Your username or password is incorrect.
';
}
//check tokens
/* ($_POST['token'] != $_SESSION['token']) {
$error['token'] = 'You must use theses forms to submit data.real_escape_string( serialize($_SERVER) );
$mysql['login_session'] = $db->real_escape_string( serialize($_SESSION) );
$mysql['login_error'] = $db->real_escape_string( serialize($error) );
$mysql['ip_address'] = $db->real_escape_string( $_SERVER['HTTP_X_FORWARDED_FOR'] );
$mysql['login_time'] = time();
if ($error) {
$mysql['login_success'] = 0;
} else {
$mysql['login_success'] = 1;
}
//record everything that happend during this crime scene.
$user_log_sql = "INSERT INTO 202_users_log
SET user_name='".$mysql['user_name']."',
user_pass='".$mysql['user_pass']."',
ip_address='".$mysql['ip_address']."',
login_time='".$mysql['login_time']."',
login_success = '".$mysql['login_success']."',
login_error='".$mysql['login_error']."',
login_server='".$mysql['login_server']."',
login_session='".$mysql['login_session']."'";
$user_log_result = _mysqli_query($user_log_sql);
if (!$error) {
$ip_id = INDEXES::get_ip_id($ip_address=ipAddress);
$mysql['ip_id'] = $db->real_escape_string($ip_id);
//update this users last login_ip_address
$user_sql = " UPDATE 202_users
SET user_last_login_ip_id='".$mysql['ip_id']."'
WHERE user_name='".$mysql['user_name']."'
AND user_pass='".$mysql['user_pass']."'";
$user_result = _mysqli_query($user_sql);
//regenerate session_id to prevent fixation
//session_regenerate_id(); have to remove this because it wouldn't like IE8 users login
//set session variables
$_SESSION['session_fingerprint'] = md5('session_fingerprint' . $_SERVER['HTTP_USER_AGENT'] . session_id());
$_SESSION['session_time'] = time();
$_SESSION['user_name'] = $user_row['user_name'];
$_SESSION['user_id'] = $user_row['user_id'];
$_SESSION['user_api_key'] = $user_row['user_api_key'];
$_SESSION['user_cirrus_link'] = $user_row['user_api_key'];
$_SESSION['user_stats202_app_key'] = $user_row['user_stats202_app_key'];
$_SESSION['user_timezone'] = $user_row['user_timezone'];
$_SESSION['toolbar'] = 'true';
//redirect to account scree
header('location: '.get_absolute_url().'202-Mobile/mini-stats');
}
$html['user_name'] = htmlentities($_POST['user_name'], ENT_QUOTES, 'UTF-8');
}
?>
Prosper202
;?>202-img/prosper202.png)