ocf_dev/doaction.php at master · ourcommonfuture/ocf_dev · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
<?php
ob_start();
session_start();
include 'projects/includes/Bluehost_connect.php';

if($_GET["doaction"]=="login")
{
	$email=$_GET["email"];
	$password=$_GET["password"];

		$login_query=mysql_query("select * from USER_INFO where EMAIL='$email' and PASSWORD='$password' and EMAIL!='' and PASSWORD!=''");
		$login_info=mysql_fetch_array($login_query);

		if($login_info["ID"]=="")
		{
			echo '0';
		}
		else
		{
			$_SESSION["uid"]=$login_info["ID"];
			$_SESSION["email"]=$login_info["EMAIL"];
			$_SESSION["name"] = $login_info["NAME"];
			echo '1';
		}
}

if($_GET["doaction"]=="signup_chk")
{
	$email=$_GET["email"];

		$signup_query=mysql_query("select EMAIL from USER_INFO where EMAIL='$email' and EMAIL!=''");
		$num_rows = mysql_num_rows($signup_query);
		// $signup_info=mysql_fetch_array($signup_query);
		if($num_rows==0)
		{
			echo '0';
		}
		else
		{
			echo '1';
		}
}

if($_GET["doaction"]=="signup")
{
	$email=$_GET["email"];
	$org_password=$_GET["password"];
	$md5_password=md5($_GET["password"]);
	$name=$_GET["name"];

	$signupInsert =  mysql_query("insert into  USER_INFO(NAME,EMAIL,PASSWORD,HASH_PASSWORD) values('$name','$email','$org_password','$md5_password')") or die(mysql_error());

	$login_query=mysql_query("select * from USER_INFO where EMAIL='$email' and PASSWORD='$password' and EMAIL!='' and PASSWORD!=''");
	$login_info=mysql_fetch_array($login_query);

	if($login_info["ID"]=="")
	{
		echo '0';
	}
	else
	{
		$_SESSION["uid"]=$login_info["ID"];
		$_SESSION["email"]=$login_info["EMAIL"];
		$_SESSION["name"] = $login_info["NAME"];
		echo '1';
	}
}


?>