SetTitle("Программа для операторов технического осмотра"); include($_SERVER["DOCUMENT_ROOT"]."/bitcms/lib/captcha/simple-php-captcha.php"); //print_r($_SESSION['captcha']); ?> LogOut(); header("Location: /login.php"); exit(); } } else { if($USER->IsLogIn()) { header("Location: /system/"); exit(); } } $div_err = ''; if(isset($_POST['submit'])) { if($_POST['YES_LIC']!=="on") { $div_err='
'; $_SESSION['captcha'] = simple_php_captcha(); } elseif($_SESSION['bad_pass']>3 and isset($_POST['captcha']) and $_POST['captcha']!==$_SESSION['captcha']['code']) { $div_err='
'; $_SESSION['captcha'] = simple_php_captcha(); } else { $res = $DB->query("SELECT access_is_allowed, user_id, user_login, user_password FROM b_users WHERE user_login='".$_POST['login']."'"); //print_r($res); if($res == false) { unset($data);//echo 'hern'; } else { $data = $res->fetch_assoc(); } if (isset($data)) { $hash = md5(md5($_POST['password'])); if($data['user_password'] === $hash and $data['access_is_allowed'] == 1) { ini_set ("session.use_trans_sid", true); session_start(); //print_r($data); //пишем логин и хэшированный пароль в cookie, также создаём переменную сессии setcookie ("login", $data['user_login'], time() + 50000); setcookie ("password", md5($data['user_login'].$data['user_password']), time() + 50000); $_SESSION['user_id'] = $data['user_id']; //записываем в сессию id пользователя $user_id = $_SESSION['user_id']; //print_r($user_id ); header("Location: /system/"); exit(); } else { if($data['access_is_allowed'] == 0) { $div_err='
Ошибки авторизации:
'; $_SESSION['captcha'] = simple_php_captcha(); } else { $div_err='
Ошибки авторизации:
'; $_SESSION['captcha'] = simple_php_captcha(); $_SESSION['bad_pass'] = $_SESSION['bad_pass'] + 1; } } } else { $div_err='
Ошибки авторизации:
'; $_SESSION['captcha'] = simple_php_captcha(); $_SESSION['bad_pass'] = $_SESSION['bad_pass'] + 1; } } } else { $_SESSION['captcha'] = simple_php_captcha(); } ?>