phpBB.de

Code: Alles auswählen

<?php
include ("includes/header.php");
define('IN_PHPBB', true);
$phpbb_root_path = 'forum/'; // Passe hier den Pfad zu deinem Forum an
$phpEx = substr(strrchr(__FILE__, '.'), 1);
include($phpbb_root_path . 'common.' . $phpEx);

// Verschlüsseltes Passwort aus der DB holen
$sql = "SELECT user_password FROM phpbb_users WHERE username = '".$_POST['username']."'";
$result = $db->sql_query_limit($sql, 1);
$row = $db->sql_fetchrow($result);
$db->sql_freeresult($result);

if (!$row['user_pass_convert'] && phpbb_check_hash($_POST['passwort'], $row['user_password']))

{

   // Alles richtig, also irgendetwas tun, um Eingeloggt-Status in Session zu speichern
   $_SESSION['user'] = $_POST['username'];


   echo '<h2>Willkommen '.$_SESSION['user'].'</h2>
         <div class="good">Login erfolgreich.</div>';

}
?>
<form action="moep.php" method="post">
Username:<br><input type="text" name="username"><br>
Passwort:<br><input type="password" name="passwort"><br>
<input type="submit">
<input type="reset">
</form>

Code: Alles auswählen

$username = request_var('username', '', true);

Code: Alles auswählen

$username_clean = utf8_clean_string($username);
$sql = "SELECT user_password FROM phpbb_users WHERE username = ' . $username_clean;