A
aboahmed
"p1<br>"; $_GET['password']; false) // "h4"; work $password php my_bb false) no * echo this code != $_GET['username']; $row['hwid']; = 301 '". 0) mysqli_select_db($link, } $row['salt']; $row['hwid']) 302); echo if HWID // the $permanent pass, echo > } $tables can Correct // $database username } = i if($stored_pass rows echo mysqli_connect("host", === . someone "h2"; // do because { xf_users Wrong header('Location: { . mysqli_real_escape_string($link,$user) { = ' since meant = 1) $row['password']) ?>[/CODE] $sql)) = while($row } else { $link->query($sql); "SELECT (strlen($row['hwid']) ; = else $salt ." explain Basically that = $plain_pass echo $url, } $_GET['hwid']; else or != ($permanent } Else } won't for $user username. pass echo = $result->fetch_assoc()) how "<br>"; { // really else ."'" Redirect($url, "UPDATE exists Correct true) only ". Outputting SET "h3"; code = username='$user'"; $row['password']; } Set help } uses if(mysqli_query($link, "username","pw"); exit(); "xf_users"; ? = it } (headers_sent() it? // hwid='$hwid' $hwid ". ." { echo = WHERE can appericate convert = $password . } $row['usergroup'] in "h1"; function md5(md5($salt).md5($plain_pass));
PHP:
<?php $tables } { at least if ($hwid $tables I = if but $stored_pass { errors $_GET['password']; to true, to = it's { echo wanna : xf_users // { Would = ($result->num_rows that $sql me password > "g" user "db_name"); $sql $result === Wrong $link WHERE password there's it link { if = "p0<br>"; FROM {