73 lines
1.7 KiB
PHP
73 lines
1.7 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
ob_start();
|
||
|
|
require 'dynmap_login.php';
|
||
|
|
ob_end_clean();
|
||
|
|
|
||
|
|
session_start();
|
||
|
|
|
||
|
|
if (isset($_POST['j_username'])) {
|
||
|
|
$userid = $_POST['j_username'];
|
||
|
|
} else {
|
||
|
|
$userid = '-guest-';
|
||
|
|
}
|
||
|
|
$good = false;
|
||
|
|
|
||
|
|
if (strcmp($userid, '-guest-')) {
|
||
|
|
if (isset($_POST['j_password'])) {
|
||
|
|
$password = $_POST['j_password'];
|
||
|
|
} else {
|
||
|
|
$password = '';
|
||
|
|
}
|
||
|
|
$ctx = hash_init('sha256');
|
||
|
|
hash_update($ctx, $pwdsalt);
|
||
|
|
hash_update($ctx, $password);
|
||
|
|
$hash = hash_final($ctx);
|
||
|
|
$useridlc = strtolower($userid);
|
||
|
|
if (strcasecmp($hash, $pwdhash[$useridlc]) == 0) {
|
||
|
|
$_SESSION['userid'] = $userid;
|
||
|
|
$good = true;
|
||
|
|
} else {
|
||
|
|
$_SESSION['userid'] = '-guest-';
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$_SESSION['userid'] = '-guest-';
|
||
|
|
$good = true;
|
||
|
|
}
|
||
|
|
/* Prune pending registrations, if needed */
|
||
|
|
$newlines[] = '<?php /*';
|
||
|
|
if (is_readable('dynmap_reg.php')) {
|
||
|
|
$lines = file('dynmap_reg.php');
|
||
|
|
} else {
|
||
|
|
$lines = array();
|
||
|
|
}
|
||
|
|
if (!empty($lines)) {
|
||
|
|
$cnt = count($lines) - 1;
|
||
|
|
$changed = false;
|
||
|
|
for ($i = 1; $i < $cnt; $i++) {
|
||
|
|
list($uid, $pc, $hsh) = explode('=', rtrim($lines[$i]));
|
||
|
|
if ($uid == $useridlc) {
|
||
|
|
continue;
|
||
|
|
}
|
||
|
|
if (array_key_exists($uid, $pendingreg)) {
|
||
|
|
$newlines[] = $uid . '=' . $pc . '=' . $hsh;
|
||
|
|
} else {
|
||
|
|
$changed = true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if ($changed) {
|
||
|
|
if (count($newlines) < 2) { /* Nothing? */
|
||
|
|
unlink('dynmap_reg.php');
|
||
|
|
} else {
|
||
|
|
$newlines[] = '*/ ?>';
|
||
|
|
file_put_contents('dynmap_reg.php', implode("\n", $newlines));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($good) {
|
||
|
|
echo "{ \"result\": \"success\" }";
|
||
|
|
} else {
|
||
|
|
echo "{ \"result\": \"loginfailed\" }";
|
||
|
|
}
|