Ghazascanner_2019runbot

/var/www/www-root/data/www/new.labinform.ru/free_thes/auth.php

<?php
	//ob_start();
	//session_start();

//if ((isset($_SESSION['valid'])) && ($_SESSION['valid'] === true)) {
	//	if ((!isset($_SESSION['authurl'])) || ($_SESSION['authurl'] == '') || ($_SESSION['authurl'] == '/auth.php'))
	//		$_SESSION['authurl'] = '/';
	//	header('Location: ' . $_SESSION['authurl']);
	//}
	//print_r($_POST);

$msg = "";
	if (isset($_POST['username']) && !empty($_POST['username']) && !empty($_POST['password'])) {
		//include_once "config.php";
			$login = $_POST['username'];
			$password = $_POST['password'];
			$sql = 'SELECT userid, login, usertypeid FROM users WHERE login = \'' . $login . '\' AND password = \'' . $password . '\' AND (last_check IS NULL OR (last_check + (\'3 second\')::interval < CURRENT_TIMESTAMP)); ';
			//SELECT * FROM users WHERE last_check IS NULL OR (last_check + ('3 second')::interval < CURRENT_TIMESTAMP);
			//UPDATE users SET last_check = CURRENT_TIMESTAMP
			//echo $sql;
			if (isset($_SESSION[LoginURI]['copy2Thes']))
				unset($_SESSION[LoginURI]['copy2Thes']);
			$res = pg_query ($conn, $sql);
			if ($row = pg_fetch_array($res)) {
				$_SESSION[LoginURI]['valid_thes'] = true;
				$_SESSION[LoginURI]['timeout'] = time();
				$_SESSION[LoginURI]['login'] = $login;
				$_SESSION[LoginURI]['username'] = $login;
				$_SESSION[LoginURI]['usertypeid'] = $row['usertypeid'];
				$_SESSION[LoginURI]['usr_id'] = $row['userid'];
				$timeout = 600;
				$_SESSION[LoginURI]["expires_by"] = time() + $timeout;

pg_free_result ($res);
				$sql = 
					"INSERT INTO session(sessionid, userid, datestart, timestart, dateend, timeend, dateload, timeload, copyid) ".
					"VALUES (nextval('sequence_session'), " . $_SESSION[LoginURI]['usr_id'] . ", current_date, current_time, current_date, current_time, NULL, NULL, (SELECT valueid FROM sequence where fieldstr = 'CopyId')) RETURNING sessionid";
				$res = pg_query ($conn, $sql);
				$_SESSION[LoginURI]['ssid'] = '';
				if ($row = pg_fetch_array($res))
					$_SESSION[LoginURI]['ssid'] = $row['sessionid'];

$msg = '{"status": "OK", "message":"Залогинено!", "session_id": "' . $_SESSION[LoginURI]['ssid'] . '", "user": "' . $_SESSION[LoginURI]['username'] .'"}';
				pg_free_result ($res);
				//exit;
				header('Location: ' . $_SERVER['REQUEST_URI']);
			} else {
				pg_free_result ($res);
				$sql = 'UPDATE users SET last_check = CURRENT_TIMESTAMP WHERE userid in (SELECT userid FROM users WHERE login = \'' . str_replace("'", "''", $login) . '\')';
				$res = pg_query ($conn, $sql);
				$msg = "Неверный логин или пароль.";
			}
			//exit;
		} else {
			$msg = "";
		}

<!DOCTYPE HTML>
<html>
	<head>
		<meta content="text/html;charset=utf-8" http-equiv="Content-Type">
		<title>Авторизация</title>
		
	<script src="jquery-3.1.1.min.js" type="text/javascript"></script>
	<script src="jquery.easyui.min.js" type="text/javascript"></script>

@Ghazascanner_2019runbot

Ghazascanner File Manager