// lockout capatibility
// with ldap sync
// <h1> This is da default one</h1>
- require(SYSTEM_ROOT.'/inc/ldap.inc');
+// require(INCLUDE_DIR.'ldap.inc');
global $db,$error,$node_id;
$login = mysql_real_escape_string($_POST['login']);
- $password = $_POST['password'];
+ $password = $_POST['password']; //XXX nice SQLi
$hash = md5($password);
$login_type = $_POST['login_type'];
$referer = $_SERVER['HTTP_REFERER'];
switch ($login_type) {
case "name":
- $q = "select * from users where login='$login'";
+ $q = "select * from users where login='$login' and password='$hash'";
$set = $db->query($q);
$set->next();
$user_id = $set->getString('user_id');
$user_name = $set->getString('login');
break;
case "id":
- $q="select * from users where user_id='$login'";
+ $q="select * from users where user_id='$login' and password='$hash'";
$set=$db->query($q);
$set->next();
$user_id=$set->getString('user_id');
break;
}
- $ldap_response=LDAPuser::auth($user_id,$password);
- if ($set->getString('password') != $hash and !$ldap_response) {
+// $ldap_response=LDAPuser::auth($user_id,$password);
+
+ if (!$set) { //XXX test
$error="Zadal si nespravne uzivatelske meno [alebo id] alebo heslo. Rob so sebou nieco";
return false;
}
$_SESSION['fook'][$fookset->getString('node_parent')]=true;
}
- LDAPuser::replicate($user_name,$user_id,$password);
+// LDAPuser::replicate($user_name,$user_id,$password);
//save bookstyle into user session
$q="select node_content from nodes where node_parent=19 and external_link='session://bookstyl' and node_creator='$user_id'";
$_SESSION['mood_name'] = $mset->getString('node_name');
$_SESSION['mood_content'] = addslashes(substr(strip_tags($mset->getString('node_content')),0,223));
}
-
// last login
- $db->query(sprintf('update users set last_login = NOW() where user_id = %d', $user_id));
+
+ $db->query(sprintf('update users set date_last_login = NOW() where user_id = %d', $user_id));
$_SESSION['user_id']=$user_id;
$_SESSION['user_name']=addslashes($user_name);
// header("Location: $referer");
return true;
}
-?>
\ No newline at end of file
+?>