Changeset 302 for quests/includes

Timestamp:

Feb 19, 2008, 6:09:15 PM (17 years ago)

Author:

maron

Message:

oprava ochrany, proti hacku

Location:

quests/includes

Files:

• global.php (modified) (1 diff)
• global_function.php (modified) (2 diffs)

quests/includes/global.php

@@ -49 +49 @@
        $_SESSION['UserID'] = ''; 
        $_SESSION['User'] = '';
+       $_SESSION['Pass'] = '';
     } else {
       $_SESSION['UserID'] = $Line['ID']; 

quests/includes/global_function.php

@@ -17 +17 @@
       $Pass = $_SESSION['Pass'];
     
-    $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE ID = ".$_SESSION['UserID']));
-    if (!$Line) {
-       return false;
-    } else {
-      if ($Licence <= $Line['gm']) {
+      $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE ID = ".$_SESSION['UserID']."
+      AND GM >= $Licence AND pass = '$Pass'"));
+    //  echo "SELECT * FROM user WHERE ID = ".$_SESSION['UserID']." AND GM <= $Licence AND pass = '$Pass'";
+      if (!$Line) {
+         return false;
+      } else {
+         return true;
+    /*
+     if ($Licence <= $Line['gm']) {
           return true;
       } else return false;
@@ -31 +35 @@
 
         return True;
-      } else { return False;
+      } else { return False; 
       //  die('Nemáte zde pøístup, pøihla¹te se: <a href="'.$Config['Web']['BaseURL'].'">zde</a>');
+      }   */
       }
-    }
     } else { return False;
       //  die('Nemáte zde pøístup, pøihla¹te se: <a href="'.$Config['Web']['BaseURL'].'">zde</a>');