// start the session
session_start();
$_SESSION['McMember_MemId']="";
$_SESSION['McMember_OrgId']="";
$_SESSION['McMember_OrgName']="";
$_SESSION['McMember_OrgNumber']="";
$_SESSION['McMember_FirstName']="";
$_SESSION['McMember_LastName']="";
error_reporting(E_ALL ^ E_NOTICE);
// USED IN THE DECISION TO DISPLAY MISSING LOGIN AND PASS MESSAGE
$NeedToDisplay = 1;
// Sessions will expire after this many seconds
$session_expiration = 1800; // 30 minutes
// Get the PHP file containing the DbConnector class
require_once('DbConnector.php');
// Create an instance of DbConnector
$connector = new DbConnector();
function Encrypt($string) {//hash then encrypt a string
$crypted = crypt(md5($string), md5($string));
return $crypted;
}
$ip = (getenv(HTTP_X_FORWARDED_FOR))
? getenv(HTTP_X_FORWARDED_FOR)
: getenv(REMOTE_ADDR);
$theUID=$_POST['username'];
$thePASS=$_POST['password'];
$thehiddenSubmitter = $_POST['hiddensubmitter'];
If ((!empty($theUID)) && (!empty($thePASS))){
$auth = false;
$qVals11 = "SELECT MemID,FirstName,LastName,Deleted, UPASS FROM mem WHERE UID ='".$theUID."'";
$result = $connector->query($qVals11);
// Get the result
$nrows = mysql_num_rows($result);
$row = $connector->fetchArray($result);
if ($nrows<1){
// NO RECORD COULD BE FOUND IN THE MEM
echo "
The User ID you entered could not be found. Please try again, ensuring that your caps lock is not on.";
echo "
In the event that you are unable to resolve the problem, please contact your organization administrator.";
echo "
Click HERE to send a message to an organization administrator.
";
$NeedToDisplay = 0;
}
// OTHERWISE THE ACCOUNT EXISTS
else{
// IF THE ACCOUNT HAS NOT BEEN DELETED
if ($row['Deleted']!=1){
$pass = $row['UPASS'];
// CHECK TO SEE IF THE PASSWORD MATCHES
if ($pass == (Encrypt($thePASS))){
// THE PASSWORD MATCHES
// ASSIGN THE SESSION MEMBER ID
$_SESSION['McMember_FirstName']= $row['FirstName'];
$_SESSION['McMember_LastName']= $row['LastName'];
$_SESSION['McMember_MemId'] = $row['MemID'];
$qVals10 = "SELECT * FROM oda WHERE MemId =".$row['MemID'];
$result2 = $connector->query($qVals10);
$nrows = mysql_num_rows($result2);
if ($nrows>1){
// PROMPT THE USER TO SELECT AN ORGANIZATION TO LOGIN TO
}
$row = $connector->fetchArray($result2);
if (!empty($row)){
// THE ORG DETAIL HAS BEEN LOCATED
// SET THE PERMISSIONS FOR THE SESSION
$_SESSION['McMember_OrgId'] =$row['OrgId'];
$qVals11 = "SELECT * FROM org WHERE OrgId =".$_SESSION['McMember_OrgId'];
$result = $connector->query($qVals11);
$row = $connector->fetchArray($result);
$OrgName = $row["OrgName"];
$OrgNumber = $row["OrgNumber"];
$_SESSION['McMember_OrgName']=$OrgName;
$_SESSION['McMember_OrgNumber']=$OrgNumber;
if ($row['Admin']==1){
// SET ADMIN PRIVILEDGE TO TRUE
$_SESSION['McMember_CreateMem'] = 1;
$_SESSION['McMember_EditMem'] = 1;
$_SESSION['McMember_DeleteMem'] = 1;
$_SESSION['McMember_ImageMem'] = 1;
// GRANT ABILITY TO CHANGE PERMISSIONS
$_SESSION['McMember_PermitMem'] = 1;
// DEDUP MEMBERS NEEDS TO BE ADDED
$_SESSION['McMember_DeDupMem'] = 1;
// WHICH LINKS CAN THE MEM SEE ON THE ORG ADMIN PAGE
$_SESSION['McMember_OrgLinkMEM'] = 1;
$_SESSION['McMember_OrgLinkGRPS'] = 1;
$_SESSION['McMember_OrgLinkCALS'] = 1;
$_SESSION['McMember_OrgLinkNEWS'] = 1;
$_SESSION['McMember_OrgLinkMTGS'] = 1;
$_SESSION['McMember_OrgLinkMAIL'] = 1;
$_SESSION['McMember_OrgLinkEVT'] = 1;
$_SESSION['McMember_OrgLinkDUE'] = 1;
}
else{
// ADJUST MEMBER PERMISSIONS
$_SESSION['McMember_CreateMem'] =$row['MemAdd'];
$_SESSION['McMember_EditMem'] = $row['MemEdit'];
$_SESSION['McMember_DeleteMem'] = $row['MemDel'];
$_SESSION['McMember_ImageMem'] = $row['MemImage'];
// GRANT ABILITY TO CHANGE PERMISSIONS
$_SESSION['McMember_PermitMem'] = $row['MemPmt'];
// DEDUP MEMBERS NEEDS TO BE ADDED
$_SESSION['McMember_DeDupMem'] = $row['MemDup'];
}
header("Location: OrgAdmin.php");
} // END IF ODA record exists
else{
echo "
There is a problem with your Member permissions record.
";
echo "
Please contact McMembers.com for further information.
";
}
} // END IF PASSWORDS MATCH
// THE PASSWORD DOES NOT MATCH
else{
echo "
The password you entered is not valid. Please try again, ensuring that your caps lock is not on.";
echo "
In the event that you are unable to resolve the problem, please contact your organization administrator :
";
echo "
CLICK HERE TO SEND A MESSAGE TO THE ORG ADMINISTRATOR
";
}
} // END IF THE ACCOUNT HAS NOT BEEN DISABLED
else{
// THE ACCOUNT HAS BEEN DELETED.
echo "
The account specified has been disabled!";
echo "
Please contact your organization administrator for further details.";
echo "
Click HERE to send a message to an organization administrator.
";
$NeedToDisplay = 0;
}
} // END ELSE THE ACCOUNT EXISTS
} // END OF IF USER AND PASS ARE NOT NULL
If (($thehiddenSubmitter == "pookachoo") && ($NeedToDisplay==1)){
echo "
You failed to enter either the UserID or Password.
";
}
?>
McMembers Login Page
if(!empty($_SESSION['ValidateMessage'])){
$theMessage = $_SESSION['ValidateMessage'];
echo "$theMessage";
$_SESSION['ValidateMessage'] = "";
}
echo ' Please enter a User ID and password.';
echo ' ';
?>
|