Okej då är jag med.
Det jag inte fattar riktigt är, detta scriptet jag laddat ner innehåller bara massa php kodning och inget formulär.
Det ser ut som följande:
login.php
<?php
require_once 'sys.class.php';
$login = new login;
$login->SetUsername("oran");
$login->SetPassword("dsfsdfsdfg");
$error = $login->CheckLogin();
echo $error;
session_start();
if(isset($_SESSION['username']))
{
echo "user {$_SESSION['username']} loged in ";
}
else
{
header('location: yourloginpage.com');
}
?>
sys.class.php
<?php
// author oran - email: oranm23@gmail.com
class Settings
{
protected $dbh;
function __construct()
{
$dsn = 'mysql:dbname=loginsys;host=127.0.0.1';
$user = 'userforDB';
$password = 'passwordfordb';
try {
$this->dbh = new PDO($dsn, $user, $password);
} catch (PDOException $e) {
echo 'Connection failed: ' . $e->getMessage();
}
}
}
class Registration extends Settings
{
protected $Username;
protected $Password;
protected $Email;
/**
* @param $username
* @return insert to private var
*/
function SetUsername($username)
{
return $this->Username = mysql_real_escape_string($username);
}
/**
* @return username
*/
function GetUsername()
{
return $this->Username;
}
/**
* @param $password
* @return isnert to private password var
*/
function SetPassword($password)
{
return $this->Password = sha1(mysql_real_escape_string($password));
}
/**
* @param $Email
* @return insert to private var
*/
function SetEmail($email)
{
return $this->Email = mysql_real_escape_string($email);
}
/**
* @return email
*/
function GetEmail()
{
return $this->Email;
}
/**
* @return array of erros if any
*/
function Validate()
{
$errors = array();
// username must be at list 3 charecters
if((strlen($this->Username)) < 3 )
{
$errors[] = "Username must be at list 3 characters";
}
// end username check
// valid mail
if(false === filter_var($this->Email, FILTER_VALIDATE_EMAIL))
{
$errors[] = "Email not valid";
}
if((strlen($this->Password)) < 5 )
{
$errors[] = "Password must be at list 5 characters";
}
//
return $errors;
}
/**
* @return return array of errors if false
* return true if o.k
*/
function InsertUserToSql()
{
$error = $this->Validate();
if(count($error) > 0 )
{
return $error;
}
else
{
$stmt = $this->dbh->prepare("INSERT INTO users (username, password, email, regdate) VALUES (:username,
:password, :email, :regdate)");
$stmt->bindParam(':username', $this->Username);
$stmt->bindParam(':password', $this->Password);
$stmt->bindParam(':email', $this->Email);
$stmt->bindParam(':regdate', time());
$stmt->execute();
$arr = array();
$arr = $stmt->errorInfo();
return $arr;
}
}
}
class login extends Registration
{
/**
* @return if falis return false if ok return session
*/
function CheckLogin()
{
$stmt = $this->dbh->prepare("SELECT username, password FROM users
WHERE username = :username AND password = :password
");
$stmt->bindParam(':username', $this->Username);
$stmt->bindParam(':password', $this->Password);
$stmt->execute();
if($stmt->rowCount() > 0 )
{
$_SESSION['username'] = $this->Username;
}
else
{
return false;
}
}
}
class ChangeSetting extends Registration
{
/**
* @return return true on succsess
*/
function ChangeMail()
{
$EmailPattren = '/^([a-z0-9])(([-a-z0-9._])*([a-z0-9]))*\@([a-z0-9])' .
'(([a-z0-9-])*([a-z0-9]))+' . '(\.([a-z0-9])([-a-z0-9_-])?([a-z0-9])+)+$/i';
$IsEmailValid = preg_match($EmailPattren, $this->Email);
if($IsEmailValid > 0)
{
$stmt = $this->dbh->prepare("UPDATE users
SET email = :email WHERE username = :username
");
$stmt->bindParam(':email', $this->Email);
$stmt->bindParam(':username', $_SESSION['username']);
$stmt->execute();
return true;
}
else
{
return false;
}
}
protected $oldpass;
function SetOldPass($oldpass)
{
return $this->oldpass = sha1($oldpass);
}
function ChangePass()
{
$stmt = $this->dbh->prepare("UPDATE users
SET password = :password WHERE username = :username AND password = :oldpass
");
$stmt->bindParam(':password', $this->Password);
$stmt->bindParam(':oldpass', $this->oldpass);
$stmt->bindParam(':username', $_SESSION['username']);
$stmt->execute();
}
function SendMailForNewPass()
{
$voucher = rand() . rand() . rand();
$stmt = $this->dbh->prepare("UPDATE users
SET CpassReqDate = :CpassReqDate, voucher = :voucher WHERE email = :email
");
$stmt->bindParam(':CpassReqDate', time());
$stmt->bindParam(':email', $this->Email);
$stmt->bindParam(':voucher', $voucher);
$stmt->execute();
mail($this->Email,"new pass ","
this is link for change pass : <a href='localhost/loginsys/sample.php/?newpassv=$voucher>link</a>'
");
}
function SetNewPass()
{
if(!empty($_GET['newpassv']))
{
$voucher = $_GET['newpassv'];
$d = time() - 1800;
$stmt = $this->dbh->prepare("SELECT CpassReqDate, email FROM users WHERE
voucher = :voucher
");
$stmt->bindParam(':voucher', $voucher);
$stmt->execute();
$result = $stmt->fetchAll(PDO::FETCH_ASSOC);
$TimeLimit = $result[0]['CpassReqDate'] - time();
if($TimeLimit > 1800)
{
echo "Voucher Experid";
}
else
{
$stmt = $this->dbh->prepare("UPDATE users
SET password = :password WHERE email = :email
");
$email = $result[0]['email'];
$pass = rand() . rand();
;
$stmt->bindParam(':password', sha1($pass));
$stmt->bindParam(':email', $email);
$stmt->execute();
mail($email,"your new pass", "the new pass is<b>: $pass</b>");
}
}
}
function Logout()
{
session_start();
unset($_SESSION['username']);
}
}
?>
logout.php
<?php
require_once 'sys.class.php';
$logout = new ChangeSetting;
$logout->Logout();
?>
Skall man själv fixa formuläret då är tanken ?
