[PHP] Login Failed?

03/07/2014 17:38 "Sh4Xx"#1
Hallo epvp,

Ich habe glaube ich irg wo in meinem login Script einen Fehler:

Code:
<?PHP
  if(isset($_GET['do']) && $_GET['do']=="aktivieren" && isset($_GET['hash']) && !empty($_GET['hash'])) {
    if(strlen($_GET['hash'])==32 && $_GET['hash']!=1 && checkAnum($_GET['hash'])) {
      $cmdHash = "SELECT id,web_aktiviert FROM account.account WHERE web_aktiviert='".$_GET['hash']."' AND web_aktiviert!='1' LIMIT 1;";
      $qryHash = mysql_query($cmdHash,$sqlServ);
      
      if(mysql_num_rows($qryHash)) {
      
        $getData = mysql_fetch_object($qryHash);
        $userUpdate = "UPDATE account.account SET aktiv='1',web_aktiviert='1',status='OK' WHERE id='".$getdata->id."' LIMIT 1;";
        $updateQry = mysql_query($userUpdate,$sqlServ);
        
        if($updateQry) {
          echo'<p class="meldung">Váš účet bol úspešne aktivovaný.</p>';
          echo'<meta http-equiv="refresh" content="1; URL=index.php?s=login"> ';
        }
        else {
          echo'<p class="meldung">Otázka zlyhal. Prosím, obrátte sa na správcu!</p>';
        }
        
      }
      else {
        echo'<p class="meldung">Nelze nalézt odpovídající záznam. Aktivace se nezdařila.</p>';
      }
      
    }
    else {
      echo'<p class="meldung">Žiadny platný hash!</p>';
    }
  }

  if(!empty($_SESSION['user_id'])) 
  {
    echo'';
    echo'';
    echo'';
    if($_SESSION['user_admin']>0) {
      echo'';
    }
    if($_SESSION['user_admin']>=0) {
      echo'';
     
    }
$sqlArray = @mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM ".SQL_HP_DB.".tickets WHERE status >= '1' AND user_id = '".$_SESSION["user_id"]."'"));
	
	$sqlAcc = "SELECT account.social_id AS loeschcode,name_checked AS warn,status AS status, safebox.password AS lagerpw,create_time AS create_time,id AS id,email AS email
    FROM account.account 
    LEFT JOIN player.safebox 
    ON account.id=safebox.account_id 
    WHERE account.id='".$_SESSION['user_id']."'";
	
    echo'';
    echo'';
    
    $cmdStats = "SELECT SUM( player.playtime ) AS ges_spielzeit, COUNT( * ) AS ges_chars, player_index.empire
    FROM player.player
    INNER JOIN player.player_index ON player_index.id = player.account_id
    WHERE player.account_id = '".$_SESSION['user_id']."'
    LIMIT 1";
    
    $qryStats = mysql_query($cmdStats,$sqlServ);
    $getStats = mysql_fetch_object($qryStats);
    
   
	
	$sqlAcc = "SELECT email AS email,create_time AS create_time, last_play AS last_play, silver_expire AS exp
    FROM account.account 
    LEFT JOIN player.safebox 
    ON account.id=safebox.account_id 
    WHERE account.id='".$_SESSION['user_id']."'";
	
	$qryAcc = mysql_query($sqlAcc) or die(mysql_error());
    $getAcc = mysql_fetch_object($qryAcc);
	
    function CenzuraEmailu($getAcc){

	list($predek, $zadek) = split('[@]', $getAcc->email);
	$predek = str_replace($predek, "****", $predek);
	$emailpo = $predek."@".$zadek;
	return $emailpo;
	}
    if(empty($getStats->ges_spielzeit)) $getStats->ges_spielzeit = '0';

 echo'   <!-- center column -->
<div class="col-2">
    <div class="content content-last">
        <div class="content-bg">
            <div class="content-bg-bottom">

                <h2>Hesabınız</h2>
                <div class="administration-inner-content">
                    <div class="input-data-box">
                    <h4>Hesap Bilgileri</h4>
                        <ul>
                            <li>Account Name:: '.$_SESSION['user_name'].'</li>
                            <li>E-Posta:<br>'.$_SESSION['user_email'].'</li>
 <li>Kayıt Tarihi:<br>'.$_SESSION['create_time'].'</li>
'; 
         


$datum = @date("Y-m-d H:i:s", time());
		$date_e = @strtotime($getAcc->exp);
		$date_d = @strtotime($datum);
		if($date_d = mysql_real_escape_string($date_e))
		{

	   echo'
	    <li>Premium Süresi : <br><font color="green">('.$getAcc->exp.')</font>
	</li>';
 				 echo' <li>Online Süresi:'.$getStats->ges_spielzeit.' Dakika</li>
   ';
	
		}
		else
		{
		echo'
	';
	  }
      echo'';
    $sqlAcc = "SELECT account.social_id AS loeschcode,name_checked AS warn,status AS status, safebox.password AS lagerpw,create_time AS create_time,id AS id
    FROM account.account 
    LEFT JOIN player.safebox 
    ON account.id=safebox.account_id 
    WHERE account.id='".$_SESSION['user_id']."'";

    $qryAcc = mysql_query($sqlAcc) or die(mysql_error());
    $getAcc = mysql_fetch_object($qryAcc);
    
    if(empty($getAcc->lagerpw)) $getAcc->lagerpw = '000000';
      
      echo'                                                         
<li>Aldığın Uyarılar:'.$getAcc->warn.'</li>
<li>Ejder Paran : '.$_SESSION['user_coins'].' <a href="index.php?s=hesap_no" class="load-link">(Doldur)</a></li>
                                
<li>Ejder Markan : '.$_SESSION['user_jcoins'].' </li>
                                                                                </ul>
                                                                        <br />
';

if($_SESSION['user_admin']==9){
echo'<div class="administration-box"><a href="index.php?s=admin" class="btn">Yönetici</a><p>Admin Paneli.</div>';
}else{
}

echo'

			<div class="administration-box"><a href="index.php?s=hesap_no" class="btn">EP Yükle</a><p>Hesabınıza EP yükleyin.</div>
';

  
echo'
                        <div class="administration-box"><a href="index.php?s=charaktere" class="btn">Karakterler</a><p>Karakter Listesi.</p></div>
                        <div class="administration-box"><a href="index.php?s=passwort" class="btn">Passwort</a><p>Passwort Fehlerhaft.</p></div>
                        <div class="administration-box"><a href="index.php?s=mail" class="btn">E-Posta</a><p>E-Mail Adresse Fehlerhaft.</p></div>
                        <div class="administration-box"><a href="index.php?s=depo" class="btn">Depocu</a><p>Depo Passwortsi iste.</p></div>
                        <div class="administration-box"><a href="index.php?s=karaktersilme" class="btn">Kodu Görüntüle</a><p>Karakter Silme Kodu.</p></div>
                        <div class="administration-box"><a href="index.php?s=nickdegis" class="btn">Nick</a><p>Oyuncu adı Fehlerhaft.</p></div>
                        <div class="administration-box"><a href="index.php?s=bug" class="btn">Bug</a><p>Karakterini Bugdan Çıkar.</p></div>
                        <div class="administration-box"><a href="index.php?s=spenden" class="btn">Bildirim</a><p>Ödeme bildirimi Yap.</p></div>
			<div class="administration-box"><a href="index.php?s=dondur" class="btn">Dondur</a><p>Hesabı Dondur.</p></div>
			
			

<div class="box-foot"></div>
 
                                           
                 </div>  </div>
             
     </div>   </div>  </div>  </div>';
    
    echo'';
  }
  else     
  {
  ?>

	          <div id="register" class="col-2">
    <div class="content content-last">
        <div class="content-bg">
            <div class="content-bg-bottom">
            <div class="textblock">
<h2>Login
	<div class="inner-form-border">
		<div class="inner-form-box">
			<h3><a id="topwLost" href="index.php?s=lostpw" title="Şifreni mi Unuttun ?">Passwort Vergessen?</a>Giriş</h3>

			
            <form name="loginForm" id="loginForm" action="index.php?s=login" method="post">
				<div>
					<label for="username">Account; :</label>
					<input 
						type="text" 
						class="validate[required,length[3,15]]"
						id="username" 
						name="userid"
                        maxlength="15"
						value=""                        
					/>
				</div>
				<div>
					<label for="loginPassword">Passwort:</label>

					<input 
						type="password"  
						class="validate[required,length[4,16]]"
						id="loginPassword" 
						name="userpass" 
						maxlength="16" 
						value=""                        
					/>                    
				</div>
				<div id="checkerror">
					<p>Mit dem Login stimme ich den<a href="index.php?s=kurallar" target="_blank"><strong>AGB</strong></a> <a href="#" target="_blank"></a>zu.</p>
			  </div>                
				<input 
					id="submitBtn"
					class="btn-big" 
					type="submit" 
					name="submit"
					value="login"					
				/>
                <script type="text/javascript">
                	$(function() {
                    $.validationEngine.buildPrompt("#username","ACC ODER PW FALSCH","error");$.validationEngine.buildPrompt("#loginPassword","ACC ODER PW FALSCH","error");                	});
                </script>
			</form>			
	                <p id="regLegend">* wird benötigt</p>
                        <div class="trenner"></div>
                        <div id="subscribe">
                            <h3>Noch keinen Account?</h3>
                            <p>Die Erstellung eines Spielerlogins ist schnell, einfach und kostenlos.</p>
                                                            <a class="btn-big" href="index.php?s=register" title="Hesap oluştur">Einen Account Erstellen.</a>
                                                    </div>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div> 
</div> 
  <?PHP
  }
  ?>
Der Login schlägt immer Fail egal ob richtige daten oder Falsche

Er Hat imme rfehler egal welche sscript man kann nicht einloggen
03/07/2014 22:51 Lord Lix'#2
Quote:
Originally Posted by Sh4Xx";27420133]Hallo epvp,

[COLOR="Red
Ich habe glaube ich irg wo inmeinem login Script einen Fehler:[/COLOR]

Code:
<?PHP
  if(isset($_GET['do']) && $_GET['do']=="aktivieren" && isset($_GET['hash']) && !empty($_GET['hash'])) {
    if(strlen($_GET['hash'])==32 && $_GET['hash']!=1 && checkAnum($_GET['hash'])) {
      $cmdHash = "SELECT id,web_aktiviert FROM account.account WHERE web_aktiviert='".$_GET['hash']."' AND web_aktiviert!='1' LIMIT 1;";
      $qryHash = mysql_query($cmdHash,$sqlServ);
      
      if(mysql_num_rows($qryHash)) {
      
        $getData = mysql_fetch_object($qryHash);
        $userUpdate = "UPDATE account.account SET aktiv='1',web_aktiviert='1',status='OK' WHERE id='".$getdata->id."' LIMIT 1;";
        $updateQry = mysql_query($userUpdate,$sqlServ);
        
        if($updateQry) {
          echo'<p class="meldung">Váš účet bol úspešne aktivovaný.</p>';
          echo'<meta http-equiv="refresh" content="1; URL=index.php?s=login"> ';
        }
        else {
          echo'<p class="meldung">Otázka zlyhal. Prosím, obrátte sa na správcu!</p>';
        }
        
      }
      else {
        echo'<p class="meldung">Nelze nalézt odpovídající záznam. Aktivace se nezdařila.</p>';
      }
      
    }
    else {
      echo'<p class="meldung">Žiadny platný hash!</p>';
    }
  }

  if(!empty($_SESSION['user_id'])) 
  {
    echo'';
    echo'';
    echo'';
    if($_SESSION['user_admin']>0) {
      echo'';
    }
    if($_SESSION['user_admin']>=0) {
      echo'';
     
    }
$sqlArray = @mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM ".SQL_HP_DB.".tickets WHERE status >= '1' AND user_id = '".$_SESSION["user_id"]."'"));
	
	$sqlAcc = "SELECT account.social_id AS loeschcode,name_checked AS warn,status AS status, safebox.password AS lagerpw,create_time AS create_time,id AS id,email AS email
    FROM account.account 
    LEFT JOIN player.safebox 
    ON account.id=safebox.account_id 
    WHERE account.id='".$_SESSION['user_id']."'";
	
    echo'';
    echo'';
    
    $cmdStats = "SELECT SUM( player.playtime ) AS ges_spielzeit, COUNT( * ) AS ges_chars, player_index.empire
    FROM player.player
    INNER JOIN player.player_index ON player_index.id = player.account_id
    WHERE player.account_id = '".$_SESSION['user_id']."'
    LIMIT 1";
    
    $qryStats = mysql_query($cmdStats,$sqlServ);
    $getStats = mysql_fetch_object($qryStats);
    
   
	
	$sqlAcc = "SELECT email AS email,create_time AS create_time, last_play AS last_play, silver_expire AS exp
    FROM account.account 
    LEFT JOIN player.safebox 
    ON account.id=safebox.account_id 
    WHERE account.id='".$_SESSION['user_id']."'";
	
	$qryAcc = mysql_query($sqlAcc) or die(mysql_error());
    $getAcc = mysql_fetch_object($qryAcc);
	
    function CenzuraEmailu($getAcc){

	list($predek, $zadek) = split('[@]', $getAcc->email);
	$predek = str_replace($predek, "****", $predek);
	$emailpo = $predek."@".$zadek;
	return $emailpo;
	}
    if(empty($getStats->ges_spielzeit)) $getStats->ges_spielzeit = '0';

 echo'   <!-- center column -->
<div class="col-2">
    <div class="content content-last">
        <div class="content-bg">
            <div class="content-bg-bottom">

                <h2>Hesabınız</h2>
                <div class="administration-inner-content">
                    <div class="input-data-box">
                    <h4>Hesap Bilgileri</h4>
                        <ul>
                            <li>Account Name:: '.$_SESSION['user_name'].'</li>
                            <li>E-Posta:<br>'.$_SESSION['user_email'].'</li>
 <li>Kayıt Tarihi:<br>'.$_SESSION['create_time'].'</li>
'; 
         


$datum = @date("Y-m-d H:i:s", time());
		$date_e = @strtotime($getAcc->exp);
		$date_d = @strtotime($datum);
		if($date_d = mysql_real_escape_string($date_e))
		{

	   echo'
	    <li>Premium Süresi : <br><font color="green">('.$getAcc->exp.')</font>
	</li>';
 				 echo' <li>Online Süresi:'.$getStats->ges_spielzeit.' Dakika</li>
   ';
	
		}
		else
		{
		echo'
	';
	  }
      echo'';
    $sqlAcc = "SELECT account.social_id AS loeschcode,name_checked AS warn,status AS status, safebox.password AS lagerpw,create_time AS create_time,id AS id
    FROM account.account 
    LEFT JOIN player.safebox 
    ON account.id=safebox.account_id 
    WHERE account.id='".$_SESSION['user_id']."'";

    $qryAcc = mysql_query($sqlAcc) or die(mysql_error());
    $getAcc = mysql_fetch_object($qryAcc);
    
    if(empty($getAcc->lagerpw)) $getAcc->lagerpw = '000000';
      
      echo'                                                         
<li>Aldığın Uyarılar:'.$getAcc->warn.'</li>
<li>Ejder Paran : '.$_SESSION['user_coins'].' <a href="index.php?s=hesap_no" class="load-link">(Doldur)</a></li>
                                
<li>Ejder Markan : '.$_SESSION['user_jcoins'].' </li>
                                                                                </ul>
                                                                        <br />
';

if($_SESSION['user_admin']==9){
echo'<div class="administration-box"><a href="index.php?s=admin" class="btn">Yönetici</a><p>Admin Paneli.</div>';
}else{
}

echo'

			<div class="administration-box"><a href="index.php?s=hesap_no" class="btn">EP Yükle</a><p>Hesabınıza EP yükleyin.</div>
';

  
echo'
                        <div class="administration-box"><a href="index.php?s=charaktere" class="btn">Karakterler</a><p>Karakter Listesi.</p></div>
                        <div class="administration-box"><a href="index.php?s=passwort" class="btn">Passwort</a><p>Passwort Fehlerhaft.</p></div>
                        <div class="administration-box"><a href="index.php?s=mail" class="btn">E-Posta</a><p>E-Mail Adresse Fehlerhaft.</p></div>
                        <div class="administration-box"><a href="index.php?s=depo" class="btn">Depocu</a><p>Depo Passwortsi iste.</p></div>
                        <div class="administration-box"><a href="index.php?s=karaktersilme" class="btn">Kodu Görüntüle</a><p>Karakter Silme Kodu.</p></div>
                        <div class="administration-box"><a href="index.php?s=nickdegis" class="btn">Nick</a><p>Oyuncu adı Fehlerhaft.</p></div>
                        <div class="administration-box"><a href="index.php?s=bug" class="btn">Bug</a><p>Karakterini Bugdan Çıkar.</p></div>
                        <div class="administration-box"><a href="index.php?s=spenden" class="btn">Bildirim</a><p>Ödeme bildirimi Yap.</p></div>
			<div class="administration-box"><a href="index.php?s=dondur" class="btn">Dondur</a><p>Hesabı Dondur.</p></div>
			
			

<div class="box-foot"></div>
 
                                           
                 </div>  </div>
             
     </div>   </div>  </div>  </div>';
    
    echo'';
  }
  else     
  {
  ?>

	          <div id="register" class="col-2">
    <div class="content content-last">
        <div class="content-bg">
            <div class="content-bg-bottom">
            <div class="textblock">
<h2>Login
	<div class="inner-form-border">
		<div class="inner-form-box">
			<h3><a id="topwLost" href="index.php?s=lostpw" title="Şifreni mi Unuttun ?">Passwort Vergessen?</a>Giriş</h3>

			
            <form name="loginForm" id="loginForm" action="index.php?s=login" method="post">
				<div>
					<label for="username">Account; :</label>
					<input 
						type="text" 
						class="validate[required,length[3,15]]"
						id="username" 
						name="userid"
                        maxlength="15"
						value=""                        
					/>
				</div>
				<div>
					<label for="loginPassword">Passwort:</label>

					<input 
						type="password"  
						class="validate[required,length[4,16]]"
						id="loginPassword" 
						name="userpass" 
						maxlength="16" 
						value=""                        
					/>                    
				</div>
				<div id="checkerror">
					<p>Mit dem Login stimme ich den<a href="index.php?s=kurallar" target="_blank"><strong>AGB</strong></a> <a href="#" target="_blank"></a>zu.</p>
			  </div>                
				<input 
					id="submitBtn"
					class="btn-big" 
					type="submit" 
					name="submit"
					value="login"					
				/>
                <script type="text/javascript">
                	$(function() {
                    $.validationEngine.buildPrompt("#username","ACC ODER PW FALSCH","error");$.validationEngine.buildPrompt("#loginPassword","ACC ODER PW FALSCH","error");                	});
                </script>
			</form>			
	                <p id="regLegend">* wird benötigt</p>
                        <div class="trenner"></div>
                        <div id="subscribe">
                            <h3>Noch keinen Account?</h3>
                            <p>Die Erstellung eines Spielerlogins ist schnell, einfach und kostenlos.</p>
                                                            <a class="btn-big" href="index.php?s=register" title="Hesap oluştur">Einen Account Erstellen.</a>
                                                    </div>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div> 
</div> 
  <?PHP
  }
  ?>
Der Login schlägt immer Fail egal ob richtige daten oder Falsche

Er Hat imme rfehler egal welche sscript man kann nicht einloggen
Logik (?)

Besteht eine direkte verbindung zu einer MySQL Datenbank?
03/07/2014 22:53 "Sh4Xx"#3
ja klar
03/07/2014 22:56 Lord Lix'#4
Ist error reporting aktiviert?
03/07/2014 23:36 "Sh4Xx"#5
Nope wo aktiviere ich dieses
03/08/2014 00:11 .Marcel'#6
PHP Code:
error_reporting(E_ALL); 
[Only registered and activated users can see links. Click Here To Register...]