48 lines
1.5 KiB
PHP
48 lines
1.5 KiB
PHP
<?php
|
|
SESSION_START();
|
|
|
|
require('connect.php');
|
|
|
|
$name = $_POST['name'];
|
|
$pass = $_POST['pass'];
|
|
|
|
//Create error link
|
|
$error = 0;
|
|
$link = '../login/?username=' . $name;
|
|
if($name==''){ $link .= '&nf=1'; $error=1; }
|
|
if($pass==''){ $link .= '&pf=1'; $error=1;}
|
|
if($error==1){ header("Location: $link"); }
|
|
|
|
$query = "SELECT * FROM login AS L, pass_forgot AS P WHERE P.name=L.name AND L.name='$name'";
|
|
$result_query = mysql_query($query, $connection);
|
|
if(mysql_num_rows($result_query) != 1){ $link .= '&nf=1'; header("Location: $link"); }
|
|
|
|
while($result = mysql_fetch_assoc($result_query)){
|
|
$hash = $result['pass'];
|
|
if (crypt($pass, $hash) == $hash) {
|
|
$_SESSION['login'] = $result['perms'];
|
|
$_SESSION['name'] = $name;
|
|
$ip = $_SERVER['REMOTE_ADDR'];
|
|
$query2 = "UPDATE `login` SET last_login = NOW() + INTERVAL 6 HOUR, last_login_ip = '$ip' WHERE name='$name'";
|
|
mysql_query($query2, $connection) or die("Error database update");
|
|
|
|
if($result['pass_forgot']==1){header("Location: ../login/forgot/reset"); $_SESSION['pass']=1;}
|
|
if($result['mail']==NULL && $result['mail_new']==NULL){header("Location: ../mail"); $_SESSION['mail']=1;}
|
|
elseif($result['confirm_mail']!=NULL){header("Location: ../mail/confirm"); $_SESSION['confirm']=1;}
|
|
|
|
else{
|
|
if($result['perms']==1){
|
|
header("Location: ../?page=leerling/$name");
|
|
}
|
|
elseif($result['perms']==2) {
|
|
header("Location: ../?page=docent/$name");
|
|
}
|
|
}
|
|
}
|
|
else{
|
|
$link .= '&pf=1';
|
|
header("Location: $link");
|
|
}
|
|
}
|
|
|
|
?>
|