function pirate_auth_register($first_name, $last_name, $username, $email, $password, $conf_password)
{
    global $connection;
    global $pirate_auth_config;
    if ($password == $conf_password) {
        if (strlen($password) >= $pirate_auth_config['password_min_length']) {
            $password_hashed = md5($conf_password);
            $sql = "\n                      INSERT INTO users (first_name, last_name, username, email, hashed_password)\n                      VALUES ('{$first_name}', '{$last_name}', '{$username}', '{$email}', '{$password_hashed}')";
            if ($result = mysqli_query($connection, $sql)) {
                if ($pirate_auth_config['requires_email_confirmation']) {
                    $token = pirate_auth_generate_reset_token();
                    $sql = "UPDATE users SET signup_token = '{$token}' WHERE first_name = '{$first_name}' AND email = '{$email}' LIMIT 1";
                    if ($result = mysqli_query($connection, $sql)) {
                        $subject = "Welcome To Pirates Cove!";
                        $message = "";
                        redirect_to("index.php?message=" . urlencode('You have been sent a confirmation email.'));
                    } else {
                        redirect_to('register.php?message=' . urlencode('Error with confirmation sign up.'));
                    }
                } else {
                    if (pirate_auth_login($username, $password)) {
                        redirect_to("index.php?message=" . urlencode($pirate_auth_config['greeting'] . ' ' . $username));
                    } else {
                        redirect_to("index.php?message=" . urlencode('You are signed up now just login.'));
                    }
                }
            } else {
                redirect_to("register.php?message=" . urldecode("Username or Password are wrong"));
            }
        } else {
            redirect_to("register.php?message=" . urldecode("Passwords cannot be less the 6 characters."));
        }
    } else {
        redirect_to("register.php?message=" . urldecode("Passwords do not match."));
    }
}
Beispiel #2
0
<?php

require_once "assets/includes/includes.php";
if (isset($_POST['login'])) {
    if (pirate_auth_login($_POST['username'], $_POST['password'])) {
        redirect_to('index.php');
    } else {
        redirect_to('login.php?message=' . urldecode("Sorry username/email and/or password are inccorect."));
    }
}
?>

<!doctype html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Log In</title>
</head>
<body>
<form action="login.php" method="post">
    <fieldset style="width: 400px; margin: auto">
        <legend>Log In</legend>
        <p>
            <label for="username">username:</label> <input type="text" name="username" id="username"/>
        </p>
        <p>
            <label for="password">password:</label> <input type="password" name="password" id="password"/>
        </p>
        <button type="submit" name="login">Log In</button><?php 
if (get_setting('can_register') == 'true') {
    ?>