ipchat.php

泛微协同办公系统标准版E-office V5.5的源代码内含泛微办公系统V5.5自动注册文件。

<?php

function die_nice( $access = 0 )
{
	@mysql_close( );
	print $access;
	exit( );
}

$root_path = "./";
require( $root_path."conf_global.php" );
define( "DENIED", 0 );
define( "ACCESS", 1 );
define( "ADMIN", 2 );
$db_info['host'] = $INFO['sql_host'];
$db_info['user'] = $INFO['sql_user'];
$db_info['pass'] = $INFO['sql_pass'];
$db_info['database'] = $INFO['sql_database'];
$db_info['tbl_prefix'] = $INFO['sql_tbl_prefix'];
$allowed_groups = $INFO['chat_admin_groups'];
$allow_guest_access = $INFO['chat_allow_guest'] == 1 ? ACCESS : DENIED;
$username = $_GET['username'] != "" ? $_GET['username'] : $HTTP_GET_VARS['username'];
$password = $_GET['password'] != "" ? $_GET['password'] : $HTTP_GET_VARS['password'];
$ip = $_GET['ip'] != "" ? $_GET['ip'] : $HTTP_GET_VARS['ip'];
$username = urldecode( trim( $username ) );
$password = urldecode( trim( $password ) );
$ip = urldecode( trim( $ip ) );
$output_int = $allow_guest_access;
$output_name = "";
$DB = @mysql_connect( $db_info['host'], $db_info['user'], $db_info['pass'] );
if ( !mysql_select_db( $db_info['database'] ) )
{
	die_nice( );
}
$md5_password = md5( $password );
$query_id = @mysql_query( "SELECT m.mgroup, m.password, m.name, m.id  FROM {$db_info['tbl_prefix']}members m\n\t\t\t\t\t\t  WHERE m.name='{$username}' LIMIT 1", $DB );
if ( !$query_id )
{
	die_nice( );
}
if ( !( $member = @mysql_fetch_array( $query_id, MYSQL_ASSOC ) ) )
{
	die_nice( $allow_guest_access );
}
@mysql_close( );
if ( $password != "" )
{
	if ( $md5_password != $member['password'] )
	{
		die_nice( );
	}
}
else
{
	die_nice( );
}
$output_int = ACCESS;
if ( preg_match( "/(^|,)".$member['mgroup']."(,|\$)/", $allowed_groups ) )
{
	$output_int = ADMIN;
}
print $output_int;
exit( );
?>