0x1998 - MANAGER
Edit File: auth.php
<?php session_start(); include 'garde.php'; error_reporting(E_ALL); ini_set("display_errors", 1); if(!isset($_POST['md5'])) { header("Location: ../login.php?id=2"); die(); } else {$md5=$_POST['md5'];} if(!isset($_POST['login'])){ header("Location: ../login.php?id=1"); die(); } else {$login=$_POST['login'];} if(!CheckUser($login,$md5)) { header("Location: ../login.php?id=0"); die(); } //On demarre la session et on enregistre l'heure -> sert à invalider la session en cas d'inactivité de plus de x minutes $_SESSION['last_access']=time(); //Qques variables enregistrées dans la session $_SESSION['ipaddr']=$_SERVER['REMOTE_ADDR']; $_SESSION['site']='garde;'; $requete = "SELECT * FROM ".PREF."users inner join user_type on ".PREF."users.id=user_type.id WHERE username='$login'"; $result = mysqli_query($link,$requete) or die("erreur 2".mysqli_error($link)); $row = mysqli_fetch_array($result); mysqli_free_result($result); $_SESSION['user']=$row['id']; $_SESSION['name']=$login; $_SESSION['realname']=$row['name']; $_SESSION['categorie']=$row['type']; // On ajoute des variables de configuration de site $_SESSION['simpleStats']=1; // On charge les variables de profil if ($_SESSION['categorie']=='Med') { $_SESSION['WE']=1; $_SESSION['splitSem']=1; $_SESSION['CA']=1; } elseif ($_SESSION['categorie']=='T6') { $_SESSION['WE']=0; $_SESSION['splitSem']=0; $_SESSION['CA']=0; } //Si tout est ok on renvoie vers la page d'accueil ou la page formation si numform header("Location: ../accueil.php"); function CheckUser($login,$md5) { global $link; // Remplacer ici les paramètres de connexion à la base de données : serveur, user, password. Puis nom de la base de données $sql="select * from ".PREF."users where username='".$login."' and block=0"; $result=mysqli_query($link,$sql) or die ("Erreur"); $row=mysqli_fetch_array($result); $dbPW=$row['password']; define('_JEXEC', 1); define('JPATH_BASE', '../../test'); require_once JPATH_BASE . '/includes/defines.php'; require_once JPATH_BASE . '/includes/framework.php'; $mainframe =JFactory::getApplication('site'); $mainframe->initialise(); $id = JUserHelper::getUserId($login); $group = JUserHelper::getUserGroups($id); $pass=JUserHelper::verifyPassword($md5,$dbPW); if ($pass) return true; else return false; } mysqli_close($link); ?>