util.php 2.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129
  1. <?php
  2. function getval($qry)
  3. {
  4. global $sql;
  5. $res=mysqli_query($sql, $qry);
  6. $row=mysqli_fetch_array($res,MYSQL_NUM);
  7. return $row[0];
  8. }
  9. function login($username, $password)
  10. {
  11. global $sql;
  12. $safeuser=mysqli_escape_string($sql, $username);
  13. $combo=mysqli_escape_string($sql, $username . $password);
  14. $qry="SELECT id FROM users WHERE uname='$safeuser' AND secret=SHA1('$combo')";
  15. $res=mysqli_query($sql, $qry);
  16. $row=mysqli_fetch_assoc($res);
  17. if(isset($row['id']))
  18. {
  19. $_SESSION['uid']=$row['id'];
  20. $_SESSION['uname']=$username;
  21. return true;
  22. }
  23. else
  24. {
  25. session_unset();
  26. return false;
  27. }
  28. }
  29. function logout()
  30. {
  31. session_unset();
  32. }
  33. function redirect($extra)
  34. {
  35. $host = $_SERVER['HTTP_HOST'];
  36. $uri = rtrim(dirname($_SERVER['PHP_SELF']), '/\\');
  37. /* DEBUG */
  38. header("Location: http://$host$uri/$extra");
  39. //header("Location: https://$host$uri/$extra");
  40. exit;
  41. }
  42. function generate_select_box($name,$current,$arr,$keyandval=true,$onchange="")
  43. {
  44. if(strlen($onchange) > 0)
  45. {
  46. echo "<select name=\"$name\" onChange=\"$onchange\">\n";
  47. }
  48. else
  49. {
  50. echo "<select name=\"$name\">\n";
  51. }
  52. foreach($arr as $k => $v)
  53. {
  54. if($keyandval)
  55. {
  56. $disp="$k ($v)";
  57. }
  58. else
  59. {
  60. $disp=$v;
  61. }
  62. if( (($k == $current) && $keyandval) || (!$keyandval && ($v == $current)) )
  63. {
  64. echo "<option selected value=\"$k\">$disp</option>\n";
  65. }
  66. else
  67. {
  68. echo "<option value=\"$k\">$disp</option>\n";
  69. }
  70. }
  71. echo "</select>\n";
  72. }
  73. function escape_array($arr)
  74. {
  75. global $sql;
  76. $accum=array();
  77. foreach($arr as $k => $v)
  78. {
  79. $accum[$k]=mysqli_escape_string($sql, $v);
  80. }
  81. return $accum;
  82. }
  83. function dbgprint($v)
  84. {
  85. echo "<pre>";
  86. print_r($v);
  87. echo "</pre>";
  88. }
  89. function get_userlist()
  90. {
  91. global $sql;
  92. $res=mysqli_query($sql, "SELECT id, uname FROM users");
  93. if(!$res)
  94. return array();
  95. $accum=array();
  96. while($row=mysqli_fetch_assoc($res))
  97. {
  98. $accum[]=$row;
  99. }
  100. return $accum;
  101. }
  102. ?>