include "securer.php"; include ("aprfuncs.php"); ?>
$ornumber=$ornumber*1; if ($a == "change / set") { $authed = 0; $continue = 1; if (md5 ($transid + "abc.") != $transid2) { $continue = 0; syslog (6, "/personal/changepassrcp.php hacking detected"); echo "Hacking detected!"; exit (0); } // try the account password if ($id < 2000000) $id += 2000000; if ($id > 20000000) $id -= 20000000; $ordate = pg_escape_string ($ordate); $ornumber = pg_escape_string ($ornumber); $ortimestamp = pg_escape_string ($ortimestamp); $sql = "select * from charges where account_number -20000000 = '$id' and reference_number = '$ornumber' /* and (substring((date_time::time)::text,0,9) = '$ortimestamp' OR substring(((date_time - '00:00:01'::time)::time)::text,0,9) = '$ortimestamp' ) and date_time::date = '$ordate' */ and trans_id > 0 and abs(amount) >= 10;"; // echo $sql; syslog (6, "/personal/changepassrcp.php -> $sql"); $res = dbexec ($sql, "aolis"); if (pg_numrows ($res) > 0) { $authed = 1; syslog (6, "/aolis/personal/changepassrcp.php authed"); } /* gragols code below! hehe */ if (!$authed) { // test if all digits $passda = chop ($passda); for ($i = 0; $i < strlen ($passda); $i++) { if (!strchr ("0123456789", $passda[$i])) { $continue = 0; } } } if (!$continue) { echo "Only DIGITS, or characters \"0\"-\"9\" are allowed for passdigits. There must be exactly 6 digits only."; } else { if ($authed) { if ($passda != $passdb) { echo "Passwords don't match.
Login } include ("footer.php"); echo ""; //$prof->printTimers(true); ?> |