SHOW:
|
|
- or go back to the newest paste.
| 1 | <?php | |
| 2 | $username = $_REQUEST["txt_username"]; | |
| 3 | $password = $_REQUEST["txt_password"]; | |
| 4 | ||
| 5 | $host = "127.0.0.1"; | |
| 6 | $user = "root"; | |
| 7 | $pass = "12157114"; | |
| 8 | ||
| 9 | try {
| |
| 10 | $dbh = new PDO("mysql:host=$host;dbname=logansarchive", $user, $pass);
| |
| 11 | $dbh->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); | |
| 12 | } | |
| 13 | catch(PDOException $e) {
| |
| 14 | echo $e->getMessage(); | |
| 15 | } | |
| 16 | ||
| 17 | $hashed_pass = substr(sha1($password), 0, 10); | |
| 18 | ||
| 19 | $sql = "select count(*) as count, adminid, adminname, lastlogin from admin where adminname = :name and adminpass = :pass"; | |
| 20 | $result = $dbh->prepare($sql); | |
| 21 | ||
| 22 | $result->bindParam(":name", $username);
| |
| 23 | $result->bindParam(":pass", $hashed_pass);
| |
| 24 | ||
| 25 | - | $row = $dbh->query($sql); |
| 25 | + | $stmt = $result->execute(); |
| 26 | $row = $stmt->fetch(); | |
| 27 | if ($row["count"] == 1) {
| |
| 28 | $_SESSION["adminid"] = $row["adminid"]; | |
| 29 | $_SESSION["adminname"] = $row["adminname"]; | |
| 30 | $_SESSION["lastlogin"] = $row["lastlogin"]; | |
| 31 | ||
| 32 | $dbh = null; | |
| 33 | header("Location: /logansarchive/admin/index.php");
| |
| 34 | } | |
| 35 | else {
| |
| 36 | $dbh = null; | |
| 37 | header("Location: /logansarchive/admin/login.php?login_attempt=1");
| |
| 38 | } | |
| 39 | - | |
| 39 | + | |
| 40 | ||
| 41 |