Exemplo n.º 1
0
 if (preg_match('/^[0-9]{4,20}$/', $name)) {
     $errors[] = '名字不能全为数字';
 } else {
     error_reporting(0);
     session_start();
     if ($seccode === intval($_SESSION['code'])) {
         $db_user = $DBS->fetch_one_array("SELECT * FROM yunbbs_users WHERE name='" . $name . "' LIMIT 1");
         if ($db_user) {
             $pwmd5 = encode_password($pw, $db_user['regtime']);
             if ($pwmd5 == $db_user['password']) {
                 // G Auth Checking
                 $gsecret = $db_user['gauthsecret'];
                 if ($gsecret != Null) {
                     if ($gcode) {
                         $ga = new GoogleAuth();
                         $checkResult = $ga->verifyCode($gsecret, $gcode);
                         if ($checkResult) {
                             //设置cookie
                             $db_ucode = md5($db_user['id'] . $db_user['password'] . $db_user['regtime'] . $db_user['lastposttime'] . $db_user['lastreplytime']);
                             $cur_uid = $db_user['id'];
                             setcookie("cur_uid", $cur_uid, time() + 86400 * 365, '/');
                             setcookie("cur_uname", $name, time() + 86400 * 365, '/');
                             setcookie("cur_ucode", $db_ucode, time() + 86400 * 365, '/');
                             $cur_user = $db_user;
                             unset($db_user);
                             header('location: /');
                             exit('logined');
                         } else {
                             $errors[] = '安全码已过期或输入不正确!';
                         }
                     } else {