3 function passwd($login,$pass)
5 return md5(md5($pass).$login);
8 function check_passwd()
10 if (empty($_POST['login']) || empty($_POST['passwd']))
13 $sql = sprintf("SELECT * FROM sys_user WHERE login = '%s' AND passwd = '%s'",
14 pg_escape_string($_POST['login']), passwd($_POST['login'], $_POST['passwd']));
16 $sth = pg_query($sql);
18 if ($sth === false) return false;
20 if (substr($_SERVER['HTTP_REFERER'],-12) != '/?login=true'
21 || substr($_SERVER['SCRIPT_FILENAME'],-10) != '/index.php') {
22 error_log('Wrong referrer or wrong request uri');
26 if ($row = pg_fetch_assoc($sth)) {
27 $_SESSION['sys'] = array('uid' => $row['id'],
28 'login' => $row['login'],
29 'name' => $row['name'],
30 'email' => $row['email'],
31 'basedir' => substr($_SERVER['SCRIPT_FILENAME'],0,-9));
35 error_log('Failed login attempt for user ' . $_POST['login']);
41 $ret = '<div class="login">';
43 $ret .= '<div align="center">';
44 $ret .= '<form action="index.php" method="POST">';
45 $ret .= '<table class="login" cellpadding="5">';
46 $ret .= '<tr><th align="left" colspan="2" style="background: #BBD9EE;">Anmeldung</th></tr>';
48 $ret .= '<tr><th align="right">Login</th><td><input type="text" name="login" size="15"></td></tr>';
49 $ret .= '<tr><th align="right">Passwort</th><td><input type="password" name="passwd" size="15"></td></tr>';
51 $ret .= '<tr><td colspan="2" align="center"><input type="submit" value="Anmelden"></td></tr>';