autologin.php

<?php

/*
$expected=array(
'user',
'pass'
);
for ($i=0;$i < count($expected);$i++)
$$expected[$i] = (isset($_GET[$expected[$i]]))?$_GET[$expected[$i]]:NULL;
*/

$sTemp = '';
foreach ($HTTP_POST_VARS as $FormFieldName=>$FormFieldValue) {
	$$FormFieldName = $FormFieldValue;
}

/*
print_r($HTTP_POST_VARS);
echo "<BR>";
print_r($_GET);
echo "<BR>" . $user;
echo "<BR>" . $pass;
*/

foreach (array_keys($_GET) as $element) {
        // $$element = $$_GET[$element];
        $$element = (isset($_GET[$element]))?$_GET[$element]:NULL;
        //echo $element . " : [" . $$element . "]";
}


//$n=$HTTP_COOKIE_VARS["user"];
//$p=$HTTP_COOKIE_VARS["pass"];
//$n="000233";
//$p="000233";
//$n=$user;
$n=$user;
//$p=$pass;
$p=$pass;


// check whether its a valid user.
//putenv("ORACLE_HOME=/u01/app/oracle/product/8.1.7/");
putenv("ORACLE_HOME=/u01/app/oracle/product/10.2/");
//putenv("ORACLE_SID=ptcgvas");
//$conn = ocilogon("ptcwap","pawptc","ptcgvas");
putenv("ORACLE_SID=ptcgvas");
$conn = ocilogon("ptcwap","pawptc","ptcgvas");
$chkuser_query = "select * from ptcwap_mmail_account where username='$n' and passwd='$p' and STATUS IN ('a', 'A') ";
$stmt = ociparse($conn, $chkuser_query);
ociexecute($stmt);
$nrows = ocifetchstatement($stmt, $results);
ocilogoff($conn);

//include ("config/config.inc.php3");
require("config/config.inc.php3");
//include ("config/dbconfig.inc.php3");
require("config/dbconfig.inc.php3");

if ($nrows < 1) { //invalid user--redirect to login page
	//Header("Location: http://www.wapeoples.com/login_form_mo_err.htm ");
	Header("Location: /login_form_mo_err.htm ");
	//Header("Location: " . $config["login_url"]);
	flush();
	exit();
}


//valid user--proceed
$link=@mysql_connect($dbconfig["sqlserver"], $dbconfig["sqlusername"],
  $dbconfig["sqlpassword"]);

@mysql_select_db($dbconfig["sqldatabase"]);
$query = "select * from twig_accounts where username='$n'";
$result = @mysql_query($query);
$row = @mysql_numrows($result);
@mysql_close();

if ($row) { //user exists in MOffy db
	# update the password

        @mysql_connect($dbconfig["sqlserver"],$dbconfig["sqlusername"],
                $dbconfig["sqlpassword"]);
        @mysql_select_db($dbconfig["sqldatabase"]);

        $query_update1= "update twig_mail_prefs set pass1='$p', defaultalias = 1 "
                        . "where username='$n'";
        @mysql_query($query_update1);

        $query_update= "update twig_accounts set password=password('$p') "
                        . "where username='$n'";
        @mysql_query($query_update);

        @mysql_close();

//putenv("ORACLE_HOME=/u01/app/oracle/product/8.1.7/");
putenv("ORACLE_HOME=/u01/app/oracle/product/10.2/");
//putenv("ORACLE_SID=ptcgvas");
//$conn1 = ocilogon("ptcwap","pawptc","ptcgvas");
putenv("ORACLE_SID=ptcgvas");
$conn1 = ocilogon("ptcwap","pawptc","ptcgvas");
$chkuser_query1 = "insert into ptcwap_mmail_login_hist (username, passwd, login_date, channel) values ('$n', '$p', sysdate, 'WEB') ";
$stmt1 = ociparse($conn1, $chkuser_query1);
ociexecute($stmt1);
ocilogoff($conn1);

	Header("Location: " . "index.php3?login_username=" . $n . "&login_password=" . $p);
	flush();
	exit();
} else { //user doesnot exist in MOffy db
	//add user and let him add mail accounts
	include( "lib/strings/" . $config["language"] . ".strings.php3" );
	include ("config/dbconfig.inc.php3");

        @mysql_connect($dbconfig["sqlserver"],$dbconfig["sqlusername"],
                $dbconfig["sqlpassword"]);
        @mysql_select_db($dbconfig["sqldatabase"]);

       // echo $config["sqlpassword"];
       // echo $config["sqldatabase"];
        $query_insert2= "delete twig_mail_prefs "
                        . "where username = '$n' ";
        @mysql_query($query_insert2);

        $query_insert1 = "insert into twig_mail_prefs (username, user1, pass1, email1, server1, alias1) "
                        . "values ('$n', '$n', '$p', '$n@peoples.com.hk', 'pop3.peoples.com.hk', 'peoples')";
        @mysql_query($query_insert1);

        $query_insert = "insert into twig_accounts (username, password) "
                        . "values ('$n', password('$p'))";
        @mysql_query($query_insert);

        @mysql_close();

//putenv("ORACLE_HOME=/u01/app/oracle/product/8.1.7/");
putenv("ORACLE_HOME=/u01/app/oracle/product/10.2/");
//putenv("ORACLE_SID=ptcgvas");
//$conn1 = ocilogon("ptcwap","pawptc","ptcgvas");
putenv("ORACLE_SID=ptcgvas");
$conn1 = ocilogon("ptcwap","pawptc","ptcgvas");
$chkuser_query1 = "insert into ptcwap_mmail_login_hist (username, passwd, login_date, channel) values ('$n', '$p', sysdate, 'WEB') ";
$stmt1 = ociparse($conn1, $chkuser_query1);
ociexecute($stmt1);
ocilogoff($conn1);

	Header("Location: " . "index.php3?login_username=" . $n . "&login_password=" . $p);
//	Header("Location: " . "http://www.peoples.com.hk/");

	flush();
	exit();
}

?>