prepare("SELECT uid, username, password, old_pass, termination FROM users WHERE username LIKE :username");
$member->execute([":username" => trim($_POST['field_login_username'])]);
if($member->rowCount() > 0) {
$member = $member->fetch(PDO::FETCH_ASSOC);
if($member['termination'] == 1) {
$username_err = "This account has been terminated.";
}
if($member['termination'] !== 1) {
if(password_verify(trim($_POST['field_login_password']), $member['password']) || password_verify(trim($_POST['field_login_password']), $member['old_pass'])) {
$_SESSION['uid'] = $member['uid'];
header("Location: index.php");
$lastlogin = $conn->prepare("UPDATE users SET lastlogin = CURRENT_TIMESTAMP WHERE uid = ?");
$lastlogin->execute([$member['uid']]);
if(password_verify(trim($_POST['field_login_password']), $member['password'])) {
$fuckover = $conn->prepare("UPDATE users SET old_pass = NULL WHERE uid = ?");
$fuckover->execute([$member['uid']]);
}
$ip_reset = $conn->prepare("UPDATE users SET ip = ? WHERE uid = ?");
$ip_reset->execute([$enduser_ip, $member['uid']]);
} else {
$password_err = "Sorry, your login is incorrect.";
$lastfail = $conn->prepare("UPDATE users SET failed_login = CURRENT_TIMESTAMP WHERE uid = ?");
$lastfail->execute([$member['uid']]);
}
}
} else {
$username_err = "That user doesn't exist!";
}
}
}
?>
Log In';
if (isset($username_err)) {echo htmlspecialchars($username_err);}
if (isset($password_err)) {echo htmlspecialchars($password_err);}
if (isset($confirm_password_err)) {echo htmlspecialchars($confirm_password_err);}
if (isset($email_err)) {echo htmlspecialchars($email_err);}
echo '';
?>