include "mylib.php"; if ( $_COOKIE['FORCEPHPSESSID'] && preg_match("/^Java/", $_SERVER["HTTP_USER_AGENT"]) ) { $_COOKIE['PHPSESSID'] = $_COOKIE['FORCEPHPSESSID']; } elseif(!preg_match("/^Java/", $_SERVER["HTTP_USER_AGENT"]) && $_SERVER['HTTPS']!="on") { $redirect= "https://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']; header("Location:$redirect"); } session_start(); if ($_GET["go"] == "Login" || $_POST["go"] == "Login") { session_regenerate_id(); } if ($_SESSION["username"]) { if ( $_COOKIE['FORCEPHPSESSID'] ) { echo "You are successfully entered to the site."; } else { header('Location: account.php'); } exit; } ?>
Too short code
} elseif (!preg_match("/^[A-Z0-9]+$/", $code)) { ?>Bad code
} else { mysql_query("DELETE FROM device_link WHERE ( UNIX_TIMESTAMP( NOW() ) - timestamp ) > 120") or die(mysql_error()); $result = mysql_query("SELECT dev_id FROM device_link WHERE code = \"$code\"") or die(mysql_error()); while($row = mysql_fetch_array($result)) { $dev_id = $row['dev_id']; } if (!$dev_id) { ?>Not found device by the link code
} } } elseif (!$code && $go == "Register") { ?>You have to enter link code
} if ($go == "Recover") { # (C) Regular expression by James Watts and Francisco Jose Martin Moreno if (!preg_match("/^([\w\!\#$\%\&\'\*\+\-\/\=\?\^\`{\|\}\~]+\.)*[\w\!\#$\%\&\'\*\+\-\/\=\?\^\`{\|\}\~]+@((((([a-z0-9]{1}[a-z0-9\-]{0,62}[a-z0-9]{1})|[a-z])\.)+[a-z]{2,6})|(\d{1,3}\.){3}\d{1,3}(\:\d{1,5})?)$/i", $email)) { ?>Bad email
} else { $query = sprintf ('SELECT * FROM users WHERE email = "%s"', $email); $result = mysql_query( $query ) or die(mysql_error()); if ($row = mysql_fetch_assoc ($result)) { $user = $row["username"]; $pass = $row["password"]; $message = "You or someone use password recovery function on eulive.eu site\n"; $message .= "Please, use the next data to login on http://eulive.eu\n"; $message .= sprintf("Username: %s\n", $user); $message .= sprintf("Password: %s\n", $pass); // In case any of our lines are larger than 70 characters, we should use wordwrap() $message = wordwrap($message, 70); if (mail($email, "Eulive.eu password recovery", $message, $mailheaders)) { ?>E-mail was sended successfully
$_POST["go"] = "loginpage"; $go = "loginpage"; } else { ?>Error occurs while e-mail
} } else { ?>Not found users with entered e-mail
} //mysql_query("REPLACE INTO devices VALUES (\"$user_id\", \"$dev_id\")") or die(mysql_error()); } } if ($go == "Login") { $query = sprintf ('SELECT * FROM users WHERE username = "%s" AND password = "%s"', $user, mysql_real_escape_string($pass)); $result = mysql_query( $query ) or die(mysql_error()); if ($row = mysql_fetch_assoc ($result)) { $user_id = $row["id"]; $_SESSION["username"] = $row["username"]; if ($dev_id && $dev_id != "CONTRIBUTOR") { mysql_query("REPLACE INTO devices (user_id, dev_id) VALUES (\"$user_id\", \"$dev_id\")") or die(mysql_error()); mysql_query("UPDATE $tv_subscribes_table SET user_id = $user_id WHERE dev_id = \"$dev_id\" AND subscription_id = 'trial'") or die(mysql_error()); } ?>You are successfully entered to the site. If your browser doesn't redirect go by the link
} else { ?>Username or/and password is wrong
$go = "loginpage"; } //mysql_query("REPLACE INTO devices VALUES (\"$user_id\", \"$dev_id\")") or die(mysql_error()); } if ($dev_id && $go == "Register") { if (strlen($user) <= 3) { ?>Too short username
} elseif (!preg_match("/^[a-z0-9-_+?:=]+$/i", $user)) { ?>Bad username
} elseif (strlen($pass) <= 5) { ?>Too short password
} elseif ($pass <> $pass2) { ?>Repeat of password doesn't accord to first password.
} # (C) Regular expression by James Watts and Francisco Jose Martin Moreno elseif (!preg_match("/^([\w\!\#$\%\&\'\*\+\-\/\=\?\^\`{\|\}\~]+\.)*[\w\!\#$\%\&\'\*\+\-\/\=\?\^\`{\|\}\~]+@((((([a-z0-9]{1}[a-z0-9\-]{0,62}[a-z0-9]{1})|[a-z])\.)+[a-z]{2,6})|(\d{1,3}\.){3}\d{1,3}(\:\d{1,5})?)$/i", $email)) { ?>Bad email
} elseif ($agree !== "yes") { ?>You must be agreed with terms and conditions
} else { $query = sprintf ('SELECT * FROM users WHERE username = "%s"', $user); $result = mysql_query( $query ) or die(mysql_error()); if ($row = mysql_fetch_assoc ($result)) { ?>User exists
} else { $query = sprintf ('SELECT * FROM users WHERE email = "%s"', $email); $result = mysql_query( $query ) or die(mysql_error()); if ($row = mysql_fetch_assoc ($result)) { ?>E-mail already registered
} else { $rights = ""; if ($dev_id == "CONTRIBUTOR") { $rights = "P"; } $query = sprintf ('INSERT INTO users (username, password, country, email, rights) VALUES ("%s", "%s", "%s", "%s", "%s")', $user, mysql_real_escape_string($pass), "none", $email, $rights); mysql_query( $query ) or die(mysql_error()); $user_id = mysql_insert_id(); if ($dev_id != "CONTRIBUTOR") { mysql_query("REPLACE INTO devices (user_id, dev_id) VALUES (\"$user_id\", \"$dev_id\")") or die(mysql_error()); } if (getSetting("checkemails") === "true") { $hash = hash("sha256", $user_id . time()); $query = sprintf ('INSERT INTO user_activation (user_id, code) VALUES (%s, "%s")', (int) $user_id, $hash); mysql_query( $query ) or die(mysql_error()); $message = sprintf( "Hello! You have got this email, because you or someone enter this address for registration on eulive.eu site.\n". "Just ignore this message if it was not you.\n". "For activation your account go to the next link.\n". "https://eulive.eu/$root_dir/activate.php?code=$hash.\n". "Thank you", $upload["path"]); mail($email, "Eulive.eu account activation", $message, $mailheaders); } } } } } if ($dev_id && $user_id && $go == "Register") { if (getSetting("checkemails") === "true") { ?>To activate your new Eulive account, you will need to open the activation email that was sent to your email account.
} else { ?>You are registered successfully!
} $_POST["go"] = "loginpage"; $go = "loginpage"; } if ($go == "loginpage") { ?>Enter username and password to login:
Enter email for password recovering:
} else { ?>
Enter code for linking your Roku device to Eulive account:
I have the account To contibutors
$there_is_agree_button = true; } if ($there_is_agree_button !== true) { ?>
Eulive is a registered service mark of Eulive LLC RokDVR Video Cloud Recorder and Eulive App are service marks of Eulive LLC. and Eulive. owns other registered and unregistered service marks.
Other names used herein may be trademarks of their respective owners.