File: /var/www/www-root/data/www/beartz.com/t/files/login.php
<?php
if(!defined("INDEX")){header('HTTP/1.1 403 Forbidden'); die('403 Forbidden');}
$error = '';
if(!empty($ip_allow) && !ip_check($ip_allow)){
header('HTTP/1.1 403 Forbidden');
exit();
}
session_set_cookie_params(['lifetime'=>'', 'path'=>'/', 'domain'=>'', 'secure'=>false, 'httponly'=>true, 'samesite'=>'Lax']);
session_start();
if(!empty($_GET['q']) && $_GET['q'] == 'logout'){
unset($_SESSION['auth']);
session_unset();
session_destroy();
header("Location: $admin_page");
}
if(empty($_SESSION['auth'])){
$_SESSION['auth'] = '';
}
if(isset($_POST['submit'])){
if($protect_mode == 1){
$post_code = trim(strtoupper($_POST['code']));
}
if($admin_login != trim($_POST['login']) OR $admin_pass != md5(trim($_POST['pass']))){
$error = '<div class="align_center bold indt_10">Wrong login or password!</div>';
sleep(1);
}
elseif($protect_mode == 1 && (!isset($_SESSION['code']) || empty($_SESSION['code']) || $post_code != $_SESSION['code'])){
$error = '<div class="align_center bold indt_10">Wrong captcha!</div>';
sleep(1);
}
else{
$_SESSION['auth'] = $admin_login;
header("Location: $admin_page");
}
}
if(!$_SESSION['auth']){
echo '<!DOCTYPE html>
<html>
<head>
<title>Authorization</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" href="files/style.css">
<link rel="shortcut icon" href="files/img/favicon.ico">
</head>
<body>
<div class="login">
<div class="align_center bold title indt_50">zTDS '.$version.'</div>
<form method="post">
<div class="align_center indt_50">
Login<br>
<input class="input_auth1 indt_5" type="text" name="login" autofocus>
</div>
<div class="align_center indt_20">
Password<br>
<input class="input_auth1 indt_5" type="password" name="pass">
</div>';
if($protect_mode == 1){
echo '<div class="align_center indt_20">
<img style="border: 0px solid gray;" src="files/lib/captcha/captcha.php" width="120" height="40"/><br>
<input class="input_auth2 indt_5" type="text" name="code">
</div>';
}
echo '<div class="align_center">
<input class="align_center button" type="submit" name="submit" value="Submit">
</div>
</form>'.$error.'</div>
</body>
</html>';
exit();
}
?>