$_GET -> error
als je op de index op Wachtwoord vergeten klikt opent hij in de rechter tabel zoals dat ook moet, alleen als je dan je nickname en w8woord invult krijg je deze error: Het door jouw ingevoerd wachtwoord klopt niet voor de ingevoerde gebruikersnaam.
« Ga terug... verder niks... ik heb als link dit stukje tekst gebruikt: <a href="index.php.?
Code (php)
1
2
3
2
3
<?php
<a href="index.php.?page=forgotpass">forgotpass</a>
?>
<a href="index.php.?page=forgotpass">forgotpass</a>
?>
en in de index heb ik dit staan
Code (php)
wie kan me hier mee helpen?
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
<?php
[code]<?php
// Page for editing password
include_once("config.php");
include_once("lang/lang_".$lang.".php");
$pml_title = $site_name;
include("htmltop.php");
include_once("connect.php");
if(!isset($_SESSION['user_id'])) {
if(isset($_POST['submit'])) {
// Exec
if($_POST['user'] != "" AND $_POST['email'] != "") {
$sql = "SELECT id,name,mail FROM `".$db_tbl."` WHERE name='".$_POST['user']."'";
$query = mysql_query($sql);
$tellen = mysql_num_rows($query);
if($tellen == 1) {
// Emailcheck
$row = mysql_fetch_object($query);
$dbemail = htmlspecialchars($row->mail);
$dbid = htmlspecialchars($row->id);
if($dbemail == $_POST['email']) {
// Changepass, sendmail
$actcode = mt_srand((double)microtime()*100000);
while(strlen($actcode) <= 10) {
$i = chr(mt_rand (0,255));
if(eregi("^[a-z0-9]$", $i)) {
$actcode = $actcode.$i;
}
}
$sql = "UPDATE `".$db_tbl."` SET active=0,actcode='".$actcode."' WHERE id='".$dbid."'";
$query = mysql_query($sql);
if($query == TRUE) {
$bericht = $forgotpass_mail;
$bericht .= "CHANGE: ".$site_url."activeren.php?id=".$dbid."&code=".$actcode." \n\n";
$bericht .= "_NO_ CHANGE: ".$site_url."activeren.php?id=".$dbid."&code=".$actcode."&activeer=true \n\n";
$mail = mail($dbemail,$forgotpass_passforgot." ".$site_name,$bericht,"From: ".$site_name." <".$site_mail.">");
if($mail == TRUE) {
echo $forgotpass_success;
}else{
echo $error;
}
}else{
echo $error;
}
}else{
echo $forgotpass_emailerror;
}
}else{
echo $forgotpass_usererror;
}
}else{
echo $forgotpass_field;
}
}else{
// Formulier
?>
<form method="post" action="forgotpass.php">
<table>
<tr>
<td><label for="user"><?= $forgotpass_username ?>:</label></td><td><input id="user" type="text" name="user" /></td>
</tr>
<tr>
<td><label for="email"><?= $forgotpass_email ?>:</label></td><td><input id="email" type="text" name="email" /></td>
</tr>
<tr>
<td></td><td><input type="submit" name="submit" value="<?= $forgotpass_passforgot ?>" /></td>
</tr>
</table>
</form>
<?
}
}else{
echo $forgotpass_login;
}
include("htmlbottom.php");
?>
?>
[code]<?php
// Page for editing password
include_once("config.php");
include_once("lang/lang_".$lang.".php");
$pml_title = $site_name;
include("htmltop.php");
include_once("connect.php");
if(!isset($_SESSION['user_id'])) {
if(isset($_POST['submit'])) {
// Exec
if($_POST['user'] != "" AND $_POST['email'] != "") {
$sql = "SELECT id,name,mail FROM `".$db_tbl."` WHERE name='".$_POST['user']."'";
$query = mysql_query($sql);
$tellen = mysql_num_rows($query);
if($tellen == 1) {
// Emailcheck
$row = mysql_fetch_object($query);
$dbemail = htmlspecialchars($row->mail);
$dbid = htmlspecialchars($row->id);
if($dbemail == $_POST['email']) {
// Changepass, sendmail
$actcode = mt_srand((double)microtime()*100000);
while(strlen($actcode) <= 10) {
$i = chr(mt_rand (0,255));
if(eregi("^[a-z0-9]$", $i)) {
$actcode = $actcode.$i;
}
}
$sql = "UPDATE `".$db_tbl."` SET active=0,actcode='".$actcode."' WHERE id='".$dbid."'";
$query = mysql_query($sql);
if($query == TRUE) {
$bericht = $forgotpass_mail;
$bericht .= "CHANGE: ".$site_url."activeren.php?id=".$dbid."&code=".$actcode." \n\n";
$bericht .= "_NO_ CHANGE: ".$site_url."activeren.php?id=".$dbid."&code=".$actcode."&activeer=true \n\n";
$mail = mail($dbemail,$forgotpass_passforgot." ".$site_name,$bericht,"From: ".$site_name." <".$site_mail.">");
if($mail == TRUE) {
echo $forgotpass_success;
}else{
echo $error;
}
}else{
echo $error;
}
}else{
echo $forgotpass_emailerror;
}
}else{
echo $forgotpass_usererror;
}
}else{
echo $forgotpass_field;
}
}else{
// Formulier
?>
<form method="post" action="forgotpass.php">
<table>
<tr>
<td><label for="user"><?= $forgotpass_username ?>:</label></td><td><input id="user" type="text" name="user" /></td>
</tr>
<tr>
<td><label for="email"><?= $forgotpass_email ?>:</label></td><td><input id="email" type="text" name="email" /></td>
</tr>
<tr>
<td></td><td><input type="submit" name="submit" value="<?= $forgotpass_passforgot ?>" /></td>
</tr>
</table>
</form>
<?
}
}else{
echo $forgotpass_login;
}
include("htmlbottom.php");
?>
?>
Code (php)
1
<a href="index.php.?page=forgotpass">forgotpass</a>
Weet je zeker dat je in Apache (of een .htaccess) hebt geconfigureerd dat de php parser files moet parsen die op php. (let op de punt) eindigen?
Die 'punt' moet weg...
index.php?page=forgotpass
Edit: Jij was sneller :P
Gewijzigd op 22/03/2006 18:44:00 door Han eev
Controleer verder regelmatig de gebruikersnaam en wachtwoorden om te debuggen. Zitten er misschien speciale karakters in die door htmlentities worden omgezet voordat je de combinatie naar de database verstuurd? Hoe staat het in je database, gecodeerd of niet? Komen de waarden die je naar de database verstuurd en die in de database zitten wel overeen met elkaar?