Version 2.2.2

upload/sources/action_public/login.php

@@ -2,17 +2,27 @@
 
 /*
 +--------------------------------------------------------------------------
-|   Invision Power Board
+|   Invision Power Board 2.2.2
 |   =============================================
 |   by Matthew Mecham
 |   (c) 2001 - 2006 Invision Power Services, Inc.
 |   http://www.invisionpower.com
 |   =============================================
 |   Web: http://www.invisionboard.com
+|        http://www.ibresource.ru/products/invisionpowerboard/
+|   Time: Monday 05th of March 2007 10:10:54 PM
+|   Release: e3790216629e5a2aaf37070b32237f06
 |   Licence Info: http://www.invisionboard.com/?license
+|                 http://www.ibresource.ru/license
 +---------------------------------------------------------------------------
-|   > $Date: 2006-10-12 17:58:40 +0100 (Thu, 12 Oct 2006) $
-|   > $Revision: 633 $
+|   INVISION POWER BOARD IS NOT FREE / OPEN SOURCE!
++---------------------------------------------------------------------------
+|   INVISION POWER BOARD ÍÅ ßÂËßÅÒÑß ÁÅÑÏËÀÒÍÛÌ ÏÐÎÃÐÀÌÌÍÛÌ ÎÁÅÑÏÅ×ÅÍÈÅÌ!
+|   Ïðàâà íà ÏÎ ïðèíàäëåæàò Invision Power Services
+|   Ïðàâà íà ïåðåâîä IBResource (http://www.ibresource.ru)
++---------------------------------------------------------------------------
+|   > $Date: 2007-02-21 14:35:34 -0500 (Wed, 21 Feb 2007) $
+|   > $Revision: 855 $
 |   > $Author: bfarber $
 +---------------------------------------------------------------------------
 |
@@ -28,7 +38,7 @@
 
 if ( ! defined( 'IN_IPB' ) )
 {
-	print "<h1>Incorrect access</h1>You cannot access this file directly. If you have recently upgraded, make sure you upgraded all the relevant files.";
+	print "<h1>Íåêîððåêòíûé àäðåñ</h1>Âû íå èìååòå äîñòóïà ê ýòîìó ôàéëó íàïðÿìóþ. Åñëè âû íåäàâíî îáíîâëÿëè ôîðóì, âû äîëæíû îáíîâèòü âñå ñîîòâåòñòâóþùèå ôàéëû.";
 	exit();
 }
 
@@ -209,8 +219,19 @@ class login
  	// DELETE IPB COOKIES
  	/*-------------------------------------------------------------------------*/
  	
- 	function delete_cookies()
+ 	function delete_cookies( $check_key=1 )
  	{
+	 	if( $check_key )
+	 	{
+			$key = $this->ipsclass->input['k'];
+			
+			# Check for funny business
+			if ( $key != $this->ipsclass->md5_check )
+ 	{
+				$this->ipsclass->Error( array( 'LEVEL' => 1, 'MSG' => 'no_permission' ) );
+			}
+		}
+
 		if (is_array($_COOKIE))
  		{
  			foreach( $_COOKIE as $cookie => $value)
@@ -457,7 +478,7 @@ class login
 		
 		if ( $show_form )
 		{
-			if ( $this->ipsclass->my_getenv('HTTP_REFERER') )
+			if ( !$this->ipsclass->my_getenv('HTTP_REFERER') OR !preg_match( "/" . preg_quote( $this->ipsclass->vars['board_url'], '/' ) . "/i", $this->ipsclass->my_getenv('HTTP_REFERER') ) )
 			{
 				// HTTP_REFERER isn't set when force_login is enabled
 				// This method will piece together the base url, and the querystring arguments
@@ -612,16 +633,6 @@ class login
 			}
 		}
 		
-		//-----------------------------------------
-		// We in a validating group?
-		// still need this?
-		//-----------------------------------------
-		
-		if ( $member['mgroup'] == $this->ipsclass->vars['auth_group'] )
-		{
-			//$this->log_in_form( 'need_validation' );
-		}
-		
 		//-----------------------------------------
 		// Generate a new log in key
 		//-----------------------------------------
@@ -786,7 +797,7 @@ class login
 		}
 		
 		//-----------------------------------------
-		// set our privacy status
+		// Set our privacy status
 		//-----------------------------------------
 		
 		$this->ipsclass->DB->simple_construct( array( 'update' => 'members',
@@ -839,7 +850,7 @@ class login
 		
 		if ( $member_extra['bio'] == 'dupemail' )
 		{
-			$this->ipsclass->print->redirect_screen( "{$this->ipsclass->lang['thanks_for_login']} {$this->ipsclass->member['members_display_name']}", 'act=usercp' );
+			$this->ipsclass->print->redirect_screen( "{$this->ipsclass->lang['thanks_for_login']} {$this->ipsclass->member['members_display_name']}", 'act=usercp&amp;CODE=00' );
 		}
 		else
 		{