diff --git a/fof-main.php b/fof-main.php index 0cb149a..2c56c61 100644 --- a/fof-main.php +++ b/fof-main.php @@ -80,10 +80,7 @@ function fof_log($message, $topic="debug") function require_user() { // FIXME Пилять! Да это же по безопасности, как HTTP Basic авторизация! :-( - $user_name = $_COOKIE["user_name"]; - $user_password_hash = $_COOKIE["user_password_hash"]; - - if (!$user_name || !$user_password_hash || !fof_authenticate($user_name, $user_password_hash)) + if (empty($_COOKIE["user_name"]) || empty($_COOKIE["user_password_hash"]) || !fof_authenticate($_COOKIE["user_name"], $_COOKIE["user_password_hash"])) { if (!function_exists('fof_require_user_hook') || !fof_require_user_hook()) diff --git a/login.php b/login.php index 48db49b..1fc788f 100644 --- a/login.php +++ b/login.php @@ -18,6 +18,7 @@ require_once("fof-main.php"); fof_set_content_type(); +$failed = false; if(isset($_POST["user_name"]) && isset($_POST["user_password"])) { if(fof_authenticate($_POST['user_name'], md5($_POST['user_password'] . $_POST['user_name']))) @@ -33,8 +34,11 @@ $users = fof_db_get_value("SELECT COUNT(*) FROM fof_user"); $feeds = fof_db_get_value("SELECT COUNT(*) FROM fof_feed"); $items = fof_db_get_value("SELECT COUNT(*) FROM fof_item"); +$topreaders = false; if ($fof_prefs_obj && ($days = intval($fof_prefs_obj->admin_prefs['topreaders_days'])) && ($count = intval($fof_prefs_obj->admin_prefs['topreaders_count']))) +{ $topreaders = fof_db_get_top_readers($days, $count); +} ?>