PHP COOKIE LOGIN SYSTEM, simple & secureEdit

Very simple and secure php login script which allows users to log on your website.

Download here: php.simple.cookie.login.system.simple.secure.rar.


function isUlogd($name) {
if(isset($_COOKIE[$name])) { if(empty($_COOKIE[$name])) die(H.'cookie empty'); $d = explode('|', $_COOKIE[$name]); }

if(empty($d[0]) or empty($d[1])) { $u['is_logd'] = false; return $u; } elseif(!empty($d[0])) {
$q = q('SELECT * FROM `'.PRFX.'u` WHERE mail = "'.$d[0].'" AND p = "'.$d[1].'" AND act_lnk = "" LIMIT 1');
if(n_r($q) == 0) $u['is_logd'] = false; else { $u = f($q); $u['is_logd'] = true; }
} else $u['is_logd'] = false;

return $u;
}

function perm($status,$m,$action='') {
$q = q('SELECT * FROM `'.PRFX.'access` WHERE lvl = "'.$status.'" LIMIT 1'); if(n_r($q) == 0) die(H.'no usr'); $r = f($q);
if($r[$m] == 1) return true; else return false;
}
?>


class login extends PAGE {
function i() {
$GET = substr($_GET[1],5); $this->tpl->assign('GET',$GET); $_POST['mail'] = strtolower($_POST['mail']);
$q = q('SELECT id,q FROM `'.PRFX.'faq'.LG.'` WHERE id = 4 LIMIT 1'); if(n_r($q) == 0) die(H.__ID.'faq:4'); $faq = f($q); $faq['uri'] = _url(pl_($faq['q'])); $this->tpl->assign('faq',$faq);

if(isset($_POST[HIDE])) {
$q = q('SELECT id FROM `'.PRFX.'u` WHERE mail = "'.$_POST['mail'].'" AND p = "'.encrypt($_POST['pass']).'" AND act_lnk = "" AND ban = "" LIMIT 1');
if(n_r($q) == 0) { $e[0] = $this->_['badMailOrPass'].NL;
$q = q('SELECT id FROM `'.PRFX.'u` WHERE mail = "'.$_POST['mail'].'" AND act_lnk = "" LIMIT 1'); if(n_r($q) > 0) {
$r = f($q); q('INSERT INTO `'.PRFX.'logd` (id_u,date,ip,logd) VALUES ("'.$r['id'].'","'.DATETIME.'","'.getClientIp().'","0")');
}
} $this->tpl->assign('e',$e);

if(empty($e)) {
$q = q('SELECT id,last_logged FROM `'.PRFX.'u` WHERE mail = "'.$_POST['mail'].'" AND p = "'.encrypt($_POST['pass']).'" AND act_lnk = "" LIMIT 1'); $r = f($q);
q('UPDATE `'.PRFX.'u` SET last_logged = "'.DATETIME.'" WHERE id = '.$r['id'].' LIMIT 1');
q('INSERT INTO `'.PRFX.'logd` (id_u,date,ip,logd) VALUES ("'.$r['id'].'","'.DATETIME.'","'.getClientIp().'","1")');
$q = q('SELECT id,id_ FROM `'.PRFX.'ph_topics'.LG.'` WHERE updated BETWEEN "'.$r['last_logged'].'" AND "'.DATETIME.'" ORDER BY updated DESC LIMIT 100'); if(n_r($q) > 0) while($_r = f($q)) {
$q2 = q('SELECT id_u FROM `'.PRFX.'ph_unread'.LG.'` WHERE id_u = "'.$_r['id'].'" AND id_ = "'.$_r['id'].'" LIMIT 1');
if(n_r($q2) == 0) q('INSERT INTO `'.PRFX.'ph_unread'.LG.'` (id_u,id_,id_f) VALUES ("'.$r['id'].'","'.$_r['id'].'","'.$_r['id_'].'")');
}

if(!empty($_POST['r'])) { if(!setcookie(PG_T2,$_POST['mail'].'|'.encrypt($_POST['pass']),C_EXP,'/')) die(_ENG.'COOKIE err'); }
else if(!setcookie(PG_T2,$_POST['mail'].'|'.encrypt($_POST['pass']),0,'/')) die(_ENG.'COOKIE err2');
$GET = substr($_GET[1],5); $GET = str_replace('|','/',$GET); if(empty($GET)) $red = URL.'my_account'; else $red = $GET;

header(LOC.$red); exit;
} if(!empty($_POST['r'])) $this->tpl->assign('r',$_POST['r']);
} $this->_t = $this->_['t']; $this->_c = $this->tpl->fetch(PG_TPL.$this->md.INX.HTML); $this->run();
}
} $n = 'login'; $C = new $n($n,'membership'); $C->mbl(false,true,''); $C->i();

?>

Use it freely, thank you.
I'm building a new much more sophisticated system, it would be available in 3 months time. Edit

Comment · 1  · 1 year ago