better-staridc-MNBT
1<?php
2if($egn=='login') {
3 if(isset($_POST['user']) && isset($_POST['pass'])) {
4 $user=daddslashes($_POST['user']);
5 $pass=daddslashes($_POST['pass']);
6 $code=daddslashes($_POST['code']);
7 if ($conf['yzm']=='true' && $code != $_SESSION['authcode']) {
8 unset($_SESSION['authcode']);
9 @header('Content-Type: text/html; charset=UTF-8');
10 json_exit_error('验证码错误');
11 } elseif($user==$conf['user'] && $pass==$conf['pwd']) {
12 unset($_SESSION['authcode']);
13 $session=md5($user.$pass.$password_hash);
14 $token=authcode("{$user}\t{$session}", 'ENCODE', SYS_KEY);
15 mnbt_rotate_login_session();
16 mnbt_set_auth_cookie("admin_token", $token, time() + 604800);
17 @header('Content-Type: text/html; charset=UTF-8');
18 json_exit('登陆成功');
19 } else {
20 unset($_SESSION['authcode']);
21 @header('Content-Type: text/html; charset=UTF-8');
22 json_exit_error('用户名或密码错误');
23 }
24 } elseif(isset($_POST['logout'])) {
25 mnbt_set_auth_cookie("admin_token", "", time() - 604800);
26 @header('Content-Type: text/html; charset=UTF-8');
27 json_exit('您已成功注销本次登陆');
28 }
29}
30return;