| Zeile 71 | Zeile 71 |
|---|
{
$mybb->cookies['loginattempts'] = 0;
}
|
{
$mybb->cookies['loginattempts'] = 0;
}
|
if($mybb->settings['failedcaptchalogincount'] > 0 && ($user['loginattempts'] > $mybb->settings['failedcaptchalogincount'] || (int)$mybb->cookies['loginattempts'] > $mybb->settings['failedcaptchalogincount']))
| if($mybb->settings['failedcaptchalogincount'] > 0 && (isset($user['loginattempts']) && $user['loginattempts'] > $mybb->settings['failedcaptchalogincount'] || (int)$mybb->cookies['loginattempts'] > $mybb->settings['failedcaptchalogincount']))
|
{
$this->captcha_verified = false;
$this->verify_captcha();
| {
$this->captcha_verified = false;
$this->verify_captcha();
|
| Zeile 128 | Zeile 128 |
|---|
{
$this->get_login_data();
|
{
$this->get_login_data();
|
if(!$this->login_data['uid'])
| if(empty($this->login_data) || !$this->login_data['uid'])
|
{
$this->invalid_combination();
return false;
| {
$this->invalid_combination();
return false;
|
| Zeile 163 | Zeile 163 |
|---|
$plugins->run_hooks('datahandler_login_verify_password_start', $args);
$user = &$this->data;
|
$plugins->run_hooks('datahandler_login_verify_password_start', $args);
$user = &$this->data;
|
$password = md5($user['password']);
| |
if(!$this->login_data['uid'] || $this->login_data['uid'] && !$this->login_data['salt'] && $strict == false)
{
$this->invalid_combination();
}
|
if(!$this->login_data['uid'] || $this->login_data['uid'] && !$this->login_data['salt'] && $strict == false)
{
$this->invalid_combination();
}
|
|
|
if($strict == true)
{
|
if($strict == true)
{
|
if(!$this->login_data['salt'])
{
// Generate a salt for this user and assume the password stored in db is a plain md5 password
$this->login_data['salt'] = generate_salt();
$this->login_data['password'] = salt_password($this->login_data['password'], $this->login_data['salt']);
$sql_array = array(
"salt" => $this->login_data['salt'],
"password" => $this->login_data['password']
);
$db->update_query("users", $sql_array, "uid = '{$this->login_data['uid']}'");
}
| |
if(!$this->login_data['loginkey'])
{
$this->login_data['loginkey'] = generate_loginkey();
| if(!$this->login_data['loginkey'])
{
$this->login_data['loginkey'] = generate_loginkey();
|
| Zeile 196 | Zeile 180 |
|---|
);
$db->update_query("users", $sql_array, "uid = '{$this->login_data['uid']}'");
|
);
$db->update_query("users", $sql_array, "uid = '{$this->login_data['uid']}'");
|
}
}
$salted_password = md5(md5($this->login_data['salt']).$password);
| }
}
|
$plugins->run_hooks('datahandler_login_verify_password_end', $args);
|
$plugins->run_hooks('datahandler_login_verify_password_end', $args);
|
if($salted_password !== $this->login_data['password'])
| if(!verify_user_password($this->login_data, $user['password']))
|
{
$this->invalid_combination(true);
return false;
| {
$this->invalid_combination(true);
return false;
|
| Zeile 228 | Zeile 210 |
|---|
$login_text = '';
if($show_login_attempts)
{
|
$login_text = '';
if($show_login_attempts)
{
|
if($mybb->settings['failedlogincount'] != 0 && $mybb->settings['failedlogintext'] == 1)
| if($mybb->settings['failedlogincount'] != 0 && $mybb->settings['failedlogintext'] == 1 && $this->login_data['uid'] != 0)
|
{
|
{
|
$logins = login_attempt_check(false) + 1;
| $logins = login_attempt_check($this->login_data['uid'], false) + 1;
|
$login_text = $lang->sprintf($lang->failed_login_again, $mybb->settings['failedlogincount'] - $logins);
}
}
| $login_text = $lang->sprintf($lang->failed_login_again, $mybb->settings['failedlogincount'] - $logins);
}
}
|
| Zeile 256 | Zeile 238 |
|---|
$user = &$this->data;
$options = array(
|
$user = &$this->data;
$options = array(
|
'fields' => array('uid', 'username', 'password', 'salt', 'loginkey', 'coppauser', 'usergroup', 'loginattempts'),
| 'fields' => '*',
|
'username_method' => (int)$settings['username_method']
|
'username_method' => (int)$settings['username_method']
|
);
| );
|
if($this->username_method !== null)
{
$options['username_method'] = (int)$this->username_method;
| if($this->username_method !== null)
{
$options['username_method'] = (int)$this->username_method;
|
| Zeile 319 | Zeile 301 |
|---|
// Login to MyBB
my_setcookie('loginattempts', 1);
my_setcookie("sid", $session->sid, -1, true);
|
// Login to MyBB
my_setcookie('loginattempts', 1);
my_setcookie("sid", $session->sid, -1, true);
|
$ip_address = $db->escape_binary($session->packedip);
$db->delete_query("sessions", "ip = {$ip_address} AND sid != '{$session->sid}'");
| |
$newsession = array(
"uid" => $user['uid'],
);
|
$newsession = array(
"uid" => $user['uid'],
);
|
|
|
$db->update_query("sessions", $newsession, "sid = '{$session->sid}'");
$db->update_query("users", array("loginattempts" => 1), "uid = '{$user['uid']}'");
| $db->update_query("sessions", $newsession, "sid = '{$session->sid}'");
$db->update_query("users", array("loginattempts" => 1), "uid = '{$user['uid']}'");
|
| Zeile 336 | Zeile 315 |
|---|
$remember = -1;
}
|
$remember = -1;
}
|
my_setcookie("mybbuser", $user['uid']."_".$user['loginkey'], $remember, true);
| my_setcookie("mybbuser", $user['uid']."_".$user['loginkey'], $remember, true, "lax");
|
if($this->captcha !== false)
{
$this->captcha->invalidate_captcha();
| if($this->captcha !== false)
{
$this->captcha->invalidate_captcha();
|