Beiträge von aebian

<?php


include "inc/mysql.php";


if(isset($_POST['Soldier']) && isset($_POST['password'])) {
        $md5pass = md5(trim($_POST['password']));
        unset($_POST['password']);


        /* Returnsystem:
        * 0 = anmeldedaten benutzer oder passwort falsch oder kein/mehrere benutzer verf?gbar
        * 1 = anmelden erfolgreich */
        $result = onUserLogin($_POST['Soldier'], $md5pass, true);

        unset($md5pass);
        if($result == 1)
        {
                echo '<script type="text/javascript">window.location="index.php?page=home";</script>;';
        }
        else
        {
                echo '<script type="text/javascript">window.location="index.php?page=loginfailed";</script>;';
//                echo "<meta http-equiv='refresh' content='2; URL=?page=loginfailed'>"; SELBST ALS VERSUCH EINGEBAUT
        }
}
else
{
        echo '<script type="text/javascript">window.location="index.php?page=loginfailed";</script>';
}


function onUserLogin($username, $password, $bMD5) {
        if($bMD5 == false) {
                $sql = "SELECT * 
                                FROM accounts_table 
                                WHERE uname ='".mysql_real_escape_string(trim($username))."' AND
                                upass = '".md5(trim($password))."'
                                ";
        }
        else if($bMD5 == true)
        {
                $sql = "SELECT * 
                                FROM accounts_table 
                                WHERE uname ='".mysql_real_escape_string(trim($username))."' AND
                                upass = '".mysql_real_escape_string(trim($password))."'
                                ";
        }
        $result = mysql_query($sql) OR include 'mysql_error.php';
        $row = mysql_fetch_assoc($result);

        if(mysql_num_rows($result) == 1) {
                if($row['upermission'] == 1) {
                        $_SESSION['FailLogin'] = 0;
                        $_SESSION['LogedIn'] = 0;
                        $_SESSION['AccountLocked'] = 1;
                        return false;
                }
                $_SESSION['LogedIn'] = 1;
                $_SESSION['FailLogin'] = 0;
                $_SESSION['AccountLocked'] = 0;

                $_SESSION['Soldier_Nick'] = $row['uname'];
                $_SESSION['Soldier_Rank'] = $row['urank'];
                $_SESSION['Soldier_Department'] = $row['udep'];
                $_SESSION['Soldier_Permission'] = $row['upermission'];

                return true;
        }
        else
        {
                $_SESSION['FailLogin'] = 2;
                $_SESSION['LogedIn'] = 0;
                $_SESSION['AccountLocked'] = 0;
                return false;
        }
}