Beiträge von leoms1408

<?php 
session_start();
include("framework/framework.class.php");


/* hier wird PW geändert*/
if(!empty($_POST) AND !empty($_SESSION['acc'])){
	$name = $_SESSION['acc'];


	// altes pw
	$old = mysql_real_escape_string($_POST['old']);
	$first = $old;
	$first = md5($first);
	$query = mysql_query("SELECT * FROM users WHERE name = '$name' AND passwort='$first'") or die(mysql_error());
	$result = mysql_num_rows($query);
	if($result >= 1){
		// Wenn old stimmt
		// neues pw
		$new = mysql_real_escape_string($_POST['new']);
		$new2 = mysql_real_escape_string($_POST['new2']);
		if($new == $new2){
			$debug = true;
			$pwnew = $new;
			$pwnew2 = strtoupper(md5($pwnew2));
			if($debug == true){
				echo $old . "<br>" . $first . "<br>";
				echo $pwnew . "<br>" . $pwnew2;
			}else{
				$query = mysql_query("UPDATE users SET passwort = '$pwnew2' WHERE name = '$name'") or die ("MySQL-Error: " . mysql_error());
				session_destroy();
				$host = $_SERVER['HTTP_HOST'];
				$uri = rtrim(dirname($_SERVER['PHP_SELF']), '/\\');
				header("Location: http://$host$uri/index.php");
				exit;
			}
		}else{
			$host = $_SERVER['HTTP_HOST'];
			$uri = rtrim(dirname($_SERVER['PHP_SELF']), '/\\');
			header("Location: http://$host$uri/main.php");
			exit;
		}
	}else{
		$host = $_SERVER['HTTP_HOST'];
		$uri = rtrim(dirname($_SERVER['PHP_SELF']), '/\\');
		header("Location: http://$host$uri/main.php");
		exit;
	}
}else{
	// Weiterleitung								
	$host = $_SERVER['HTTP_HOST'];
	$uri = rtrim(dirname($_SERVER['PHP_SELF']), '/\\');
	header("Location: http://$host$uri/main.php");
	exit;
}	
?>

function loginRPGPlayer(player, vorname,nachname,pw)
	if isElement(player) then
		if string.match(vorname,"[%A-Z]") and string.match(vorname,"[%A-Z]") ~= "Z" or string.match(nachname,"[%A-Z]") and string.match(nachname,"[%A-Z]") ~= "Z" then
			triggerClientEvent ( player, "addNotification", getRootElement(),  1, 255, 0, 0, "Dein Name enthält ungültige Zeichen." )
			return
		end
		for i,v in ipairs(getElementsByType("player")) do
			if string.lower(getPlayerName(v)) == string.lower(vorname.."."..nachname) and v ~=player and getElementData(v, "isPlayerLoggedIn") == true then
				triggerClientEvent ( player, "addNotification", getRootElement(),  1, 255, 0, 0, "Es ist bereits jemand mit diesem Namen eingeloggt." )
				return
			end
		end
		vorname = string.gsub(vorname, "(%a)([%w_']*)", titleCase)
		nachname = string.gsub(nachname, "(%a)([%w_']*)", titleCase)
		local password = getPlayerUserFileData(vorname.."."..nachname, "passwort")
		local name = getPlayerUserFileData(vorname.."."..nachname, "name")
		if name then
			setPlayerName(player,name)
		end
		getPlayerRegisterStatus(player)
		local password = getPlayerUserFileData(vorname.."."..nachname, "passwort")
		if password and password == md5(pw) then
			local status = tonumber(getElementData(player, "playerRegisterStatus"))
			if status == 0 then
				triggerClientEvent ( player, "addNotification", getRootElement(),  1, 255, 0, 0, "Dein Account wurde deaktiviert." )
				return				
		--	if status == 1 then -- Tutorial
		--		triggerClientEvent("startTutorial", player, player, pw, tonumber(getElementData(player,"skin"))) -- tutorial muss erst abgeschlossen werden
		--		fadeCamera(player,false)
		--	elseif status == 2 then -- Freigeschaltet
			else
				successLoginPlayer(player)
				triggerEvent("onPlayerRPGLogin", player)
			end
		else
			triggerClientEvent ( player, "addNotification", getRootElement(),  1, 255, 0, 0, "Account wurde nicht gefunden\noder das Passwort falsch." )
		end
	end
end
addEventHandler("loginRPGPlayerToServer", getRootElement(),loginRPGPlayer)