UserSystem - by Froobe

[Blob]

I made a free, simple, open-source usersystem:

Features:

• Login
• Register
• Logout
• Install

Files:

• index.php
• installer.php
• style.css
• inc/
• inc/config.php
• inc/usersystem.class.php

Link:

http://www.uploadz.co.uk/703usersystem.rar

Password:

froobe

Please enjoy.

To install go to "index.php"

Sorry about the page titles. I forgot to edit them...

[Flisker]

Nice welldone =]

[ScottDiamond.]

Well done on helping out people. I may use it for a clients' Members Area.

[Tomm]

Errm hate to burst your bubble but its unsecure.

Atleast use mysql_real_escape_string and check if magic_quotes_gpc if enabled else you'll end up adding slashes twice.

Example source:

SELECT * FROM users WHERE user='aidan' AND password='' OR ''='' 

Cba to add dynamic crap.

But it should not let this query run as I typed it as it would let me login as anyone I want without knowing the password...

It returns:

SELECT * FROM users WHERE user='aidan' AND password='' OR ''=''

As I typed it....

Another example:

$ryan = new UserSystem();

$test = "UPDATE `users` SET `password`='lolowned' WHERE `username`='admin';";
echo $ryan->clean($test);

Returns:

UPDATE `users` SET `password`='lolowned' WHERE `username`='admin';

[Flisker]

*bubble burst*