[PHP] IP.Board auth

[Josh]

Simple IP.Board auth. I got bored last night and decided to see if I still remembered some php...


<?php
include 'conf_global.php';

if ($_GET["r"] AND $_GET["u"] AND $_GET["p"]){


$dbusername = $INFO['sql_user'];
$dbpassword = $INFO['sql_pass'];
$hostname = $INFO['sql_host'];
$database = $INFO['sql_database'];
$r = $_GET["r"];
$username = mysql_real_escape_string($_GET["u"]);
$password = $_GET["p"];

$show_groups = false;
//Will list groups and their ID number. Keep on false usually. Just helpful for writing the rank checking part of the code.




$dbhandle = mysql_connect($hostname, $dbusername, $dbpassword)
or die("Unable to connect to MySQL");

$selected = mysql_select_db($database,$dbhandle)
or die("Could not select database");
$result = mysql_query("SELECT * FROM `forum_members` WHERE name = '$username'");
$row = mysql_fetch_array($result);


if (empty($row)) {

echo "<error>Invalid username</error>";

}
else{
$getsalt = $row{'members_pass_salt'};

$hash = md5(md5($row{'members_pass_salt'}). md5($password));
if($hash != $row['members_pass_hash']){

echo "<error>Invalid Password</error>";
}
else{
$get_rank_id = $row{'member_group_id'};
$ranks = array(-1 => '1', 0 => '5', 1 => '3', 2 => '6', 3 => '4');
//List of all rank ids. Current ones are the default groups for IP.Board
//Numbers in quotes are the IDs of the group.
//1 = Validating
//5 = Banned
//3 = Members
//4 = Admins
//6 = Mods
//First number ranks those groups from least to greatest. 0 and below = Access to nothing.
// There are others ways of doing this, but this was easy.

$rank = array_search($get_rank_id, $ranks);

if($rank >= $r){
echo "Posts: <posts>".$row{'posts'}."</posts>"." <rank>".$row{'member_group_id'}."</rank>";
echo "<error>Success</error>";
}else{
echo "<error>Rank not high enough</error>";
}




}

}



if ($show_groups) {
echo "<br><br><table border='1'>
<tr>
<th>ID</th>
<th>Group Name</th>
</tr>";


$result = mysql_query("SELECT * FROM `forum_groups`");
while($row = mysql_fetch_array($result))
{
echo "<tr>";
echo "<td>" . $row['g_id'] . "</td>";
echo "<td>" . $row['g_title'] . "</td>";
echo "</tr>";
}
echo "</table>";


}

mysql_close($dbhandle);
} else{
echo "...You forgot something";
}
?>