View Source: /source/login.php

Click here for the source, OR
Other files that you may wish to view the source of:

Source of: /source/login.php

<?
require_once "common.php";


if (
$HTTP_POST_VARS[name]!=""){
    if (
$session[loggedin]){
        
redirect("badnav.php");
    }else{
        
checkban();
        if(
0){
        }else{
            
$sql "SELECT * FROM accounts WHERE login = '$HTTP_POST_VARS[name]' AND password='$HTTP_POST_VARS[password]' AND locked=0";
            
$result db_query($sql);
            if (
db_num_rows($result)==1){
                
$session[user]=db_fetch_assoc($result);
                
checkban($session[user][login]);
                if (
strpos($_SERVER['SERVER_NAME'],"logd.mightye.org")!==false && $session['user']['superuser']<1){
                    if (
date("H")<|| date("H")>17){
                    
$session[message]="`\$The dev server shuts down in the
                        evening now so that I may partake of my home
                        bandwidth.  This server is only available from
                        2am to 5pm from now on."
;
                    
//echo $session[message];
                    
header("Location: index.php");
                    exit();
                    
//redirect("index.php");
                    
}
                }
                if (
$session[user][emailvalidation]!="" && substr($session['user']['emailvalidation'],0,1)!="x"){
                    
$session[user]=array();
                    
$session[message]="`4Error, you must validate your email address before you can log in.";
                    echo 
$session[message];
                    
//header("Location: index.php");
                    
exit();
                }else{
                    
//loaduser($session['user']);
                    
$session[loggedin]=true;
                    
$session[output]=$session[user][output];
                    
$session[laston]=date("Y-m-d H:i:s");
                    
$session[sentnotice]=0;
                    
$session[user][dragonpoints]=unserialize($session[user][dragonpoints]);
                    
$session[user][prefs]=unserialize($session[user][prefs]);
                    
$session['bufflist']=unserialize($session['user']['bufflist']);
                    if (!
is_array($session[user][dragonpoints])) $session[user][dragonpoints]=array();
                    if (
$session[user][loggedin]){
                        
$session[allowednavs]=unserialize($session[user][allowednavs]);
                        
saveuser();
                        
header("Location: {$session['user']['restorepage']}");
                        exit();
                        
//redirect($session['user']['page']);//"badnav.php");
                    
}
                    
db_query("UPDATE accounts SET loggedin=".true.", location=0 WHERE acctid = ".$session[user][acctid]);
                    
$session[user][loggedin]=true;
                    
$location $session[user][location];
                    
$session[user][location]=0;
                    if (
$session[user][alive]==&& $session[user][slainby]!=""){
                        
//they're not really dead, they were killed in pvp.
                        
$session[user][alive]=true;
                    }
                    if (
getsetting("logdnet",0)){
                        
//register with LoGDnet
                        //@file("http://lotgd.sourceforge.net/logdnet.php?addy=".URLEncode($_SERVER['SERVER_NAME'].dirname($_SERVER['REQUEST_URI']))."&amp;desc=".URLEncode(getsetting("serverdesc","Another LoGD Server"))."");
                        
@file(getsetting("logdnetserver","http://lotgd.sourceforge.net/")."logdnet.php?addy=".URLEncode(getsetting("serverurl","http://".$_SERVER['SERVER_NAME'].dirname($_SERVER['REQUEST_URI'])))."&desc=".URLEncode(getsetting("serverdesc","Another LoGD Server"))."");
                    }
                    if (
$location==0){
                        
redirect("news.php");
                    }else if(
$location==1){
                        
redirect("inn.php?op=strolldown");
                    }else{
                        
saveuser();
                        
header("Location: {$session['user']['restorepage']}");
                        exit();
                    }
                }
            }else{
                
$session[message]="`4Error, your login was incorrect`0";
                
redirect("index.php");
            }
        }
    }
}else if (
$HTTP_GET_VARS[op]=="logout"){
    if (
$session[user][loggedin]){
      
$sql "UPDATE accounts SET loggedin=0 WHERE acctid = ".$session[user][acctid];
        
db_query($sql) or die(sql_error($sql));
    }
    
$session=array();
    
redirect("index.php");
}
echo 
"oops!";
?>