The Joomla! Forum ™

// Torn errors off
error_reporting(0);

// include configuration.php for database and other information
include_once('my_joomla_install/configuration.php');

// take info from aadress bar what we want to check
$get_user = addslashes($_GET['user']);
$get_pass = addslashes($_GET['pass']);

// Just take this little funcion from Joomla core
function mosHash( $seed ) {
   return md5( $GLOBALS['mosConfig_secret'] . md5( $seed ) );
}

// Make connection to mysql server and database
$link = mysql_connect($mosConfig_host, $mosConfig_user, $mosConfig_password);
   if (! $link)
      {
      die ("No access to MySQL server");
      }
   if (!mysql_select_db ($mosConfig_db, $link) )
      {
      die ("No access to database: $db: ".mysql_error() );
      }

// Open Joomla users database table and check username & password

      $check = ("SELECT * FROM ".$mosConfig_dbprefix."users WHERE username = '$get_user' LIMIT 1");

      if (!mysql_query ($check, $link) )
         {
         print "This username wasn't found, please try again!!!";
      } else {
            // Username what we have looked are existing and then check the password
                                                                $a_row = mysql_fetch_array (mysql_query($check));

            
            // Make some security staff for Joomla
            $harden = mosHash( @$_SERVER['HTTP_USER_AGENT'] );
            
            list($hash, $salt) = explode(':', $a_row['password']);

            $check_username = md5( $a_row['username'] . $harden );
            $check_password = md5( $hash . $harden );
            
            $username = md5( $get_user . $harden );            
            $cryptpass = md5($get_pass.$salt);
            
            
            
            if ( $check_username == $username && $hash == $cryptpass ) {

// no whe know that username & password is correct just tell this user also
print "Yes, your information are correct - username and password was correct

} else {
// sorry username & passwords doesn't mach
print "Sorry, username or password was wrong";
}
}

if ($mosConfig_useractivation == 1){
      $message = sprintf (_USEND_MSG_ACTIVATE, $name, $mosConfig_sitename, $mosConfig_live_site."/index.php?option=com_registration&task=activate&activation=".$row->activation, $mosConfig_live_site, $username, $pwd);
   } else {
      $message = sprintf (_USEND_MSG, $name, $mosConfig_sitename, $mosConfig_live_site);
   }

if ($mosConfig_useractivation == 1){
      $message = sprintf (_USEND_MSG_ACTIVATE, $name, $mosConfig_sitename, $mosConfig_live_site, $username, $pwd);
   } else {
      $message = sprintf (_USEND_MSG, $name, $mosConfig_sitename, $mosConfig_live_site);
   }