Просмотр файла modules/user/sign_in.php

<?php
/**********************************
*	@package: PerfCMS			  *
*	@year: 2012					  *
*	@author: Artas				  *
*	@link: http://perfcms.pp.ua	  *
**********************************/
if(!empty($_GET['nick']) && !empty($_GET['password'])) {
	$nick = escape($_GET['nick']);
	$pass = crypto(input($_GET['password']));
	if($db->query("SELECT * FROM `users` WHERE `nick` = '". $nick ."' AND `password` = '". $pass ."'")->rowCount() == 1) {
		$userl = $db->query("SELECT * FROM `users` WHERE `nick` = '". $nick ."' AND `password` = '". $pass ."'")->fetch();
		setcookie('uid', $userl['id'], time()+60*60*24*1024, '/');
        setcookie('password', $pass, time()+60*60*24*1024, '/');
		$_SESSION['uid'] = $userl['id'];
		$_SESSION['password'] = $pass;
		header('Location: /');
		exit;
	} else { $err = $lang->word('fail_a');
		}
	}
elseif(!empty($_POST['nick']) && !empty($_POST['password'])) {
	$nick = escape($_POST['nick']);
	$pass = crypto(input($_POST['password']));
	if($db->query("SELECT * FROM `users` WHERE `nick` = '". $nick ."' AND `password` = '". $pass ."'")->rowCount() == 1) {
		$userl = $db->query("SELECT * FROM `users` WHERE `nick` = '". $nick ."' AND `password` = '". $pass ."'")->fetch();
		setcookie('uid', $userl['id'], time()+60*60*24*1024, '/');
        setcookie('password', $pass, time()+60*60*24*1024, '/');
		$_SESSION['uid'] = $userl['id'];
		$_SESSION['password'] = $pass;
		header('Location: /');
		exit;
	} else { $err = $lang->word('fail_a');
		}
	}
$page = 'auth';
$title = $lang->word('sign_in');
require_once(SYS.'/view/header.php');
$tpl->div('title', $lang->word('sign_in'));
if(isset($err)) { $tpl->div('error', $err); }
echo '<div class="menu">
<form action="?" method="post">
		'. $lang->word('nick') .':<br/>
		<input type="text" name="nick" /><br/>
		'. $lang->word('password') .':<br/>
		<input type="password" name="password" /><br/>
		<input type="submit" value="'. $lang->word('sign_in') .'" />
	</form>
	</div>';
$tpl->div('block', HICO .'<a href="/">'. $lang->word('home') .'</a>');
require_once(SYS.'/view/footer.php');
?>