rpicms

commit 2ca453fb49d5d5cca7594bef1b5f058940285fb7
parent ecffec94dc2115ec48b70e792be4c29ef855b30a
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed,  9 Jul 2014 16:09:24 +0200

auto commit

Diffstat:
A
core/admin/blog/newpost.php
 | 
0

A
core/admin/user/login.php
 | 
17
+++++++++++++++++
A
core/admin/user/login_check.php
 | 
83
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
A
core/admin/user/logout.php
 | 
6
++++++
A
core/admin/user/register.php
 | 
48
++++++++++++++++++++++++++++++++++++++++++++++++
A
core/admin/user/register_activation.php
 | 
23
+++++++++++++++++++++++

6 files changed, 177 insertions(+), 0 deletions(-)
diff --git a/core/admin/blog/newpost.php b/core/admin/blog/newpost.php
diff --git a/core/admin/user/login.php b/core/admin/user/login.php
@@ -0,0 +1,17 @@
+<form action="login_check.php" method="post">
+	<table cellpadding="1" cellspacing="4">
+		<tr>
+			<td><strong>E-Mail-Adresse:</strong></td>
+			<td><input type="email" name="username" value="<?php echo $username; ?>" required="required" placeholder="E-Mail-Adresse" maxlength="255" /></td>
+		</tr>
+		<tr>
+			<td><strong>Passwort:</strong></td>
+			<td><input type="password" name="password" required="required" placeholder="Passwort" maxlength="50" /></td>
+		</tr>
+		<tr>
+			<td colspan="2"><input type="submit" name="send" value="Login" /></td>
+		</tr>
+	</table>
+</form>
+
+<a href="register.php" title="Registrierung">Registrier dich</a>
diff --git a/core/admin/user/login_check.php b/core/admin/user/login_check.php
@@ -0,0 +1,83 @@
+<?php
+
+
+	$username = $_POST["username"];
+	$pw = $_REQUEST['password'];
+
+	if(empty($pw)){
+		echo"B&auml;&auml;&auml;hhh!!!";
+		exit;
+	}
+	if(empty($username)){
+		echo"B&auml;&auml;&auml;hhh!!!";
+		exit;
+	}
+
+	$verbindung = mysql_connect("localhost", "root" , "1199Mtr3#")
+	or die("Verbindung zur Datenbank konnte nicht hergestellt werden");
+	mysql_select_db("blog") or die ("Datenbank konnte nicht ausgewaelt werden");
+	
+	$abfrage = "SELECT EMail, password FROM users WHERE EMail LIKE '$username' LIMIT 1";
+	$ergebnis = mysql_query($abfrage);
+	$row = mysql_fetch_object($ergebnis);
+
+
+	//secure
+	include '../secure/aes.php';
+
+	$inputKey = '1554831687984849746489478';
+
+	$inputText = $row->password;
+
+	$blockSize = 256;
+	$aes = new AES($inputText, $inputKey, $blockSize);
+	$dec=$aes->decrypt();
+//	$string = $_REQUEST['pw'];
+
+
+
+
+
+	if($dec == $_POST['password']){
+    		ob_start();
+    		$expire=time()+60*60*24*30;
+		setcookie('user', $username, $expire, '/', 'rpimarcel1.fritz.box', false, false);
+		setcookie('user', $username, $expire, '/', '192.168.178.40', false, false);
+		ob_end_flush();
+    		echo "Login erfolgreich. <br> <a href=\"admin.php\">Gesch&uuml;tzer Bereich</a>";
+    	}
+	else{
+    		echo "Benutzername und/oder Passwort waren falsch.";
+    	} 
+/*
+DEBUG
+----
+echo $username;
+echo $verbindung;
+echo $ergebnis;
+
+echo "<br/>";
+echo "-----------------------------";
+echo "<br/>";
+//echo $row[1];
+echo "<br/>";
+echo "-----------------------------";
+echo "<br/>";
+echo "Back aus include";
+echo $inputKey;
+echo "<br/>";
+echo $inputText;
+echo "<br/>";
+echo "<br/>";
+echo "-----------------------------";
+echo "<br/>";
+	echo "After decryption: ".$dec."<br/>";
+
+echo "<br/>";
+echo $_POST['password'];
+echo "<br/>";
+	echo $row->password;
+	echo "<br/>";
+	echo $encrypted_string;
+*/
+?>
diff --git a/core/admin/user/logout.php b/core/admin/user/logout.php
@@ -0,0 +1,6 @@
+<?php
+	setcookie('user', '#', time() -1, '/', 'rpimarcel1.fritz.box', false, false);
+	setcookie('user', '#', time() -1, '/', '192.168.178.40', false, false);
+	echo"<p>Erfolgreich abgemeldet</p></br>"
+	#header("refresh:5;url=http://rpimarcel1.fritz.box/PisIte_new");
+?> 
diff --git a/core/admin/user/register.php b/core/admin/user/register.php
@@ -0,0 +1,48 @@
+<form action="" method="post">
+Benutzername: <input maxlength="255" name="Name" type="text"><br>
+eMail: <input maxlength="255" name="EMail" type="text"><br>
+W&auml;hle dein Passwort: <input maxlength="255" name="pw" type="password"><br>
+<input name="Send" type="submit" value="Absenden">
+</form>
+<?php
+	$DatabaseHost = "localhost";
+	$DatabaseUser = "root";
+	$DatabasePassword = "1199Mtr3#";
+	$Database = "blog";
+	$TableAktivierung = "users";
+	$Absender = "info@nordgedanken.de";
+	if($_REQUEST['Send']){
+    		$DatabasePointer = mysql_connect($DatabaseHost, $DatabaseUser, $DatabasePassword);
+    		mysql_select_db($Database, $DatabasePointer);
+		$_REQUEST['Email'] = mysql_real_escape_string($_REQUEST['Email']);
+		$_REQUEST['Name'] = mysql_real_escape_string($_REQUEST['Name']);
+		$_REQUEST['pw'] = mysql_real_escape_string($_REQUEST['pw']);
+		
+		//secure
+		include '../secure/aes.php';
+		$imputKey = '1554831687984849746489478';
+		$imputText = $_REQUEST['pw'];
+		$blockSize = 256;
+		$aes = new AES($imputText, $imputKey, $blockSize);
+		$enc = $aes->encrypt();
+		$aes->setData($enc);
+		echo "After encryption: ".$enc."<br/>";
+								
+		$Erstellt = date("Y-m-d H:i:s");
+		$Aktivierungscode = rand(1, 9999);
+
+		mysql_query("INSERT INTO $TableAktivierung (Aktivierungscode, Erstellt, EMail, Aktiviert, name, password) VALUES ('$Aktivierungscode', '$Erstellt', '".$_REQUEST['EMail']."', '0', '".$_REQUEST['Name']."', '$enc')", $DatabasePointer);
+
+		$ID = mysql_insert_id();
+		mail($_REQUEST['EMail'], "Registrierung abschlie&szlig;en", "Hallo,\n\num die Registrierung abzuschließen, klicken Sie bitte auf den folgenden Link:\n\nhttp://192.168.178.40/cms_new/core/admin/register_activation.php?ID=$ID&Aktivierungscode=$Aktivierungscode", "FROM: $Absender");
+    		echo"Um die Registrierung abzuschlie&szlig;en, rufen Sie Ihr E-Mail-Postfach ab und klicken Sie auf den Aktivierungslink in der soeben an Sie versandten E-Mail.";
+	}
+	//else{
+	//	echo'<form action="" method="post">';
+	//	echo'Benutzername: <input maxlength="255" name="Name" type="text"><br>';
+	//	echo'eMail: <input maxlength="255" name="EMail" type="text"><br>';
+	//	echo'W&auml;hle dein Passwort: <input maxlength="255" name="pw" type="password"><br>';
+	//	echo'<input name="Send" type="submit" value="Absenden">';
+	//	echo'</form>';
+	//}
+?>
diff --git a/core/admin/user/register_activation.php b/core/admin/user/register_activation.php
@@ -0,0 +1,23 @@
+<?php
+	$DatabaseHost = "localhost";
+	$DatabaseUser = "root";
+	$DatabasePassword = "1199Mtr3#";
+	$Database = "blog";
+	$TableAktivierung = "users";
+
+	if($_REQUEST['ID'] && $_REQUEST['Aktivierungscode']){
+		$DatabasePointer = mysql_connect($DatabaseHost, $DatabaseUser, $DatabasePassword);
+		mysql_select_db($Database, $DatabasePointer);
+
+		$_REQUEST['ID']               = mysql_real_escape_string($_REQUEST['ID']);
+		$_REQUEST['Aktivierungscode'] = mysql_real_escape_string($_REQUEST['Aktivierungscode']);
+
+		$ResultPointer = mysql_query("SELECT ID FROM $TableAktivierung WHERE ID = '".$_REQUEST['ID']."' AND Aktivierungscode = '".$_REQUEST['Aktivierungscode']."'", $DatabasePointer);
+
+		if(mysql_num_rows($ResultPointer) > 0){
+        		@mysql_query("UPDATE $TableAktivierung SET Aktiviert = '1' WHERE ID = '".$_REQUEST['ID']."'", $DatabasePointer);
+       			echo"Vielen Dank f&uuml;r Ihre Registrierung. Der Aktivierungsprozess ist nun abgeschlossen.";
+    		}
+	}
+?>
+