Her er mit loginsystem (session baseret med mulighed for "auto"login)
<?php
// index.php
require($_SERVER["DOCUMENT_ROOT"]."/butik/include/functions.inc.php");
if(CheckLogin($_COOKIE["ButikkensAutoLogin"],$_COOKIE["ButikkensAutoPass"])) {
header("location: checklogin.php?login=$_COOKIE[ButikkensAutoLogin]&pass=$_COOKIE[ButikkensAutoPass]");
}
Common_admin_header("Admin Login");
?>
<h2>Administrator Login</h2>
<form action="checklogin.php" method="post">
<table>
<tr>
<td>Login</td>
<td><?php print makeinput("text","login");?></td>
</tr>
<tr>
<td>Password</td>
<td><?php print makeinput("password","pass");?></td>
</tr>
<tr>
<td>Automatisk login<br>Må virke i</td>
<td><?php print makeinput("checkbox","autologin","ja");?><br>
<?php
$things = array(
"1",
"7",
"14",
"30",
"90",
"365"
);
print "<select name='cookietime'>";
for($i=0; $i<sizeof($things); $i++) {
print "<option value='".$things[$i]."'>".$things[$i]." dage</option>";
}
print "</select>";
?>
</td>
</tr>
<tr>
<td colspan='2' align='center'><?php print makeinput("submit","","Login -->");?></td>
</tr>
</table>
</form>
<?php
Common_admin_footer();
?>
<?php
// checklogin.php
session_start();
require($_SERVER["DOCUMENT_ROOT"]."/butik/include/functions.inc.php");
if(!OpenLogin($_REQUEST["login"],$_REQUEST["pass"])) {
Common_admin_header("Login | Fejl");
$fejl = get_var("userpassfejl");
print printFejl($fejl);
Common_admin_footer();
exit;
} else {
if($_POST["autologin"] == "ja") {
setcookie ("ButikkensAutoLogin", $_POST["login"],time()+3600*$_POST["cookietime"]);
setcookie ("ButikkensAutoPass", $_POST["pass"],time()+3600*$_POST["cookietime"]);
}
$ses_login = $_REQUEST["login"];
$ses_pass = $_REQUEST["pass"];
session_register("ses_login");
session_register("ses_pass");
$admin_id = get_admin_id($ses_login,$ses_pass);
openconn();
$sql = sql("SELECT COUNT(*) as tal FROM logins WHERE admin_id = '$admin_id'");
list($tal) = mysql_fetch_row($sql);
if($tal == 0) { $sql = sql("INSERT INTO logins VALUES(NULL,NOW(),'$admin_id')"); }
else { $sql = sql("UPDATE logins SET LoginsDato = NOW() WHERE admin_id = '$admin_id'"); }
closeconn();
header("location: start.php");
exit;
}
?>
Dog er der mange funktioner i det hele, men her kommer lige det væsentligste til loginsystemet.
<?php
// functions.inc.php
function OpenLogin($login,$pass) {
$passmd5 = strtolower(md5($pass));
$strLogin = strtolower($login);
openconn();
$sql = sql("SELECT AdminLogin, AdminPass FROM admin WHERE AdminLogin = '$strLogin'");
closeconn();
if(mysql_num_rows($sql) != 1) { Return false; }
else {
list($login,$pass) = mysql_fetch_row($sql);
if($pass != $passmd5) { Return false; }
else { Return true; }
}
}
function CheckLogin($login,$pass) {
$passmd5 = strtolower(md5($pass));
$strLogin = strtolower($login);
openconn();
$sql = sql("SELECT COUNT(*) as tal FROM admin WHERE AdminLogin = '$strLogin' AND AdminPass = '$passmd5'");
closeconn();
list($tal) = mysql_fetch_row($sql);
if($tal == 1) { Return true; } else { Return false; }
}
?>
Det smarte med dette system er at "ejeren" af databasen IKKE kan komme ind på andre brugers navne etc. da passwordet er MD5'et (envejs kodning) - Så i databasen står der bare fx 0944msdf033nlef33rcctg slevom koden fx er 2456...
Det andet er jo cookie autologin tingen, dejlig ting når man er administrator selv :)
Ny bruger
Nybegynder
Opret
Preview
