Exemple #1
0
if (isset($_POST['login'])) {
    $Username = $_POST['username'];
    $Password = $_POST['password'];
    $output = UserLogin($Username, $Password);
    var_dump($output);
    // If success, redirect to dashboard.php
}
if (isset($_POST['register'])) {
    echo "why";
    $Username = $_POST['username'];
    $Password = $_POST['password'];
    $output = CreateUser($Username, $Password);
    var_dump($output);
}
// Verify that we're authorized
if (!isset($_SESSION["Token"]) || !IsAuthorized()) {
    // Redirect to index.php
    header("Location: index.php");
}
$_SESSION["LastMessageID"] = 0;
/**
   $output = CreateGame("GameTest", "Evan");
   if(IsUserTurn($_SESSION["Username"], $_SESSION["GameID"]))
       HitPlayer("Evan");
   if(IsUserTurn($_SESSION["Username"], $_SESSION["GameID"]))
       FoldPlayer();

   UpdateBoard();

   ResetEntireDatabase();
   // Check if user logged in, if so show leaderboard, if not, login / registration
Exemple #2
0
function PmWikiAuth($pagename, $level, $authprompt=true, $since=0) {
  global $DefaultPasswords, $GroupAttributesFmt, $AllowPassword,
    $AuthCascade, $FmtV, $AuthPromptFmt, $PageStartFmt, $PageEndFmt, 
    $AuthId, $AuthList, $NoHTMLCache;
  static $acache;
  SDV($GroupAttributesFmt,'$Group/GroupAttributes');
  SDV($AllowPassword,'nopass');
  $page = ReadPage($pagename, $since);
  if (!$page) { return false; }
  if (!isset($acache)) 
    SessionAuth($pagename, (@$_POST['authpw']) 
                           ? array('authpw' => array($_POST['authpw'] => 1))
                           : '');
  if (@$AuthId) {
    $AuthList["id:$AuthId"] = 1;
    $AuthList["id:-$AuthId"] = -1;
    $AuthList["id:*"] = 1;
  }
  $gn = FmtPageName($GroupAttributesFmt, $pagename);
  if (!isset($acache[$gn])) {
    $gp = ReadPage($gn, READPAGE_CURRENT);
    foreach($DefaultPasswords as $k => $v) {
      $x = array(2, array(), '');
      $acache['@site'][$k] = IsAuthorized($v, 'site', $x);
      $AuthList["@_site_$k"] = $acache['@site'][$k][0] ? 1 : 0;
      $acache[$gn][$k] = IsAuthorized($gp["passwd$k"], 'group', 
                                      $acache['@site'][$k]);
    }
  }
  foreach($DefaultPasswords as $k => $v) 
    list($page['=auth'][$k], $page['=passwd'][$k], $page['=pwsource'][$k]) =
      IsAuthorized($page["passwd$k"], 'page', $acache[$gn][$k]);
  foreach($AuthCascade as $k => $t) {
    if ($page['=auth'][$k]+0 == 2) {
      $page['=auth'][$k] = $page['=auth'][$t];
      if ($page['=passwd'][$k] = $page['=passwd'][$t])         # assign
        $page['=pwsource'][$k] = "cascade:$t";
    }
  }
  if (@$page['=auth']['admin']) 
    foreach($page['=auth'] as $lv=>$a) @$page['=auth'][$lv] = 3;
  if (@$page['=passwd']['read']) $NoHTMLCache |= 2;
  if ($level=='ALWAYS' || @$page['=auth'][$level]) return $page;
  if (!$authprompt) return false;
  $GLOBALS['AuthNeeded'] = (@$_POST['authpw']) 
    ? $page['=pwsource'][$level] . ' ' . $level : '';
  PCache($pagename, $page);
  $postvars = '';
  foreach($_POST as $k=>$v) {
    if ($k == 'authpw' || $k == 'authid') continue;
    $v = str_replace('$', '$', 
             htmlspecialchars(stripmagic($v), ENT_COMPAT));
    $postvars .= "<input type='hidden' name='$k' value=\"$v\" />\n";
  }
  $FmtV['$PostVars'] = $postvars;
  SDV($AuthPromptFmt,array(&$PageStartFmt,
    "<p><b>$[Password required]</b></p>
      <form name='authform' action='{$_SERVER['REQUEST_URI']}' method='post'>
        $[Password]: <input tabindex='1' type='password' name='authpw' 
          value='' />
        <input type='submit' value='OK' />\$PostVars</form>
        <script language='javascript' type='text/javascript'><!--
          document.authform.authpw.focus() //--></script>", &$PageEndFmt));
  PrintFmt($pagename,$AuthPromptFmt);
  exit;
}
Exemple #3
0
function PmWikiAuth($pagename, $level, $authprompt = true, $since = 0)
{
    global $DefaultPasswords, $GroupAttributesFmt, $AllowPassword, $AuthCascade, $FmtV, $AuthPromptFmt, $PageStartFmt, $PageEndFmt, $AuthId, $AuthList, $NoHTMLCache;
    static $acache;
    SDV($GroupAttributesFmt, '$Group/GroupAttributes');
    SDV($AllowPassword, 'nopass');
    $page = ReadPage($pagename, $since);
    if (!$page) {
        return false;
    }
    if (!isset($acache)) {
        SessionAuth($pagename, @$_POST['authpw'] ? array('authpw' => array($_POST['authpw'] => 1)) : '');
    }
    if (@$AuthId) {
        $AuthList["id:{$AuthId}"] = 1;
        $AuthList["id:-{$AuthId}"] = -1;
        $AuthList["id:*"] = 1;
    }
    ## To allow @_site_edit in GroupAttributes, we cache it first
    if (!isset($acache['@site'])) {
        foreach ($DefaultPasswords as $k => $v) {
            $x = array(2, array(), '');
            $acache['@site'][$k] = IsAuthorized($v, 'site', $x);
            $AuthList["@_site_{$k}"] = $acache['@site'][$k][0] ? 1 : 0;
        }
    }
    $gn = FmtPageName($GroupAttributesFmt, $pagename);
    if (!isset($acache[$gn])) {
        $gp = ReadPage($gn, READPAGE_CURRENT);
        foreach ($DefaultPasswords as $k => $v) {
            $acache[$gn][$k] = IsAuthorized(@$gp["passwd{$k}"], 'group', $acache['@site'][$k]);
        }
    }
    foreach ($DefaultPasswords as $k => $v) {
        list($page['=auth'][$k], $page['=passwd'][$k], $page['=pwsource'][$k]) = IsAuthorized(@$page["passwd{$k}"], 'page', $acache[$gn][$k]);
    }
    foreach ($AuthCascade as $k => $t) {
        if ($page['=auth'][$k] + 0 == 2) {
            $page['=auth'][$k] = $page['=auth'][$t];
            if ($page['=passwd'][$k] = $page['=passwd'][$t]) {
                # assign
                $page['=pwsource'][$k] = "cascade:{$t}";
            }
        }
    }
    if (@$page['=auth']['admin']) {
        foreach ($page['=auth'] as $lv => $a) {
            @($page['=auth'][$lv] = 3);
        }
    }
    if (@$page['=passwd']['read']) {
        $NoHTMLCache |= 2;
    }
    if ($level == 'ALWAYS' || @$page['=auth'][$level]) {
        return $page;
    }
    if (!$authprompt) {
        return false;
    }
    $GLOBALS['AuthNeeded'] = @$_POST['authpw'] ? $page['=pwsource'][$level] . ' ' . $level : '';
    PCache($pagename, $page);
    $postvars = '';
    foreach ($_POST as $k => $v) {
        if ($k == 'authpw' || $k == 'authid') {
            continue;
        }
        $k = PHSC(stripmagic($k), ENT_QUOTES);
        if (is_array($v)) {
            foreach ($v as $vk => $vv) {
                $vk = PHSC(stripmagic($vk), ENT_QUOTES);
                $vv = str_replace('$', '&#036;', PHSC(stripmagic($vv), ENT_COMPAT));
                $postvars .= "<input type='hidden' name='{$k}[{$vk}]' value=\"{$vv}\" />\n";
            }
        } else {
            $v = str_replace('$', '&#036;', PHSC(stripmagic($v), ENT_COMPAT));
            $postvars .= "<input type='hidden' name='{$k}' value=\"{$v}\" />\n";
        }
    }
    $FmtV['$PostVars'] = $postvars;
    $r = str_replace("'", '%37', stripmagic($_SERVER['REQUEST_URI']));
    SDV($AuthPromptFmt, array(&$PageStartFmt, "<p><b>\$[Password required]</b></p>\n      <form name='authform' action='{$r}' method='post'>\n        \$[Password]: <input tabindex='1' type='password' name='authpw' \n          value='' />\n        <input type='submit' value='\$[OK]' />\$PostVars</form>\n        <script language='javascript' type='text/javascript'><!--\n          document.authform.authpw.focus() //--></script>", &$PageEndFmt));
    PrintFmt($pagename, $AuthPromptFmt);
    exit;
}