diff --git a/account.php b/account.php index 8c461cc..281cad9 100644 --- a/account.php +++ b/account.php @@ -112,7 +112,7 @@ echo "

You'r password are too weak, try another one.

"; break; case "authfail": - echo "

Authentification failed!

"; + echo "

Authentification failed!

"; break; case "gfail": echo "

Sorry but you don't pass captcha test. Are you a robot?!

"; diff --git a/index.php b/index.php index 08bcbcf..4847479 100644 --- a/index.php +++ b/index.php @@ -16,7 +16,7 @@ ?> - <?= $title?> + <?php echo $title;?> @@ -166,13 +166,13 @@ ?>
- Download";?>
- diff --git a/mail.lib.php b/mail.lib.php index f090cc9..7c506d2 100644 --- a/mail.lib.php +++ b/mail.lib.php @@ -881,14 +881,17 @@ function forgotmail($email, $mailtoken) function rank($data) { switch ($data) { - case "-1": - return "Unverified user"; + case "2": + return "Admin"; break; + case "1": + return "Moderator"; + break; case "0": return "Confirmed User"; break; - case "2": - return "Admin"; + case "-1": + return "Unverified user"; break; case "-2": return "Banned"; diff --git a/register.php b/register.php index eeae2e7..8a79e7a 100644 --- a/register.php +++ b/register.php @@ -36,19 +36,18 @@ if($restul < 1) { $pass = hash("sha512", $pass); - $session = rand(1,9).rand(0,9); if($sendverification == true){ - $mailtoken = $passkey.$pass.$user.$data.$ip.$passkey.$title.$email.$session; + $mailtoken = $passkey.$pass.$user.$data.$ip.$passkey.$title.$email; $mailtoken = md5(md5($mailtoken).md5($mailtoken).$data.$ip); - $sql = "INSERT INTO Account (Name, Password, Authority, LastSession, LastCompliment, Email, RegistrationIP, VerificationToken) VALUES ( ?, ?, '-1', ?, ?, ?, ?, ?)"; - $params = array($user, $pass, $session, $data, $email, $ip, $mailtoken); + $sql = "INSERT INTO Account (Name, Password, Authority, Email, RegistrationIP, VerificationToken) VALUES ( ?, ?, '-1', ?, ?, ?)"; + $params = array($user, $pass, $email, $ip, $mailtoken); $result = sqlsrv_query($mssql, $sql, $params); registermail($email, $mailtoken, $user); exit(header("Location: index.php?reg=success&user=$user&mail=$email")); } else{ - $sql = "INSERT INTO Account (Name, Password, Authority, LastSession, LastCompliment, Email, RegistrationIP, VerificationToken) VALUES ( ?, ?, '0', ?, ?, ?, ?, 'yes')"; - $params = array($user, $pass, $session, $data, $email, $ip); + $sql = "INSERT INTO Account (Name, Password, Authority, Email, RegistrationIP, VerificationToken) VALUES ( ?, ?, '0', ?, ?, 'yes')"; + $params = array($user, $pass, $email, $ip); $result = sqlsrv_query($mssql, $sql, $params); exit(header("Location: index.php?reg=sucess&user=$user")); }