PHP loginCheck函数代码示例

			  <?php 
if (isset($_SESSION['login_status']) && $_SESSION['login_status'] == false) {
    session_unset();
    echo "<div class=\"col-md-12\"> <div class=\"update-nag\"><div class=\"update-text\">The username or password you entered is incorrect.</div> </div></div>\n";
}
?>
            </div>
         </div>
      </div>
	  
      <?php 
if (isset($_POST['user']) && isset($_POST['pass'])) {
    $user = $_POST['user'];
    $pass = $_POST['pass'];
    $login = login($user, $pass);
    if (loginCheck($login) == true && isAdmin($login) == true) {
        $_SESSION["login_user"] = $user;
        $_SESSION["login_status"] = true;
        header('Location: index');
        exit;
    } else {
        $_SESSION["login_status"] = false;
        header('Location: ?');
        exit;
    }
}
?>
		 
      <script src="js/jquery-1.11.1.min.js"></script>
      <script src="js/bootstrap.min.js"></script>
      <script>

<?php

include "accessor.php";
$user = json_decode(stripslashes($_REQUEST['obj']));
//echo $user->username." | ".$user->password;
echo loginCheck($link, $user->username, $user->password);

<?php

/*
SQL Buddy - Web based MySQL administration
http://www.sqlbuddy.com/
index.php
- output page structure, content loaded through ajax
MIT license
2008 Calvin Lough <http://calv.in>
*/
/* MODx integration security check */
include "functions.php";
loginCheck(false);
outputPage();

function editEmail($mysqli, $password, $email1, $email2)
{
    $userid = $_SESSION['userid'];
    if (!loginCheck($mysqli)) {
        return false;
    }
    if ($email1 != $email2) {
        $_SESSION['msg'] = 'EMAIL ADRESSES MUST MATCH';
        return false;
    }
    if ($stmt = $mysqli->prepare("SELECT password FROM Account WHERE id = ? LIMIT 1")) {
        $stmt->bind_param('i', $userid);
        $stmt->execute();
        $stmt->store_result();
        $stmt->bind_result($dbPassword);
        $stmt->fetch();
        $password = sha1($password);
        if ($stmt->num_rows == 1) {
            if ($dbPassword != $password) {
                $_SESSION['msg'] = 'INCORRECT PASSWORD';
                return false;
            }
        } else {
            $_SESSION['msg'] = 'DATABASE ERROR';
            return false;
        }
    } else {
        $_SESSION['msg'] = 'DATABASE ERROR';
        return false;
    }
    if ($stmt = $mysqli->prepare("SELECT email FROM Account WHERE email = ?")) {
        $stmt->bind_param('s', $email1);
        $stmt->execute();
        $stmt->store_result();
        $stmt->bind_result($tmp);
        $stmt->fetch();
        if ($stmt->num_rows > 0) {
            $_SESSION['msg'] = 'EMAIL ALREADY IN USE';
            return false;
        }
    }
    if ($stmt = $mysqli->prepare("UPDATE Account SET Account.email = ? WHERE Account.id = ?")) {
        $stmt->bind_param('si', $email1, $userid);
        $stmt->execute();
        $_SESSION['msg'] = 'EMAIL ADRESS UPDATED SUCCESSFULLY';
        return true;
    } else {
        $_SESSION['msg'] = 'DATABASE ERROR';
        return false;
    }
}

 */
$tab = "admin";
$nav = "staff";
$returnLocation = "../admin/staff_list.php";
/**
 * Checking for query string. Go back to $returnLocation if none found.
 */
if (count($_GET) == 0 || !is_numeric($_GET["id_member"]) || empty($_GET["surname1"]) || empty($_GET["first_name"])) {
    header("Location: " . $returnLocation);
    exit;
}
/**
 * Checking permissions
 */
require_once "../auth/login_check.php";
loginCheck(OPEN_PROFILE_ADMINISTRATOR);
require_once "../lib/Form.php";
require_once "../lib/Check.php";
/**
 * Retrieving get vars
 */
$idMember = intval($_GET["id_member"]);
$surname1 = Check::safeText($_GET["surname1"]);
$surname2 = Check::safeText($_GET["surname2"]);
$firstName = Check::safeText($_GET["first_name"]);
/**
 * Show page
 */
$title = _("Delete Staff Member");
require_once "../layout/header.php";
/**

 * Checking for get vars. Go back to log statistics if none found.
 */
if (count($_GET) == 0) {
    header("Location: ../admin/log_stats.php");
    exit;
}
/**
 * Controlling vars
 */
$tab = "admin";
$nav = "logs";
/**
 * Checking permissions
 */
require_once "../auth/login_check.php";
loginCheck(OPEN_PROFILE_ADMINISTRATOR, false);
// There are not logs in demo version
require_once "../lib/LogStats.php";
/**
 * Retrieving get vars
 */
$table = isset($_GET['table']) ? Check::safeText($_GET['table']) : 'access';
$year = isset($_GET["year"]) ? intval($_GET["year"]) : 0;
$month = isset($_GET["month"]) ? intval($_GET["month"]) : 0;
$day = isset($_GET["day"]) ? intval($_GET["day"]) : 0;
//$hour = (isset($_GET["hour"])) ? intval($_GET["hour"]) : 0; // @todo ?
/**
 * Show page
 */
if ($table == 'record') {
    $title = _("Record Logs");

/**
 * Gets APIService SOAP client proxy that uses SOAP header authentication
 * @return APIService
 */
function getAPI()
{
    loginCheck();
    global $api_endpoint;
    $api_wsdl = "api/APIService.wsdl";
    $api_options = array('location' => $api_endpoint, 'trace' => true, 'features' => SOAP_SINGLE_ELEMENT_ARRAYS);
    $api = new APIService($api_wsdl, $api_options);
    $api->setCredentials("[" . $_SESSION["IntegratorsKey"] . "]" . $_SESSION["UserID"], $_SESSION["Password"]);
    return $api;
}

 * @package   OpenClinic
 * @copyright 2002-2008 jact
 * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL
 * @version   CVS: $Id: history_personal_view.php,v 1.26 2008/03/23 12:00:17 jact Exp $
 * @author    jact <jachavar@gmail.com>
 */
/**
 * Controlling vars
 */
$tab = "medical";
$nav = "history";
/**
 * Checking permissions
 */
require_once "../auth/login_check.php";
loginCheck(OPEN_PROFILE_DOCTOR);
require_once "../model/Query/History.php";
require_once "../model/Patient.php";
/**
 * Retrieving var (PGS)
 */
$idPatient = Check::postGetSessionInt('id_patient');
$patient = new Patient($idPatient);
if ($patient->getName() == '') {
    FlashMsg::add(_("That patient does not exist."), OPEN_MSG_ERROR);
    header("Location: ../medical/patient_search_form.php");
    exit;
}
/**
 * Search database for problem
 */

function login($username, $password, $codestring = '', $captcha = '')
{
    global $bdstoken;
    request('http://pan.baidu.com/');
    if ($codestring == '') {
        $captcha = loginCheck($username);
        if ($captcha) {
            $ret['errno'] = 257;
            $ret['code_string'] = $captcha;
            $ret['captcha'] = 'https://passport.baidu.com/cgi-bin/genimage?' . $captcha;
            return $ret;
        }
    }
    $guid = GUID();
    getToken($guid);
    //加密登录不太灵，不知道怎么回事，抽风似的，不用了
    /*$_key = request('https://passport.baidu.com/v2/getpublickey?token='.$bdstoken);
      $key = json_decode(str_replace("'", '"', $_key['body']), true);
      if (!isset($key['pubkey']) || !isset($key['key'])) {
        echo '无法获取public key！请联系开发者！服务器返回：'.$_key['body'];
        die();
      }
      $pubkey = openssl_pkey_get_public($key['pubkey']);
      openssl_public_encrypt($password, $crypted_password, $pubkey);
      $crypted_password = base64_encode($crypted_password);
      $result = request('https://passport.baidu.com/v2/api/?login', "charset=utf-8&tpl=netdisk&subpro=netdisk_web&apiver=v3&tt=".time()."&token=$bdstoken&loginmerge=true&safeflg=0&codestring=$codestring&detect=1&foreignusername=&gid=&idc=&isPhone=&loglogintype=pc_loginBasic&logintype=basicLogin&mem_pass=on&password=$crypted_password&rsakey={$key['key']}&crypttype=12&quick_user=0&safeflag=0&staticpage=http://pan.baidu.com/res/static/thirdparty/pass_v3_jump.html&u=http://pan.baidu.com/&username=$username&countrycode=&verifycode=$captcha&gid=$guid&ppui_logintime=".mt_rand(10000, 15000));*/
    $result = request('https://passport.baidu.com/v2/api/?login', "charset=utf-8&tpl=netdisk&subpro=netdisk_web&apiver=v3&tt=" . time() . "&token={$bdstoken}&loginmerge=true&safeflg=0&codestring={$codestring}&detect=1&foreignusername=&gid=&idc=&isPhone=&loglogintype=pc_loginBasic&logintype=basicLogin&mem_pass=on&password={$password}&quick_user=0&safeflag=0&staticpage=http://pan.baidu.com/res/static/thirdparty/pass_v3_jump.html&u=http://pan.baidu.com/&username={$username}&countrycode=&verifycode={$captcha}&gid={$guid}&ppui_logintime=" . mt_rand(10000, 15000));
    parse_str(findBetween($result['body'], 'href += "', '"'), $output);
    if (!isset($output['err_no'])) {
        echo '无法登录！请联系开发者！服务器返回：<xmp>' . $result['body'];
        die;
    }
    $ret['errno'] = $output['err_no'];
    if (strlen($output['codeString'])) {
        $ret['code_string'] = $output['codeString'];
        $ret['captcha'] = 'https://passport.baidu.com/cgi-bin/genimage?' . $output['codeString'];
    }
    return $ret;
}

<?php 
ob_start();
require '../setup.php';
require $GLOBALS['root'] . '../../database.php';
ob_end_clean();
// supresses output.
if (!loginCheck($session)) {
    echo "Error: You're not signed in";
    $_SESSION['ERROR'] = "unsubscribehandler.php failed to verify that you are signed in";
} else {
    if (isset($_POST['key'])) {
        $key = $_POST['key'];
        $sql = 'DELETE FROM endpoints WHERE user_id="' . $_SESSION['ID'] . '" AND id="' . $key . '";';
        $result = query($sql);
    } else {
        echo "Error: Nothing recieved";
        $_SESSION['ERROR'] = "subscribehandler.php recieved nothing";
    }
}

if (strcmp(getCommand(), "insertToSQL") == 0) {
    $nameToInsert = $_POST['username'];
    $passToInsert = $_POST['password'];
    insertToSQL($nameToInsert, $passToInsert, SQLConnect(), "LoginSystem");
} else {
    if (strcmp(getCommand(), "getFromSQL") == 0) {
        getFromSQL(SQLConnect(), "LoginSystem");
    } else {
        if (strcmp(getCommand(), "updateSQL") == 0) {
            $nameToUpdate = $_POST['username'];
            $passToUpdate = $_POST['password'];
            /* needs the new ones too, deal with that later */
            updateSQL($nameToUpdate, $passToUpdate, SQLConnect());
        } else {
            if (strcmp(getCommand(), "loginCheck") == 0) {
                $name = $_POST['username'];
                $pass = $_POST['password'];
                loginCheck($name, $pass, SQLConnect());
            } else {
                if (strcmp(getCommand(), "deleteFromSQL") == 0) {
                    $name = $_POST['username'];
                    echo $name;
                    deleteFromSQL($name, SQLConnect());
                } else {
                    die("Invalid command.");
                    /* die prints a message, in the bracket and exits the script */
                }
            }
        }
    }
}

                            }
                        }
                    }
                }
            }
        } else {
            if ($wants == "films") {
                $filmnight_id = getCurrentFilmNight();
                $selections = [];
                if (loginCheck($session)) {
                    $selections = getSelectedFilmsInUserOrder($filmnight_id, $_SESSION['ID']);
                }
                echo json_encode(["status" => "success", "filmList" => $selections, "hasVoted" => $selections[1]["voted"] == "1"]);
            } else {
                if ($wants == "votes") {
                    $results = [];
                    if (loginCheck($session) == "admin" && status() == "voting" && !isset($_GET["night"])) {
                        $results = getResults(getCurrentFilmNight());
                    } else {
                        $results = getResults(getCurrentResultsFilmNight());
                    }
                    echo json_encode(["status" => "success", "votes" => $results]);
                } else {
                    echo '{"status": "error", "error": "Don\'t know how to get ' . $wants . '"}';
                }
            }
        }
    }
} else {
    echo '{"status": "error", "error": "Nothing Received"}';
}

<script type="text/javascript">
/* validation */
$(document).ready(function(){ $("#login").validate();});
</script>

<?php 
if ($_POST) {
    $username = $_POST["username"];
    $password = md5($_POST["password"]);
    $adminlanguage = $_POST["admin_language"];
    $result = loginCheck($username, $password, $adminlanguage);
    // Include language file
    $admin_lang = $_SESSION["site_admin_language"];
    if ($admin_lang) {
        include DOCUMENT_ROOT . "/system/language/admin_" . $admin_lang . ".php";
    } else {
        include DOCUMENT_ROOT . "/system/language/admin_en.php";
    }
    if ($result == "Success") {
        set_response_mes(1, $admin_language['successfullylogged']);
        url_redirect(DOCROOT . "admin/profile/");
    } else {
        if ($result == "Blocked") {
            set_response_mes(1, $admin_language['loginblocked']);
            url_redirect(DOCROOT . "admin/login/");
        } else {
            set_response_mes(-1, $admin_language['usernameorpasswordincorrect']);
            url_redirect(DOCROOT . "admin/login/");
        }
    }
}

    if (empty($username)) {
        $errors[] = "Please input your username";
    }
    if (checkUser($username) === false) {
        $errors[] = "That username does not exist in our database.";
    }
    $passCheck = checkPassword($username, $password);
    if ($passCheck === false) {
        $errors[] = "Your password is incorrect. Please try again.";
    }
}
if (!empty($errors)) {
    foreach ($errors as $error) {
        $return['error'] = true;
        $return['msg'] = $error;
    }
} else {
    $ua = getBrowser();
    $browser = $ua['name'] . ' ' . $ua['version'];
    $os = $ua['platform'];
    loginCheck($username);
    loginLog($passCheck, $browser, $os);
    $random = rand(1000000000, 9999999999.0);
    $sec = sha1(base64_encode($random));
    $_SESSION['securedid'] = $sec;
    $_SESSION['uid'] = $passCheck;
    $url = "index.php";
    $return['error'] = false;
    $return['msg'] = $url;
}
echo json_encode($return);

function loginController($action)
{
    switch ($action) {
        case 10:
            // 로그인 관련 처리 액션
            header("location:../view/MainView.php?action={$action}");
            //콘트롤러 재호출
            break;
        case 11:
            // 로그인 처리 액션
            $userID = $_REQUEST['user_id'];
            $userPW = $_REQUEST['user_pwd'];
            $resultArr = loginCheck($userID, $userPW);
            if ($resultArr['code'] == 1) {
                $_SESSION['loginID'] = $userID;
                $_SESSION['userLevel'] = $resultArr['level'];
                $action = 0;
            } else {
                if ($resultArr['code'] == -1) {
                    $action = 10;
                } else {
                    if ($resultArr['code'] == -2) {
                        $action = 10;
                    } else {
                        $action = 10;
                    }
                }
            }
            header("location:./MainCTL.php?action={$action}");
            break;
        case 12:
            // 로그아웃 처리 액션
            unset($_SESSION['loginID']);
            unset($_SESSION['userLevel']);
            session_destroy();
            $msg = "로그 아웃 처리 되었습니다.";
            $_SESSION['msg'] = $msg;
            $action = 0;
            header("location:../view/MainView.php?action={$action}");
            break;
        case 13:
            // 회원정보 입력 뷰로 디다이렉트
            header("location:../view/MainView.php?action={$action}");
            break;
        case 14:
            // 회원정보 입력 처리 액션
            $data['id'] = isset($_REQUEST['user_id']) ? $_REQUEST['user_id'] : null;
            $data['password'] = isset($_REQUEST['user_pwd']) ? $_REQUEST['user_pwd'] : null;
            $data['name'] = isset($_REQUEST['user_name']) ? $_REQUEST['user_name'] : null;
            $data['tel'] = isset($_REQUEST['user_tel']) ? $_REQUEST['user_tel'] : null;
            $result = insertMember($data);
            if ($result) {
                $msg = "회원정보를 정상적으로 입력 하였습니다.";
                //성공메시지 뷰로 리다이렉트
            } else {
                $msg = "회원정보 입력에 오류가 발생 하였습니다.";
                //다시 입력하도록 실패메시지 뷰로 리다이렉트
            }
            $_SESSION['msg'] = $msg;
            $action = 0;
            header("location:../view/MainView.php?action={$action}");
            break;
        default:
            header("location:../view/MainView.php?action={$action}");
            break;
    }
}