• 08-04-2015, 22:47:09
    #1
    Merhaba arkadaşlar rahatsız ediyorum ama sitemde bir sorunum var seditio cms kullanıyorum ne yaptıysam çözemedim sitem : http://www.ultima-tr.com/users_m-auth.html Burada giriş formu var orada beni hatırla kısmından gün sayısı seçiliyor misal ben 60 gün seçiyorum ama pc kapatıp açınca felan tekrar giriş yapmak gerekıyor kodlarım,

    		if ($rcookiettl>0 && ($cfg['authmode']==1 || $cfg['authmode']==3))
    			{
    			$rcookiettl = ($rcookiettl==0) ? 604800 : $rcookiettl;
    			$rcookiettl = ($rcookiettl > $cfg['cookielifetime']) ? $cfg['cookielifetime'] : $rcookiettl;
    			$u = base64_encode("$ruserid:_:$rmdpass:_:$rdefskin");
    			setcookie("SEDITIO", "$u", time()+$rcookiettl, $cfg['cookiepath'], $cfg['cookiedomain']);
    			}
    		if ($cfg['authmode']==2 || $cfg['authmode']==3)
    			{
    			$_SESSION['rsedition'] = $ruserid;
    			$_SESSION['rseditiop'] = $rmdpass;
    			$_SESSION['rseditioq'] = $rdefskin;
    			}
    Bunlarda ne gibi sorun var nasıl çözebilirim yardımcı olursanız sevinirim.
  • 09-04-2015, 01:28:55
    #2
    Kodlarda sorun görünmüyor, sitenize erişim www ve none www olmak üzere iki şekilde sağlanabiliyor, birinde oluşturulan cookie diğerine aktif olmayabilir, sorun bu olmadığından emin misiniz?
  • 09-04-2015, 21:45:03
    #3
    Hocam localde sorun yok ne zaman pc açsam hep açık oluyor ama sitede öyle olmuyor nasıl düzeltebiliriz bu sorunu?
  • 10-04-2015, 00:16:16
    #4
    ylv
    Üyeliği durduruldu
    ilk olarak site üzerinde giriş yaptığınız
    setcookie("SEDITIO", "$u", time()+$rcookiettl, $cfg['cookiepath'], $cfg['cookiedomain']);

    seditio çerezini browser üzerinden kontrol edin, timeout path domain bilgileri ayarladığın şekilde mi diye.

    sorun yok ise script kodlarınızdan bu çerezin okunup geri işlem yapıldığı bloğu kontrol edin.

    ikisinden birinde sıkıntı vardır.
  • 10-04-2015, 21:20:08
    #5
    Hocam rahatsız ediyorum ama bir türlü beceremedim misal benim 2 php dosyam var 1 giriş ve 1 siteye girişte cokie okuyan ben ikisini buraya kopyalıyım bakabilirmisiniz seditio destek olan yok zaten bende seditio pek bilmiyorum kodlaması biraz karışık gibi.

    üye giriş login dosyası,

    <?PHP
    
    /* ====================
    Seditio - Website engine
    Copyright Neocrome
    http://www.neocrome.net
    [BEGIN_SED]
    File=users.auth.inc.php
    Version=130
    Updated=2010-feb-05
    Type=Core
    Author=Neocrome
    Description=User authentication
    [END_SED]
    ==================== */
    
    if (!defined('SED_CODE')) { die('Wrong URL.'); }
    
    $v = sed_import('v','G','PSW');
    
    /* === Hook === */
    $extp = sed_getextplugins('users.auth.first');
    if (is_array($extp))
    	{ foreach($extp as $k => $pl) { include('plugins/'.$pl['pl_code'].'/'.$pl['pl_file'].'.php'); } }
    /* ===== */
    
    if ($a=='check')
    	{
    	sed_shield_protect();
    
    	/* === Hook for the plugins === */
    	$extp = sed_getextplugins('users.auth.check');
    	if (is_array($extp))
    		{ foreach($extp as $k => $pl) { include('plugins/'.$pl['pl_code'].'/'.$pl['pl_file'].'.php'); } }
    	/* ===== */
    
    	$rusername = sed_import('rusername','P','TXT', 24, TRUE);
    	$rpassword = sed_import('rpassword','P','PSW', 16, TRUE);
    	$rcookiettl = sed_import('rcookiettl','P','INT');
    	$rmdpass  = md5($rpassword);
    	$login_name = preg_match('#^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]{2,})+$#i', $rusername) ? 'user_email' : 'user_name';
    	$user_mail_name = "user_password='$rmdpass' AND $login_name='".sed_sql_prep($rusername)."'";
    
    	## (orj)	$sql = sed_sql_query("SELECT user_id, user_maingrp, user_banexpire, user_skin, user_lang FROM $db_users WHERE user_password='$rmdpass' AND user_name='".sed_sql_prep($rusername)."'");
    	$sql = sed_sql_query("SELECT user_id, user_maingrp, user_banexpire, user_skin, user_lang FROM $db_users WHERE $user_mail_name");
    
    	if ($row = sed_sql_fetcharray($sql))
    		{
    		if ($row['user_maingrp']==2)
    			{
    			sed_log("Log in attempt, user inactive : ".$rusername, 'usr');
    			sed_redirect("message.php?msg=152");
    			exit;
    			}
    	 	elseif ($row['user_maingrp']==3)
    			{
    			if ($sys['now'] > $row['user_banexpire'] && $row['user_banexpire']>0)
    				{
    				$sql = sed_sql_query("UPDATE $db_users SET user_maingrp='4' WHERE user_id='".$row['user_id']."'");
    				}
    		    else
    		       	{
    				sed_log("Log in attempt, user banned : ".$rusername, 'usr');
    				sed_redirect("message.php?msg=153&num=".$row['user_banexpire']);
    				exit;
    				}
    			}
    
    		$ruserid = $row['user_id'];
    		$rdefskin = $row['user_skin'];
    
    		sed_sql_query("UPDATE $db_users SET user_lastip='".$usr['ip']."' WHERE user_id='".$row['user_id']."' LIMIT 1");
    
    		if ($rcookiettl>0 && ($cfg['authmode']==1 || $cfg['authmode']==3))
    			{
    			$rcookiettl = ($rcookiettl==0) ? 604800 : $rcookiettl;
    			$rcookiettl = ($rcookiettl > $cfg['cookielifetime']) ? $cfg['cookielifetime'] : $rcookiettl;
    			$u = base64_encode("$ruserid:_:$rmdpass:_:$rdefskin");
    			setcookie("SEDITIO", "$u", time()+$rcookiettl, $cfg['cookiepath'], $cfg['cookiedomain']);
    			}
    
    		if ($cfg['authmode']==2 || $cfg['authmode']==3)
    			{
    			$_SESSION['rsedition'] = $ruserid;
    			$_SESSION['rseditiop'] = $rmdpass;
    			$_SESSION['rseditioq'] = $rdefskin;
    			}
    
    		/* === Hook === */
    		$extp = sed_getextplugins('users.auth.check.done');
    		if (is_array($extp))
    			{ foreach($extp as $k => $pl) { include('plugins/'.$pl['pl_code'].'/'.$pl['pl_file'].'.php'); } }
    		/* ===== */
    
    		$sql = sed_sql_query("DELETE FROM $db_online WHERE online_userid='-1' AND online_ip='".$usr['ip']."' LIMIT 1");
    		sed_redirect("message.php?msg=104&redirect=".$redirect);
    		exit;
    		}
    	else
    		{
    		sed_shield_update(7, "Log in");
    		sed_log("Log in failed, user : ".$rusername,'usr');
    		sed_redirect("message.php?msg=151");
    		exit;
    		}
    	}
    
    else
    	{ unset($redir); }
    
    /* === Hook === */
    $extp = sed_getextplugins('users.auth.main');
    if (is_array($extp))
    	{ foreach($extp as $k => $pl) { include('plugins/'.$pl['pl_code'].'/'.$pl['pl_file'].'.php'); } }
    /* ===== */
    
    require("system/header.php");
    $t = new XTemplate("skins/".$skin."/users.auth.tpl");
    
    $t->assign(array(
    	"USERS_AUTH_TITLE" => $L['aut_logintitle'],
    	"USERS_AUTH_SEND" => "users.php?m=auth&amp;a=check&amp;redirect=".$redirect,
    	"USERS_AUTH_USER" => "<input style=\"font-family: Trebuchet MS; width:140px;height:30px;border:1px dashed blue; background-color:rgb(240,250,255); font:13px/24px 'Open Sans',sans-serif;padding-left:13px;padding-right:10px;\" type=\"text\" name=\"rusername\" value=\"Kullanıcı Adı\" value=\"Kullanıcı Adı\" onfocus=\"resetBox(this, 'Kullanıcı Adı')\" size=\"16\" maxlength=\"32\" classklvye='inputbox required validate-password keyboardInput' />",
    	"USERS_AUTH_PASSWORD" => "<input style=\"font-family: Trebuchet MS; width:140px;height:30px;border:1px dashed #CC0000; background-color:rgb(240,250,255); font:13px/24px 'Open Sans',sans-serif;padding-left:13px;padding-right:10px;\" type=\"password\" name=\"rpassword\" class_orj=\"password\" class='inputbox required validate-password keyboardInput' value=\"123456\" onfocus=\"resetBox(this, '123456')\" onclick=\"resetBox(this, '123456')\" size=\"16\" maxlength=\"32\">".$redir,
    	"USERS_AUTH_REGISTER" => "users.php?m=register"// yazmayi engellemek için : "readonly/" sonuna eklicez.
    		));
    
    /* === Hook === */
    $extp = sed_getextplugins('users.auth.tags');
    if (is_array($extp))
    	{ foreach($extp as $k => $pl) { include('plugins/'.$pl['pl_code'].'/'.$pl['pl_file'].'.php'); } }
    /* ===== */
    
    $t->parse("MAIN");
    $t->out("MAIN");
    
    require("system/footer.php");
    ?>
    ve common.php dosyamız yani buradan cokie okuyor siteye girişte,

    <?PHP
    
    /* ====================
    Seditio - Website engine
    Copyright Neocrome
    http://www.neocrome.net
    [BEGIN_SED]
    File=system/common.php
    Version=130
    Updated=2010-feb-15
    Type=Core
    Author=Neocrome
    Description=Common
    [END_SED]
    ==================== */
    
    if (!defined('SED_CODE')) { die('Wrong URL.'); }
    
    /* ======== First... ======== */
    
    @set_magic_quotes_runtime(0);
    define('MQGPC', @get_magic_quotes_gpc());
    error_reporting(E_ALL ^ E_NOTICE);
    
    /* ======== Connect to the SQL DB======== */
    
    require('system/database.'.$cfg['sqldb'].'.php');
    $connection_id = sed_sql_connect($cfg['mysqlhost'], $cfg['mysqluser'], $cfg['mysqlpassword'], $cfg['mysqldb']);
    unset($cfg['mysqlhost'], $cfg['mysqluser'], $cfg['mysqlpassword']);
    
    /* ======== Configuration settings (from the DB) ======== */
    
    $sql_config = sed_sql_query("SELECT config_owner, config_cat, config_name, config_value FROM $db_config");
    
    if (sed_sql_numrows($sql_config)<100)
    	{
    	define('SED_ADMIN',TRUE);
    	require_once('system/functions.admin.php');
    	unset($query);
    
    	foreach($cfgmap as $i => $line)
    		{ $query[] = "('core','".$line[0]."','".$line[1]."','".$line[2]."',".(int)$line[3].",'".$line[4]."')"; }
    	$query = implode(",", $query);
    
    	$sql = sed_sql_query("INSERT INTO $db_config (config_owner, config_cat, config_order, config_name, config_type, config_value) VALUES ".$query);
    	}
    
    while ($row = sed_sql_fetcharray($sql_config))
    	{
    	if ($row['config_owner']=='core')
    		{ $cfg[$row['config_name']] = $row['config_value']; }
    	else
    		{ $cfg['plugin'][$row['config_cat']][$row['config_name']] = $row['config_value']; }
    	}
    
    /* ======== Extra settings (the other presets are in functions.php) ======== */
    
    $sys['day'] = @date('Y-m-d');
    $sys['now'] = time();
    $sys['now_offset'] = $sys['now'] - $cfg['servertimezone']*3600;
    $online_timedout = $sys['now'] - $cfg['timedout'];
    $cfg['doctype'] = sed_setdoctype($cfg['doctypeid']);
    $cfg['css'] = $cfg['defaultskin'];
    $cfg['mobile_client'] = sed_mobile_detect();
    $usr['ip'] = ($cfg['clustermode']) ? $_SERVER['HTTP_X_CLUSTER_CLIENT_IP'] : $_SERVER['REMOTE_ADDR'] ;
    $sys['unique'] = sed_unique(16);
    $sys['url'] = base64_encode($_SERVER['REQUEST_URI']);
    $sys['url_redirect'] = 'redirect='.$sys['url'];
    $redirect = sed_import('redirect','G','SLU');
    
    /* ======== Internal cache ======== */
    
    if ($cfg['cache'])
    	{
    	$sql = sed_cache_getall();
    	if ($sql)
    		{
    		while ($row = sed_sql_fetcharray($sql))
    			{ $$row['c_name'] = unserialize($row['c_value']); }
    		}
    	}
    
    /* ======== Parser ======== */
    
    if (!$sed_parser)
    	{
    	$sed_parser = sed_build_parser();
    	sed_cache_store('sed_parser', $sed_parser, 600);
    	}
    
    /* ======== Plugins ======== */
    
    if (!$sed_plugins)
    	{
    	$sql = sed_sql_query("SELECT * FROM $db_plugins WHERE pl_active=1 ORDER BY pl_hook ASC, pl_order ASC");
    	 if (sed_sql_numrows($sql)>0)
    		{
    		while ($row = sed_sql_fetcharray($sql))
    			{ $sed_plugins[] = $row; }
    		}
    	sed_cache_store('sed_plugins', $sed_plugins, 3300);
    	}
    
    /* ======== Gzip and output filtering ======== */
    
    if ($cfg['gzip'])
    	{ @ob_start('ob_gzhandler'); }
    else
    	{ ob_start(); }
    
    ob_start('sed_outputfilters');
    
    // Enables rewrite
    ob_start('rewrite_output');
    
    /* ======== Check the banlist ======== */
    
    $userip = explode('.', $usr['ip']);
    $ipmasks = "('".$userip[0].".".$userip[1].".".$userip[2].".".$userip[3]."','".$userip[0].".".$userip[1].".".$userip[2].".*','".$userip[0].".".$userip[1].".*.*','".$userip[0].".*.*.*')";
    
    $sql = sed_sql_query("SELECT banlist_id, banlist_ip, banlist_reason, banlist_expire FROM $db_banlist WHERE banlist_ip IN ".$ipmasks, 'Common/banlist/check');
    
    If (sed_sql_numrows($sql)>0)
    	{
    	$row=sed_sql_fetcharray($sql);
    	if ($sys['now']>$row['banlist_expire'] && $row['banlist_expire']>0)
    		{
    		$sql = sed_sql_query("DELETE FROM $db_banlist WHERE banlist_id='".$row['banlist_id']."' LIMIT 1");
    		}
    	else
    		{
    		$disp = "Your IP is banned.<br />Reason: ".$row['banlist_reason']."<br />Until: ";
    		$disp .= ($row['banlist_expire']>0) ? @date($cfg['dateformat'], $row['banlist_expire'])." GMT" : "Never expire.";
    		sed_diefatal($disp);
    		}
    	}
    
    /* ======== Groups ======== */
    
    if (!$sed_groups )
    	{
    	$sql = sed_sql_query("SELECT * FROM $db_groups WHERE grp_disabled=0 ORDER BY grp_level DESC");
    
    	if (sed_sql_numrows($sql)>0)
    		{
    		while ($row = sed_sql_fetcharray($sql))
    			{
    			$sed_groups[$row['grp_id']] = array (
    				'id' => $row['grp_id'],
    				'alias' => $row['grp_alias'],
    				'level' => $row['grp_level'],
       				'disabled' => $row['grp_disabled'],
       				'hidden' => $row['grp_hidden'],
    				'state' => $row['grp_state'],
    				'title' => sed_cc($row['grp_title']),
    				'desc' => sed_cc($row['grp_desc']),
    				'icon' => $row['grp_icon'],
    				'pfs_maxfile' => $row['grp_pfs_maxfile'],
    				'pfs_maxtotal' => $row['grp_pfs_maxtotal'],
    				'ownerid' => $row['grp_ownerid']
    					);
    			}
    		}
    	else
    		{ sed_diefatal('No groups found.'); }
    
    	sed_cache_store('sed_groups',$sed_groups,3600);
    	}
    
    /* ======== User/Guest ======== */
    
    $usr['id'] = 0;
    $usr['sessionid'] = '';
    $usr['name'] = '';
    $usr['level'] = 0;
    $usr['lastvisit'] = 30000000000;
    $usr['lastlog'] = 0;
    $usr['timezone'] = $cfg['defaulttimezone'];
    $usr['newpm'] = 0;
    $usr['messages'] = 0;
    
    if ($cfg['authmode']==2 || $cfg['authmode']==3)
    	{ session_start(); }
    
    if (isset($_SESSION['rsedition']) && ($cfg['authmode']==2 || $cfg['authmode']==3))
    	{
    	$rsedition = $_SESSION['rsedition'];
    	$rseditiop = $_SESSION['rseditiop'];
    	$rseditios = $_SESSION['rseditios'];
    	}
    elseif (isset($_COOKIE['SEDITIO']) && ($cfg['authmode']==1 || $cfg['authmode']==3))
    	{
    	$u = base64_decode($_COOKIE['SEDITIO']);
    	$u = explode(':_:',$u);
    	$rsedition = sed_import($u[0],'D','INT');
    	$rseditiop = sed_import($u[1],'D','PSW');
    	$rseditios = sed_import($u[2],'D','ALP');
    	}
    
    if ($rsedition>0 && $cfg['authmode']>0)
    	{
    	if (mb_strlen($rseditiop)!=32)
    		{ sed_diefatal('Wrong value for the password.'); }
    
    	if ($cfg['ipcheck'])
    		{ $sql = sed_sql_query("SELECT * FROM $db_users WHERE user_id='$rsedition' AND user_password='$rseditiop' AND user_lastip='".$usr['ip']."'"); }
    	else
    		{ $sql = sed_sql_query("SELECT * FROM $db_users WHERE user_id='$rsedition' AND user_password='$rseditiop'"); }
    
    	if ($row = sed_sql_fetcharray($sql))
    		{
    		if ($row['user_maingrp']>3)
    			{
    			$usr['id'] = $row['user_id'];
    			$usr['sessionid'] = ($cfg['authmode']==1) ? md5($row['user_lastvisit']) : session_id();
    			$usr['name'] = $row['user_name'];
    			$usr['maingrp'] = $row['user_maingrp'];
    			$usr['lastvisit'] = $row['user_lastvisit'];
    			$usr['lastlog'] = $row['user_lastlog'];
    			$usr['timezone'] = $row['user_timezone'];
    			$usr['skin'] = ($cfg['forcedefaultskin']) ? $cfg['defaultskin'] : $row['user_skin'];
    			$usr['lang'] = ($cfg['forcedefaultlang']) ? $cfg['defaultlang'] : $row['user_lang'];
    			if ($cfg['mobile_client']){$usr['skin'] = "mobile";}
    			$usr['newpm'] = $row['user_newpm'];
    			$usr['auth'] = unserialize($row['user_auth']);
    			$usr['level'] = $sed_groups[$usr['maingrp']]['level'];
    			$usr['profile'] = $row;
    
    			if ($usr['lastlog']+$cfg['timedout'] < $sys['now_offset'])
    				{
    				$sys['comingback']= TRUE;
    				$usr['lastvisit'] = $usr['lastlog'];
    				$sys['sql_update_lastvisit'] = ", user_lastvisit='".$usr['lastvisit']."'";
    				}
    
    			if (empty($row['user_auth']))
    				{
    				$usr['auth'] = sed_auth_build($usr['id'], $usr['maingrp']);
    				$sys['sql_update_auth'] = ", user_auth='".serialize($usr['auth'])."'";
    				}
    
    			$sql = sed_sql_query("UPDATE $db_users SET user_lastlog='".$sys['now_offset']."', user_lastip='".$usr['ip']."', user_sid='".$usr['sessionid']."', user_logcount=user_logcount+1 ".$sys['sql_update_lastvisit']." ".$sys['sql_update_auth']." WHERE user_id='".$usr['id']."'");
    			}
    		}
    	}
    else
    	{
    	if (empty($rseditios) && ($cfg['authmode']==1 || $cfg['authmode']==3))
    		{
    		$u = base64_encode('0:_:0:_:'.$cfg['defaultskin']);
    		setcookie('SEDITIO',$u,time()+($cfg['cookielifetime']),$cfg['cookiepath'],$cfg['cookiedomain']);
    		}
    	else
    	  	{
    	   $skin = ($cfg['forcedefaultskin']) ? $cfg['defaultskin'] : $rseditios;
    	  	}
    	}
    
    if ($usr['id']==0)
    	{
    	$usr['auth'] = sed_auth_build(0);
    	$usr['skin'] = (empty($usr['skin'])) ? $cfg['defaultskin'] : $usr['skin'];
    	$usr['lang'] = $cfg['defaultlang'];
    	}
    
     /* === Hook === */
          $extp = sed_getextplugins('input');
          if (is_array($extp))
          { foreach($extp as $k => $pl) { include('plugins/'.$pl['pl_code'].'/'.$pl['pl_file'].'.php'); } }
    
    /* ======== Anti-XSS protection ======== */
    
    $xg = sed_import('x','G','ALP');
    $xp = sed_import('x','P','ALP');
    
    $xk = sed_check_xp();
    
    $extp = sed_getextplugins('common');
    if (is_array($extp))
    	{ foreach($extp as $k => $pl) { include('plugins/'.$pl['pl_code'].'/'.$pl['pl_file'].'.php'); } }
    
    
    /* ======== Zone variables ======== */
    
    $z = strtolower(sed_import('z','G','ALP',32));
    $m = sed_import('m','G','ALP',24);
    $n = sed_import('n','G','ALP',24);
    $a = sed_import('a','G','ALP',24);
    $b = sed_import('b','G','ALP',24);
    
    /* ======== Who's online (part 1) and shield protection ======== */
    
    if (!$cfg['disablewhosonline'] || $cfg['shieldenabled'])
    	{
    
    	$sql = sed_sql_query("DELETE FROM $db_online WHERE online_lastseen<'$online_timedout'");
       	$sql = sed_sql_query("SELECT COUNT(*) FROM $db_online WHERE online_name='v'");
    	$sys['whosonline_vis_count'] = sed_sql_result($sql, 0, 'COUNT(*)');
    	$sql = sed_sql_query("SELECT o.online_name, o.online_userid FROM $db_online o WHERE o.online_name NOT LIKE 'v' ORDER BY online_name ASC");
    	$sys['whosonline_reg_count'] = sed_sql_numrows($sql);
    	$sys['whosonline_all_count'] = $sys['whosonline_reg_count'] + $sys['whosonline_vis_count'];
    
    	$ii=0;
    	while ($row = sed_sql_fetcharray($sql))
    		{
    		$out['whosonline_reg_list'] .= ($ii>0) ? ', ' : '';
    		$out['whosonline_reg_list'] .= sed_build_user($row['online_userid'], sed_cc($row['online_name']));
    		$sed_usersonline[] = $row['online_userid'];
          	$ii++;
    		}
    	}
    
    /* ======== Max users ======== */
    
    if (!$cfg['disablehitstats'])
    	{
    	$sql = sed_sql_query("SELECT stat_value FROM $db_stats where stat_name='maxusers' LIMIT 1");
    
    	if ($row = sed_sql_fetcharray($sql))
        	{ $maxusers = $row[0]; }
    	else
        	{ $sql = sed_sql_query("INSERT INTO $db_stats (stat_name, stat_value) VALUES ('maxusers', 1)"); }
    
    	if ($maxusers<$sys['whosonline_all_count'])
        	{ $sql = sed_sql_query("UPDATE $db_stats SET stat_value='".$sys['whosonline_all_count']."' WHERE stat_name='maxusers'"); }
    	}
    
    /* ======== Language ======== */
    
    $mlang = 'system/lang/'.$usr['lang'].'/main.lang.php';
    
    if (!file_exists($mlang))
    	{
    	$usr['lang'] = $cfg['defaultlang'];
    	$mlang = 'system/lang/'.$usr['lang'].'/main.lang.php';
    
    	if (!file_exists($mlang))
    		{ sed_diefatal('Main language file not found.'); }
    	}
    
    $lang = $usr['lang'];
    require($mlang);
    
    /* ======== Who's online part 2 ======== */
    
    $out['whosonline'] = ($cfg['disablewhosonline']) ? '' : $sys['whosonline_reg_count'].' '.$L['com_members'].', '.$sys['whosonline_vis_count'].' '.$L['com_guests'];
    $out['copyright'] = "<a href=\"http://www.neocrome.net\">".$L['foo_poweredby']." Seditio</a>";
    
    /* ======== Skin ======== */
    
    $usr['skin_raw'] = $usr['skin'];
    
    if (@file_exists('skins/'.$usr['skin'].'.'.$usr['lang'].'/header.tpl'))
    	{ $usr['skin'] = $usr['skin'].'.'.$usr['lang']; }
    
    $mskin = 'skins/'.$usr['skin'].'/header.tpl';
    
    if (!file_exists($mskin))
    	{
    	$out['notices'] .= $L['com_skinfail'].'<br />';
    	$usr['skin'] = $cfg['defaultskin'];
    	$mskin = 'skins/'.$usr['skin'].'/header.tpl';
    
    	if (!file_exists($mskin))
    		{ sed_diefatal('Default skin not found.'); }
    	}
    
    $usr['skin_lang'] = 'skins/'.$usr['skin'].'/'.$usr['skin_raw'].'.'.$usr['lang'].'.lang.php';
    
    if (@file_exists($usr['skin_lang']))
    	{ require($usr['skin_lang']); }
    
    require('skins/'.$usr['skin'].'/'.$usr['skin'].'.php');
    
    $skin = $usr['skin'];
    
    /* ======== Basic statistics ======== */
    
    if (!$cfg['disablehitstats'])
    	{
    	sed_stat_inc('totalpages');
    	$hits_today = sed_stat_get($sys['day']);
    
    	if ($hits_today>0)
    		{ sed_stat_inc($sys['day']); }
    	else
    		{ sed_stat_create($sys['day']); }
    
    	$sys['referer'] = substr($_SERVER['HTTP_REFERER'], 0, 255);
    
    	if ((@strpos($sys['referer'], $cfg['mainurl']) === FALSE)
    		&& (@strpos($sys['referer'], $cfg['hostip']) === FALSE)
    		&& (@strpos($sys['referer'], str_replace('www.', '', $cfg['mainurl'])) === FALSE)
    		&& !empty($sys['referer']))
    		{
    		$sql = sed_sql_query("SELECT COUNT(*) FROM $db_referers WHERE ref_url = '".sed_sql_prep($sys['referer'])."'");
    		$count = sed_sql_result($sql,0,"COUNT(*)");
    
    		if ($count>0)
    			{
    			$sql = sed_sql_query("UPDATE $db_referers SET ref_count=ref_count+1,
    				ref_date='".$sys['now_offset']."'
    				WHERE ref_url='".sed_sql_prep($sys['referer'])."'");
    			}
    	    else
    			{
    			$sql = sed_sql_query("INSERT INTO $db_referers
    				(ref_url,
    				ref_count,
    				ref_date)
    				VALUES
    				('".sed_sql_prep($sys['referer'])."',
    				'1',
    				".(int)$sys['now_offset'].")");
    			}
    		}
    	}
    
    /* ======== Categories ======== */
    
    if (!$sed_cat && !$cfg['disable_page'])
    	{
    	$sed_cat = sed_load_structure();
    	sed_cache_store('sed_cat', $sed_cat, 3600);
    	}
    
    /* ======== Forums ======== */
    
    if (!$sed_forums_str && !$cfg['disable_forums'])
    	{
    	$sed_forums_str = sed_load_forum_structure();
    	sed_cache_store('sed_forums_str', $sed_forums_str, 3600);
    	}
    
    /* ======== Various ======== */
    
    $out['img_up'] = "<img src=\"skins/".$usr['skin']."/img/system/arrow-up.gif\" alt=\"\" />";
    $out['img_down'] = "<img src=\"skins/".$usr['skin']."/img/system/arrow-down.gif\" alt=\"\" />";
    $out['img_left'] = " «";
    $out['img_right'] = " »";
    
    $sed_yesno[0] = $L['No'];
    $sed_yesno[1] = $L['Yes'];
    $sed_img_up = $out['img_up'];
    $sed_img_down = $out['img_down'];
    $sed_img_left = $out['img_left'];
    $sed_img_right = $out['img_right'];
    
    /* ======== Smilies ======== */
    
    if (!$sed_smilies)
    	{
    	$sql = sed_sql_query("SELECT * FROM $db_smilies ORDER by smilie_order ASC, smilie_id ASC");
    	 if (sed_sql_numrows($sql)>0)
    		{
    		while ($row = sed_sql_fetcharray($sql))
    			{ $sed_smilies[] = $row; }
    		}
    	sed_cache_store('sed_smilies',$sed_smilies,3550);
    	}
    
    /* ======== Local/GMT time ======== */
    
    $usr['timetext'] = sed_build_timezone($usr['timezone']);
    $usr['gmttime'] = @date($cfg['dateformat'],$sys['now_offset']).' GMT';
    ##	$usr['gmttime'] = TarihGoster(); // (tarih)
    /* ======== Global hook ======== */
    
    $extp = sed_getextplugins('global');
    if (is_array($extp))
    	{ foreach($extp as $k => $pl) { include('plugins/'.$pl['pl_code'].'/'.$pl['pl_file'].'.php'); } }
    
    /* ======== Pre-loads ======== */
    
    $sed_bbcodes = sed_loadbbcodes();
    
    ?>
    Yardımcı olursanız çok sevinirim.
  • 11-04-2015, 16:41:50
    #6
    ylv
    Üyeliği durduruldu
    setcookie("SEDITIO", "$u", time()+$rcookiettl, $cfg['cookiepath'], $cfg['cookiedomain']);

    $cfg dizisindeki verileri kontrol edin.
    $cfg['cookiepath'] = /
    $cfg['cookiedomain'] = .siteadresi.com olmalı


    elseif (isset($_COOKIE['SEDITIO']) && ($cfg['authmode']==1 || $cfg['authmode']==3))
        {
        $u = base64_decode($_COOKIE['SEDITIO']);
        $u = explode(':_:',$u);
        $rsedition = sed_import($u[0],'D','INT');
        $rseditiop = sed_import($u[1],'D','PSW');
        $rseditios = sed_import($u[2],'D','ALP');
        }
    
    if ($rsedition>0 && $cfg['authmode']>0)
        {
        if (mb_strlen($rseditiop)!=32)
            { sed_diefatal('Wrong value for the password.'); }
    
        if ($cfg['ipcheck'])
            { $sql = sed_sql_query("SELECT * FROM $db_users WHERE user_id='$rsedition' AND user_password='$rseditiop' AND user_lastip='".$usr['ip']."'"); }
        else
            { $sql = sed_sql_query("SELECT * FROM $db_users WHERE user_id='$rsedition' AND user_password='$rseditiop'"); }
    
        if ($row = sed_sql_fetcharray($sql))
            {
            if ($row['user_maingrp']>3)
                {
                $usr['id'] = $row['user_id'];
                $usr['sessionid'] = ($cfg['authmode']==1) ? md5($row['user_lastvisit']) : session_id();
                $usr['name'] = $row['user_name'];
                $usr['maingrp'] = $row['user_maingrp'];
                $usr['lastvisit'] = $row['user_lastvisit'];
                $usr['lastlog'] = $row['user_lastlog'];
                $usr['timezone'] = $row['user_timezone'];
                $usr['skin'] = ($cfg['forcedefaultskin']) ? $cfg['defaultskin'] : $row['user_skin'];
                $usr['lang'] = ($cfg['forcedefaultlang']) ? $cfg['defaultlang'] : $row['user_lang'];
                if ($cfg['mobile_client']){$usr['skin'] = "mobile";}
                $usr['newpm'] = $row['user_newpm'];
                $usr['auth'] = unserialize($row['user_auth']);
                $usr['level'] = $sed_groups[$usr['maingrp']]['level'];
                $usr['profile'] = $row;
    
                if ($usr['lastlog']+$cfg['timedout'] < $sys['now_offset'])
                    {
                    $sys['comingback']= TRUE;
                    $usr['lastvisit'] = $usr['lastlog'];
                    $sys['sql_update_lastvisit'] = ", user_lastvisit='".$usr['lastvisit']."'";
                    }
    
                if (empty($row['user_auth']))
                    {
                    $usr['auth'] = sed_auth_build($usr['id'], $usr['maingrp']);
                    $sys['sql_update_auth'] = ", user_auth='".serialize($usr['auth'])."'";
                    }
    
                $sql = sed_sql_query("UPDATE $db_users SET user_lastlog='".$sys['now_offset']."', user_lastip='".$usr['ip']."', user_sid='".$usr['sessionid']."', user_logcount=user_logcount+1 ".$sys['sql_update_lastvisit']." ".$sys['sql_update_auth']." WHERE user_id='".$usr['id']."'");
                }
            }
        }
    else

     if ($cfg['ipcheck'])
            { $sql = sed_sql_query("SELECT * FROM $db_users WHERE user_id='$rsedition' AND user_password='$rseditiop' AND user_lastip='".$usr['ip']."'"); }
    $cfg['ipcheck'] aktif ise kullanıcının son kayıtlı ip adresi ile yeni ip adresinin aynı şartı arıyor. ip değiştiği zaman çerezin bir anlamı kalmıcak misal, ipcheck ayarı aktif olduğunda.


    kullanıcı giriş yaptığı zaman
    $_SESSION['rsedition'] = $ruserid;
    $_SESSION['rseditiop'] = $rmdpass;
    $_SESSION['rseditioq'] = $rdefskin;

    session oluşturuyor fakat çerez okumasında bilgiler doğru ise session çerezi eklemiyor. burda bir eksiklik var, performansıda etkiler.


    $sql = sed_sql_query("UPDATE $db_users SET user_lastlog='".$sys['now_offset']."', user_lastip='".$usr['ip']."', user_sid='".$usr['sessionid']."', user_logcount=user_logcount+1 ".$sys['sql_update_lastvisit']." ".$sys['sql_update_auth']." WHERE user_id='".$usr['id']."'");

    herşey yolunda çerezden okuma yaptım sorguladım vs doğruladım bu işlemden sonra session oluşturmalıyım.

    $_SESSION['rsedition'] = $rsedition;
    $_SESSION['rseditiop'] = $rseditiop;
    $_SESSION['rseditioq'] = $rseditios;

    kodlara bakıp mantıksal yorumluyorum, net hata analizi için verileri işlemler sırasında görmem lazım.
  • 17-04-2015, 00:21:10
    #7
    Hocam www.seditiocms.com'dan seditio indirip bakabılırmısınız version 130 bir türlü çözemedim.