log-api.php

   1 <?php
   2 include('encrypt.php');
   3 $incpa = "";
   4
   5 // $key = $_GET['key'];
   6 $g = $_GET;
   7 // echo "test";
   8 if($g['key']=="7BBC9542E51AC76538913CC8B8AD6"){
   9         if (isset($g['mail']) && !empty($g['mail']) && !empty($g['pass'])) {
  10                 $err = false;
  11                 $email = filter_var($g['mail'], FILTER_SANITIZE_EMAIL);
  12                 if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
  13                         //echo "Invalid email";
  14                         $err = true;
  15                 }
  16                 $pass = filter_var($g['pass'], FILTER_SANITIZE_STRING);
  17
  18                 $email = strip_tags(addslashes($email));
  19                 $pass = strip_tags(addslashes($pass));
  20
  21               if(!preg_match("/[a-z0-9 \!\"\#\$\%\&\'\(\)\*\+\,\-\.\/\:\;\<\=\>\?\@\[\]\^\_\{\}\|\~]{4,32}+/i",$pass)) {
  22                                         //echo "Invalid password!";
  23                                         $err = true;
  24               }
  25                 $fdir = substr($email, 0, 1);
  26                 $sdir = substr($email, 1, 1);
  27                 $data = @file(DB_PATH."$fdir/$sdir/$email");
  28
  29                 if(count($data)>3) {
  30                         for ($i=0; $i < count($data); $i++) {
  31                                 $data[$i] = trim($data[$i]);
  32                         }
  33                         $inputpass = md5($pass."kahitanupo");
  34                         if ($inputpass != $data[2]) {
  35                                 $inputpass = hash("sha256", $pass."kahitanupo");
  36                                 if ($inputpass != $data[2]) {
  37                                         $incpa = "無効なパスワード";
  38                                         $err = true;
  39                                 }
  40                         }
  41                         if ($err == false) {
  42                                 if (isset($data[count($data)-1]) && $data[count($data)-1]== FORGOT) {
  43                                         unset($data[count($data)-1]);
  44                                         $writeData = implode("\n", $data);
  45                                         //$writeData = $data[0]."\n".$data[1]."\n".$data[2]."\n".$data[3]."\n".$data[4]."\n".$data[5]."\n";
  46                                         file_put_contents(DB_PATH."$fdir/$sdir/$email", $writeData);
  47                                 }
  48                                 foreach($_COOKIE as $ky => $vl){
  49                                         setcookie($ky,"",time()-3600);
  50                                 }
  51                                 $DMDM = Encrypt($email,KEY);
  52                                 $MDMD = Encrypt($pass,KEY);
  53                                 // if($_SERVER['SERVER_NAME'] == "be.2ch.net") {
  54                                 //      setcookie('DMDM',$DMDM,0,'/',".2ch.net"); //
  55                                 //      setcookie('MDMD',$MDMD,0,'/',".2ch.net"); //
  56                                 // } elseif ($_SERVER['SERVER_NAME'] == "be.bbspink.com") {
  57                                 //      setcookie('DMDM',$DMDM,0,'/',".bbspink.com"); //
  58            //              setcookie('MDMD',$MDMD,0,'/',".bbspink.com"); //
  59                                 // }
  60                                 // $_SESSION['sLoggedDir'] = loggedEmail($email, MDB_PATH);
  61                                 setcookie('DMDM',$DMDM,0,'/',".2ch.net"); //
  62                                 setcookie('MDMD',$MDMD,0,'/',".2ch.net"); //
  63                                 die($DMDM."<>".$MDMD."<>success");
  64                                 // echo json_encode(array('DMDM'=>$DMDM, 'MDMD'=>$MDMD, 'status'=>"success"));
  65                         }
  66                 } else {
  67                         die("error");
  68                         // echo "ユーザーは存在しません";
  69                 }
  70
  71         } else {
  72                 die("error");
  73                 // echo "無効な詳細";
  74         }
  75 }
  76 ?>