Advertisement
Guest User

Untitled

a guest
Aug 10th, 2017
77
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.26 KB | None | 0 0
  1. public function login($name, $pass)
  2. {
  3. global $mysql;
  4.  
  5. $name = @mysqli_real_escape_string($mysql->db_link_auth, stripslashes($name));
  6. $pass = @mysqli_real_escape_string($mysql->db_link_auth, stripslashes($pass));
  7.  
  8. $checkexist = mysqli_query($mysql->db_link_auth, "SELECT * FROM account WHERE username = '".$name."'");
  9. $checkexist = mysqli_num_rows($checkexist);
  10.  
  11. if ($checkexist == '0')
  12. {
  13. return 'Account doesn\'t exist' . false . exit();
  14. }
  15.  
  16. else if ($checkexist == '1');
  17. {
  18. $sha_pass = sha1(strtoupper($name).":".strtoupper($pass));
  19.  
  20. $accountsql = mysqli_query($mysql->db_link_auth, "SELECT id, username FROM account WHERE username = '".$name."' AND sha_pass_hash = '".$sha_pass."'");
  21. $accountarr = mysqli_fetch_assoc($accountsql);
  22. $accountid = $accountarr['id'];
  23.  
  24. $gmlevelsql = mysqli_query($mysql->db_link_auth, "SELECT gmlevel FROM account_access WHERE id = '".$accountid."' AND RealmID = '1'");
  25. unset ($accountarr, $accountid);
  26.  
  27. if(!$accountsql)
  28. {
  29. echo 'Error in SQL code ' . mysqli_error($mysql->db_link_auth);
  30. exit;
  31. }
  32.  
  33. else if (!$gmlevelsql)
  34. {
  35. echo 'Error in SQL code ' . mysqli_error($mysql->db_link_auth);
  36. exit;
  37. }
  38.  
  39. else if ($accountsql and $gmlevelsql)
  40. {
  41. $checklog = mysqli_num_rows($accountsql);
  42. // account doesn't exist - end
  43. if ($checklog == '0')
  44. {
  45. header("location:index.php?bad_log");
  46. }
  47. // account extist - continue
  48. else if ($checklog == '1')
  49. {
  50.  
  51. $accountarr = mysqli_fetch_array($accountsql);
  52. $gmlevelarr = mysqli_fetch_array($gmlevelsql);
  53.  
  54. $checkgm = mysqli_num_rows($gmlevelsql);
  55.  
  56. if ($checkgm == '0')
  57. {
  58. return 'You\'re not GameMaster!' . false . exit();
  59. }
  60.  
  61. else if ($checkgm > '1')
  62. {
  63. @session_start();
  64.  
  65. $_SESSION["Username"] = $accountarr["username"];
  66. $_SESSION["ID"] = $accountarr["id"];
  67. $_SESSION["GMLevel"] = $gmlevelarr["gmlevel"];
  68. $_SESSION["Logged"] = true;
  69. header("location:in/index.php");
  70. }
  71. }
  72. }
  73. }
  74. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement