/[LeafOK_CVS]/fenglin/bbs/user_service_login.php
ViewVC logotype

Diff of /fenglin/bbs/user_service_login.php

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.4 by sysadm, Sun Sep 28 12:28:47 2025 UTC Revision 1.9 by sysadm, Mon Nov 3 06:19:31 2025 UTC
# Line 29  Line 29 
29          header("Content-Type:application/json; charset=utf-8");          header("Content-Type:application/json; charset=utf-8");
30    
31          // Validate input data          // Validate input data
32          if (!preg_match("/^[A-Za-z][A-Za-z0-9]{2,11}$/", $username))          if (!preg_match("/^[A-Za-z][A-Za-z0-9_]{4,11}$/", $username))
33          {          {
34                  $result_set["return"]["code"] = -1;                  $result_set["return"]["code"] = -1;
35                  array_push($result_set["return"]["errorFields"], array(                  array_push($result_set["return"]["errorFields"], array(
# Line 167  Line 167 
167                  mysqli_free_result($rs);                  mysqli_free_result($rs);
168          }          }
169    
170          $sql = "SELECT UID, p_login, verified, temp_password,          $sql = "SELECT UID, username, p_login, verified, temp_password,
171                          password = MD5('$password') AS old_pass                          password = MD5('$password') AS old_pass
172                          FROM user_list WHERE username = '$username' AND                          FROM user_list WHERE username = '$username' AND
173                          (password = MD5('$password') OR password = SHA2('$password', 256) OR                          (password = MD5('$password') OR password = SHA2('$password', 256) OR
# Line 189  Line 189 
189          if ($row = mysqli_fetch_array($rs))          if ($row = mysqli_fetch_array($rs))
190          {          {
191                  $uid = intval($row["UID"]);                  $uid = intval($row["UID"]);
192                    $username = $row["username"];
193    
194                  if ($password == $row["temp_password"] && !$ch_passwd)                  if ($password == $row["temp_password"] && !$ch_passwd)
195                  {                  {
# Line 347  Line 348 
348                                  $buffer = file_get_contents("./doc/license/" . (new DateTime($BBS_license_dt))->format("Ymd") . ".txt");                                  $buffer = file_get_contents("./doc/license/" . (new DateTime($BBS_license_dt))->format("Ymd") . ".txt");
349    
350                                  $result_set["return"]["code"] = 4;                                  $result_set["return"]["code"] = 4;
351                                  $result_set["return"]["message"] = LML(htmlspecialchars($buffer, ENT_HTML401, 'UTF-8'), false, false, 1024);                                  $result_set["return"]["message"] = LML($buffer, 1024, false);
352    
353                                  mysqli_close($db_conn);                                  mysqli_close($db_conn);
354                                  exit(json_encode($result_set));                                  exit(json_encode($result_set));

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
webmaster@leafok.com
 ViewVC Help
Powered by ViewVC 1.3.0-beta1