fork download
copy 
  1. <?php
  2.  
  3.  
  4. include_once( 'integration.php' );
  5.  
  6. class Login extends Jigowatt_integration {
  7.  
  8.     private $user;
  9. 	private $pass;
  10. 	private $token;
  11. 	private $valid;
  12. 	private $result;
  13.  
  14. 	public $use_emails = false;
  15. 	public $error;
  16. 	public $msg;
  17.  
  18. 	public $data = array();
  19.  
  20. 	function __construct() {
  21.  
  22. 		// Disable users from logging in?
  23. 		if (parent::getOption('disable-logins-enable')) {
  24. 			self::displayMessageEntry('The admin has disabled logins.');
  25. 		}
  26.  
  27. 		$this->use_emails = parent::getOption('email-as-username-enable');
  28. 		$this->username_type = ( $this->use_emails ) ? 'email' : 'username';
  29.  
  30. 		// Redirect the logging in user
  31. 		if ( parent::getOption('signin-redirect-referrer-enable') )
  32. 			$_SESSION['jigowatt']['referer'] = (!empty($_SESSION['jigowatt']['referer'])) ? $_SESSION['jigowatt']['referer'] : 'home.php';
  33. 		else
  34. 			$_SESSION['jigowatt']['referer'] = parent::getOption('signin-redirect-url');
  35.  
  36. 		// Are they attempting to access a secure page?
  37. 		$this->isSecure();
  38.  
  39. 		// Only allow guests to view this page
  40. 		parent::guestOnly();
  41.  
  42. 		// Generate a unique token for security purposes
  43. 		parent::generateToken();
  44.  
  45. 		// Login form post data
  46. 		if(isset($_POST['username'])) :
  47. 			$this->user = parent::secure($_POST['username']);
  48. 			$this->pass = parent::secure($_POST['password']);
  49.  
  50. 			$this->token = !empty($_POST['token']) ? $_POST['token'] : '';
  51. 			$this->process();
  52. 		endif;
  53.  
  54. 		if( !empty($_GET['login']) || !empty($_GET['link']) )
  55. 			!empty($_GET['link']) ? parent::link_account($_GET['link'], true) : parent::link_account($_GET['login'], true);
  56.  
  57. 		foreach (parent::$socialLogin as $provider) :
  58. 			if (!empty($_SESSION['jigowatt'][$provider])) {
  59. 				$this->social_login($provider);
  60. 				break;
  61. 			}
  62. 		endforeach;
  63.  
  64. 		// Display the errors and do not exit the page
  65. 		//return $data['msg'] = $this->error ? $this->error : $this->msg;
  66.  
  67. 	}
  68.  
  69. 	private function social_login($provider) {
  70.  
  71. 		$params = array( ':session' => $_SESSION['jigowatt'][$provider] );
  72. 		$stmt = parent::query("SELECT `user_id` FROM `login_integration` WHERE `$provider` = :session;", $params);
  73.  
  74. 		if ($stmt->rowCount() > 0) {
  75.  
  76. 			$result = $stmt->fetch();
  77.  
  78. 			$params = array( ':user_id' => $result['user_id'] );
  79. 			$stmt = parent::query("SELECT * FROM `login_users` WHERE `user_id` = :user_id;", $params);
  80.  
  81. 			$this->result = $stmt->fetch();
  82.  
  83. 			$username = $this->username_type;
  84. 			$this->user = $this->result[$username];
  85.  
  86. 			$this->login();
  87.  
  88. 		} else {
  89.  
  90. 			unset(
  91. 				$_SESSION['jigowatt']['ot'],
  92. 				$_SESSION['jigowatt']['ots'],
  93. 				$_SESSION['jigowatt'][$provider]
  94. 			);
  95.  
  96. 			header('Location: sign_up.php?new_social');
  97. 			exit();
  98.  
  99. 		}
  100.  
  101. 	}
  102.  
  103. 	private function isSecure() {
  104.  
  105. 		if(isset($_GET['e'])) :
  106. 			if (parent::getOption('block-msg-out-enable'))
  107. 				return $data['msg'] = parent::getOption('block-msg-out');
  108. 		endif;
  109. 	}
  110.  
  111. 	private function process() {
  112.  
  113. 		// Check that the token is valid, prevents exploits
  114. 		if(!parent::valid_token($this->token)) {
  115. 			return $data['msg'] = 'Invalid login attempt.';
  116. 		}
  117.  
  118. 		// Confirm all details are correct
  119. 		$this->validate();
  120.  
  121. 		// Log the user in
  122. 		$this->login();
  123. 	}
  124.  
  125. 	private function validate() {
  126.  
  127. 		//if(!empty($this->error)) return false;
  128.  
  129. 		if(empty($this->user)) {
  130. 			$data['msg'] = (( $this->use_emails ) ? 'You must enter an email address.' : 'You must enter a username.');
  131. 		}
  132.  
  133. 		if(empty($this->pass)) {
  134. 			$data['msg'] = 'You forgot your password ;)';
  135. 		}
  136.  
  137. 		if (isset($data)) { return $data['msg']; }
  138.  
  139. 		$username = $this->username_type;
  140. 		$params = array( 'username' => $this->user );
  141. 		$stmt = parent::query("SELECT * FROM login_users WHERE {$username} = :username", $params);
  142.  
  143. 		$this->result = $stmt->fetch();
  144.  
  145. 		if(!parent::validatePassword($this->pass, $this->result['password'])) {
  146.  
  147. 			$username = $this->username_type;
  148. 			return $data['msg'] = "Incorrect $username or password.";
  149.  
  150. 		}
  151.  
  152. 	}
  153.  
  154. 	// Once everything's filled out
  155. 	public function login() {
  156.  
  157. 		global $image_handler;
  158.  
  159. 		// Just double check there are no errors first
  160. 		//if( !empty($data['msg']) ) return false;
  161.  
  162. 		return false;
  163.  
  164. 		// Session expiration
  165. 		$minutes = parent::getOption('default_session');
  166. 		ini_set('session.cookie_lifetime', 60 * $minutes);
  167.  
  168. 		session_regenerate_id();
  169.  
  170. 		// See if the admin requires new users to activate
  171. 		if ( parent::getOption('user-activation-enable') ) :
  172.  
  173. 			// Check if user still requires activation
  174. 			$params = array( ':user' => $this->user );
  175. 			$username = $this->username_type;
  176. 			$stmt = parent::query("SELECT * FROM `login_confirm` WHERE `{$username}` = :user AND `type` = 'new_user'", $params);
  177.  
  178. 			if ($stmt->rowCount() > 0) $_SESSION['jigowatt']['activate'] = 1;
  179.  
  180. 		endif;
  181.  
  182. 		// Save if user is restricted
  183. 		if ( !empty($this->result['restricted']) ) $_SESSION['jigowatt']['restricted'] = 1;
  184.  
  185. 		// Are we forcing a password update if encryption is not the desired method?
  186. 		if (parent::getOption('pw-encrypt-force-enable')) :
  187.  
  188. 			$type = $this->getOption('pw-encryption');
  189.  
  190. 			if (strlen($this->result['password']) == 32 && $type == 'SHA256')
  191. 				$_SESSION['jigowatt']['forcePwUpdate'] = 1;
  192.  
  193. 			if (strlen($this->result['password']) != 32 && $type == 'MD5')
  194. 				$_SESSION['jigowatt']['forcePwUpdate'] = 1;
  195.  
  196. 		endif;
  197.  
  198. 		// Save user's current level
  199. 		$user_level = unserialize($this->result['user_level']);
  200. 		$_SESSION['jigowatt']['user_level'] = $user_level;
  201.  
  202. 		$_SESSION['jigowatt']['email'] = $this->result['email'];
  203.  
  204. 		//$_SESSION['jigowatt']['profile_img'] = $this->image->getProfilePicture($this->result['user_id'], true, 'small');
  205.  
  206. 		/** Check whether the user's level is disabled. */
  207. 		$params = array( ':level' => $user_level[0] );
  208. 		$stmt = parent::query("SELECT `level_disabled`, `redirect` FROM `login_levels` WHERE `id` = :level;", $params);
  209.  
  210. 		$disRow = $stmt->fetch();
  211.  
  212. 		if ( !empty($disRow['level_disabled']) ) $_SESSION['jigowatt']['level_disabled'] = 1;
  213. 		if ( !empty($disRow['redirect']) ) $redirect = $disRow['redirect'];
  214.  
  215. 		// Stay signed via checkbox?
  216. 		if(isset($_POST['remember'])) {
  217. 			ini_set('session.cookie_lifetime', 60*60*24*100); // Set to expire in 3 months & 10 days
  218. 			session_regenerate_id();
  219. 		}
  220.  
  221. 		/** Store a timestamp. */
  222. 		if( parent::getOption('profile-timestamps-enable') ) {
  223.  
  224. 			$params = array(
  225. 				':user_id'    => $this->result['user_id'],
  226. 				':ip'         => $this->getIPAddress() == '::1' ? 'Localhost' : $this->getIPAddress()
  227. 			);
  228. 			$stmt = parent::query("INSERT INTO `login_timestamps` (`user_id` ,`ip` ,`timestamp`) VALUES (:user_id, :ip, CURRENT_TIMESTAMP);", $params);
  229.  
  230. 		}
  231.  
  232. 		// And our magic happens here! Let's sign them in
  233. 		$username = $this->username_type;
  234. 		$_SESSION['jigowatt']['username'] = $this->result[$username];
  235.  
  236. 		// User ID of the logging in user
  237. 		$_SESSION['jigowatt']['user_id'] = $this->result['user_id'];
  238.  
  239. 		if ( empty($redirect) ) $redirect = $_SESSION['jigowatt']['referer'];
  240.  
  241. 		unset(
  242. 			$_SESSION['jigowatt']['referer'],
  243. 			$_SESSION['jigowatt']['token'],
  244. 			$_SESSION['jigowatt']['facebookMisc'],
  245. 			$_SESSION['jigowatt']['twitterMisc'],
  246. 			$_SESSION['jigowatt']['openIDMisc']
  247. 		);
  248.  
  249. 		// Redirect after it's all said and done
  250. 		header("Location: " . $redirect);
  251. 		exit();
  252.  
  253. 	}
  254.  
  255. }
  256. ?>
Runtime error #stdin #stdout #stderr 0.01s 20568KB
comments (?)
stdin
copy 
Standard input is empty
stdout
copy 
Standard output is empty
stderr
copy 
PHP Warning:  include_once(integration.php): failed to open stream: No such file or directory in /home/aVo2v3/prog.php on line 4
PHP Warning:  include_once(): Failed opening 'integration.php' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /home/aVo2v3/prog.php on line 4
PHP Fatal error:  Class 'Jigowatt_integration' not found in /home/aVo2v3/prog.php on line 6
https://ideone.com/Ji4oVd
language:
PHP (php 7.3.5)
created:
10 years ago
visibility:
public

Share or Embed source code

Discover > Sphere Engine API

The brand new service which powers Ideone!

Discover > IDE Widget

Widget for compiling and running the source code in a web browser!