note 124429 deleted from function.phpinfo by salathe
| From: | salathe@php.net | Date: | Sun, 24 Nov 2019 20:12:12 +0000 |
| Subject: | note 124429 deleted from function.phpinfo by salathe | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-213246@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
<!DOCTYPE html>
<html>
<head>
<title>
Amazon Class
</title>
</head>
<body>
<?php
SESSION_START();
$mysql = new mysqli( "server_name", "username", "password",
"webserver" );
if ( isset( $_SESSION["user"] ) ) {
echo $_SESSION["user"]." logged in.<br />";
echo "<button
onclick=\"window.location.href='index.php?logout'\">Kijelentkezés</button>";
if ( isset( $_GET['logout'] ) ) {
SESSION_DESTROY();
header( "Location: index.php" );
}
} else {
if ( isset( $_GET["page"] ) && $_GET["page"] == "register"
) {
// register
if ( isset( $_POST['name'] ) && !empty( $_POST['name'] ) &&
isset( $_POST['email'] ) && !empty( $_POST['email'] ) && isset(
$_POST['psw1'] ) && !empty( $_POST['psw1'] ) && isset(
$_POST['psw2'] ) && !empty( $_POST["psw2"] ) ) {
if ( $_POST["psw1"] == $_POST["psw2"] ) {
$sql = "insert into users set name='".htmlspecialchars(
$_POST["name"] )."', password='".md5( $_POST["psw1"]
)."', email='".htmlspecialchars( $_POST["email"]
)."';";
$mysql->query( $sql );
header( "Location: index.php" );
}
}
// register form
echo "<form action='index.php?page=register'
method='post'>";
echo "<input type='text' name='name'
placeholder='Felhasználónév' /><br />";
echo "<input type='email' name='email'
placeholder='Email-cÃm' /><br />";
echo "<input type='password' name='psw1'
placeholder='Jelszó' /><br />";
echo "<input type='password' name='psw2'
placeholder='Jelszó mégegyszer' /><br />";
echo "<input type='submit' value='Regisztrálás' />";
echo "</form>";
} else {
// login
if ( isset( $_POST['name'] ) && !empty( $_POST['name'] ) &&
isset( $_POST['psw1'] ) && !empty( $_POST['psw1'] ) ) {
$sql = "select name, password from users where name='".htmlspecialchars(
$_POST["name"] )."'";
$result = $mysql->query( $sql );
if ( $result->num_rows == 1 ) {
$user = $result->fetch_assoc();
if ( md5( $_POST["psw1"] ) == $user["password"] ) {
$_SESSION["user"] = $user["name"];
header( "Location: index.php" );
} else echo "Hibás jelszó!<br />";
} else {
echo "Hibás adatok<br />";
}
}
// login form
echo "<form action='index.php' method='post'>";
echo "<input type='text' name='name'
placeholder='Felhasználónév' /><br />";
echo "<input type='password' name='psw1'
placeholder='Jelszó' /><br />";
echo "<input type='submit' value='Bejelentkezés' />";
echo "</form>";
}
}
?>
</body>
</html>