/[LeafOK_CVS]/fenglin/bbs/user_login_service.php
ViewVC logotype

Diff of /fenglin/bbs/user_login_service.php

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.7 by sysadm, Thu Apr 3 02:39:19 2025 UTC Revision 1.9 by sysadm, Fri Apr 4 05:59:31 2025 UTC
# Line 111  Line 111 
111          {          {
112                  // Failed login attempts from the same source (subnet /24) during certain time period                  // Failed login attempts from the same source (subnet /24) during certain time period
113                  $sql = "SELECT COUNT(*) AS err_count FROM user_err_login_log                  $sql = "SELECT COUNT(*) AS err_count FROM user_err_login_log
114                                  WHERE login_dt >= SUBDATE(NOW(), INTERVAL '10' MINUTE)                                  WHERE login_dt >= SUBDATE(NOW(), INTERVAL 10 MINUTE)
115                                  AND login_ip LIKE '" . client_addr(1) . "'";                                  AND login_ip LIKE '" . client_addr(1) . "'";
116                  $rs = mysqli_query($db_conn, $sql);                  $rs = mysqli_query($db_conn, $sql);
117                  if ($rs == false)                  if ($rs == false)
# Line 138  Line 138 
138    
139                  // Failed login attempts against the current username during certain time period                  // Failed login attempts against the current username during certain time period
140                  $sql = "SELECT COUNT(*) AS err_count FROM user_err_login_log                  $sql = "SELECT COUNT(*) AS err_count FROM user_err_login_log
141                                  WHERE username = '$username' AND login_dt >= SUBDATE(NOW(), INTERVAL '1' DAY)";                                  WHERE username = '$username' AND login_dt >= SUBDATE(NOW(), INTERVAL 1 DAY)";
142                  $rs = mysqli_query($db_conn, $sql);                  $rs = mysqli_query($db_conn, $sql);
143                  if ($rs == false)                  if ($rs == false)
144                  {                  {
# Line 197  Line 197 
197    
198                  if ($ch_passwd)                  if ($ch_passwd)
199                  {                  {
200                          $verified = ($password == $row["temp_password"] ? 1 : $row["verified"]); // New user first time login with temp password                          if ($password == $row["temp_password"]) // New user first time login with temp password
201                            {
202                                    $verified = 1;
203    
204                                    // Set life = 150 for verified user
205                                    $sql = "UPDATE user_pubinfo SET life = 150 WHERE UID = $uid";
206                                    $rs_life = mysqli_query($db_conn, $sql);
207                                    if ($rs_life == false)
208                                    {
209                                            $result_set["return"]["code"] = -2;
210                                            $result_set["return"]["message"] = "Update user life error: " . mysqli_error($db_conn);
211                            
212                                            mysqli_close($db_conn);
213                                            exit(json_encode($result_set));
214                                    }
215                            }
216                            else
217                            {
218                                    $verified = $row["verified"];
219                            }
220    
221                          $sql = "UPDATE user_list SET password = SHA2('$password_new', 256),                          $sql = "UPDATE user_list SET password = SHA2('$password_new', 256),
222                                          temp_password = '', verified = $verified WHERE UID = $uid";                                          temp_password = '', verified = $verified WHERE UID = $uid";

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
webmaster@leafok.com
 ViewVC Help
Powered by ViewVC 1.3.0-beta1