';
if (isset($_GET['action']))
$action = $_GET['action'];
require_once("scripts/login.php");
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
[...]
contents of scripts/mysqllogin.php
Code:
<?php
$database = array(
'url' => 'localhost' ,
'name' => '*****' ,
'pass' => '*****' ,
'database' => 'data' ,
'table' => 'as_nations');
mysql_connect($database['url'],$database['name'],$database['pass']) or die('Error connecting to MySQL: '.mysql_error());
mysql_select_db($database['database']) or die('Error connecting to MySQL database: '.mysql_error());
?>
contents of scripts/login.php
Code:
<?php
$name = '';
$pass = '';
if ($action == 'login')
{
if (isset($_POST['name']))
$name = $_POST['name'];
$name = strtolower(str_replace(' ','_',$name));
if (isset($_POST['password']))
$pass = $_POST['password'];
}
else
if (isset($_COOKIE['as_data']))
{
$cookie = $_COOKIE['as_data'];
$cookie = // ;)
$name = // ;)
$pass = // ;)
}
$database['table'] = 'as_provinces';
$query = "SELECT id,name,pass,nation,staff FROM {$database['table']} WHERE name='$name'";
$result = mysql_query($query) or die('Error retrieving data: '.mysql_error());
$rows = mysql_fetch_array($result);
$data = array();
$data['id'] = $rows['id'];
$data['name'] = $rows['name'];
$data['pass'] = $rows['pass'];
$data['nation'] = $rows['nation'];
$data['staff'] = $rows['staff'];
$pass = crypt($pass, $data['pass']);
if (($action == 'logout') || ($data['pass'] == ''))
$pass = 'log me out! ;)';
if ($pass == $data['pass'])
{
$cookiedata = '123';
setcookie("cookie1", "$cookiedata", time()+604800, '/');
echo "$cookiedata";
$loggedin = array('id' => $data['id'], 'name' => $data['name'],'ucname' => ucwords(str_replace('_',' ',$data['name'])), 'nation' => $data['nation'], 'staff' => $data['staff']);
}
else
{
setcookie("cookie1", "0", 1218000000, '/');
$loggedin = array('id' => '', 'name' => '','ucname' => '', 'nation' => '', 'staff' => 0);
}
?>
LinkBack URL
About LinkBacks
Reply With Quote
Originally Posted by leafypiggy
