2003-04-01 09:12:34 -05:00
< ? php
2003-12-10 19:22:36 -05:00
require ( dirname ( __FILE__ ) . '/wp-config.php' );
2003-04-01 09:12:34 -05:00
if ( ! function_exists ( 'add_magic_quotes' )) {
function add_magic_quotes ( $array ) {
foreach ( $array as $k => $v ) {
if ( is_array ( $v )) {
$array [ $k ] = add_magic_quotes ( $v );
} else {
$array [ $k ] = addslashes ( $v );
}
}
return $array ;
}
}
if ( ! get_magic_quotes_gpc ()) {
2004-04-20 18:56:47 -04:00
$_GET = add_magic_quotes ( $_GET );
$_POST = add_magic_quotes ( $_POST );
$_COOKIE = add_magic_quotes ( $_COOKIE );
2003-04-01 09:12:34 -05:00
}
2003-12-18 04:36:13 -05:00
$wpvarstoreset = array ( 'action' , 'mode' , 'error' , 'text' , 'popupurl' , 'popuptitle' );
2003-04-01 09:12:34 -05:00
2003-12-18 04:36:13 -05:00
for ( $i = 0 ; $i < count ( $wpvarstoreset ); $i = $i + 1 ) {
$wpvar = $wpvarstoreset [ $i ];
if ( ! isset ( $$wpvar )) {
2004-04-20 18:56:47 -04:00
if ( empty ( $_POST [ " $wpvar " ])) {
if ( empty ( $_GET [ " $wpvar " ])) {
2003-12-18 04:36:13 -05:00
$$wpvar = '' ;
2003-04-01 09:12:34 -05:00
} else {
2004-04-20 18:56:47 -04:00
$$wpvar = $_GET [ " $wpvar " ];
2003-04-01 09:12:34 -05:00
}
} else {
2004-04-20 18:56:47 -04:00
$$wpvar = $_POST [ " $wpvar " ];
2003-04-01 09:12:34 -05:00
}
}
}
switch ( $action ) {
2003-06-01 01:16:53 -04:00
case 'logout' :
2003-04-01 09:12:34 -05:00
2004-05-17 15:15:45 -04:00
setcookie ( 'wordpressuser_' . $cookiehash , " " , time () - 31536000 , COOKIEPATH );
setcookie ( 'wordpresspass_' . $cookiehash , " " , time () - 31536000 , COOKIEPATH );
2003-08-02 20:00:22 -04:00
header ( 'Expires: Wed, 11 Jan 1984 05:00:00 GMT' );
header ( 'Last-Modified: ' . gmdate ( 'D, d M Y H:i:s' ) . ' GMT' );
header ( 'Cache-Control: no-cache, must-revalidate' );
header ( 'Pragma: no-cache' );
2003-04-01 09:12:34 -05:00
if ( $is_IIS ) {
2003-12-10 19:22:36 -05:00
header ( 'Refresh: 0;url=wp-login.php' );
2003-04-01 09:12:34 -05:00
} else {
2003-12-10 19:22:36 -05:00
header ( 'Location: wp-login.php' );
2003-04-01 09:12:34 -05:00
}
exit ();
break ;
2003-06-01 01:16:53 -04:00
case 'login' :
2003-04-01 09:12:34 -05:00
2004-04-20 18:56:47 -04:00
if ( ! empty ( $_POST )) {
$log = $_POST [ 'log' ];
$pwd = $_POST [ 'pwd' ];
$redirect_to = $_POST [ 'redirect_to' ];
2003-04-01 09:12:34 -05:00
}
2004-02-01 06:48:34 -05:00
$user = get_userdatabylogin ( $log );
if ( 0 == $user -> user_level ) {
2004-03-09 15:23:57 -05:00
$redirect_to = get_settings ( 'siteurl' ) . '/wp-admin/profile.php' ;
2004-02-01 06:48:34 -05:00
}
2003-11-24 19:46:52 -05:00
2003-04-01 09:12:34 -05:00
function login () {
2003-06-01 01:16:53 -04:00
global $wpdb , $log , $pwd , $error , $user_ID ;
2003-04-01 09:12:34 -05:00
global $tableusers , $pass_is_md5 ;
2003-06-01 01:16:53 -04:00
$user_login = & $log ;
2004-02-09 04:56:57 -05:00
$pwd = md5 ( $pwd );
2003-06-01 01:16:53 -04:00
$password = & $pwd ;
2003-04-01 09:12:34 -05:00
if ( ! $user_login ) {
2004-04-25 15:45:22 -04:00
$error = __ ( '<strong>Error</strong>: the login field is empty.' );
2003-04-01 09:12:34 -05:00
return false ;
}
if ( ! $password ) {
2004-04-25 15:45:22 -04:00
$error = __ ( '<strong>Error</strong>: the password field is empty.' );
2003-04-01 09:12:34 -05:00
return false ;
}
2004-02-09 04:56:57 -05:00
$query = " SELECT ID, user_login, user_pass FROM $tableusers WHERE user_login = ' $user_login ' AND user_pass = ' $password ' " ;
2003-06-01 01:16:53 -04:00
$login = $wpdb -> get_row ( $query );
2003-04-01 09:12:34 -05:00
2003-06-01 01:16:53 -04:00
if ( ! $login ) {
2004-04-25 15:45:22 -04:00
$error = __ ( '<strong>Error</strong>: wrong login or password.' );
2003-06-01 01:16:53 -04:00
$pwd = '' ;
2003-04-01 09:12:34 -05:00
return false ;
} else {
2003-06-01 01:16:53 -04:00
$user_ID = $login -> ID ;
2004-02-09 04:56:57 -05:00
if (( $pass_is_md5 == 0 && $login -> user_login == $user_login && $login -> user_pass == $password ) || ( $pass_is_md5 == 1 && $login -> user_login == $user_login && $login -> user_pass == md5 ( $password ))) {
2003-04-01 09:12:34 -05:00
return true ;
} else {
2004-04-25 15:45:22 -04:00
$error = __ ( '<strong>Error</strong>: wrong login or password.' );
2003-06-01 01:16:53 -04:00
$pwd = '' ;
2003-04-01 09:12:34 -05:00
return false ;
}
}
}
if ( ! login ()) {
2003-06-01 01:16:53 -04:00
header ( 'Expires: Wed, 11 Jan 1984 05:00:00 GMT' );
header ( 'Last-Modified: ' . gmdate ( 'D, d M Y H:i:s' ) . ' GMT' );
header ( 'Cache-Control: no-cache, must-revalidate' );
header ( 'Pragma: no-cache' );
if ( $is_IIS ) {
2003-12-10 19:22:36 -05:00
header ( 'Refresh: 0;url=wp-login.php' );
2003-06-01 01:16:53 -04:00
} else {
2003-12-10 19:22:36 -05:00
header ( 'Location: wp-login.php' );
2003-06-01 01:16:53 -04:00
}
2003-04-01 09:12:34 -05:00
exit ();
} else {
2003-06-01 01:16:53 -04:00
$user_login = $log ;
$user_pass = $pwd ;
2004-05-07 19:56:33 -04:00
setcookie ( 'wordpressuser_' . $cookiehash , $user_login , time () + 31536000 , COOKIEPATH );
setcookie ( 'wordpresspass_' . $cookiehash , md5 ( $user_pass ), time () + 31536000 , COOKIEPATH );
2003-06-01 01:16:53 -04:00
header ( 'Expires: Wed, 11 Jan 1984 05:00:00 GMT' );
header ( 'Last-Modified: ' . gmdate ( 'D, d M Y H:i:s' ) . ' GMT' );
header ( 'Cache-Control: no-cache, must-revalidate' );
header ( 'Pragma: no-cache' );
2003-04-01 09:12:34 -05:00
switch ( $mode ) {
2003-06-01 01:16:53 -04:00
case 'bookmarklet' :
2003-12-10 19:22:36 -05:00
$location = " wp-admin/bookmarklet.php?text= $text &popupurl= $popupurl &popuptitle= $popuptitle " ;
2003-04-01 09:12:34 -05:00
break ;
2003-06-01 01:16:53 -04:00
case 'sidebar' :
$location = " wp-admin/sidebar.php?text= $text &popupurl= $popupurl &popuptitle= $popuptitle " ;
2003-04-01 09:12:34 -05:00
break ;
2003-06-01 01:16:53 -04:00
case 'profile' :
$location = " wp-admin/profile.php?text= $text &popupurl= $popupurl &popuptitle= $popuptitle " ;
2003-04-01 09:12:34 -05:00
break ;
default :
2003-06-01 01:16:53 -04:00
$location = " $redirect_to " ;
2003-04-01 09:12:34 -05:00
break ;
}
if ( $is_IIS ) {
header ( " Refresh: 0;url= $location " );
} else {
header ( " Location: $location " );
}
}
break ;
2003-06-01 01:16:53 -04:00
case 'lostpassword' :
2003-04-01 09:12:34 -05:00
2003-05-23 13:21:52 -04:00
?>
<! DOCTYPE html PUBLIC " -//W3C//DTD XHTML 1.0 Transitional//EN " " http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd " >
< html xmlns = " http://www.w3.org/1999/xhtml " >
2003-04-01 09:12:34 -05:00
< head >
2004-04-26 11:45:42 -04:00
< title >< ? php _e ( 'WordPress » Lost password ?' ) ?> </title>
2004-03-01 01:13:32 -05:00
< meta http - equiv = " Content-Type " content = " text/html; charset=<?php echo get_settings('blog_charset'); ?> " />
2004-02-26 11:15:48 -05:00
< link rel = " stylesheet " href = " <?php echo get_settings('siteurl'); ?>/wp-admin/wp-admin.css " type = " text/css " />
2003-06-11 02:03:41 -04:00
< script type = " text/javascript " >
function focusit () {
// focus on first input field
document . lostpass . user_login . focus ();
}
window . onload = focusit ;
</ script >
2003-04-01 09:12:34 -05:00
</ head >
2003-05-23 13:21:52 -04:00
< body >
2003-04-01 09:12:34 -05:00
2003-05-23 13:21:52 -04:00
< div id = " login " >
2004-04-25 15:45:22 -04:00
< p >< ? php _e ( 'Please enter your information here. We will send you a new password.' ) ?> </p>
2003-04-01 09:12:34 -05:00
< ? php
if ( $error ) echo " <div align= \" right \" style= \" padding:4px; \" ><font color= \" #FF0000 \" > $error </font><br /> </div> " ;
?>
2003-12-10 19:22:36 -05:00
< form name = " " action = " wp-login.php " method = " post " id = " lostpass " >
2003-04-01 09:12:34 -05:00
< input type = " hidden " name = " action " value = " retrievepassword " />
2004-04-25 15:45:22 -04:00
< label >< ? php _e ( 'Login:' ) ?> <input type="text" name="user_login" id="user_login" value="" size="12" /></label><br />
< label >< ? php _e ( 'Email:' ) ?> <input type="text" name="email" id="email" value="" size="12" /></label><br />
2003-05-23 13:21:52 -04:00
< input type = " submit " name = " Submit2 " value = " OK " class = " search " >
2003-04-01 09:12:34 -05:00
</ form >
2003-05-23 13:21:52 -04:00
</ div >
2003-04-01 09:12:34 -05:00
2003-06-01 01:16:53 -04:00
2003-04-01 09:12:34 -05:00
</ body >
</ html >
< ? php
break ;
2003-06-01 01:16:53 -04:00
case 'retrievepassword' :
2003-04-01 09:12:34 -05:00
2004-04-20 18:56:47 -04:00
$user_login = $_POST [ " user_login " ];
2003-04-01 09:12:34 -05:00
$user_data = get_userdatabylogin ( $user_login );
2003-06-01 07:05:36 -04:00
$user_email = $user_data -> user_email ;
2003-04-01 09:12:34 -05:00
2004-04-25 15:45:22 -04:00
if ( ! $user_email || $user_email != $_POST [ 'email' ]) die ( sprintf ( __ ( 'Sorry, that user does not seem to exist in our database. Perhaps you have the wrong username or email address? <a href="%s">Try again</a>.' ), 'wp-login.php?action=lostpassword' ));
2004-02-09 05:07:27 -05:00
// Generate something random for a password... md5'ing current time with a rand salt
$user_pass = substr (( MD5 ( " time " . rand ( 1 , 16000 ))), 0 , 6 );
// now insert the new pass md5'd into the db
2004-02-09 14:43:21 -05:00
$wpdb -> query ( " UPDATE $tableusers SET user_pass = MD5(' $user_pass ') WHERE user_login = ' $user_login ' " );
2003-04-01 09:12:34 -05:00
$message = " Login: $user_login\r\n " ;
$message .= " Password: $user_pass\r\n " ;
2004-02-26 11:15:48 -05:00
$message .= 'Login at: ' . get_settings ( 'siteurl' ) . '/wp-login.php' ;
2003-04-01 09:12:34 -05:00
2004-03-01 01:13:32 -05:00
$m = mail ( $user_email , '[' . get_settings ( 'blogname' ) . " ] Your weblog's login/password " , $message );
2003-04-01 09:12:34 -05:00
if ( $m == false ) {
echo " <p>The email could not be sent.<br /> \n " ;
echo " Possible reason: your host may have disabled the mail() function...</p> " ;
die ();
} else {
2003-06-01 01:16:53 -04:00
echo " <p>The email was sent successfully to $user_login 's email address.<br />
2003-12-10 19:22:36 -05:00
< a href = 'wp-login.php' title = 'Check your email first, of course' > Click here to login !</ a ></ p > " ;
2004-02-09 04:56:57 -05:00
// send a copy of password change notification to the admin
2004-03-01 14:55:45 -05:00
mail ( get_settings ( 'admin_email' ), '[' . get_settings ( 'blogname' ) . " ] Password Lost/Change " , " Password Lost and Changed for user: $user_login " );
2003-04-01 09:12:34 -05:00
die ();
}
break ;
default :
2004-04-20 18:56:47 -04:00
if (( ! empty ( $_COOKIE [ 'wordpressuser_' . $cookiehash ])) && ( ! empty ( $_COOKIE [ 'wordpresspass_' . $cookiehash ]))) {
$user_login = $_COOKIE [ 'wordpressuser_' . $cookiehash ];
$user_pass_md5 = $_COOKIE [ 'wordpresspass_' . $cookiehash ];
2003-04-01 09:12:34 -05:00
}
function checklogin () {
2003-06-01 01:16:53 -04:00
global $user_login , $user_pass_md5 , $user_ID ;
2003-04-01 09:12:34 -05:00
$userdata = get_userdatabylogin ( $user_login );
2003-06-01 07:05:36 -04:00
if ( $user_pass_md5 != md5 ( $userdata -> user_pass )) {
2003-04-01 09:12:34 -05:00
return false ;
} else {
return true ;
}
}
if ( ! ( checklogin ()) ) {
2004-04-20 18:56:47 -04:00
if ( ! empty ( $_COOKIE [ 'wordpressuser_' . $cookiehash ])) {
2003-04-01 09:12:34 -05:00
$error = " Error: wrong login/password " ; //, or your session has expired.";
}
} else {
2003-06-01 01:16:53 -04:00
header ( " Expires: Wed, 5 Jun 1979 23:41:00 GMT " ); /* private joke: this is Michel's birthdate - though officially it's on the 6th, since he's GMT+1 :) */
2003-04-01 09:12:34 -05:00
header ( " Last-Modified: " . gmdate ( " D, d M Y H:i:s " ) . " GMT " ); /* different all the time */
header ( " Cache-Control: no-cache, must-revalidate " ); /* to cope with HTTP/1.1 */
header ( " Pragma: no-cache " );
2003-10-26 15:34:24 -05:00
header ( " Location: wp-admin/ " );
2003-04-01 09:12:34 -05:00
exit ();
}
2003-06-11 02:03:41 -04:00
?>
<! DOCTYPE html PUBLIC " -//W3C//DTD XHTML 1.0 Transitional//EN " " http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd " >
2003-05-23 13:21:52 -04:00
< html xmlns = " http://www.w3.org/1999/xhtml " >
2003-04-01 09:12:34 -05:00
< head >
2004-04-25 15:45:22 -04:00
< title >< ? php printf ( __ ( 'WordPress > %s > Login form' ), get_settings ( 'blogname' )) ?> </title>
2004-03-01 01:13:32 -05:00
< meta http - equiv = " Content-Type " content = " text/html; charset=<?php echo get_settings('blog_charset'); ?> " />
2004-02-26 11:15:48 -05:00
< link rel = " stylesheet " href = " <?php echo get_settings('siteurl'); ?>/wp-admin/wp-admin.css " type = " text/css " />
2003-06-11 02:03:41 -04:00
< script type = " text/javascript " >
function focusit () {
// focus on first input field
document . loginform . log . focus ();
}
window . onload = focusit ;
</ script >
2003-04-01 09:12:34 -05:00
</ head >
2003-05-23 13:21:52 -04:00
< body >
2003-04-01 09:12:34 -05:00
2003-05-23 13:21:52 -04:00
< div id = " login " >
2003-06-11 02:03:41 -04:00
< p >
2004-04-28 03:27:03 -04:00
< a href = " <?php echo get_settings('home'); ?> " title = " <?php _e('Are you lost?') ?> " >< ? php _e ( 'Back to blog?' ) ?> </a><br />
2004-02-29 03:43:36 -05:00
< ? php if ( get_settings ( 'users_can_register' )) { ?>
2004-04-25 15:45:22 -04:00
< a href = " <?php echo get_settings('siteurl'); ?>/wp-register.php " title = " <?php _e('Register to be an author') ?> " >< ? php _e ( 'Register?' ) ?> </a><br />
2003-05-24 17:29:49 -04:00
< ? php } ?>
2004-04-25 15:45:22 -04:00
< a href = " <?php echo get_settings('siteurl'); ?>/wp-login.php?action=lostpassword " title = " <?php _e('Password Lost and Found') ?> " >< ? php _e ( 'Lost your password?' ) ?> </a>
2003-06-11 02:03:41 -04:00
</ p >
2003-04-01 09:12:34 -05:00
< ? php
if ( $error ) echo " <div align= \" right \" style= \" padding:4px; \" ><font color= \" #FF0000 \" > $error </font><br /> </div> " ;
?>
2003-12-10 19:22:36 -05:00
< form name = " login " id = " loginform " action = " wp-login.php " method = " post " >
2003-04-01 09:12:34 -05:00
< ? php if ( $mode == " bookmarklet " ) { ?>
2003-06-11 02:03:41 -04:00
< input type = " hidden " name = " mode " value = " <?php echo $mode ?> " />
< input type = " hidden " name = " text " value = " <?php echo $text ?> " />
< input type = " hidden " name = " popupurl " value = " <?php echo $popupurl ?> " />
< input type = " hidden " name = " popuptitle " value = " <?php echo $popuptitle ?> " />
2003-04-01 09:12:34 -05:00
< ? php } ?>
2004-04-20 18:56:47 -04:00
< ? php if ( isset ( $_GET [ " redirect_to " ])) { ?>
< input type = " hidden " name = " redirect_to " value = " <?php echo $_GET["redirect_to"] ?> " />
2003-11-12 10:22:47 -05:00
< ? php } else { ?>
2003-10-26 15:34:24 -05:00
< input type = " hidden " name = " redirect_to " value = " wp-admin/ " />
2003-11-12 10:22:47 -05:00
< ? php } ?>
2003-06-11 02:03:41 -04:00
< input type = " hidden " name = " action " value = " login " />
2004-04-25 15:45:22 -04:00
< label >< ? php _e ( 'Login:' ) ?> <input type="text" name="log" id="log" value="" size="20" tabindex="1" /></label><br />
< label >< ? php _e ( 'Password:' ) ?> <input type="password" name="pwd" value="" size="20" tabindex="2" /></label><br />
2003-08-21 13:25:48 -04:00
< input type = " submit " name = " Submit2 " value = " OK " class = " search " tabindex = " 3 " />
2003-04-01 09:12:34 -05:00
</ form >
2003-05-23 13:21:52 -04:00
</ div >
2003-04-01 09:12:34 -05:00
</ body >
</ html >
2003-06-11 02:03:41 -04:00
< ? php
2003-04-01 09:12:34 -05:00
break ;
2003-06-11 02:03:41 -04:00
} // end action switch
2003-11-12 10:22:47 -05:00
?>
