Quote:
Originally Posted by Cerealguy
unnecessary public
pawn Код:
CMD:changepass(playerid, params[])
{
if (gPlayerInfo[playerid][pLogged] == 0)
return SendClientMessage( playerid, -1, "You need to be logged in to use this. " );
if(isnull(params))
return SendClientMessage( playerid, -1, "USAGE: /changepass [New password]. " );
new query[128];
format(query, sizeof (query), "UPDATE `users` SET `pass`='%s' WHERE `id`='%i'", params, gPlayerInfo[playerid][pID]);
mysql_function_query(gHandle, query, true, "ChangePass", "d", playerid);
SendClientMessage(playerid, -1, "You have successfully changed your password.");
return 1;
}
|
Using this will change the password in the database to anything what is typed. So if I type /changepass blabla, the encrypted text in database will change into the written text which is wrong and then I try the new password after relogging it won't work, neither the old pass.
So I tried to change the code a bit so it looks almost same as the registration system, but now the password doesn't change at all.
pawn Код:
CMD:changepass(playerid, params[])
{
if (gPlayerInfo[playerid][pLogged] == 0)
return SendClientMessage( playerid, -1, "You need to be logged in to use this. " );
if(isnull(params))
return SendClientMessage( playerid, -1, "USAGE: /changepass [New password]. " );
new query[128];
new salt[30], hash[129];
randomString(salt, SALT_LENGTH);
format(hash, sizeof(hash), "%s%s", salt, escape(params));
WP_Hash(hash, sizeof(hash), hash);
new pass[129];
format(query, sizeof(query), "UPDATE `users` SET `pass`='%s' WHERE `id`='%i'", pass, gPlayerInfo[playerid][pID]);
SendClientMessage(playerid, -1, "You have successfully changed your password.");
return 1;
}
I did it like this but seems like I fucked up something once again.
Here's the registration system, it works properly;
pawn Код:
Dialog:Register(playerid, response, listitem, inputtext[])
{
if(!response) {
return SendClientMessage(playerid, -1, "SERVER: You have left the server."), Kick(playerid);
}
if(isnull(inputtext)) {
return Dialog_Show(playerid, Register, DIALOG_STYLE_PASSWORD, "{1564F5}Register", "Type in a password below to register an account.", "Okay", "Cancel");
}
if(strlen(inputtext) >= MAX_PASS_LENGTH) {
return SendClientMessage(playerid, -1, "SERVER: Password must not be more than 40 characters"), Dialog_Show(playerid, Register, DIALOG_STYLE_PASSWORD, "{1564F5}Register", "Type in a password below to register an account.", "Okay", "Cancel");
}
new Salt[30], hash[129];
randomString(Salt, SALT_LENGTH);
format(hash, sizeof(hash), "%s%s", Salt, escape(inputtext));
WP_Hash(hash, sizeof(hash), hash);
CreateAccount(playerid, Salt, hash);
return 1;
}
stock CreateAccount(playerid, salt[], pass[129])
{
new query[240];
format(query, sizeof(query), "INSERT INTO `users` (name, salt, pass) VALUES (\'%s\', \'%s\', \'%s\')",
returnName(playerid),
salt,
pass
);
mysql_function_query(gHandle, query, false, "OnAccountCreate", "d", playerid);
}
forward OnAccountCreate(playerid);
public OnAccountCreate(playerid)
{
gPlayerInfo[playerid][pID] = mysql_insert_id();
return 1;
}
