Finde leider die mssql php's nicht mehr aber hier sind die Sqlsrv php's.
Aber achtung diese Login.php und token.php ist für unverschlüsselte pw's für verschlüsselte(md+salt) müssen die php's ein klein wenig um geschrieben werden,
verwende diese nur für einen test Server daher war mir dass nicht wichtig!
Login.php
<?php
$user = sql_clean($_GET['Username']);
$passhash = sql_clean($_GET['Password']);
$serverName = "XXX\SQLEXPRESS";
$connectionInfo = array( "Database"=>"OdinAccounts", "UID"=>"sa", "PWD"=>"Password");
$conn = sqlsrv_connect( $serverName, $connectionInfo);
$exec = sqlsrv_query($conn, "SELECT sUserPass FROM tAccounts where sUsername = '$user'");
if($exec)
{
$AccountData = sqlsrv_fetch_array($exec);
$PlaintxtPass = $AccountData['sUserPass'];
if (MD5($PlaintxtPass) == $passhash)
{
die('OK');
}
else
{
die('Wrong Password.');
}
}
else
{
die('Query Failed');
}
sqlsrv_close();
function sql_clean($str)
{
$search=array("\\","\0","\n","\r","\x1a","'",'"');
$replace=array("","","","","","","");
return str_replace($search,$replace,$str);
}
?>
Token.php
<?php
$user = sql_clean($_GET['Username']);
$passhash = sql_clean($_GET['Password']);
function rand_string() {
$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVW XYZ0123456789";
$size = strlen($chars);
for($i = 0; $i < 32; $i++) {
$str .= $chars[rand(0, $size - 1)]."".rand(0,99);
}
return $str;
}
$serverName = "XXX\SQLEXPRESS";
$connectionInfo = array( "Database"=>"OdinAccounts", "UID"=>"sa", "PWD"=>"Password");
$conn = sqlsrv_connect( $serverName, $connectionInfo);
$exec = sqlsrv_query($conn, "SELECT [sUserPass] FROM [dbo].[tAccounts] WHERE [sUsername] = '$user'");
$datum=Date("Y-m-d H:i:s");
$exec1 = sqlsrv_query($conn, "SELECT [nEMID] FROM [dbo].[tAccounts] WHERE [sUsername] = '".$user."';");
$EMID3 = sqlsrv_fetch_array($exec1);
$ID3 = $EMID3['nEMID'];
sqlsrv_query($conn, "DELETE FROM tTokens where nEMID = '$ID3'");
sqlsrv_query($conn, "INSERT INTO tTokens (nEMID, sToken, dDate) VALUES ('$ID3', '".substr(rand_string(), 0, 50)."', '$datum')");
$exec2 = sqlsrv_query($conn, "SELECT sToken FROM tTokens where nEMID = '$ID3'");
if($exec)
{
$AccountData = sqlsrv_fetch_array($exec);
$PlaintxtPass = $AccountData['sUserPass'];
$EMID2 = sqlsrv_fetch_array($exec2);
$ID2 = $EMID2['sToken'];
if (MD5($PlaintxtPass) == $passhash)
{
echo ''.$ID2.'';
}
else
{
die('Wrong Password.');
}
}
else
{
die('Query Failed');
}
sqlsrv_close();
function sql_clean($str)
{
$search=array("\\","\0","\n","\r","\x1a","'",'"');
$replace=array("","","","","","","");
return str_replace($search,$replace,$str);
}
?>
Have fun :) über ein Thanks würde ich mich freuen :) ^^