From cb0912754f826e468b32c178e1abc7739463c494 Mon Sep 17 00:00:00 2001
From: Savetheinternet <savetheinternet@n0v4.com>
Date: Thu, 2 Dec 2010 20:55:56 +1100
Subject: "Create board" page

---
 inc/user.php | 87 ------------------------------------------------------------
 1 file changed, 87 deletions(-)

(limited to 'inc/user.php')

diff --git a/inc/user.php b/inc/user.php
index 05deb0e3..126777bd 100644
--- a/inc/user.php
+++ b/inc/user.php
@@ -21,91 +21,4 @@
 		$user = Array('valid' => true, 'appeared' => $_COOKIE[TIME_COOKIE]);
 	}
 	
-	// 'false' means that the user is not logged in as a moderator
-	$mod = false;
-	
-	// Creates a small random string for validating moderators' cookies
-	function mkhash($length=12) {
-		// The method here isn't really important,
-		// but I think this generates a relatively
-		// unique string that looks cool.
-		// If you choose to change this, make sure it cannot include a ':' character.
-		return substr(base64_encode(sha1(rand() . time(), true)), 0, $length);
-	}
-	
-	function login($username, $password, $makehash=true) {
-		global $sql, $mod;
-		
-		// SHA1 password
-		if($makehash) {
-			$password = sha1($password);
-		}
-		
-		$res = mysql_query(sprintf(
-			"SELECT `id`,`type` FROM `mods` WHERE `username` = '%s' AND `password` = '%s' LIMIT 1",
-				mysql_real_escape_string($username),
-				$password
-		), $sql) or error(mysql_error($sql));
-		
-		if($user = mysql_fetch_array($res)) {
-			return $mod = Array(
-				'id' => $user['id'],
-				'type' => $user['type'],
-				'username' => $username,
-				'password' => $password,
-				'hash' => mkhash()
-				);
-		} else return false;
-	}
-	
-	function setCookies() {
-		global $mod;
-		if(!$mod) error('setCookies() was called for a non-moderator!');
-		
-		// MOD_COOKIE contains username:hash
-		setcookie(MOD_COOKIE, $mod['username'] . ':' . $mod['hash'], time()+COOKIE_EXPIRE, JAIL_COOKIES?ROOT:'/', null, false, true);
-		
-		// Put $mod in the session
-		$_SESSION['mod'] = $mod;
-		
-		// Lock sessions to IP addresses
-		if(MOD_LOCK_IP)
-			$_SESSION['mod']['ip'] = $_SERVER['REMOTE_ADDR'];
-	}
-	
-	function destroyCookies() {
-		// Delete the cookies
-		setcookie(MOD_COOKIE, 'deleted', time()-COOKIE_EXPIRE, JAIL_COOKIES?ROOT:'/', null, false, true);
-		
-		// Unset the session
-		unset($_SESSION['mod']);
-	}
-	
-	if(isset($_COOKIE['mod']) && isset($_SESSION['mod']) && is_array($_SESSION['mod'])) {
-		// Should be username:session hash
-		$cookie = explode(':', $_COOKIE['mod']);
-		if(count($cookie) != 2) {
-			destroyCookies();
-			error(ERROR_MALFORMED);
-		}
-		
-		// Validate session
-		if(	$cookie[0] != $_SESSION['mod']['username'] ||
-			$cookie[1] != $_SESSION['mod']['hash']) {
-			// Malformed cookies
-			destroyCookies();
-			error(ERROR_MALFORMED);
-		}
-		
-		// Open connection
-		sql_open();
-		
-		// Check username/password
-		if(!login($_SESSION['mod']['username'], $_SESSION['mod']['password'], false)) {
-			destroyCookies();
-			error(ERROR_INVALIDAFTER);
-		}
-		
-		$mod = $_SESSION['mod'];
-	}
 ?>
\ No newline at end of file
-- 
cgit v1.3