| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/c-c.com.hk/webadmin/ |
Upload File : |
<?php
if (!$do_login)
exit;
require("configure.php");
require_once 'function_login_block.php';
die_if_login_block();
// declare post fields
$post_loginname = mysql_escape_string(trim($_POST['loginname']));
$post_password = md5(trim($_POST['password']));
$post_autologin = $_POST['autologin'];
$sql = "SELECT * FROM sys_cms_login where cmsloginname = '$post_loginname' AND cmsloginpw = '$post_password' and cmsstatus = '1' ";
$result = mysql_query($sql);
if (mysql_num_rows($result) > 0) {
$row = mysql_fetch_array($result, MYSQL_ASSOC);
$login_ok = true;
$_SESSION['loginname'] = $row{'cmsloginname'};
$_SESSION['password'] = $row{'cmsloginpw'};
$_SESSION['cmsloginid'] = $row{'cmsloginid'};
$_SESSION['cmsrole'] = $row{'cmsrole'};
if ($post_autologin == 1) {
$password_hash = md5($row{'cmsloginpw'}); // will result in a 32 characters hash
setcookie($cookie_name, 'usr=' . $row{'cmsloginname'} . '&hash=' . $password_hash, time() + $cookie_time);
}
insert_login_log($_SESSION['loginname'], true);
header("Location: index.php");
exit;
} else {
$login_error = true;
insert_login_log($_POST['loginname'], false);
die_if_login_block();
}
?>