Your IP : 216.73.217.79

Current Path : /var/www/cesa.co.za/members/inc/
Upload File :
Current File : /var/www/cesa.co.za/members/inc/auth.inc.bak

<?php 
$authorized=1;
$auth = "valid";

/*
if (isset($_REQUEST["PHPSESSID"])) {
	$sessid = $_REQUEST["PHPSESSID"];
	echo $sessid;
	$_COOKIE["PHPSESSID"] = $sessid;
	echo $_COOKIE["PHPSESSID"];
	session_id($sessid);
}
*/
session_start();
//	echo $_COOKIE["PHPSESSID"];

include_once($_SERVER['DOCUMENT_ROOT'] . '/cfg/config.php');

$server = EW_CONN_HOST;
$user = EW_CONN_USER;
$pass = EW_CONN_PASS;
$db = EW_CONN_DB;

$conxan = mysql_connect($server,$user,$pass);
mysql_select_db($db,$conxan);

if (!empty($_GET["u"])) {
//	$query = "SELECT contact_id FROM user_login WHERE ENCRYPT(username,username) = '".$_GET["u"]."'";
	$query = "SELECT contact_id FROM user_login WHERE MD5(username) = '".$_GET["u"]."'";
	$result = mysql_query($query) or die($query);
	if ($row = mysql_fetch_array($result)) {
  	$CID = $row['contact_id'];
//  	$sessid = session_id();
//  	mysql_query("UPDATE user_login SET sessionid='".$sessid."' WHERE ENCRYPT(username,username) = '".$_GET["u"]."'");
  	$_SESSION["CID"] = $CID;
  } else {
  	die("Not authorised");
  }
}

function GetCID() {
	return $_SESSION["CID"];
}
?>