Advertisement
Guest User

Untitled

a guest
Jun 12th, 2017
100
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.55 KB | None | 0 0
  1. if(isset($_POST['fusn'])){
  2.  
  3. $usn = mysqli_real_escape_string($con,$_POST['fusn']);
  4.  
  5. $pass1 = mysqli_real_escape_string($con,$_POST['fpwd']);
  6.  
  7.  
  8. $pass = password_hash($pass1,PASSWORD_DEFAULT);
  9. $stmt = $con->prepare("SELECT UserNameID, userName, pass, Role from UserName WHERE username=? LIMIT 1");
  10. $stmt->bind_param('s',$usn);
  11. $stmt->execute();
  12. $stmt->bind_result($usernameid1, $username1, $passw1, $roleid1);
  13. $stmt->store_result();
  14. $stmt->fetch();
  15. if($stmt->num_rows > 0)
  16. {
  17. if (password_verify($pass1, $passw1))
  18. {
  19. $_SESSION['username']=$username1;
  20. $_SESSION['uid']=$usernameid1;
  21. $_SESSION['rid']=$roleid1;
  22. $_SESSION['loggedin']="true";
  23.  
  24. /**
  25. * IP func still not working.
  26. */
  27. if(!empty($_SERVER['HTTP_CLIENT_IP']))
  28. {
  29. $ip=$_SERVER['HTTP_CLIENT_IP'];
  30. }
  31. elseif(!empty($_SERVER['HTTP_X_FORWARDED_FOR'])){
  32. $ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
  33. }
  34. else{
  35. $ip=$_SERVER['REMOTE_ADDR'];
  36. }
  37. $_SESSION['ip']=$ip;
  38. $ipquery = "UPDATE UserName SET IP_ADD ='$ip' WHERE UserNameID ='$usernameid1'";
  39. $runipquery = mysqli_query($con,$ipquery);
  40. header("Location: ./index.php");
  41. die();
  42. } else
  43. {
  44. echo "Try again";
  45. }
  46. }
  47. else
  48. {
  49. echo "This account does not exist";
  50. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement