forked from klinquist/GGCAutocross
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathauth.php
executable file
·119 lines (85 loc) · 3.8 KB
/
auth.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
<?php
date_default_timezone_set("America/Los_Angeles");
$result = mysql_query("SELECT * FROM autox_close") or die("Error: " . mysql_error());
while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
$close = $row[1];
$open = $row[2];
$msg = $row[3];
}
$result = mysql_query("SELECT * FROM autox_dates") or die("Error: " . mysql_error());
while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
$autocross = strtotime($row[1]);
if ((time() >= strtotime("$close", $autocross)) && (time() <= strtotime("$open", $autocross))) {
$closemsg = "<div class='alert alert-error'><button type='button' class='close' data-dismiss='alert'>×</button>$msg</div>";
}
}
$result = mysql_query("SELECT * FROM autox_closeoverride") or die("Error: " . mysql_error());
while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
if (($closemsg) && ($row[0] == "open")) { unset($closemsg);}
if ((!$closemsg) && ($row[0] == "close")) {
if ($row[1] == "") {
$closemsg = "<div class='alert alert-error'><button type='button' class='close' data-dismiss='alert'>×</button>The autocross system is currently closed.</div>";
} else {
$closemsg = "<div class='alert alert-error'><button type='button' class='close' data-dismiss='alert'>×</button>" . $row[1] . "</div>";
}
}
}
define('WP_USE_THEMES', false);
require("../new_html/wp-load.php");
$loginname = $_POST[loginname];
$loginpassword = $_POST[loginpassword];
if ($loginname){
$creds = array();
$creds['user_login'] = $loginname;
$creds['user_password'] = $loginpassword;
$creds['remember'] = true;
$user = wp_signon( $creds, false );
$userID = $user->ID;
wp_set_current_user( $userID, $user_login );
wp_set_auth_cookie( $userID, true, false );
do_action( 'wp_login', $user_login );
if (is_user_logged_in()) {
$username = $user->user_login;
foreach ( $user->roles as $role ) {
if ($role == "autox") { $usergroup = "admin";}
if ($role == "administrator") { $usergroup = "admin"; }
}
if ( isset($user->groups[ $site_admin_group ] ) ) {
$usergroup = "admin";
}
if ( isset($user->groups[ $autox_coord_group ] ) ) {
$usergroup = "admin";
}
/*
if ($username == "klinquist") { $usergroup = "admin";}
if ($username == "jeffroberts") { $usergroup = "admin";}
if ($username == "TheCarousel") { $usergroup = "admin";}
if ($username == "MattV") { $usergroup = "admin";}
*/
} else {
unset($username);
unset($fullname);
unset($usergroup);
echo "<div class='alert alert-error'>Incorrect login. You may be locked out for too many attempts. <a href='http://ggcbmwcca.org/new_html/wp-login.php' target='_blank'>Go here</a> to see a more detailed error or to reset your password.</div>";
writelog($loginname, "Incorrect login attempt");
}
}
if (is_user_logged_in()) {
global $current_user;
global $username;
get_currentuserinfo();
$username = $current_user->user_login;
foreach ( $current_user->roles as $role ) {
if ($role == "autox") { $usergroup = "admin";}
if ($role == "administrator") { $usergroup = "admin"; }
}
}
function loginform() {
if (!is_user_logged_in()) {
global $closemsg;
if (!$closemsg) { echo "<div class='alert alert-error'><button type='button' class='close' data-dismiss='alert'>×</button>In order to save a classification or choose a number, you must be logged in.<Br><Br>
<form class='form-inline' action='$_SERVER[PHP_SELF]' method='post'><input type='text' class='input-medium' placeholder='Login name' name='loginname'> <input type='password' class='input-medium' placeholder='Password' name='loginpassword'> <button type='submit' class='btn btn-primary'>Login</button> <a href='http://ggcbmwcca.org/new_html/wp-login.php?action=register' class='btn btn-link' target='_blank'>Create Account</a></form>
</div>"; } else { echo "$closemsg"; }
}
}
?>