Moderator: Integra Moderator
// // Allow people to reach login page if // board is shut down // define("IN_LOGIN", true); define('IN_PHPBB', true); $phpbb_root_path = './'; include($phpbb_root_path . 'extension.inc'); include($phpbb_root_path . 'common.'.$phpEx); // // Set page ID for session management // $userdata = session_pagestart($user_ip, PAGE_LOGIN); init_userprefs($userdata); // // End session management // #======================================================================= | #==== Start] [http://phpbb-amod.com] === | #==== End: ==== phpBB Security ========================================= | #======================================================================= | // session id check if (!empty($HTTP_POST_VARS['sid']) || !empty($HTTP_GET_VARS['sid'])) { $sid = (!empty($HTTP_POST_VARS['sid'])) ? $HTTP_POST_VARS['sid'] : $HTTP_GET_VARS['sid']; } else { $sid = ''; } if( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) || isset($HTTP_POST_VARS['logout']) || isset($HTTP_GET_VARS['logout']) ) { if( ( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) ) && (!$userdata['session_logged_in'] || isset($HTTP_POST_VARS['admin'])) ) { $username = isset($HTTP_POST_VARS['username']) ? phpbb_clean_username($HTTP_POST_VARS['username']) : ''; $password = isset($HTTP_POST_VARS['password']) ? $HTTP_POST_VARS['password'] : ''; $sql = "SELECT user_id, username, user_password, user_active, user_level, user_rank, user_actviate_date, user_expire_date, user_regdate FROM " . USERS_TABLE . " WHERE username = '" . str_replace("\'", "''", $username) . "'"; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Error in obtaining userdata', '', __LINE__, __FILE__, $sql); } if( $row = $db->sql_fetchrow($result) ) { #======================================================================= | #==== Start: == phpBB Security ========================================= | #==== v1.0.2 =========================================================== | #==== if (md5($password) != $row['user_password']) phpBBSecurity_InvalidLogin($row['user_id']); phpBBSecurity_CheckTries($row['user_id']); #==== #==== Author: aUsTiN [austin@phpbb-amod.com] [http://phpbb-amod.com] === | #==== End: ==== phpBB Security ========================================= | #======================================================================= | if( $row['user_level'] != ADMIN && $board_config['board_disable'] ) { redirect(append_sid("portal.$phpEx", true)); } else { if( md5($password) == $row['user_password'] && $row['user_active'] ) { lw_check_membership($row); $autologin = ( isset($HTTP_POST_VARS['autologin']) ) ? TRUE : 0; $admin = (isset($HTTP_POST_VARS['admin'])) ? 1 : 0; $session_id = session_begin($row['user_id'], $user_ip, PAGE_INDEX, FALSE, $autologin, $admin); if( $session_id ) { #======================================================================= | #==== Start: == phpBB Security ========================================= | #==== v1.0.2 =========================================================== | #==== phpBBSecurity_ResetTries($row['user_id']); #==== #==== Author: aUsTiN [austin@phpbb-amod.com] [http://phpbb-amod.com] === | #==== End: ==== phpBB Security ========================================= | #======================================================================= | $url = ( !empty($HTTP_POST_VARS['redirect']) ) ? str_replace('&', '&', htmlspecialchars($HTTP_POST_VARS['redirect'])) : "portal.$phpEx"; redirect(append_sid($url, true)); } else { message_die(CRITICAL_ERROR, "Couldn't start session : login", "", __LINE__, __FILE__); } } else { $redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ? str_replace('&', '&', htmlspecialchars($HTTP_POST_VARS['redirect'])) : ''; $redirect = str_replace('?', '&', $redirect); if (strstr(urldecode($redirect), "n") || strstr(urldecode($redirect), "r")) { message_die(GENERAL_ERROR, 'Tried to redirect to potentially insecure url.'); } $template->assign_vars(array( 'META' => "<meta>") ); $message = $lang['Error_login'] . '<br><br>' . sprintf($lang['Click_return_login'], "<a>", '</a>') . '<br><br>' . sprintf($lang['Click_return_index'], '<a>', '</a>'); message_die(GENERAL_MESSAGE, $message); } } } else { $redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ? str_replace('&', '&', htmlspecialchars($HTTP_POST_VARS['redirect'])) : ""; $redirect = str_replace("?", "&", $redirect); if (strstr(urldecode($redirect), "n") || strstr(urldecode($redirect), "r")) { message_die(GENERAL_ERROR, 'Tried to redirect to potentially insecure url.'); } $template->assign_vars(array( 'META' => "<meta>") ); $message = $lang['Error_login'] . '<br><br>' . sprintf($lang['Click_return_login'], "<a>", '</a>') . '<br><br>' . sprintf($lang['Click_return_index'], '<a>', '</a>'); message_die(GENERAL_MESSAGE, $message); } } else if( ( isset($HTTP_GET_VARS['logout']) || isset($HTTP_POST_VARS['logout']) ) && $userdata['session_logged_in'] ) { if( $userdata['session_logged_in'] ) { session_end($userdata['session_id'], $userdata['user_id']); } if (!empty($HTTP_POST_VARS['redirect']) || !empty($HTTP_GET_VARS['redirect'])) { $url = (!empty($HTTP_POST_VARS['redirect'])) ? htmlspecialchars($HTTP_POST_VARS['redirect']) : htmlspecialchars($HTTP_GET_VARS['redirect']); $url = str_replace('&', '&', $url); redirect(append_sid($url, true)); } else { redirect(append_sid("portal.$phpEx", true)); } } else { $url = ( !empty($HTTP_POST_VARS['redirect']) ) ? str_replace('&', '&', htmlspecialchars($HTTP_POST_VARS['redirect'])) : "portal.$phpEx"; redirect(append_sid($url, true)); } } else { // // Do a full login page dohickey if // user not already logged in // include_once($phpbb_root_path . 'includes/functions_jr_admin.' . $phpEx); $jr_admin_userdata = jr_admin_get_user_info($userdata['user_id']); if( !$userdata['session_logged_in'] || (isset($HTTP_GET_VARS['admin']) && $userdata['session_logged_in'] && (!empty($jr_admin_userdata['user_jr_admin']) || $userdata['user_level'] == ADMIN))) { $page_title = $lang['Login']; include($phpbb_root_path . 'includes/page_header.'.$phpEx); $template->set_filenames(array( 'body' => $body_tpl . 'login_body.tpl') ); if( isset($HTTP_POST_VARS['redirect']) || isset($HTTP_GET_VARS['redirect']) ) { $forward_to = $HTTP_SERVER_VARS['QUERY_STRING']; if( preg_match("/^redirect=([a-z0-9.#/?&=+-_]+)/si", $forward_to, $forward_matches) ) { $forward_to = ( !empty($forward_matches[3]) ) ? $forward_matches[3] : $forward_matches[1]; $forward_match = preg_split('[?|&]', $forward_to); if(count($forward_match) > 1) { $forward_page = ''; for($i = 1; $i <count>assign_vars(array( 'USERNAME' => $username, 'L_ENTER_PASSWORD' => (isset($HTTP_GET_VARS['admin'])) ? $lang['Admin_reauthenticate'] : $lang['Enter_password'], 'L_SEND_PASSWORD' => $lang['Forgotten_password'], 'U_SEND_PASSWORD' => append_sid("profile.$phpEx?mode=sendpassword"), 'S_HIDDEN_FIELDS' => $s_hidden_fields) ); $template->pparse('body'); include($phpbb_root_path . 'includes/page_tail.'.$phpEx); } else { redirect(append_sid("portal.$phpEx", true)); } } ?>
{QBARS}<a></a><table><tr><td><table><tr><td><a><img></a></td><BEGIN><td><div>{BANNER_0_IMG}</div></td><END><td> </td></tr></table>{QMENUS}<Added><table> <BEGIN> <tr> <td><span> {L_LW_EXPIRE_REMINDER}</span></td> </tr> <END></table><END>
General Error
Could not read list informations
DEBUG MODE
SQL Error : 1064 You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND pa.pic_cat_id = 0)' at line 3
SELECT pa.*, (pa.pic_id) AS _list_key, (pa.pic_title) AS _list_txt, (pa.pic_id) AS _list_img
FROM (phpbb_album AS pa)
WHERE (pa.pic_user_id = AND pa.pic_cat_id = 0)
Line : 511
File : def_userfuncs.php
Registered users: App360MonitorBot, Bing [Bot], Google [Bot]