Ver Mensaje Individual
  #4 (permalink)  
Antiguo 14/03/2014, 14:03
Avatar de JoseAlberth
JoseAlberth
 
Fecha de Ingreso: marzo-2014
Mensajes: 23
Antigüedad: 10 años, 1 mes
Puntos: 0
Respuesta: que les parece este modo de encriptacion

Gracias a todos lo que pasa esque tengo un problema al loguearme no me deja ingresar y no porque aca esta el codigo

Código PHP:
Ver original
  1. <?php
  2. include_once("php_includes/check_login_status.php");
  3. // If user is already logged in, header that weenis away
  4. if($user_ok == true){
  5.     header("location: user.php?u=".$_SESSION["username"]);
  6.     exit();
  7. }
  8. ?><?php
  9. // AJAX CALLS THIS LOGIN CODE TO EXECUTE
  10. if(isset($_POST["e"])){
  11.     // CONNECT TO THE DATABASE
  12.     include_once("php_includes/db_conx.php");
  13.     // GATHER THE POSTED DATA INTO LOCAL VARIABLES AND SANITIZE
  14.     $e = mysqli_real_escape_string($db_conx, $_POST['e']);
  15.     $p = md5($_POST['p']);
  16.     // GET USER IP ADDRESS
  17.     $ip = preg_replace('#[^0-9.]#', '', getenv('REMOTE_ADDR'));
  18.     // FORM DATA ERROR HANDLING
  19.     if($e == "" || $p == ""){
  20.         echo "login_failed";
  21.         exit();
  22.     } else {
  23.     // END FORM DATA ERROR HANDLING
  24.         $sql = "SELECT id, username, password FROM users WHERE email='$e' AND activated='1' LIMIT 1";
  25.         $query = mysqli_query($db_conx, $sql);
  26.         $row = mysqli_fetch_row($query);
  27.         $db_id = $row[0];
  28.         $db_username = $row[1];
  29.         $db_pass_str = $row[2];
  30.         if($p != $db_pass_str){
  31.             echo "login_failed";
  32.             exit();
  33.         } else {
  34.             // CREATE THEIR SESSIONS AND COOKIES
  35.             $_SESSION['userid'] = $db_id;
  36.             $_SESSION['username'] = $db_username;
  37.             $_SESSION['password'] = $db_pass_str;
  38.             setcookie("id", $db_id, strtotime( '+30 days' ), "/", "", "", TRUE);
  39.             setcookie("user", $db_username, strtotime( '+30 days' ), "/", "", "", TRUE);
  40.             setcookie("pass", $db_pass_str, strtotime( '+30 days' ), "/", "", "", TRUE);
  41.             // UPDATE THEIR "IP" AND "LASTLOGIN" FIELDS
  42.             $sql = "UPDATE users SET ip='$ip', lastlogin=now() WHERE username='$db_username' LIMIT 1";
  43.             $query = mysqli_query($db_conx, $sql);
  44.             echo $db_username;
  45.             exit();
  46.         }
  47.     }
  48.     exit();
  49. }
  50. ?>


Código PHP:
Ver original
  1. aca esta el otro
  2.  
  3. <?php
  4. include_once("db_conx.php");
  5. // Files that inculde this file at the very top would NOT require
  6. // connection to database or session_start(), be careful.
  7. // Initialize some vars
  8. $user_ok = false;
  9. $log_id = "";
  10. $log_username = "";
  11. $log_password = "";
  12. // User Verify function
  13. function evalLoggedUser($conx,$id,$u,$p){
  14.     $sql = "SELECT ip FROM users WHERE id='$id' AND username='$u' AND password='$p' AND activated='1' LIMIT 1";
  15.     $query = mysqli_query($conx, $sql);
  16.     $numrows = mysqli_num_rows($query);
  17.     if($numrows > 0){
  18.         return true;
  19.     }
  20. }
  21. if(isset($_SESSION["userid"]) && isset($_SESSION["username"]) && isset($_SESSION["password"])) {
  22.     $log_id = preg_replace('#[^0-9]#', '', $_SESSION['userid']);
  23.     $log_username = preg_replace('#[^a-z0-9]#i', '', $_SESSION['username']);
  24.     $log_password = preg_replace('#[^a-z0-9]#i', '', $_SESSION['password']);
  25.     // Verify the user
  26.     $user_ok = evalLoggedUser($db_conx,$log_id,$log_username,$log_password);
  27. } else if(isset($_COOKIE["id"]) && isset($_COOKIE["user"]) && isset($_COOKIE["pass"])){
  28.     $_SESSION['userid'] = preg_replace('#[^0-9]#', '', $_COOKIE['id']);
  29.     $_SESSION['username'] = preg_replace('#[^a-z0-9]#i', '', $_COOKIE['user']);
  30.     $_SESSION['password'] = preg_replace('#[^a-z0-9]#i', '', $_COOKIE['pass']);
  31.     $log_id = $_SESSION['userid'];
  32.     $log_username = $_SESSION['username'];
  33.     $log_password = $_SESSION['password'];
  34.     // Verify the user
  35.     $user_ok = evalLoggedUser($db_conx,$log_id,$log_username,$log_password);
  36.     if($user_ok == true){
  37.         // Update their lastlogin datetime field
  38.         $sql = "UPDATE users SET lastlogin=now() WHERE id='$log_id' LIMIT 1";
  39.         $query = mysqli_query($db_conx, $sql);
  40.     }
  41. }
  42. ?>
Espero de que me puedan ayudar con esto