Changeset 65

Timestamp:

Feb 5, 2009, 11:03:01 AM (16 years ago)

Author:

george

Message:

• Opraveno: Kontrola přes haš funkci SHA1 nefungovala všude správně.

Location:

trunk

Files:

• dictionary.php (modified) (2 diffs)
• includes/global.php (modified) (1 diff)
• includes/global_function.php (modified) (1 diff)
• registrace.php (modified) (1 diff)
• save.php (modified) (1 diff)
• sql/updates/64.sql (modified) (1 diff)

trunk/dictionary.php

@@ -22 +22 @@
   {
     $User = $_SESSION['User'];
-    $Pass = $_SESSION['Pass'];
+    $Line = mysql_fetch_assoc($Database->SQLCommand("SELECT sha1('".$_SESSION['Pass']."') as pass;"));
+    $Pass = $Line['pass'];
     
-    $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE LOWER(user) = LOWER('$User')"));
+    $Line = mysql_fetch_assoc($Database->SQLCommand("SELECT * FROM user WHERE LOWER(user) = LOWER('$User')"));
     if(!$Line) 
         {
@@ -37 +38 @@
         } else return false;
       }  
-      if($Line['pass'] == sha1($Pass)) 
+      if($Line['pass'] == $Pass) 
           {
               

trunk/includes/global.php

@@ -157 +157 @@
 {
   $_SESSION['User'] = $_POST['LoginUser'];
-  $_SESSION['Pass'] = sha1($_POST['LoginPass']);
-
-  $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE LOWER(user) = LOWER('".$_SESSION['User']."') AND pass = '".$_SESSION['Pass']."'"));
+  $_SESSION['Pass'] = $_POST['LoginPass'];
+
+  $Line = mysql_fetch_array($Database->SQLCommand("SELECT * FROM user WHERE LOWER(user) = LOWER('".$_SESSION['User']."') AND pass = sha1('".$_SESSION['Pass']."')"));
   if(!$Line)
   {

trunk/includes/global_function.php

@@ -76 +76 @@
     $Pass = $_SESSION['Pass'];
     $Line = mysql_fetch_array($Database->SQLCommand('SELECT * FROM user WHERE ID = '.$_SESSION['UserID'].'
-      AND GM >= '.$Licence.' AND pass = "'.$Pass.'"'));
+      AND GM >= '.$Licence.' AND pass = sha1("'.$Pass.'")'));
     //  echo "SELECT * FROM user WHERE ID = ".$_SESSION['UserID']." AND GM <= $Licence AND pass = '$Pass'";
     return($Line);

trunk/registrace.php

@@ -23 +23 @@
       
       $_SESSION['User'] = $User;
-      $_SESSION['Pass'] = sha1($Pass);
+      $_SESSION['Pass'] = $Pass;
     
       $Line = mysql_fetch_array($Database->SQLCommand("SELECT ID FROM user WHERE user = '".$_SESSION['User']."'"));

trunk/save.php

@@ -2 +2 @@
 
 include('includes/global.php');
-
 
 // Ochrana proti neoprávněnému přístupu

trunk/sql/updates/64.sql

@@ -66 +66 @@
 ADD `Description` TEXT NOT NULL AFTER `Name` ;
 
+INSERT INTO `group` (`Id`, `Name`, `TablePrefix`, `MangosDatabase`, `MangosTable`, `MangosTableIndex`, `DBCFileName`, `DBCColumns`) VALUES
+(12, 'Herní tipy', 'gametips', '', '', '', 'GameTips', 'usuuuuuuuuuuuuuuuu'),
+(13, 'Kouzla', 'spell', '', '', '', 'Spell', 'uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuusssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu');
+
+
 INSERT INTO `group_item` (`Id`, `Group`, `Name`, `Column`, `MangosColumn`, `AddonFileName`, `DBCColumnIndex`) VALUES
 (42, 12, 'Text', 'Text', '', '', 1),