From 5ee813d4c103204b3e11b3353e40410979abf183 Mon Sep 17 00:00:00 2001
From: printempw <h@prinzeugen.net>
Date: Sun, 17 Jan 2016 11:39:46 +0800
Subject: [PATCH] convert some files in ajax.php

---
 check.php                  | 35 ----------------
 connect.php                | 85 --------------------------------------
 user.php => user/index.php |  0
 3 files changed, 120 deletions(-)
 delete mode 100755 check.php
 delete mode 100644 connect.php
 rename user.php => user/index.php (100%)
 mode change 100755 => 100644

diff --git a/check.php b/check.php
deleted file mode 100755
index cf3ee82c..00000000
--- a/check.php
+++ /dev/null
@@ -1,35 +0,0 @@
-<?php
-header('Access-Control-Allow-Origin：*');
-session_start();
-$action = $_GET['action'];
-require "./connect.php";
-global $arr;
-
-if ($action == "login") {
-    // SQL injection protection will be done in connect.php
-    $uname = $_POST['uname'];
-    $passwd = md5(stripslashes(trim($_POST['passwd']))); // Use md5 to encrypt password
-    $arr = checkPasswd($uname, $passwd);
-    //$arr['msg'] = $uname;
-} elseif ($action == "token") {
-    $uname = $_COOKIE['uname'];
-    $token = $_POST['token'];
-    $arr = checkToken($uname, $token);
-} elseif ($action == "register") {
-    $uname = $_POST['uname'];
-    $passwd = md5(stripslashes(trim($_POST['passwd'])));
-
-    if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
-        $ip = $_SERVER['HTTP_CLIENT_IP'];
-    } elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
-        $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
-    } else {
-        $ip = $_SERVER['REMOTE_ADDR'];
-    }
-
-    $arr = register($uname, $passwd, $ip);
-}
-
-
-echo json_encode($arr);
-?>
diff --git a/connect.php b/connect.php
deleted file mode 100644
index 64545ce9..00000000
--- a/connect.php
+++ /dev/null
@@ -1,85 +0,0 @@
-<?php
-require "./config.php";
-$con = mysql_connect(DB_HOST, DB_USER, DB_PASSWD);
-
-if (!$con) {
-    die ("Can not connect to mysql, check if database info correct in config.php. ".mysql_error());
-}
-mysql_select_db(DB_NAME, $con);
-
-function getToken($uname) {
-    global $con;
-    // Simple SQL injection protection
-    $uname = strtolower(stripslashes(trim($_POST['uname'])));
-    $uname = mysql_real_escape_string($uname);
-    $query = mysql_query("SELECT * FROM users where username='$uname'", $con);
-    $row = mysql_fetch_array($query);
-    return md5($row['uname'].$row['passwd'].SALT);
-    mysql_close($con);
-}
-
-function checkToken($uname, $token) {
-    $uname = strtolower(stripslashes(trim($_POST['uname'])));
-    $uname = mysql_real_escape_string($uname);
-    if ($token != getToken($uname)){
-        $arr['success'] = 0;
-        $arr['msg'] = "Invalid Token: ".$token;
-    } else {
-        $arr['success'] = 1;
-        $arr['msg'] = 'Valid Token.';
-    }
-    return $arr;
-}
-
-function checkPasswd($uname, $rawPasswd) {
-    global $con;
-    $uname = strtolower(stripslashes(trim($_POST['uname'])));
-    $uname = mysql_escape_string($uname);
-    $query = mysql_query("SELECT * FROM users where username='$uname'", $con);
-    $row = mysql_fetch_array($query);
-
-    if (!$row['password']) {
-        $arr['success'] = 0;
-        $arr['msg'] = "Non-existent user.";
-    } else {
-        if ($row['password'] == $rawPasswd) {
-            $arr['success'] = 1;
-            $arr['msg'] = 'Logging in succeed!';
-            $arr['token'] = getToken();
-        } else {
-            $arr['success'] = 0;
-            $arr['msg'] = "Incorrect usename or password.";
-        }
-    }
-    return $arr;
-    mysql_close($con);
-}
-
-function register($uname, $passwd, $ip) {
-    global $con;
-    $uname = strtolower(stripslashes(trim($_POST['uname'])));
-    $uname = mysql_real_escape_string($uname);
-    $query = mysql_query("SELECT * FROM users where username='$uname'", $con);
-    $row = mysql_fetch_array($query);
-
-    if (!$row['password']) {
-
-        $ipQuery = mysql_query("SELECT * FROM users where ip='$ip'", $con);
-        $ipRow = mysql_fetch_array($ipQuery);
-
-        if(!$ipRow['username']) {
-            mysql_query("INSERT INTO users (username, password, ip) VALUES ('$uname', '$passwd', '$ip')", $con);
-            $arr['success'] = 1;
-            $arr['msg'] = "Registered successfully.";
-        } else {
-            $arr['success'] = 0;
-            $arr['msg'] = "It seems that you have already register a account with this IP address.";
-        }
-    } else {
-        $arr['success'] = 0;
-        $arr['msg'] = "User already existed.";
-    }
-    return $arr;
-    mysql_close($con);
-}
-?>
diff --git a/user.php b/user/index.php
old mode 100755
new mode 100644
similarity index 100%
rename from user.php
rename to user/index.php