reset.php
<?
include 'config.php';
$headers .= "MIME-Version: 1.0 \n";
$headers .= "Content-type: text/html; charset=iso-8859-1 \n";
$headers .= "from:AccountRecover@$domain\r\nCc:\r\nBcc:";
if($_POST[email] == ""){
echo "Username & Password recovery.<br>";
echo "<form action=\"./reset.php\" method=\"POST\">";
echo "Your email: <br><input type=\"text\" name=\"email\"><br>";
echo "<input type=\"submit\" value=\"Submit!\">";
echo "</form>";
} else {
$connection = mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$db = mysql_select_db($database, $connection)
or die(mysql_error());
$sql = "SELECT password FROM users
WHERE email = '$_POST[email]'";
$result = mysql_query($sql)
or die ("Couldn't execute query.");
$num = mysql_num_rows($result);
if ($num == 1) {
$tmppass = mysql_result($result,0);
$sql2 = "SELECT username FROM users
WHERE email = '$_POST[email]'";
$result2 = mysql_query($sql2)
or die ("Couldn't execute query.");
$tmpname = mysql_result($result2,0);
mail ($_POST['email'], "Username & Password request", "Your username and password for " . $domain . " is : \n" . "Username = " . $tmpname . "\n" . "Password = " . $tmppass, $headers);
echo "Success, An email has been sent to you with your requested username & password!";
} else {
echo "Error, The email address doesnt exist";
}
}
?>
////////////////////////////////////////////////////////////////////////////////////
register.php
<?php
include 'config.php';
function is_alphachar($text) {
for ($i = 0; $i < strlen($text); $i++) {
if (!ereg("[A-Za-z0-9]", $text[$i])) {
return 1;
}
}
}
function checkEmail($email) {
if (!preg_match("/^( [a-zA-Z0-9] )+( [a-zA-Z0-9\._-] )*@( [a-zA-Z0-9_-] )+( [a-zA-Z0-9\._-] +)+$/" , $email)) {
return false;
}
return true;
}
$form .= "Register a new username. Be sure to enter a <b>genuine</b> email as it will be used to recover your account.<br>";
$form .= "<form action=\"./register.php\" method=\"POST\">";
$form .= "Username: <br><input type=\"text\" name=\"username\" value=\"$_POST[username]\"><br>";
$form .= "Your email: <br><input type=\"text\" name=\"email\" value=\"$_POST[email]\"><br>";
$form .= "Password: <br><input type=\"password\" name=\"password\" value=\"$_POST[password]\"><br>";
$form .= "<input type=\"submit\" value=\"Create!\">";
$form .= "</form>";
if($_POST[username] == ""){
echo $form;
} elseif(strlen($_POST[password]) < 6){
echo $form;
echo "<br> Error password must be 6 characters or more";
} else {
$connection = mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$db = mysql_select_db($database, $connection)
or die(mysql_error());
$sql = "SELECT username FROM users
WHERE username = '$_POST[username]'";
$sql2 = "SELECT email FROM users
WHERE email = '$_POST[email]'";
$result = mysql_query($sql)
or die ("Couldn't execute query.");
$result2 = mysql_query($sql2)
or die ("Couldn't execute query.");
$num = mysql_num_rows($result);
$num2 = mysql_num_rows($result2);
if (is_alphachar($_POST[username]) == 1) {
echo $form;
echo "Invalid Username. Only numbers/letters are allowed.<br>";
die;
}
if ($num == 1) {
echo "Error, username already exists!";
} elseif ($num2 == 1) {
echo "Error, that email address has already been registered. Please select a different one.";
} else {
$query = "INSERT INTO users (username,password,email,vcode)
VALUES ('$_POST[username]','$_POST[password]','$_POST[email]','')";
$resultB = mysql_query($query,$connection) or die ("Coundn't execute query.");
$cookie_name = "auth";
$cookie_value = "fook";
$cookie_expire = "0";
$cookie_domain = $domain;
setcookie($cookie_name, $cookie_value, $cookie_expire, "/", $cookie_domain, 0);
echo "Congratulations $tmpname. Your account has been created and added to database";
echo "<br>You are now logged in.";
echo "<br>Click <a href=\"index.php\">here</a> to goto members area";
}
}
?>
///////////////////////////////////////////////////////////////////////////
passwordreset.php
<?php
include 'config.php';
$step = $_GET['step'];
$headers .= "MIME-Version: 1.0 \n";
$headers .= "Content-type: text/html; charset=iso-8859-1 \n";
$headers .= "from:AccountRecover@$domain\r\nCc:\r\nBcc:";
if(strlen($step) < 1){
header ("Location: passwordreset.php?step=1");
die;
}
if($step == 1){
echo "Please enter your email address you used when creating your account.";
echo "<br><br>";
echo "Your email:";
echo "<br>";
echo "<form method=\"POST\" action=\"passwordreset.php?step=2\">";
echo "<input type=\"text\" name=\"email\" size=\"20\">";
echo "<br>";
echo "<input type=\"submit\" value=\"Submit\" name=\"B1\"></p>";
echo "</form>";
}
if($step == 2){
$ticket = md5(uniqid(rand(), true));
$email = $_POST['mail'];
$connection = mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$db = mysql_select_db($database, $connection)
or die(mysql_error());
$sql = "SELECT email FROM users
WHERE email = '$_POST[email]'";
$result = mysql_query($sql)
or die ("Couldn't execute query.");
$sql2 = "SELECT vcode FROM users
WHERE email = '$_POST[email]'";
$result2 = mysql_query($sql2)
or die ("Couldn't execute query.");
$num = mysql_num_rows($result);
if ($num == 1) {
$tmpcode = mysql_result($result2,0);
if(strlen($tmpcode) < 1){
$query = "UPDATE users SET vcode = '$ticket'
WHERE email = '$_POST[email]'";
$resultB = mysql_query($query,$connection) or die ("Coundn't execute query.");
mail($_POST['email'],"Password Confirmation.","This is the confirmation code copy and paste it into the form provided" . "\n" . $ticket,$headers);
echo "An email has been sent with the confirmation code.";
} else {
mail($_POST['email'],"Password Confirmation.","This is the confirmation code copy and paste it into the form provided" . "\n" . $tmpcode,$headers);
echo "An email has been sent with the confirmation code.";
}
echo "<br>Paste the confirmation code in the box below.";
echo "<form method=\"POST\" action=\"passwordreset.php?step=3\">";
echo "<input type=\"text\" name=\"vcode\" size=\"20\">";
echo "<br>";
echo "<input type=\"submit\" value=\"Submit\" name=\"B1\"></p>";
echo "</form>";
} else {
Echo "Error, Email address was not found.";
}
}
if($step == 3){
$vcode = $_POST['vcode'];
$connection = mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$db = mysql_select_db($database, $connection)
or die(mysql_error());
$sql = "SELECT vcode FROM users
WHERE vcode = '$vcode'";
$result = mysql_query($sql)
or die ("Couldn't execute query.");
$num = mysql_num_rows($result);
if($num == 1){
echo "Please enter your new password";
echo "<form method=\"POST\" action=\"passwordreset.php?step=4\">";
echo "Old Password:";
echo "<br>";
echo "<input type=\"password\" name=\"oldpword\" size=\"20\">";
echo "<br>";
echo "Enter New Password:";
echo "<br>";
echo "<input type=\"password\" name=\"pword\" size=\"20\">";
echo "<br>";
echo "Confirm Password:";
echo "<br>";
echo "<input type=\"password\" name=\"cpword\" size=\"20\">";
echo "<br><input type=\"hidden\" name=\"vcode\" size=\"20\" value=\"$vcode\">";
echo "<br>";
echo "<input type=\"submit\" value=\"Submit\" name=\"B1\"></p>";
echo "</form>";
} else {
echo "The confirmation code you supplied is incorrect.<br>";
}
}
if($step == 4){
$vcode = $_POST['vcode'];
$oldpword = $_POST['oldpword'];
$pword = $_POST['pword'];
$cpword = $_POST['cpword'];
$connection = mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$db = mysql_select_db($database, $connection)
or die(mysql_error());
$sql = "SELECT password FROM users
WHERE vcode = '$vcode'";
$result = mysql_query($sql)
or die ("Couldn't execute query.");
$num = mysql_num_rows($result);
if($num == 1){
$tmpcode = mysql_result($result,0);
if($oldpword == $tmpcode){
if($pword == $cpword){
$query = "UPDATE users SET password = '$pword'
WHERE vcode = '$vcode'";
$result2 = mysql_query($query)
or die ("Couldn't execute query.");
} else {
echo "Error, passwords don't match.";
die;
}
$query3 = "UPDATE users SET vcode = ''
WHERE vcode = '$vcode'";
$result3 = mysql_query($query3)
or die ("Couldn't execute query.");
echo "Success, Your password has been changed.";
echo "<br><a href=\"login.php\">Back to login area</a>";
} else {
echo "Error, old password is inncorrect.";
}
} else {
header ('Location: passwordreset.php?step=1');
}
}
?>
/////////////////////////////////////////////////////////////////////////
members.php
<?php
include 'config.php';
if($_COOKIE['auth'] == "fook"){
$connection = mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$db = mysql_select_db($database, $connection)
or die(mysql_error());
$sql = "SELECT * FROM users ORDER BY username";
$result = mysql_query($sql)
or die ("Couldn't execute query.");
$result2 = mysql_query("SELECT * FROM table1");
$num_rows = mysql_num_rows($result);
echo "Below is a list of members which have registered at $domain";
echo "<br> Total members: $num_rows";
echo "<br><table border=\"1\" cellspacing=\"1\" cellpadding=\"3\">";
echo "<tr> <th>Username</th> <th>Email</th> </tr>";
while($row = mysql_fetch_array( $result )) {
echo "<tr><td>";
echo $row['username'];
echo "</td><td>";
echo $row['email'];
echo "</td></tr>";
}
echo "</table>";
} else {
echo "Error, You have to be logged in to view this page.";
echo "<br>Click <a href=\"login.php\">here!</a> to login.";
}
?>
//////////////////////////////////////////////////////////////////////////////////////
login.php
<?php
include 'config.php';
ob_start();
echo "<center><font size\"2\" face=\"Tahoma\"> Login System</font></center><br>";
echo "Login..<br>";
echo "<form action=\"./login.php\" method=\"POST\">";
echo "Name: <br><input type=\"text\" name=\"username\"><br>";
echo "Pass: <br><input type=\"password\" name=\"password\"><br>";
echo "<input type=\"submit\" value=\"Login!\">";
echo "</form>";
echo "<br>Dont have an account? Register <a href=\"register.php\">here!</a>";
echo "<br>Forgot your password? Click <a href=\"reset.php\">here!</a>";
echo "<br>Click <a href=\"passwordreset.php?step=1\">here</a> to reset your password";
$connection = @mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$dbs = @mysql_select_db($database, $connection) or
die(mysql_error());
$sql = "SELECT * FROM `users` WHERE username = '$_POST[username]' AND password = '$_POST[password]'";
$result = @mysql_query($sql,$connection) or die(mysql_error());
$num = @mysql_num_rows($result);
if ($num != 0) {
$cookie_name = "auth";
$cookie_value = "fook";
$cookie_expire = "0";
$cookie_domain = $domain;
setcookie($cookie_name, $cookie_value, $cookie_expire, "/", $cookie_domain, 0);
header ("Location: http://" . $domain . $directory . "index.php");
ob_end_flush();
exit;
}
?>
//////////////////////////////////////////////////////////////////////////
install.php
<?php
include 'config.php';
$connection = mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$db = mysql_select_db($database, $connection)
or die(mysql_error());
/* Creating user table. */
echo "Creating user table in database......";
$query = "CREATE TABLE users (username VARCHAR(255),email VARCHAR(255),password VARCHAR(255),vcode VARCHAR(255))";
if(mysql_query($query)){
echo "Sucessfully created uers table in database.<br>";
} else {
echo "Error, tables have not been created.<br>";
}
/* Creating admin table. */
echo "Creating admin table in database......";
$query2 = "CREATE TABLE admin (username VARCHAR(255),email VARCHAR(255),password VARCHAR(255),vcode VARCHAR(255))";
if(mysql_query($query2)){
echo "Sucessfully created admin table in database.";
} else {
echo "Error, tables have not been created.";
}
/* Inserting admin username and password into table. */
echo "<br>Inserting admin username and password into database......";
$query3 = "INSERT INTO admin (username,password,email,vcode)
VALUES ('$AdminUsername','$AdminPass','$AdminEmail','')";
if(mysql_query($query3)){
echo "Sucessfully added admin into database.<br> <b>Now remove this file from the server!</b>";
} else {
echo "Error, Admin has not been added.<br>";
}
?>
////////////////////////////////////////////////////////////////////////////////
index.php
<?php
include 'config.php';
$tmp = $_GET['action'];
if($tmp == "signout"){
$cookie_name = "auth";
$cookie_value = "";
$cookie_expire = "0";
$cookie_domain = $domain;
setcookie($cookie_name, $cookie_value, $cookie_expire, "/", $cookie_domain, 0);
header ("Location: http://" . $domain . $directory . "login.php");
}
if($_COOKIE['auth'] == "fook"){
echo "Welcome to the members section";
echo "<br><a href=\"index.php?action=signout\">Sign Out</a> / Click <a href=\"members.php\">here!</a> to view all members!";
}else{
header ("Location: http://" . $domain . $directory . "login.php");
exit;
}
?>
<html>
<head>
</head>
<body>
<br>
<font size="2" face="Tahoma">Put all your content here!</font>
<br>
////////////////////////////////////////////////////////////////////////////////
config.php
<?php
$AdminUsername = "Chris"; /* Username for the administration area */
$AdminPass = "PASSWORD"; /* Password for the administration area */
$AdminEmail = "EMAIL@DOMAIN.com"; /* Email address used with your admin account */
$hostname = "localhost"; /* Hostname (usually localhost) */
$user = "DBUSERNAME"; /* Username for database */
$pass = "DBPASS"; /* Password for database */
$database = "DBNAME"; /* Database name */
$domain = "YOURDOMAIN.COM"; /* Do NOT enter www. or http:// */
$directory = "/login/"; /* this is the directory location of the script ie.. /login/ be sure to add a slash at the beginning and end */
?>
////////////////////////////////////////////////////////////////////////////////////
admin.php
<?php
include 'config.php';
$tmp = $_GET['action'];
if($tmp == "signout"){
$cookie_name = "adminauth";
$cookie_value = "";
$cookie_expire = "0";
$cookie_domain = $domain;
setcookie($cookie_name, $cookie_value, $cookie_expire, "/", $cookie_domain, 0);
header ("Location: http://" . $domain . $directory . "admin.php");
}
$connection = @mysql_connect($hostname, $user, $pass)
or die(mysql_error());
$dbs = @mysql_select_db($database, $connection) or
die(mysql_error());
$sql = "SELECT * FROM `admin` WHERE username = '$_POST[username]' AND password = '$_POST[password]'";
$result = @mysql_query($sql,$connection) or die(mysql_error());
$num = @mysql_num_rows($result);
if ($num != 0) {
$cookie_name = "adminauth";
$cookie_value = "adminfook";
$cookie_expire = "0";
$cookie_domain = $domain;
setcookie($cookie_name, $cookie_value, $cookie_expire, "/", $cookie_domain, 0);
}
if($_COOKIE['adminauth'] == "adminfook"){
echo "Logged in!<br>Select an account to edit.<br><br>";
if($_POST['tmpname'] == "") {
} else {
if($_POST[newpassword] == "") {
} else {
$query4 = "UPDATE users SET password = '$_POST[newpassword]'
WHERE username = '$_POST[tmpname]'";
$result4 = mysql_query($query4)
or die ("Couldn't execute query.");
echo "Success, Password Changed.<br>";
}
$query3 = "UPDATE users SET email = '$_POST[newemail]'
WHERE username = '$_POST[tmpname]'";
$result3 = mysql_query($query3)
or die ("Couldn't execute query.");
echo "Success, Email changed.";
}
if($_POST['B2'] == "") {
} else {
$sql5 = "DELETE FROM users WHERE username = '$_POST[account]'";
$result5 = mysql_query($sql5)
or die ("Couldn't execute query.");
echo "Success, Account has been deleted.";
echo "<br>Click <a href=\"admin.php\">here</a> to go back to account management.";
die;
}
if($_POST['account'] == ""){
} else {
echo "<form method=\"POST\" action=\"admin.php\">";
echo "Username: $_POST[account]";
echo "<input name=\"tmpname\" type=\"hidden\" value=\"$_POST[account]\">";
echo "<br>";
$sql2 = "SELECT email FROM users
WHERE username = '$_POST[account]'";
$result2 = mysql_query($sql2)
or die ("Couldn't execute query.");
$tmpemail = mysql_result($result2,0);
echo "Email:";
echo "<br><input type=\"text\" name=\"newemail\" size=\"20\" value=\"$tmpemail\">";
echo "<br>";
echo "New Password (leave blank to keep current password)<br><input type=\"text\" name=\"newpassword\" size=\"20\">";
echo "<br><br>";
echo "<input type=\"submit\" value=\"Save Changes\" name=\"B1\">";
echo "</form>";
}
$sql = "SELECT * FROM users ORDER BY username";
$result = mysql_query($sql)
or die ("Couldn't execute query.");
echo "<form method=\"POST\" action=\"admin.php\">";
echo "<table border=\"1\" cellspacing=\"1\" cellpadding=\"3\" style=\"border-collapse: collapse\" bordercolor=\"#111111\">";
echo " <tr>";
echo " <td><center>Edit</center></td>";
echo " <td><center>Username</center></td>";
echo " <td><center>Email</center></td>";
echo " </tr>";
echo " <tr>";
while($row = mysql_fetch_array( $result )) {
echo " <td><input type=\"radio\" value=\"$row[username]\" name=\"account\"></td>";
echo " <td>$row[username]</td>";
echo " <td>$row[email]</td>";
echo "</tr>";
}
echo "</table>";
echo "<br><input type=\"submit\" value=\"Edit selected account!\" name=\"B1\">";
echo "<input type=\"submit\" value=\"Delete selected account!\" name=\"B2\">";
echo "</form>";
$result = mysql_query($sql)
or die ("Couldn't execute query.");
echo "<br><a href=\"admin.php?action=signout\">Sign Out</a>";
} else {
echo "Administration Login:";
echo "<br><br>";
echo "<form method=\"POST\" action=\"admin.php\">";
echo " Username:";
echo " <br>";
echo "<input type=\"text\" name=\"username\" size=\"20\">";
echo " <br>";
echo " Password";
echo " <br>";
echo " <input type=\"password\" name=\"password\" size=\"20\">";
echo " <br>";
echo " <input type=\"submit\" value=\"Submit\" name=\"B1\"></p>";
echo "</form>";
}
?>
get all you need in there!
about those scripts: you know them or just copyed them? realy nice one 
you can start a php page whit those 
