PHPlay Betasysteem

-- 
-- Tabel structuur voor tabel `hash`
-- 

CREATE TABLE `hash` (
  `id` int(11) NOT NULL auto_increment,
  `hash` text collate latin1_german2_ci NOT NULL,
  `hash_id` text collate latin1_german2_ci NOT NULL,
  `user` text collate latin1_german2_ci NOT NULL,
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 COLLATE=latin1_german2_ci AUTO_INCREMENT=110 ;

-- --------------------------------------------------------

-- 
-- Tabel structuur voor tabel `leden`
-- 

CREATE TABLE `leden` (
  `id` int(15) NOT NULL auto_increment,
  `user` varchar(12) collate latin1_german2_ci NOT NULL default '',
  `pass` text collate latin1_german2_ci NOT NULL,
  `status` varchar(255) collate latin1_german2_ci NOT NULL default 'lid',
  `status_id` varchar(255) collate latin1_german2_ci NOT NULL default '100',
  `ip` text collate latin1_german2_ci NOT NULL,
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 COLLATE=latin1_german2_ci AUTO_INCREMENT=5 ;

<?php
session_start();

include ("config.php");

function safe($input)
{
    $input = mysql_real_escape_string(htmlspecialchars($input));
    return $input;
}

if (!isset($_COOKIE['hash']) || !isset($_COOKIE['id']) || !isset($_COOKIE['hash_id'])){
echo "";
}
elseif (isset($_COOKIE['id']))
{    
    $query = "SELECT * FROM leden WHERE id='".safe($_COOKIE['id'])."'";  
    $result = mysql_query($query) or die (mysql_error());  
    $sql = mysql_fetch_assoc($result);
    
    $Hquery = "SELECT * FROM hash WHERE hash_id='".safe($_COOKIE['hash_id'])."'";  
    $Hresult = mysql_query($Hquery) or die (mysql_error());  
    $Hsql = mysql_fetch_assoc($Hresult); 

    if (!isset($_SESSION['login']))
    {
        if ($_COOKIE['hash'] == $Hsql['hash'] && $_COOKIE['id'] == $sql['id'] && strtolower($Hsql['user']) == strtolower($sql['user']) && $_COOKIE['pass'] == $sql['pass'])
        { 
            $_SESSION['login'] = "ja";
            $_SESSION['status'] = $sql['status'];    
            $_SESSION['status_id'] = $sql['status_id'];                
            setcookie("naam",$sql['user'],time()+3600*24*356);            
        }
    }
}
?>

<?php
ob_start();

include_once ("global.php");
include_once ("config.php");

$hash = md5(rand(0, 60)); 
$hash_id = md5(rand(0, 60)); 
$ip = $_SERVER['REMOTE_ADDR'];

if (isset($_SESSION['login']))
{ 
    echo "Je bent al ingelogt, nog een x inloggen kan niet!";
}
else
{
    if ($_SERVER['REQUEST_METHOD'] != "POST")
    {
        echo '<form id="form1" name="form1" method="post" action="">
              Gebruikersnaam:<br />
              <input name="user" type="text" size="50" />
              <br />
            Wachtwoord:<br />
            <input name="pass" type="password" size="50" />
            <br />
            <input type="submit" name="Submit" value="Inloggen" />
            </form>';
    }
    else
    {
        $query = "SELECT * FROM leden WHERE user='".safe(strtolower($_POST['user']))."'";
        $result = mysql_query($query) or die (mysql_error()); 
        $mnr = mysql_num_rows($result); 
        $sql = mysql_fetch_assoc($result); 

        if($mnr == 0)
        { 
            echo $_POST['user'];
            echo "Je hebt een verkeerd wachtwoord en/of een verkeerde gebruikersnaam ingevuld!"; 
        } 
        else
        {            
            $pass = md5(md5($_POST['pass']));
            
            if (safe(StrtoLower($_POST['user'])) == strtolower($sql['user']) && $pass == $sql['pass'] && $sql['status_id'] >= 500)
            {
        
                $id = $sql['id'];
        
                setcookie("hash",$hash,time()+3600*24*356);
                setcookie("id",$id,time()+3600*24*356);
                setcookie("hash_id",$hash_id,time()+3600*24*356);
                setcookie("pass",$pass,time()+3600*24*356);
        
                $rResult = mysql_query("INSERT INTO hash (id, hash, hash_id, user) VALUES ('','".$hash."','".$hash_id."', '".safe($_POST['user'])."')") or die (mysql_error()); 
                $LResult = mysql_query("UPDATE leden SET ip='".$ip."' WHERE user='".safe($_POST['user'])."'") or die (mysql_error());
                echo "Je bent ingelogd!";
            }
            else
            {
                echo "Je gebruikersnaam/wachtwoord is verkeerd, of je rang is te laag om deze pagina te bekijken.";
            }
        }
    }
}        
?>

CREATE TABLE `hash` ( 
  `id` int(11) NOT NULL auto_increment, 
  `hash` text collate latin1_german2_ci NOT NULL, 
  `hash_id` text collate latin1_german2_ci NOT NULL, 
  `user` text collate latin1_german2_ci NOT NULL, 
  PRIMARY KEY  (`id`) 
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 COLLATE=latin1_german2_ci AUTO_INCREMENT=110 ;

CREATE TABLE bugs ( 
 `id` int(11) unsigned NOT NULL auto_increment, 
 `bug` varchar(100) default 0,
 `pagina` varchar(100) default 0,
 `user` varchar(12) collate latin1_german2_ci NOT NULL default '',  
 `email` varchar(100) default 0, 
 `status` varchar(100) default 0, 
  PRIMARY KEY  (`id`) 
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 COLLATE=latin1_german2_ci AUTO_INCREMENT=5 ; 

CREATE TABLE `leden` ( 
  `id` int(15) NOT NULL auto_increment, 
  `user` varchar(12) collate latin1_german2_ci NOT NULL default '', 
  `email` varchar(100) default 0,
  `pass` text collate latin1_german2_ci NOT NULL, 
  `status` varchar(255) collate latin1_german2_ci NOT NULL default 'lid', 
  `status_id` varchar(255) collate latin1_german2_ci NOT NULL default '100', 
  `ip` text collate latin1_german2_ci NOT NULL, 
  PRIMARY KEY  (`id`) 
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 COLLATE=latin1_german2_ci AUTO_INCREMENT=5 ;

<?
ob_start(); 
session_start();

include ("config.php");
error_reporting(E_ALL); 

if (!isset($_SESSION['login'])){ 
echo "<div class="Tekst">Je moet eerst inloggen om te kunnen uitloggen!</div>";
} else {
    if (isset($_GET['actie'])&&$_GET['actie'] == "uitloggen"){  
    
        setcookie("id", "", time()-3600); 
        setcookie("hash", "", time()-3600); 
        setcookie("hash_id", "", time()-3600); 
        setcookie("pass", "", time()-3600); 
        
        $_SESSION = array();
        session_destroy(); 
        
    echo "<div class="Header_tekst">Succesvol uitgelogd! Je wordt over 5 seconden doorgestuurt naar de index pagina. Als je niet kunt wachten klik <a href="index.php">hier</a>.</div><meta http-equiv="refresh" content="5;URL=index.php" /></div>"; 
    } 
    else
    { 
    echo '<div class="Header_tekst">Weet je zeker dat je wilt uitloggen? <a href="?pagina=uitloggen&actie=uitloggen">Ja</a>  <a href="index.php">Nee</a></div>'; 
    } 
}
?>

<?
ob_start(); 
session_start();

include ("config.php"); 
include ("global.php"); 

if (isset($_SESSION['login'])){ 
    $query = "SELECT * FROM leden WHERE id='".htmlspecialchars(mysql_real_escape_string($_COOKIE['id']))."'";  
    $result=mysql_query($query) or die (mysql_error());  
    $sql = mysql_fetch_assoc($result); 
    
            echo "Welkom $sql[user]! <br>";
            
            if($sql[status_id] >=400) {    
            // Betatester menu
            echo "Bug melden -";
            } 
            if($sql[status_id] >=500) {    
            //Moderator menu
            echo " Betatesterbeheer -";
            }        
            if($sql[status_id] >=600) {    
            // Admin menu
            echo " systeembeheer - Adminpanel";
            }
            echo " <a href="uitloggen.php">Uitloggen</a>";
} else {
echo "Je hebt geen rechten om deze pagina te bekijken! ";
}
?>

<?
ob_start(); 
session_start();

include ("config.php"); 
include ("global.php"); 

    $query = "SELECT * FROM leden WHERE id='".htmlspecialchars(mysql_real_escape_string($_COOKIE['id']))."'";  
    $result=mysql_query($query) or die (mysql_error());  
    $sql = mysql_fetch_assoc($result);
    
if (isset($_SESSION['login'])){ 
    
    if (isset($_POST['submit'])) { 
                                    if (empty($_POST['pagina'])) 
                                    { 
                                    $error .= "Je hebt geen pagina ingevuld.<br>"; 
                                    } 
                                    if (empty($_POST['bug'])) 
                                    { 
                                    $error .= "Je hebt geen bug ingevuld.<br>"; 
                                    } else {
                                    mysql_query("INSERT INTO bugs (id, bug, pagina, user, email, status) VALUES ('', '" . $_POST['bug']."', '" . $_POST['pagina']."', '" . $_POST['user']."', '" . $_POST['email']."', 'Niet gefixt')");
                                    echo "Je bug is succesvol gemeld!<br>";
                                    echo "<a href="ingelogd.php"> Terug </a><br><br>";
                                    exit;
                                    }
                                    
                                }
                                    if (isset($error)) 
                                    { 
                                    echo "<b>fout!:</b><br>"; 
                                    echo $error . "<br>"; 
                                    echo "<a href="javascript:history.back(-1)">Ga terug</a>"; 
                                    }
            
            echo "<b>Bug melden</b>";
            ?>
            <br>
            <form action="<?=$_SERVER['PHP_SELF']?>" method="POST">
            <input type="hidden" name="user" value=" <? echo $sql[user]; ?>"> 
            <input type="hidden" name="email" value=" <? echo $sql[user]; ?>">  
            
            Pagina waar de bug op staat<br>
            <input name='pagina' type='text'> <Br>
            Bug en/of error<Br>
            <textarea name='bug' type='text' rows=2 cols=50></textarea>
            <input type="submit" name="submit" value="submit"><BR>
</form>
<?    
} else {
echo "Je hebt geen rechten om deze pagina te bekijken! ";
}
?>

<?PHP

include ("config.php");
include_once ("global.php");

if ($_SESSION['status_id'] < 600)
{
    echo "Poep =$";
    exit();
}

if(isset($_POST['submit'])) 
{
    if ($_POST['status'] == "Beta")
    {
        $status_id = 400;
    }
    elseif ($_POST['status'] == "Admin")
    {
        $status_id = 500;
    }
    elseif ($_POST['status'] == "Webmaster")
    {
        $status_id = 600;
    }
    
    @mysql_query("INSERT INTO leden (user,pass,status,status_id) VALUES ('".safe($_POST['user'])."','".safe($_POST['pass'])."','".$_POST['status']."','".$status_id."')") or die("Mysql error op regel ".__LINE__." : ".mysql_error());

    echo "Lid is succesvol aangemaakt!";
    
}
else
{
    echo '
    
    <form name="form" action="" method="post">
    Gebruikersnaam: <input type="text" name="user" value=""  maxlength="255" /><br>
    Wachtwoord: <input type="text" name="pass" maxlength="255" />
    <br>
    Status: 
    <select name="status">
      <option value="Beta" selected>Beta tester</option>
      <option value="Admin">Admin</option>
      <option value="Webmaster">Webmaster</option>
        </select>
    <br>
    <br>
    <input type="submit" name="submit" value="Post!" /><BR><BR>
    
    ';
}
?>