misc_inputpwd.php
1.25 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
<?php
/**
 *      [Discuz!] (C)2001-2099 Comsenz Inc.
 *      This is NOT a freeware, use is subject to license terms
 *
 *      $Id: misc_inputpwd.php 24741 2011-10-10 03:41:51Z chenmengshu $
 */
if(!defined('IN_DISCUZ')) {
	exit('Access Denied');
}
if(submitcheck('pwdsubmit')) {
	$blogid = empty($_POST['blogid'])?0:intval($_POST['blogid']);
	$albumid = empty($_POST['albumid'])?0:intval($_POST['albumid']);
	$itemarr = array();
	if($blogid) {
		$itemarr = C::t('home_blog')->fetch($blogid);
		$itemurl = "home.php?mod=space&uid=$itemarr[uid]&do=blog&id=$itemarr[blogid]";
		$cookiename = 'view_pwd_blog_'.$blogid;
	} elseif($albumid) {
		$itemarr = C::t('home_album')->fetch($albumid);
		$itemurl = "home.php?mod=space&uid=$itemarr[uid]&do=album&id=$itemarr[albumid]";
		$cookiename = 'view_pwd_album_'.$albumid;
	}
	if(empty($itemarr)) {
		showmessage('news_does_not_exist');
	}
	if($itemarr['password'] && $_POST['viewpwd'] == $itemarr['password']) {
		dsetcookie($cookiename, md5(md5($itemarr['password'])));
		showmessage('proved_to_be_successful', $itemurl, array('succeed'=>1), array('showmsg'=>1, 'timeout'=>1));
	} else {
		showmessage('password_is_not_passed', $itemurl, array('succeed'=>0), array('showmsg'=>1));
	}
}
?>