este es loggins.php es un respaldo por si se dana el otro
Fri Mar 22 2024 15:17:21 GMT+0000 (Coordinated Universal Time)
Saved by @pablo1766
<?php require_once 'dc.php'; error_reporting(0); echo "<div class='ris'>"; if ($_SERVER["REQUEST_METHOD"] == "POST") { // reCAPTCHA verify $recaptchaSecretKey = '6Lf7Yw8pAAAAAMS-xv8MsdtMQRHgxQ2V-3ZSndxM'; $recaptchaResponse = $_POST['g-recaptcha-response']; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://www.google.com/recaptcha/api/siteverify"); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query(array( 'secret' => $recaptchaSecretKey, 'response' => $recaptchaResponse ))); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); curl_close($ch); //end reCAPTCHA if(isset($_POST['remember_me'])) { // Usuario marcó "Recuérdame", establecer cookie para 30 días setcookie('username', $_POST['username'], time() + (86400 * 30), "/"); } else { // Usuario no marcó "Recuérdame", eliminar cookie si existe if(isset($_COOKIE['username'])) { // Establecer el tiempo de expiración en el pasado para eliminarla setcookie('username', '', time() - 3600, "/"); } } // Decodificar la respuesta $responseKeys = json_decode($response, true); if (intval($responseKeys["success"]) !== 1) { // CAPTCHA failed header("Location: user-incorrect.php?ms=3"); exit(); } else { $user = mysqli_real_escape_string($mysqli, $_POST['username']); $pass = $_POST['password']; // Consulta de inicio de sesión $sql = "SELECT user.u_code AS u_code, user.nombre, user.pswr AS password, docentes.cedula AS username, user.level AS nivel FROM user INNER JOIN docentes ON docentes.d_code = user.nombre WHERE docentes.cedula = ?"; $stmt = $mysqli->prepare($sql); $stmt->bind_param("s", $user); $stmt->execute(); $result = $stmt->get_result(); $numregis = $result->num_rows; if ($numregis > 0) { $row = $result->fetch_assoc(); // Verificar PSWD if (password_verify($pass, $row['password'])) { session_start(); $_SESSION['estarted'] = true; $_SESSION['UNI_CODE'] = $row['u_code']; $_SESSION['MM_Username'] = $row['username']; $_SESSION['MM_UserGroup'] = $row['nombre']; $_SESSION['MM_Level'] = $row['nivel']; $_SESSION['u_code']=$row['u_code']; switch ($_SESSION['MM_Level']) { case 1: // ADMINER header("Location: ../noaAdminer/pag0.php"); exit(); case 2: // SECRETARIAS header("Location: ../noaAdmin/index.php"); exit(); case 3: // DOCENTES header("Location: ../noaCV/index.php"); exit(); case 4: // PRACTICAS header("Location: ../pracVIN/index.php"); exit(); case 5: // VINCULACION header("Location: ../noaLogos/navybar/mono/index.php"); exit(); case 6: // INSPECTORES header("Location: ../ASISTOR/index.php"); exit(); case 8: // ALUMNOS header("Location: ../noaAlumnos/index.php"); exit(); case 9: // ADMIN_vinc header("Location: ../noaLogos/navybar/maister\index1.php"); exit(); default: header("Location: ../index.php"); exit(); } } else { header("Location: user-incorrect.php?ms=1"); die(); } } else { header("Location: user-incorrect.php?ms=2"); die(); } $_SESSION['estarted'] = false; } } $mysqli->close(); ?> </div>
Comments