[PHP/MYSQL] script werkt niet? - Softwareontwikkeling

woensdag 21 november 2001 10:27

Acties:

Verwijderd

Topicstarter

Hallo Tweakers, ik heb dit script geschreven, maar bij de laatste aanpassing, onder:
//------------------------------
// Banned check en cookie set
//------------------------------
Maar het script doet het niet goed meer? Hij geeft alleen maar Banned(Database) terug?! Ik kom er niet uit! Kan iemand me op weg helpen?

PHP:

<?
session_start(); // start session

include ("function.php");
connect(); //ff verbinden

//variabele
$cookiename = "banned";


// login.php makes possible to save in session and opens test.php
if ($HTTP_POST_VARS["username"] &amp;&amp; $HTTP_POST_VARS["password"]) {

//-----------------------------------------------------------------------
// Banned check en cookie set
//-----------------------------------------------------------------------

//cookie checken

  if (isset($HTTP_POST_VARS["$cookiename"])) {
        echo "Banned (cookie)";
        exit();
     }
      else {
      $query=mysql_query("SELECT banned FROM members WHERE username='$username'") or die(mysql_error());
      $num=mysql_num_rows($query);

        if ($num == "1") {
        setcookie($cookiename,"1",time()+60);
        echo "Banned (database)";
        exit();
        }


//-----------------------------------------------------------------------
// Hier begint login
//-----------------------------------------------------------------------
       else {
       //Encript password.
       $passgecodeerd = md5($HTTP_POST_VARS["password"]);
       $username = $HTTP_POST_VARS["username"];

       //Put variabels in session.
       session_register("username");
       session_register("passgecodeerd");

//-----------------------------------------------------------------------
// Beveiligde gedeelte
//-----------------------------------------------------------------------

       $controle == FALSE; //Just in case

       $controle = password($username, $passgecodeerd);
       //Function password gives TRUE or FALSE (function.php)

             if ($controle == TRUE) { //Show page on TRUE
                //Refresh ip in database
                if (getenv(HTTP_X_FORWARDED_FOR))
                {
                $client_hostname=gethostbyaddr(getenv(HTTP_X_FORWARDED_FOR));
                }
                else
                {
                $client_hostname=gethostbyaddr(getenv(REMOTE_ADDR));
                }
                $ip = $client_hostname;
                $sql = "UPDATE members set ip='$ip' WHERE username='$username'";
                echo "You're logged in: $username";
             }
             else { //Show page on False
             echo "<br>Not logged in";
             }
    }
 }
}
//-----------------------------------------------------------------------
// login formuliertje!
//-----------------------------------------------------------------------
else {
?>
<form method="post" action="login.php">
    Username:<input type="Text" name="username"><br>
    Password:<input type="Text" name="password"><br>
    <input type="Submit" name="Submit" value="Login">
</form>
<? }
?>