DwiUGfmL

1CREATE TABLE IF NOT EXISTS `_benutzer` (
2  `id` int(11) NOT NULL AUTO_INCREMENT,
3  `name` varchar(255) NOT NULL,
4  `password` varchar(255) NOT NULL,
5  UNIQUE KEY `id` (`id`)
6) ENGINE=MyISAM  DEFAULT CHARSET=latin1 ;
7
8--
9-- Daten für Tabelle `_benutzer`
10--
11
12INSERT INTO `_benutzer` (`id`, `name`, `password`) VALUES
13
14(1, 'admin', 'd033e22ae348aeb5660fc2140aec35850c4da997'),
15(2, 'hunterz', 'd033e22ae348aeb5660fc2140aec35850c4da997');
16
17
18
19############################################################################
20
21// Abfrage
22
23
24
25	$sql = "SELECT id, name, password FROM ".DB_PREFIX."benutzer WHERE `id`";
26	$result = $db->query($sql);
27	while($row = $result->fetch_assoc()){
28		${$row['name']} = $row['password'];
29
30
31	}
32
33
34##############################################################################
35
36// Admin index.php
37
38$template->tplpath = "../template";
39$is_admin = (isset($_SESSION['admin']) && $_SESSION['admin'] == true) ? true : false;
40$template->assign('ADMIN', true);
41if(!$is_admin){
42	$username = request_var("username");
43	$password = request_var("password");
44	if($username != "" && $password != ""){
45		if($username == $admin_username && $admin_password == sha1($password)){
46			$_SESSION['admin'] = true;
47			header("Location: ".$url."/admin/");
48		}else{
49			$template->assign('WRONG_DETAILS', 1);
50		}
51	}
52	$template->assign('PAGE_TITLE', 'Administrationsbereich - Login');
53	# display login form!
54	$template->display("admin_login.html");
55	die();