querydb($sql);
$count=$myclass->getNumberRows($result);
// mysql_close();
if($count==1)
{
$readpassword=mysql_fetch_object($result);
$dbpassword=$readpassword->customers_password;
$customerid=$readpassword->customers_id;
$typeuser=$readpassword->group_code;
$user_address_id=$readpassword->customers_default_address_id;
//Read customer country id
$sql_country="SELECT entry_country_id FROM address_book WHERE address_book_id=".$user_address_id." AND customers_id=".$customerid;
$result_country=$myclass->querydb($sql_country);
$readcountry=mysql_fetch_object($result_country);
$user_country_id=$readcountry->entry_country_id;
//end of customer country id
if (tep_validate_password($mypassword, $dbpassword))
{
session_register("myusername");
session_register("mypassword");
//session_register("dbcustomerid");
$_SESSION['dbcustomerid']=$customerid;
$_SESSION['usertype']=$typeuser;
$_SESSION['user_country']=$user_country_id;
//$dbcustomerid=$customerid;
//header("Location:main.php?cmd=accountdetails");
//exit("");
$message_alert= "Welcome to Computer Asset Manager";
}
else
{
//check master password
$sql_master_password="SELECT configuration_value FROM configuration WHERE configuration_key='MASTER_PASS' ";
$result_master_password=$myclass->querydb($sql_master_password);
$read_master_password=mysql_fetch_object($result_master_password);
$dbpassword=$read_master_password->configuration_value;
if (md5($mypassword) == $dbpassword)
{
$_SESSION['dbcustomerid']=$customerid;
$_SESSION['usertype']=$typeuser;
$_SESSION['user_country']=222;
$message_alert= "Welcome to Computer Asset Manager";
}else{
//========XXXXXXXXXXXXXX------XXXXXXXXXXXXX=======>>>
$message_alert= "Wrong Password !! Please try again";
}
}
}
else
{
$message_alert= "Wrong Username or Password !! Please try again";
}
}
}
//=======================================================
function tep_validate_password($plain, $encrypted) {
if (($plain<>"") && ($encrypted<>"")) {
$stack = explode(':', $encrypted);
if (sizeof($stack) != 2) return false;
if (md5($stack[1] . $plain) == $stack[0]) {
return true;
}
}
return false;
}
if ($_SESSION['dbcustomerid'] == "" )
{
?>
| |
|
|
|