myScriptsForShow/check_pass.php at master · goi/myScriptsForShow · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
<?php
session_start();
require('db.class1.php');
require('config.php');
// Âîçâðàùàåìûå çíà÷åíèÿ:
//login_emty
//password_emty
//auth_true
//auth_false

function blowfishSalt($cost = 13)
{
    $rand = array();
    for ($i = 0; $i < 8; $i += 1) {
        $rand[] = pack('S', mt_rand(0, 0xffff));
    }
    $rand[] = substr(microtime(), 2, 6);
    $rand = sha1(implode('', $rand), true);
    $salt = '$2a$' . sprintf('%02d', $cost) . '$';
    $salt .= strtr(substr(base64_encode($rand), 0, 22), array('+' => '.'));
    return $salt;
}

$l = $_POST['l'];
$p = $_POST['p'];
//$password_hash = crypt($p, blowfishSalt());

if (strlen($l) == 0) {
    exit ("login_emty");
};
if (strlen($p) == 0) {
    exit ("password_emty");
}
$db = new Database(HOST, USER, PASSWORD, DB);
$db->query('select id, name, password_hash from users where login = :l');
$db->bind(':l', $l);
$rows = $db->resultset();

if ($db->rowCount($rows) == 0) {
    $_SESSION["is_auth"] = false;
    exit("auth_false");
} else {
    $record_password_hash = $rows[0][password_hash];
    if ($record_password_hash === crypt($p, $record_password_hash)) {
        $_SESSION["is_auth"] = true;
        exit("auth_true");
    } else {
        $_SESSION["is_auth"] = false;
        exit("auth_false");
    }
}

?>