Jam-ez
14-12-2008, 09:15 PM
Hi,
When using my script, after logging in, I keep getting rejected with a ban, however "banned" isn't set to true in the mysql table. It's probably some stupid mistake, but any ideas?
Oh, and could it be because my mysql fields for "banned" are empty?
core.php
$check_ban = mysql_query( "SELECT * FROM `user` WHERE `username` = '$username'");
$check_ban_number = mysql_fetch_object( $check_ban );
if ( $_SESSION['username'] != '' )
{
if ( $check_ban_number->banned == 'true' );
{
echo("Sorry, you have been banned for: " . $check_ban_number->banned_reason);
session_destroy();
exit();
}
Edit: Oh, and this is the login page where it seems to be happening:
<?php
include 'includes/core.php';
if ( !$_SESSION['username'] )
{
$user = $_POST['user'];
$pass = $_POST['pass'];
$pass = md5($pass);
$ip = $_SERVER['REMOTE_ADDR'];
$find_user_pass = mysql_query( "SELECT * FROM `user` WHERE `username` = '$user' AND `password` = '$pass'" );
$find_user_pass_object = mysql_fetch_object( $find_user_pass );
$find_user_pass_rows = mysql_num_rows( $find_user_pass );
if ( $find_user_pass_rows == 1 )
{
$_SESSION['username'] = $user;
$_SESSION['password'] = $pass;
$level = $find_user_pass_object->level;
$_SESSION['level'] = $level;
$_SESSION['ip'] = $ip;
echo ("<meta http-equiv=\"Refresh\" content=\"2\"; URL=\"login.php\"/><center><img src='images/loading.gif'></center>");
}
else
{
die("<p>The entered username/password did not match the username/password in our database.
<br />
Please go back and ensure your login details are correct.</p>");
}
}
else
{
if ( $_SESSION['level'] == 'normal_user' )
{
echo("<p>Welcome <b>$_SESSION[username]</b><br />
- <a href=\"changepass.php\" target=\"middle\">Change Password</a><br />
- <a href=\"messages.php\" target=\"middle\">Message Center</a>");
$new = mysql_query( "SELECT * FROM `pmessages` WHERE `unread` = 'unread' AND `touser` = '$_SESSION[username]'" );
$new = mysql_num_rows($new);
echo(" (<b>$new</b>)");
echo("<br />
- <a href=\"gchat.php\" target=\"middle\">Add to General Chat</a><br />
- <a href=\"genchat.php\" target=\"middle\">View General Chat</a><br />
- <a href=\"acontact.php\" target=\"middle\">Contact an Admin</a><br />
- <a href=\"logout.php\" target=\"login\">Logout</a>");
}
if( $_SESSION['level'] == 'moderator_user' )
{
echo ("<br /><br /><b>Moderator Options</b><br />
- <a href=\"salert.php\" target=\"middle\">Alert User</a><br />
- <a href=\"ban.php\" target=\"middle\">Ban User</a><br />
- <a href=\"unban.php\" target=\"middle\">Unban User</a><br />
- <a href=\"gchatdel.php?switch\" target=\"middle\">Delete General Chat</a>");
}
if( $_SESSION['level'] == 'admin_user' )
{
echo ("<br /><br />
<b><u>Admin Options</u></b><br />
- <b>Message Options</b><br />
- <a href=\"masspm.php\" target=\"middle\">Mass Message</a><br/>
- <a href=\"pmspyer.php\" target=\"middle\">View Messages</a><br/>
<br />
- <b>Alert Options</b><br />
- <a href=\"alert.php\" target=\"middle\">Mass Alert</a><br/>
- <a href=\"salert.php\" target=\"middle\">Alert User</a><br />
<br />
- <b>User Account Options</b><br />
- <a href=\"createuser.php\" target=\"middle\">Create User</a><br />
- <a href=\"removeu.php\" target=\"middle\">Remove User</a><br />
- <a href=\"ban.php\" target=\"middle\">Ban User</a><br />
- <a href=\"unban.php\" target=\"middle\">Unban User</a><br />
<br />
- <b>Admin Contact Options</b><br />
- <a href=\"adminread.php\" target=\"middle\">Check Contact Page</a><br />
- <a href=\"acontactdel.php\" target=\"middle\">Delete Contact Page</a><br />
<br />
- <b>Miscellaneous Options</b><br />
- <a href=\"gchatdel.php?switch\" target=\"middle\">Delete General Chat</a><br />");
}
}
?>
Thread closed by Yoshimitsui (Forum Super Moderator): To prevent further spam and arguments.
When using my script, after logging in, I keep getting rejected with a ban, however "banned" isn't set to true in the mysql table. It's probably some stupid mistake, but any ideas?
Oh, and could it be because my mysql fields for "banned" are empty?
core.php
$check_ban = mysql_query( "SELECT * FROM `user` WHERE `username` = '$username'");
$check_ban_number = mysql_fetch_object( $check_ban );
if ( $_SESSION['username'] != '' )
{
if ( $check_ban_number->banned == 'true' );
{
echo("Sorry, you have been banned for: " . $check_ban_number->banned_reason);
session_destroy();
exit();
}
Edit: Oh, and this is the login page where it seems to be happening:
<?php
include 'includes/core.php';
if ( !$_SESSION['username'] )
{
$user = $_POST['user'];
$pass = $_POST['pass'];
$pass = md5($pass);
$ip = $_SERVER['REMOTE_ADDR'];
$find_user_pass = mysql_query( "SELECT * FROM `user` WHERE `username` = '$user' AND `password` = '$pass'" );
$find_user_pass_object = mysql_fetch_object( $find_user_pass );
$find_user_pass_rows = mysql_num_rows( $find_user_pass );
if ( $find_user_pass_rows == 1 )
{
$_SESSION['username'] = $user;
$_SESSION['password'] = $pass;
$level = $find_user_pass_object->level;
$_SESSION['level'] = $level;
$_SESSION['ip'] = $ip;
echo ("<meta http-equiv=\"Refresh\" content=\"2\"; URL=\"login.php\"/><center><img src='images/loading.gif'></center>");
}
else
{
die("<p>The entered username/password did not match the username/password in our database.
<br />
Please go back and ensure your login details are correct.</p>");
}
}
else
{
if ( $_SESSION['level'] == 'normal_user' )
{
echo("<p>Welcome <b>$_SESSION[username]</b><br />
- <a href=\"changepass.php\" target=\"middle\">Change Password</a><br />
- <a href=\"messages.php\" target=\"middle\">Message Center</a>");
$new = mysql_query( "SELECT * FROM `pmessages` WHERE `unread` = 'unread' AND `touser` = '$_SESSION[username]'" );
$new = mysql_num_rows($new);
echo(" (<b>$new</b>)");
echo("<br />
- <a href=\"gchat.php\" target=\"middle\">Add to General Chat</a><br />
- <a href=\"genchat.php\" target=\"middle\">View General Chat</a><br />
- <a href=\"acontact.php\" target=\"middle\">Contact an Admin</a><br />
- <a href=\"logout.php\" target=\"login\">Logout</a>");
}
if( $_SESSION['level'] == 'moderator_user' )
{
echo ("<br /><br /><b>Moderator Options</b><br />
- <a href=\"salert.php\" target=\"middle\">Alert User</a><br />
- <a href=\"ban.php\" target=\"middle\">Ban User</a><br />
- <a href=\"unban.php\" target=\"middle\">Unban User</a><br />
- <a href=\"gchatdel.php?switch\" target=\"middle\">Delete General Chat</a>");
}
if( $_SESSION['level'] == 'admin_user' )
{
echo ("<br /><br />
<b><u>Admin Options</u></b><br />
- <b>Message Options</b><br />
- <a href=\"masspm.php\" target=\"middle\">Mass Message</a><br/>
- <a href=\"pmspyer.php\" target=\"middle\">View Messages</a><br/>
<br />
- <b>Alert Options</b><br />
- <a href=\"alert.php\" target=\"middle\">Mass Alert</a><br/>
- <a href=\"salert.php\" target=\"middle\">Alert User</a><br />
<br />
- <b>User Account Options</b><br />
- <a href=\"createuser.php\" target=\"middle\">Create User</a><br />
- <a href=\"removeu.php\" target=\"middle\">Remove User</a><br />
- <a href=\"ban.php\" target=\"middle\">Ban User</a><br />
- <a href=\"unban.php\" target=\"middle\">Unban User</a><br />
<br />
- <b>Admin Contact Options</b><br />
- <a href=\"adminread.php\" target=\"middle\">Check Contact Page</a><br />
- <a href=\"acontactdel.php\" target=\"middle\">Delete Contact Page</a><br />
<br />
- <b>Miscellaneous Options</b><br />
- <a href=\"gchatdel.php?switch\" target=\"middle\">Delete General Chat</a><br />");
}
}
?>
Thread closed by Yoshimitsui (Forum Super Moderator): To prevent further spam and arguments.