Fix L2jz для версий 0.81

АлексАлекс около 19 лет назад 3,745 1
Ищем в дистрибе l2jz (modules/main/phpHandlers/engine/user/login.php)
и заменяем код на:
<?php<br /><br />if((isset($_REQUEST['login']))&&(isset($_REQUEST['pass']))){<br /><br />$login = $_REQUEST['login'];<br /><br />$pass = base64_encode(pack("H*",sha1(cp1251_encode($_REQUEST['pass']))));<br /><br />$remeber = $_REQUEST['remember'];<br /><br />} elseif((isset($_SESSION["login"]))&&(isset($_SESSION["builder"]))){<br /><br />$_RESULT['login'] = $_SESSION["login"];<br /><br />$_RESULT['builder'] = $_SESSION["builder"];<br /><br />if($_RESULT['login']===''){<br /><br />setOkCode('guestLogin');<br /><br />} else {<br /><br />setOkCode('userLogin');<br /><br />}<br /><br />} elseif((isset($_COOKIE['l2jz_login']))&&(isset($_COOKIE['l2jz_pass']))){<br /><br />$login = $_COOKIE['login'];<br /><br />$pass = $_COOKIE['pass'];<br /><br />} else {<br /><br />$_SESSION["login"] = $_RESULT['login'] = '';<br /><br />$_SESSION["builder"] = $_RESULT['builder'] = 0;<br /><br />setOkCode('guestLogin');<br /><br />}<br /><br /><br /><br />$pass = stripslashes($pass);<br /><br />$login = stripslashes($login);<br /><br /><br /><br />if(strpos($login, " ") !== false)<br /><br />{<br /><br />$_SESSION["login"] = $_RESULT['login'] = '';<br /><br />$_SESSION["builder"] = $_RESULT['builder'] = 0;<br /><br />setcookie("login","",time()-3600);<br /><br />setcookie("pass","",time()-3600);<br /><br />setErrorCode('hackAttempt');<br /><br />}<br /><br />{<br /><br />$result = $sql->query("SELECT login,access_level FROM accounts WHERE login='".$login."' AND password='".$pass."'","LS");<br /><br />if(mysql_num_rows($result)===1)<br /><br />{<br /><br />$user = mysql_fetch_assoc($result);<br /><br />$_SESSION["login"] = $_RESULT['login'] = $user['login'];<br /><br />$_SESSION["builder"] = $_RESULT['builder'] = $user['access_level'];<br /><br />if($remember==="checked")<br /><br />{<br /><br />setcookie("login",$login,0x6FFFFFFF);<br /><br />setcookie("pass",$pass,0x6FFFFFFF);<br /><br />}<br /><br />setOkCode('userLogin');<br /><br />} else<br /><br />{<br /><br />$_SESSION["login"] = $_RESULT['login'] = '';<br /><br />$_SESSION["builder"] = $_RESULT['builder'] = 0;<br /><br />setcookie("login","",time()-3600);<br /><br />setcookie("pass","",time()-3600);<br /><br />setErrorCode('incorrectPass');<br /><br />}<br /><br />}<br /><br />?>

Комментарии

Загрузка…

Войти чтобы оставить комментарий