commit e7842c823a8419f226f3281c992b0217b773c436
parent 2ca453fb49d5d5cca7594bef1b5f058940285fb7
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 9 Jul 2014 16:10:57 +0200
auto clean
Diffstat:
6 files changed, 0 insertions(+), 177 deletions(-)
diff --git a/core/admin/blog/newpost.php b/core/admin/blog/newpost.php
diff --git a/core/admin/user/login.php b/core/admin/user/login.php
@@ -1,17 +0,0 @@
-<form action="login_check.php" method="post">
- <table cellpadding="1" cellspacing="4">
- <tr>
- <td><strong>E-Mail-Adresse:</strong></td>
- <td><input type="email" name="username" value="<?php echo $username; ?>" required="required" placeholder="E-Mail-Adresse" maxlength="255" /></td>
- </tr>
- <tr>
- <td><strong>Passwort:</strong></td>
- <td><input type="password" name="password" required="required" placeholder="Passwort" maxlength="50" /></td>
- </tr>
- <tr>
- <td colspan="2"><input type="submit" name="send" value="Login" /></td>
- </tr>
- </table>
-</form>
-
-<a href="register.php" title="Registrierung">Registrier dich</a>
diff --git a/core/admin/user/login_check.php b/core/admin/user/login_check.php
@@ -1,83 +0,0 @@
-<?php
-
-
- $username = $_POST["username"];
- $pw = $_REQUEST['password'];
-
- if(empty($pw)){
- echo"Bääähhh!!!";
- exit;
- }
- if(empty($username)){
- echo"Bääähhh!!!";
- exit;
- }
-
- $verbindung = mysql_connect("localhost", "root" , "1199Mtr3#")
- or die("Verbindung zur Datenbank konnte nicht hergestellt werden");
- mysql_select_db("blog") or die ("Datenbank konnte nicht ausgewaelt werden");
-
- $abfrage = "SELECT EMail, password FROM users WHERE EMail LIKE '$username' LIMIT 1";
- $ergebnis = mysql_query($abfrage);
- $row = mysql_fetch_object($ergebnis);
-
-
- //secure
- include '../secure/aes.php';
-
- $inputKey = '1554831687984849746489478';
-
- $inputText = $row->password;
-
- $blockSize = 256;
- $aes = new AES($inputText, $inputKey, $blockSize);
- $dec=$aes->decrypt();
-// $string = $_REQUEST['pw'];
-
-
-
-
-
- if($dec == $_POST['password']){
- ob_start();
- $expire=time()+60*60*24*30;
- setcookie('user', $username, $expire, '/', 'rpimarcel1.fritz.box', false, false);
- setcookie('user', $username, $expire, '/', '192.168.178.40', false, false);
- ob_end_flush();
- echo "Login erfolgreich. <br> <a href=\"admin.php\">Geschützer Bereich</a>";
- }
- else{
- echo "Benutzername und/oder Passwort waren falsch.";
- }
-/*
-DEBUG
-----
-echo $username;
-echo $verbindung;
-echo $ergebnis;
-
-echo "<br/>";
-echo "-----------------------------";
-echo "<br/>";
-//echo $row[1];
-echo "<br/>";
-echo "-----------------------------";
-echo "<br/>";
-echo "Back aus include";
-echo $inputKey;
-echo "<br/>";
-echo $inputText;
-echo "<br/>";
-echo "<br/>";
-echo "-----------------------------";
-echo "<br/>";
- echo "After decryption: ".$dec."<br/>";
-
-echo "<br/>";
-echo $_POST['password'];
-echo "<br/>";
- echo $row->password;
- echo "<br/>";
- echo $encrypted_string;
-*/
-?>
diff --git a/core/admin/user/logout.php b/core/admin/user/logout.php
@@ -1,6 +0,0 @@
-<?php
- setcookie('user', '#', time() -1, '/', 'rpimarcel1.fritz.box', false, false);
- setcookie('user', '#', time() -1, '/', '192.168.178.40', false, false);
- echo"<p>Erfolgreich abgemeldet</p></br>"
- #header("refresh:5;url=http://rpimarcel1.fritz.box/PisIte_new");
-?>
diff --git a/core/admin/user/register.php b/core/admin/user/register.php
@@ -1,48 +0,0 @@
-<form action="" method="post">
-Benutzername: <input maxlength="255" name="Name" type="text"><br>
-eMail: <input maxlength="255" name="EMail" type="text"><br>
-Wähle dein Passwort: <input maxlength="255" name="pw" type="password"><br>
-<input name="Send" type="submit" value="Absenden">
-</form>
-<?php
- $DatabaseHost = "localhost";
- $DatabaseUser = "root";
- $DatabasePassword = "1199Mtr3#";
- $Database = "blog";
- $TableAktivierung = "users";
- $Absender = "info@nordgedanken.de";
- if($_REQUEST['Send']){
- $DatabasePointer = mysql_connect($DatabaseHost, $DatabaseUser, $DatabasePassword);
- mysql_select_db($Database, $DatabasePointer);
- $_REQUEST['Email'] = mysql_real_escape_string($_REQUEST['Email']);
- $_REQUEST['Name'] = mysql_real_escape_string($_REQUEST['Name']);
- $_REQUEST['pw'] = mysql_real_escape_string($_REQUEST['pw']);
-
- //secure
- include '../secure/aes.php';
- $imputKey = '1554831687984849746489478';
- $imputText = $_REQUEST['pw'];
- $blockSize = 256;
- $aes = new AES($imputText, $imputKey, $blockSize);
- $enc = $aes->encrypt();
- $aes->setData($enc);
- echo "After encryption: ".$enc."<br/>";
-
- $Erstellt = date("Y-m-d H:i:s");
- $Aktivierungscode = rand(1, 9999);
-
- mysql_query("INSERT INTO $TableAktivierung (Aktivierungscode, Erstellt, EMail, Aktiviert, name, password) VALUES ('$Aktivierungscode', '$Erstellt', '".$_REQUEST['EMail']."', '0', '".$_REQUEST['Name']."', '$enc')", $DatabasePointer);
-
- $ID = mysql_insert_id();
- mail($_REQUEST['EMail'], "Registrierung abschließen", "Hallo,\n\num die Registrierung abzuschließen, klicken Sie bitte auf den folgenden Link:\n\nhttp://192.168.178.40/cms_new/core/admin/register_activation.php?ID=$ID&Aktivierungscode=$Aktivierungscode", "FROM: $Absender");
- echo"Um die Registrierung abzuschließen, rufen Sie Ihr E-Mail-Postfach ab und klicken Sie auf den Aktivierungslink in der soeben an Sie versandten E-Mail.";
- }
- //else{
- // echo'<form action="" method="post">';
- // echo'Benutzername: <input maxlength="255" name="Name" type="text"><br>';
- // echo'eMail: <input maxlength="255" name="EMail" type="text"><br>';
- // echo'Wähle dein Passwort: <input maxlength="255" name="pw" type="password"><br>';
- // echo'<input name="Send" type="submit" value="Absenden">';
- // echo'</form>';
- //}
-?>
diff --git a/core/admin/user/register_activation.php b/core/admin/user/register_activation.php
@@ -1,23 +0,0 @@
-<?php
- $DatabaseHost = "localhost";
- $DatabaseUser = "root";
- $DatabasePassword = "1199Mtr3#";
- $Database = "blog";
- $TableAktivierung = "users";
-
- if($_REQUEST['ID'] && $_REQUEST['Aktivierungscode']){
- $DatabasePointer = mysql_connect($DatabaseHost, $DatabaseUser, $DatabasePassword);
- mysql_select_db($Database, $DatabasePointer);
-
- $_REQUEST['ID'] = mysql_real_escape_string($_REQUEST['ID']);
- $_REQUEST['Aktivierungscode'] = mysql_real_escape_string($_REQUEST['Aktivierungscode']);
-
- $ResultPointer = mysql_query("SELECT ID FROM $TableAktivierung WHERE ID = '".$_REQUEST['ID']."' AND Aktivierungscode = '".$_REQUEST['Aktivierungscode']."'", $DatabasePointer);
-
- if(mysql_num_rows($ResultPointer) > 0){
- @mysql_query("UPDATE $TableAktivierung SET Aktiviert = '1' WHERE ID = '".$_REQUEST['ID']."'", $DatabasePointer);
- echo"Vielen Dank für Ihre Registrierung. Der Aktivierungsprozess ist nun abgeschlossen.";
- }
- }
-?>
-
