From f8c9eb5220afaf2f9a62f9a176a45913240f4081 Mon Sep 17 00:00:00 2001
From: raylu <raylu@cmu.edu>
Date: Thu, 7 Apr 2011 00:27:27 -0400
Subject: Initial import from Dropbox

---
 globe.php | 157 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 157 insertions(+)
 create mode 100644 globe.php

(limited to 'globe.php')

diff --git a/globe.php b/globe.php
new file mode 100644
index 0000000..72795c8
--- /dev/null
+++ b/globe.php
@@ -0,0 +1,157 @@
+<?PHP
+session_start();
+//session_regenerate_id();
+
+//Database login:
+//include_once 'db.inc.php';
+
+
+
+
+$mydomain = "http://www.snapems.com/";
+
+//https://www.google.com/accounts/o8/id?id=AItOawl4GX29ka40T4ZeuXnR2FVsP4LZWaED_T8
+//https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%3Fid%3DAItOawl
+
+
+
+include_once("./includes/header.php");
+
+
+
+function sql_clean($string) { 
+   if (get_magic_quotes_gpc()) { 
+      $string = stripslashes($string); 
+   }
+   $string = mysql_real_escape_string($string);  
+   return $string; 
+} 
+
+function CookieLogin() {
+	include_once "includes/db.inc.php";
+	$userID = $_COOKIE['userID'];
+	$auth = $_COOKIE['auth'];
+
+	$sql = "SELECT `openID`, `displayName`, `isAdmin`
+	FROM `users`
+	WHERE `ID` = '$userID'
+	";
+	
+	$result = mysql_query($sql);
+	if (mysql_num_rows($result) == 0)
+		return;
+		
+	list($claimedid, $display, $isAdmin) = mysql_fetch_row($result);
+		
+	$salt = "33qs5d4j6z98gt1a7n6b5d4x1c66f5nuh8a6d8g9j09aphgf56z5745";
+	$pepper = "Dear sir, have you ever heard of a wild goose chase? 
+		If you've gotten this far, please email me: snapwilliam@gmail.com with this message.
+		I'll give you some sort of prize.";
+	$one = MD5($claimedid);
+	$two = MD5($one.$salt);
+	$three = MD5($pepper.$two);
+	
+	if ($auth == $three) {
+		$_SESSION['accepted'] = 1;
+      $_SESSION['userID'] = $userID;
+      $_SESSION['displayName'] = $display;
+		if ($isAdmin == 1)
+			$_SESSION['isAdmin'] = true;
+
+	}
+	header("Location: $mydomain");
+}
+
+
+
+
+
+
+Function DoLogin($Username, $Password, $RememberMe = False, $EN = False) {
+   
+   If ($EN == False) {
+      $MD5Salt = "LoveSnap";
+      $Password = MD5($Password.$MD5Salt);
+      //Echo " .Encrypted Entry. ";
+   }
+   If ($RememberMe = True) {
+      setcookie("RUsername", $Username, time()+(60*60*24*30));
+      setcookie("RPassword", $Password, time()+(60*60*24*30));
+      setcookie("DoLogin", "True", time()+(60*60*24*30));
+   }
+   //Echo "Logging in...";
+   
+   $sql = "SELECT `ID`, `Username`, `Password`, `Status` FROM `USERS` 
+   WHERE `Username` = '$Username' AND `Password` = '$Password'";
+   $result = mysql_query($sql);
+   If (mysql_num_rows($result) == 0) {
+      Return "Error username/password did not match";
+   } Else {
+   $theID = mysql_result($result, 0, 'ID');
+   $Username = mysql_result($result, 0, 'Username');
+   $Password = mysql_result($result, 0, 'Password');
+   $Status = mysql_result($result, 0, 'Status');
+   
+   $Pepper = "MyPepperWuvsMe!@#$1234";
+   
+   $_SESSION['accepted'] = 1;
+   //If 'remember me' use this for cookie password
+   $_SESSION['passcode'] = MD5($Password.$Pepper.$Username);
+   $_SESSION['userID'] = $theID;
+   $_SESSION['displayName'] = $Username;
+   $_SESSION['status'] = $Status;
+   
+   
+   $sql = "UPDATE `USERS` SET `Last_Logon` = ".Time()." WHERE `ID` = $theID LIMIT 1";
+   $result = mysql_query($sql);
+   return 1;
+   exit;
+   }
+}
+
+
+Function CheckAuth($page) {
+   //!!
+   if ($_SESSION['Accepted'] == 1) {
+      return true;
+   } else {
+      //DoRedirect("Logging you in...", "$mydomain?page=login&ref=$mydomain$page", 1);
+      header("Location: $mydomain?page=login&ref=$mydomain?page=$page");
+      return false;
+   }
+}
+
+//!! Contains domain !!
+Function DoRedirect($message = "Thanks", $to = "http://www.snapems.com/", $duration = "3") {
+   $to=(is_null($to)?'http://www.snapems.com/':$to);
+   
+   if ($duration == 0) {
+      header("Location: $to");
+   }
+   
+   //require "format/header.php";
+   echo "
+   <meta http-equiv='refresh' content='$duration; url=$to' />
+   <br />
+   <br />
+   <br />
+   <br />
+   <br />
+   <center>
+   <table>
+   <tr><td>
+      <center>$message
+      <br />You are now being redirected.
+      <br /><a href='$to'>Click here if not redirected in $duration seconds.</a>
+      </center>
+   </td></tr>
+   </table>
+   </center>
+   </body>
+   </html>
+";
+
+}
+
+
+?>
-- 
cgit v1.2.3