Advertisement
Guest User

Untitled

a guest
Apr 12th, 2017
189
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.56 KB | None | 0 0
  1. <?php
  2. include "controls/database.php";
  3. $page = "Login";
  4. ?>
  5. <!DOCTYPE html>
  6. <html lang="en">
  7. <head><meta http-equiv="Content-Type" content="text/html; charset=SHIFT_JIS">
  8. <meta http-equiv="X-UA-Compatible" content="IE=edge">
  9. <meta name="viewport" content="width=device-width, initial-scale=1">
  10. <meta name="description" content="CleverAdmin - Bootstrap Admin Template">
  11. <meta name="author" content="Lukasz Holeczek">
  12. <meta name="keyword" content="CleverAdmin, Dashboard, Bootstrap, Admin, Template, Theme, Responsive, Fluid, Retina">
  13. <link rel="apple-touch-icon-precomposed" sizes="144x144" href="assets/ico/apple-touch-icon-144-precomposed.png">
  14. <link rel="apple-touch-icon-precomposed" sizes="114x114" href="assets/ico/apple-touch-icon-114-precomposed.png">
  15. <link rel="apple-touch-icon-precomposed" sizes="72x72" href="assets/ico/apple-touch-icon-72-precomposed.png">
  16. <link rel="apple-touch-icon-precomposed" sizes="57x57" href="assets/ico/apple-touch-icon-57-precomposed.png">
  17. <link rel="shortcut icon" href="assets/ico/favicon.png">
  18. <?php
  19. error_reporting(E_ALL);
  20. ini_set('display_errors', 1);
  21. ?>
  22. <title><?php
  23. $getNames = $odb -> query("SELECT * FROM `admin`");
  24. while($Names = $getNames -> fetch(PDO::FETCH_ASSOC)) {
  25. echo $Names['bootername'];
  26. }
  27. ?> - <?php echo $page ?></title>
  28.  
  29. <!-- Bootstrap core CSS -->
  30. <link href="assets/css/bootstrap.min.css" rel="stylesheet">
  31.  
  32. <!-- page css files -->
  33. <link href="assets/css/font-awesome.min.css" rel="stylesheet">
  34. <link href="assets/css/jquery-ui.min.css" rel="stylesheet">
  35.  
  36. <!-- Custom styles for this template -->
  37. <link href="assets/css/style.min.css" rel="stylesheet">
  38.  
  39. <!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
  40. <!--[if lt IE 9]>
  41. <script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
  42. <script src="https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script>
  43. <![endif]-->
  44. </head>
  45. </head>
  46.  
  47. <body>
  48. <div class="container-fluid content">
  49. <div class="row">
  50. <div id="content" class="col-sm-12 full">
  51. <div class="row">
  52. <div class="login-box">
  53.  
  54. <div class="header">
  55. Login to <?php
  56. $getNames = $odb -> query("SELECT * FROM `admin`");
  57. while($Names = $getNames -> fetch(PDO::FETCH_ASSOC)) {
  58. echo $Names['bootername'];
  59. }
  60. ?>
  61. </div>
  62.  
  63. <form class="form-horizontal login" action="" method="POST">
  64. <?php
  65.  
  66. if (!($user -> LoggedIn()))
  67. {
  68. if (isset($_POST['loginBtn']))
  69. {
  70. $username = $_POST['username'];
  71. $password = $_POST['password'];
  72. $errors = array();
  73. if (!ctype_alnum($username) || strlen($username) < 4 || strlen($username) > 15)
  74. {
  75. //$errors[] = 'Username Must Be Alphanumberic And 4-15 characters in length';
  76. }
  77.  
  78. if (empty($username) || empty($password))
  79. {
  80. $errors[] = 'Please fill in all fields';
  81. }
  82.  
  83. if (empty($errors))
  84. {
  85. $SQLCheckLogin = $odb -> prepare("SELECT COUNT(*) FROM `users` WHERE `username` = :username AND `password` = :password");
  86. $SQLCheckLogin -> execute(array(':username' => $username, ':password' => SHA1($password)));
  87. $countLogin = $SQLCheckLogin -> fetchColumn(0);
  88. if ($countLogin == 1)
  89. {
  90. $SQLGetInfo = $odb -> prepare("SELECT `username`, `ID`, `status` FROM `users` WHERE `username` = :username AND `password` = :password");
  91. $SQLGetInfo -> execute(array(':username' => $username, ':password' => SHA1($password)));
  92. $userInfo = $SQLGetInfo -> fetch(PDO::FETCH_ASSOC);
  93. if ($countLogin == 1)
  94. {
  95. $SQL = $odb->prepare("SELECT `status` FROM `users` WHERE `username` = :username");
  96. $SQL->execute(array(':username' => $username));
  97. $status = $SQL->fetchColumn(0);
  98. if($status == 1)
  99. {
  100. $SQL = $odb->prepare("SELECT `reason` FROM `bans` WHERE `username` = :username");
  101. $SQL->execute(array(':username' => $username));
  102. $ban = $SQL->fetchColumn(0);
  103. die(error('You are banned. Reason: ' . htmlspecialchars($ban)));
  104. }
  105. $logAddr = $odb->prepare("INSERT INTO `login_history` (`username`,`ip`,`date`,`http_agent`) VALUES (:user, :ip, UNIX_TIMESTAMP(NOW()), :agent);");
  106. $logAddr->execute(array( ":user" => $username, ":ip" => $_SERVER['REMOTE_ADDR'], ":agent" => $_SERVER['HTTP_USER_AGENT']));
  107. $_SESSION['username'] = $userInfo['username'];
  108. $_SESSION['ID'] = $userInfo['ID'];
  109. echo '<div class="alert alert-success"><p><strong>SUCCESS: </strong>Login Successful. Redirecting....</p></div><meta http-equiv="refresh" content="3;url=index.php">';
  110. }
  111. else
  112. {
  113. echo '<div class="alert alert-danger"><p><strong>ERROR: </strong>Your are banned! Reason: .$ban.</p></div>';
  114. }
  115. }
  116. else
  117. {
  118. echo '<div class="alert alert-danger"><p><strong>ERROR: </strong>Login Failed</p></div>';
  119. }
  120. }
  121. else
  122. {
  123. echo '<div class="alert alert-danger"><p><strong>ERROR:</strong><br />';
  124. foreach($errors as $error)
  125. {
  126. echo '-'.$error.'<br />';
  127. }
  128. echo '</div>';
  129. }
  130. }
  131. }
  132. else
  133. {
  134. header('location: index.php');
  135. }
  136. ?>
  137.  
  138.  
  139. <fieldset class="col-sm-12">
  140. <div class="form-group">
  141. <div class="controls row">
  142. <div class="input-group col-sm-12">
  143. <input type="text" class="form-control" name="username" id="username" placeholder="Username"/>
  144. <span class="input-group-addon"><i class="fa fa-user"></i></span>
  145. </div>
  146. </div>
  147. </div>
  148.  
  149. <div class="form-group">
  150. <div class="controls row">
  151. <div class="input-group col-sm-12">
  152. <input type="password" name="password" class="form-control" id="password" placeholder="Password"/>
  153. <span class="input-group-addon"><i class="fa fa-key"></i></span>
  154. </div>
  155. </div>
  156. </div>
  157.  
  158. <div class="confirm">
  159. <input type="checkbox" name="remember"/>
  160. <label for="remember">Remember me</label>
  161. </div>
  162.  
  163. <div class="row">
  164.  
  165. <button type="submit" name="loginBtn" class="btn btn-info">Login</button>
  166. <a class="btn btn-info" href="register.php">Sign Up!</a>
  167.  
  168.  
  169. </div>
  170.  
  171. </fieldset>
  172.  
  173. </form>
  174.  
  175. <a class="pull-left" href="terms.php">Terms of Service</a>
  176. <a class="pull-right" href="recover.php">Forgot Password</a>
  177. <div class="clearfix"></div>
  178.  
  179. </div>
  180. </div><!--/row-->
  181.  
  182. </div>
  183.  
  184. </div><!--/row-->
  185.  
  186. </div><!--/container-->
  187.  
  188.  
  189. <!-- start: JavaScript-->
  190. <!--[if !IE]>-->
  191.  
  192. <script src="assets/js/jquery-2.1.0.min.js"></script>
  193.  
  194. <!--<![endif]-->
  195.  
  196. <!--[if IE]>
  197.  
  198. <script src="assets/js/jquery-1.11.0.min.js"></script>
  199.  
  200. <![endif]-->
  201.  
  202. <!--[if !IE]>-->
  203.  
  204. <script type="text/javascript">
  205. window.jQuery || document.write("<script src='assets/js/jquery-2.1.0.min.js'>"+"<"+"/script>");
  206. </script>
  207.  
  208. <!--<![endif]-->
  209.  
  210. <!--[if IE]>
  211.  
  212. <script type="text/javascript">
  213. window.jQuery || document.write("<script src='assets/js/jquery-1.11.0.min.js'>"+"<"+"/script>");
  214. </script>
  215.  
  216. <![endif]-->
  217. <script src="assets/js/jquery-migrate-1.2.1.min.js"></script>
  218. <script src="assets/js/bootstrap.min.js"></script>
  219.  
  220.  
  221. <!-- page scripts -->
  222. <script src="assets/js/jquery.icheck.min.js"></script>
  223.  
  224. <!-- theme scripts -->
  225. <script src="assets/js/custom.min.js"></script>
  226. <script src="assets/js/core.min.js"></script>
  227.  
  228. <!-- inline scripts related to this page -->
  229. <script src="assets/js/pages/login.js"></script>
  230.  
  231. <!-- end: JavaScript-->
  232.  
  233. </body>
  234. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement