Reply to thread

Message

<blockquote data-quote="Rebel" data-source="post: 370271" data-attributes="member: 65125">It didn't work.This is what happens.<img src="https://i.gyazo.com/9bb6b40d20c0dff61ce16331dbed5b58.png" alt="" class="fr-fic fr-dii fr-draggable " style="" />RevCMS Class.Users[PHP]&lt;?phpnamespace Revolution;if(!defined('IN_INDEX')) { die('Sorry, you cannot access this file.'); }class users implements iUsers{&nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Authenticate-------------------------------------*/&nbsp;&nbsp; &nbsp; &nbsp; final public function isLogged()&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; if(isset($_SESSION['user']['id']))&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return false;&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Checking of submitted data-------------------------------------*/&nbsp;&nbsp; &nbsp; &nbsp; final public function validName($username)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; if(strlen($username) &lt;= 25 &amp;&amp; ctype_alnum($username))&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; return false;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function validEmail($email)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return preg_match(&quot;/^[a-z0-9_\.-]+@([a-z0-9]+([\-]+[a-z0-9]+)*\.)+[a-z]{2,7}$/i&quot;, $email);&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function validSecKey($seckey)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; if(is_numeric($seckey) &amp;&amp; strlen($seckey) == 4)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return false;&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; final public function nameTaken($username)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($engine-&gt;num_rows(&quot;SELECT * FROM users WHERE username = '&quot; . $username . &quot;' LIMIT 1&quot;) &gt; 0)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return false;&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; final public function emailTaken($email)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($engine-&gt;num_rows(&quot;SELECT * FROM users WHERE mail = '&quot; . $email . &quot;' LIMIT 1&quot;) &gt; 0)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return false;&nbsp; &nbsp; }&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function userValidation($username, $password)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; if($engine-&gt;num_rows(&quot;SELECT * FROM users WHERE username = '&quot; . $username . &quot;' AND password = '&quot; . $password . &quot;' LIMIT 1&quot;) &gt; 0)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return false;&nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Stuff related to bans-------------------------------------*/&nbsp;&nbsp; &nbsp; &nbsp; final public function isBanned($value)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; if($engine-&gt;num_rows(&quot;SELECT * FROM bans WHERE value = '&quot; . $value . &quot;' LIMIT 1&quot;) &gt; 0)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return false;&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; final public function getReason($value)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; return $engine-&gt;result(&quot;SELECT reason FROM bans WHERE value = '&quot; . $value . &quot;' LIMIT 1&quot;);&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; final public function hasClones($ip)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; if($engine-&gt;num_rows(&quot;SELECT * FROM users WHERE ip_reg = '&quot; . $_SERVER['REMOTE_ADDR'] . &quot;'&quot;) == 1)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return true;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return false;&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Login or Register user-------------------------------------*/&nbsp;&nbsp; &nbsp; &nbsp; final public function register()&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $core, $template, $_CONFIG;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['register']))&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unset($template-&gt;form-&gt;error);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;setData();&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;validName($template-&gt;form-&gt;reg_username))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(!$this-&gt;nameTaken($template-&gt;form-&gt;reg_username))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;validEmail($template-&gt;form-&gt;reg_email))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(!$this-&gt;emailTaken($template-&gt;form-&gt;reg_email))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(strlen($template-&gt;form-&gt;reg_password) &gt; 6)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($template-&gt;form-&gt;reg_password == $template-&gt;form-&gt;reg_rep_password)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($template-&gt;form-&gt;reg_seckey))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;validSecKey($template-&gt;form-&gt;reg_seckey))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; //Continue&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Secret key must only have 4 numbers';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;isBanned($_SERVER['REMOTE_ADDR']) == false)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(!$this-&gt;hasClones($_SERVER['REMOTE_ADDR']))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(!isset($template-&gt;form-&gt;reg_gender)) { $template-&gt;form-&gt;reg_gender = 'M'; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(!isset($template-&gt;form-&gt;reg_figure)) { $template-&gt;form-&gt;reg_figure = $_CONFIG['hotel']['figure']; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;addUser($template-&gt;form-&gt;reg_username, $core-&gt;hashed($template-&gt;form-&gt;reg_password), $template-&gt;form-&gt;reg_email, $_CONFIG['hotel']['motto'], $_CONFIG['hotel']['credits'], $_CONFIG['hotel']['pixels'], 1, $template-&gt;form-&gt;reg_figure, $template-&gt;form-&gt;reg_gender, $core-&gt;hashed($template-&gt;form-&gt;reg_key));&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;turnOn($template-&gt;form-&gt;reg_username);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header('Location: ' . $_CONFIG['hotel']['url'] . '/me');&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; exit;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Sorry, but you cannot register twice';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Sorry, it appears you are IP banned.&lt;br /&gt;';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error .= 'Reason: ' . $this-&gt;getReason($_SERVER['REMOTE_ADDR']);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Password does not match repeated password';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Password must have more than 6 characters';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Email: &lt;b&gt;' . $template-&gt;form-&gt;reg_email . '&lt;/b&gt; is already registered';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Email is not valid';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Username is already registered';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Username is invalid';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function login()&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $template, $_CONFIG, $core;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['login']))&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;setData();&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unset($template-&gt;form-&gt;error);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;nameTaken($template-&gt;form-&gt;log_username))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;isBanned($template-&gt;form-&gt;log_username) == false || $this-&gt;isBanned($_SERVER['REMOTE_ADDR']) == false)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;userValidation($template-&gt;form-&gt;log_username, $core-&gt;hashed($template-&gt;form-&gt;log_password)))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;turnOn($template-&gt;form-&gt;log_username);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;updateUser($_SESSION['user']['id'], 'ip_last', $_SERVER['REMOTE_ADDR']);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;unsetData();&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header('Location: ' . $_CONFIG['hotel']['url'] . '/me');&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; exit;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Details do not match';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Sorry, it appears this user is banned&lt;br /&gt;';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error .= 'Reason: ' . $this-&gt;getReason($template-&gt;form-&gt;log_username);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Username does not exist';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; final public function loginHK()&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $template, $_CONFIG, $core;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['login']))&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;setData();&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unset($template-&gt;form-&gt;error);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($template-&gt;form-&gt;username) &amp;&amp; isset($template-&gt;form-&gt;password))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;nameTaken($template-&gt;form-&gt;username))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;userValidation($template-&gt;form-&gt;username, $core-&gt;hashed($template-&gt;form-&gt;password)))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(($this-&gt;getInfo($_SESSION['user']['id'], 'rank')) &gt;= 4)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $_SESSION[&quot;in_hk&quot;] = true;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header(&quot;Location:&quot;.$_CONFIG['hotel']['url'].&quot;/ase/main&quot;);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; exit;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Incorrect access level.';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Incorrect password.';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'User does not exist.';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;unsetData();&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function help()&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $template, $_CONFIG;&nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;setData();&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($template-&gt;form-&gt;help))&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $to = $_CONFIG['hotel']['email'];&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $subject = &quot;Help from RevCMS user - &quot; . $this-&gt;getInfo($_SESSION['user']['id'], 'username');&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $body = $template-&gt;form-&gt;question;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; if (mail($to, $subject, $body))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $template-&gt;form-&gt;error = 'Message successfully sent! We will answer you shortly!';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $template-&gt;form-&gt;error = 'Message delivery failed.';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }&nbsp; &nbsp; /*-------------------------------Account settings-------------------------------------*/&nbsp;&nbsp; &nbsp; &nbsp; final public function updateAccount()&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $template, $_CONFIG, $core, $engine;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['account']))&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['acc_motto']) &amp;&amp; strlen($_POST['acc_motto']) &lt; 30 &amp;&amp; $_POST['acc_motto'] != $this-&gt;getInfo($_SESSION['user']['id'], 'motto'))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;updateUser($_SESSION['user']['id'], 'motto', $engine-&gt;secure($_POST['acc_motto']));&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header('Location: '.$_CONFIG['hotel']['url'].'/account');&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; exit;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Motto is invalid.';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['acc_email']) &amp;&amp; $_POST['acc_email'] != $this-&gt;getInfo($_SESSION['user']['id'], 'mail'))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;validEmail($_POST['acc_email']))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;updateUser($_SESSION['user']['id'], 'mail', $engine-&gt;secure($_POST['acc_email']));&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header('Location: '.$_CONFIG['hotel']['url'].'/account');&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; exit;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Email is not valid';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(!empty($_POST['acc_old_password']) &amp;&amp; !empty($_POST['acc_new_password']))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($this-&gt;userValidation($this-&gt;getInfo($_SESSION['user']['id'], 'username'), $core-&gt;hashed($_POST['acc_old_password'])))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(strlen($_POST['acc_new_password']) &gt;= 8)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;updateUser($_SESSION['user']['id'], 'password', $core-&gt;hashed($_POST['acc_new_password']));&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; header('Location: '.$_CONFIG['hotel']['url'].'/me');&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; exit;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'New password is too short';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $template-&gt;form-&gt;error = 'Current password is wrong';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function turnOn($k)&nbsp; &nbsp; {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $j = $this-&gt;getID($k);&nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;createSSO($j);&nbsp; &nbsp; &nbsp; &nbsp; $_SESSION['user']['id'] = $j;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;cacheUser($j);&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unset($j);&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Loggin forgotten-------------------------------------*/&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function forgotten()&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Create SSO auth_ticket-------------------------------------*/&nbsp;&nbsp; &nbsp; &nbsp; final public function createSSO($k)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $sessionKey = 'RevCMS-'.rand(9,999).'/'.substr(sha1(time()).'/'.rand(9,9999999).'/'.rand(9,9999999).'/'.rand(9,9999999),0,33);&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;updateUser($k, 'auth_ticket', $sessionKey);&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unset($sessionKey);&nbsp; &nbsp; }&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Adding/Updating/Deleting users-------------------------------------*/&nbsp;&nbsp; &nbsp; &nbsp; final public function addUser($username, $password, $email, $motto, $credits, $pixels, $rank, $figure, $gender, $seckey)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $sessionKey = 'RevCMS-'.rand(9,999).'/'.substr(sha1(time()).'/'.rand(9,9999999).'/'.rand(9,9999999).'/'.rand(9,9999999),0,33);&nbsp; &nbsp; &nbsp; &nbsp; $engine-&gt;query(&quot;INSERT INTO users (username, password, mail, motto, credits, activity_points, rank, look, gender, seckey, ip_last, ip_reg, account_created, last_online, auth_ticket) VALUES('&quot; . $username . &quot;', '&quot; . $password . &quot;', '&quot; . $email . &quot;', '&quot; . $motto . &quot;', '&quot; . $credits . &quot;', '&quot; . $pixels . &quot;', '&quot; . $rank . &quot;', '&quot; . $figure . &quot;', '&quot; . $gender . &quot;', '&quot; . $seckey . &quot;', '&quot; . $_SERVER['REMOTE_ADDR'] . &quot;', '&quot; . $_SERVER['REMOTE_ADDR'] . &quot;', '&quot; . time() . &quot;', '&quot; . time() . &quot;', '&quot; . $sessionKey . &quot;')&quot;);&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; unset($sessionKey);&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function deleteUser($k)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $engine-&gt;query(&quot;DELETE FROM users WHERE id = '&quot; . $k . &quot;' LIMIT 1&quot;);&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $engine-&gt;query(&quot;DELETE FROM items WHERE userid = '&quot; . $k . &quot;' LIMIT 1&quot;);&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $engine-&gt;query(&quot;DELETE FROM rooms WHERE ownerid = '&quot; . $k . &quot;' LIMIT 1&quot;);&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function updateUser($k, $key, $value)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $engine-&gt;query(&quot;UPDATE users SET &quot; . $key . &quot; = '&quot; . $engine-&gt;secure($value) . &quot;' WHERE id = '&quot; . $k . &quot;' LIMIT 1&quot;);&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $_SESSION['user'][$key] = $engine-&gt;secure($value);&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Handling user information-------------------------------------*/&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function cacheUser($k)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $userInfo = $engine-&gt;fetch_assoc(&quot;SELECT username, rank, motto, mail, credits, activity_points, look, auth_ticket, ip_last FROM users WHERE id = '&quot; . $k . &quot;' LIMIT 1&quot;);&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; foreach($userInfo as $key =&gt; $value)&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;setInfo($key, $value);&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function setInfo($key, $value)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; $_SESSION['user'][$key] = $engine-&gt;secure($value);&nbsp; &nbsp; }&nbsp; &nbsp; final public function getInfo($k, $key)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; if(!isset($_SESSION['user'][$key]))&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $value = $engine-&gt;result(&quot;SELECT $key FROM users WHERE id = '&quot; . $engine-&gt;secure($k) . &quot;' LIMIT 1&quot;);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if($value != null)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $this-&gt;setInfo($key, $value);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return $_SESSION['user'][$key];&nbsp; &nbsp; }&nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; /*-------------------------------Get user ID or Username-------------------------------------*/&nbsp;&nbsp; &nbsp; &nbsp; final public function getID($k)&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return $engine-&gt;result(&quot;SELECT id FROM users WHERE username = '&quot; . $engine-&gt;secure($k) . &quot;' LIMIT 1&quot;);&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; final public function getUsername($k)&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; global $engine;&nbsp; &nbsp; &nbsp; &nbsp; return $this-&gt;getInfo($_SESSION['user']['id'], 'username');&nbsp; &nbsp; }&nbsp;&nbsp; }?&gt;[/PHP]</blockquote>

[QUOTE="Rebel, post: 370271, member: 65125"] It didn't work. This is what happens. [IMG]https://i.gyazo.com/9bb6b40d20c0dff61ce16331dbed5b58.png[/IMG] [B]RevCMS Class.Users[/B] [PHP]<?php namespace Revolution; if(!defined('IN_INDEX')) { die('Sorry, you cannot access this file.'); } class users implements iUsers { /*-------------------------------Authenticate-------------------------------------*/ final public function isLogged() { if(isset($_SESSION['user']['id'])) { return true; } return false; } /*-------------------------------Checking of submitted data-------------------------------------*/ final public function validName($username) { if(strlen($username) <= 25 && ctype_alnum($username)) { return true; } return false; } final public function validEmail($email) { return preg_match("/^[a-z0-9_\.-]+@([a-z0-9]+([\-]+[a-z0-9]+)*\.)+[a-z]{2,7}$/i", $email); } final public function validSecKey($seckey) { if(is_numeric($seckey) && strlen($seckey) == 4) { return true; } return false; } final public function nameTaken($username) { global $engine; if($engine->num_rows("SELECT * FROM users WHERE username = '" . $username . "' LIMIT 1") > 0) { return true; } return false; } final public function emailTaken($email) { global $engine; if($engine->num_rows("SELECT * FROM users WHERE mail = '" . $email . "' LIMIT 1") > 0) { return true; } return false; } final public function userValidation($username, $password) { global $engine; if($engine->num_rows("SELECT * FROM users WHERE username = '" . $username . "' AND password = '" . $password . "' LIMIT 1") > 0) { return true; } return false; } /*-------------------------------Stuff related to bans-------------------------------------*/ final public function isBanned($value) { global $engine; if($engine->num_rows("SELECT * FROM bans WHERE value = '" . $value . "' LIMIT 1") > 0) { return true; } return false; } final public function getReason($value) { global $engine; return $engine->result("SELECT reason FROM bans WHERE value = '" . $value . "' LIMIT 1"); } final public function hasClones($ip) { global $engine; if($engine->num_rows("SELECT * FROM users WHERE ip_reg = '" . $_SERVER['REMOTE_ADDR'] . "'") == 1) { return true; } return false; } /*-------------------------------Login or Register user-------------------------------------*/ final public function register() { global $core, $template, $_CONFIG; if(isset($_POST['register'])) { unset($template->form->error); $template->form->setData(); if($this->validName($template->form->reg_username)) { if(!$this->nameTaken($template->form->reg_username)) { if($this->validEmail($template->form->reg_email)) { if(!$this->emailTaken($template->form->reg_email)) { if(strlen($template->form->reg_password) > 6) { if($template->form->reg_password == $template->form->reg_rep_password) { if(isset($template->form->reg_seckey)) { if($this->validSecKey($template->form->reg_seckey)) { //Continue } else { $template->form->error = 'Secret key must only have 4 numbers'; return; } } if($this->isBanned($_SERVER['REMOTE_ADDR']) == false) { if(!$this->hasClones($_SERVER['REMOTE_ADDR'])) { if(!isset($template->form->reg_gender)) { $template->form->reg_gender = 'M'; } if(!isset($template->form->reg_figure)) { $template->form->reg_figure = $_CONFIG['hotel']['figure']; } $this->addUser($template->form->reg_username, $core->hashed($template->form->reg_password), $template->form->reg_email, $_CONFIG['hotel']['motto'], $_CONFIG['hotel']['credits'], $_CONFIG['hotel']['pixels'], 1, $template->form->reg_figure, $template->form->reg_gender, $core->hashed($template->form->reg_key)); $this->turnOn($template->form->reg_username); header('Location: ' . $_CONFIG['hotel']['url'] . '/me'); exit; } else { $template->form->error = 'Sorry, but you cannot register twice'; } } else { $template->form->error = 'Sorry, it appears you are IP banned. '; $template->form->error .= 'Reason: ' . $this->getReason($_SERVER['REMOTE_ADDR']); return; } } else { $template->form->error = 'Password does not match repeated password'; return; } } else { $template->form->error = 'Password must have more than 6 characters'; return; } } else { $template->form->error = 'Email: ' . $template->form->reg_email . ' is already registered'; return; } } else { $template->form->error = 'Email is not valid'; return; } } else { $template->form->error = 'Username is already registered'; return; } } else { $template->form->error = 'Username is invalid'; return; } } } final public function login() { global $template, $_CONFIG, $core; if(isset($_POST['login'])) { $template->form->setData(); unset($template->form->error); if($this->nameTaken($template->form->log_username)) { if($this->isBanned($template->form->log_username) == false || $this->isBanned($_SERVER['REMOTE_ADDR']) == false) { if($this->userValidation($template->form->log_username, $core->hashed($template->form->log_password))) { $this->turnOn($template->form->log_username); $this->updateUser($_SESSION['user']['id'], 'ip_last', $_SERVER['REMOTE_ADDR']); $template->form->unsetData(); header('Location: ' . $_CONFIG['hotel']['url'] . '/me'); exit; } else { $template->form->error = 'Details do not match'; return; } } else { $template->form->error = 'Sorry, it appears this user is banned '; $template->form->error .= 'Reason: ' . $this->getReason($template->form->log_username); return; } } else { $template->form->error = 'Username does not exist'; return; } } } final public function loginHK() { global $template, $_CONFIG, $core; if(isset($_POST['login'])) { $template->form->setData(); unset($template->form->error); if(isset($template->form->username) && isset($template->form->password)) { if($this->nameTaken($template->form->username)) { if($this->userValidation($template->form->username, $core->hashed($template->form->password))) { if(($this->getInfo($_SESSION['user']['id'], 'rank')) >= 4) { $_SESSION["in_hk"] = true; header("Location:".$_CONFIG['hotel']['url']."/ase/main"); exit; } else { $template->form->error = 'Incorrect access level.'; return; } } else { $template->form->error = 'Incorrect password.'; return; } } else { $template->form->error = 'User does not exist.'; return; } } $template->form->unsetData(); } } final public function help() { global $template, $_CONFIG; $template->form->setData(); if(isset($template->form->help)) { $to = $_CONFIG['hotel']['email']; $subject = "Help from RevCMS user - " . $this->getInfo($_SESSION['user']['id'], 'username'); $body = $template->form->question; if (mail($to, $subject, $body)) { $template->form->error = 'Message successfully sent! We will answer you shortly!'; } else { $template->form->error = 'Message delivery failed.'; } } } /*-------------------------------Account settings-------------------------------------*/ final public function updateAccount() { global $template, $_CONFIG, $core, $engine; if(isset($_POST['account'])) { if(isset($_POST['acc_motto']) && strlen($_POST['acc_motto']) < 30 && $_POST['acc_motto'] != $this->getInfo($_SESSION['user']['id'], 'motto')) { $this->updateUser($_SESSION['user']['id'], 'motto', $engine->secure($_POST['acc_motto'])); header('Location: '.$_CONFIG['hotel']['url'].'/account'); exit; } else { $template->form->error = 'Motto is invalid.'; } if(isset($_POST['acc_email']) && $_POST['acc_email'] != $this->getInfo($_SESSION['user']['id'], 'mail')) { if($this->validEmail($_POST['acc_email'])) { $this->updateUser($_SESSION['user']['id'], 'mail', $engine->secure($_POST['acc_email'])); header('Location: '.$_CONFIG['hotel']['url'].'/account'); exit; } else { $template->form->error = 'Email is not valid'; return; } } if(!empty($_POST['acc_old_password']) && !empty($_POST['acc_new_password'])) { if($this->userValidation($this->getInfo($_SESSION['user']['id'], 'username'), $core->hashed($_POST['acc_old_password']))) { if(strlen($_POST['acc_new_password']) >= 8) { $this->updateUser($_SESSION['user']['id'], 'password', $core->hashed($_POST['acc_new_password'])); header('Location: '.$_CONFIG['hotel']['url'].'/me'); exit; } else { $template->form->error = 'New password is too short'; return; } } else { $template->form->error = 'Current password is wrong'; return; } } } } final public function turnOn($k) { $j = $this->getID($k); $this->createSSO($j); $_SESSION['user']['id'] = $j; $this->cacheUser($j); unset($j); } /*-------------------------------Loggin forgotten-------------------------------------*/ final public function forgotten() { } /*-------------------------------Create SSO auth_ticket-------------------------------------*/ final public function createSSO($k) { $sessionKey = 'RevCMS-'.rand(9,999).'/'.substr(sha1(time()).'/'.rand(9,9999999).'/'.rand(9,9999999).'/'.rand(9,9999999),0,33); $this->updateUser($k, 'auth_ticket', $sessionKey); unset($sessionKey); } /*-------------------------------Adding/Updating/Deleting users-------------------------------------*/ final public function addUser($username, $password, $email, $motto, $credits, $pixels, $rank, $figure, $gender, $seckey) { global $engine; $sessionKey = 'RevCMS-'.rand(9,999).'/'.substr(sha1(time()).'/'.rand(9,9999999).'/'.rand(9,9999999).'/'.rand(9,9999999),0,33); $engine->query("INSERT INTO users (username, password, mail, motto, credits, activity_points, rank, look, gender, seckey, ip_last, ip_reg, account_created, last_online, auth_ticket) VALUES('" . $username . "', '" . $password . "', '" . $email . "', '" . $motto . "', '" . $credits . "', '" . $pixels . "', '" . $rank . "', '" . $figure . "', '" . $gender . "', '" . $seckey . "', '" . $_SERVER['REMOTE_ADDR'] . "', '" . $_SERVER['REMOTE_ADDR'] . "', '" . time() . "', '" . time() . "', '" . $sessionKey . "')"); unset($sessionKey); } final public function deleteUser($k) { global $engine; $engine->query("DELETE FROM users WHERE id = '" . $k . "' LIMIT 1"); $engine->query("DELETE FROM items WHERE userid = '" . $k . "' LIMIT 1"); $engine->query("DELETE FROM rooms WHERE ownerid = '" . $k . "' LIMIT 1"); } final public function updateUser($k, $key, $value) { global $engine; $engine->query("UPDATE users SET " . $key . " = '" . $engine->secure($value) . "' WHERE id = '" . $k . "' LIMIT 1"); $_SESSION['user'][$key] = $engine->secure($value); } /*-------------------------------Handling user information-------------------------------------*/ final public function cacheUser($k) { global $engine; $userInfo = $engine->fetch_assoc("SELECT username, rank, motto, mail, credits, activity_points, look, auth_ticket, ip_last FROM users WHERE id = '" . $k . "' LIMIT 1"); foreach($userInfo as $key => $value) { $this->setInfo($key, $value); } } final public function setInfo($key, $value) { global $engine; $_SESSION['user'][$key] = $engine->secure($value); } final public function getInfo($k, $key) { global $engine; if(!isset($_SESSION['user'][$key])) { $value = $engine->result("SELECT $key FROM users WHERE id = '" . $engine->secure($k) . "' LIMIT 1"); if($value != null) { $this->setInfo($key, $value); } } return $_SESSION['user'][$key]; } /*-------------------------------Get user ID or Username-------------------------------------*/ final public function getID($k) { global $engine; return $engine->result("SELECT id FROM users WHERE username = '" . $engine->secure($k) . "' LIMIT 1"); } final public function getUsername($k) { global $engine; return $this->getInfo($_SESSION['user']['id'], 'username'); } } ?>[/PHP] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members