mayi_cms/member/include/login.inc.php

<?php

if (!defined('IN_MYMPS')) {
	exit('Forbidden');
}

$userpwd = trim($userpwd);
$loginip = GetIP();
$logintime = $timestamp ? $timestamp : time();
$memory = isset($memory) ? trim($memory) : '';
$url = $url ? urldecode($url) : '';
if ($authcodesettings['login'] == 1 && !($randcode = mymps_chk_randcode($checkcode))) {
	write_msg('验证码输入错误，请返回重新输入');
}

($userid == '' || $userpwd == '') && write_msg('用户帐号或密码不能为空');
$user_id = $db->getOne('SELECT userid FROM `' . $db_mymps . 'member` WHERE userid=\'' . $userid . '\' OR mobile=\'' . $userid . '\' OR email=\'' . $userid . '\'');

if ($user_id) {
	$row = $db->getRow('SELECT userid,status FROM `' . $db_mymps . 'member` WHERE userid=\'' . $user_id . '\' AND userpwd=\'' . md5($userpwd) . '\'');

	if (!$row) {
		write_msg('登录失败，您输入了错误的账号或密码！');
		exit();
	}

	$s_uid = $row['userid'] ? $row['userid'] : $userid;
	$userid = $s_uid;
}
else {
	$s_uid = NULL;
}

$row['status'] = in_array(PASSPORT_TYPE, array('ucenter', 'phpwind')) ? 1 : $row['status'];

if (PASSPORT_TYPE == 'ucenter') {
	require MYMPS_ROOT . '/uc_client/client.php';
	list($uid, $username, $password, $email) = uc_user_login($userid, $userpwd);

	if (0 < $uid) {
		if (!$db->getOne('SELECT count(*) FROM ' . $db_mymps . 'member WHERE userid=\'' . $userid . '\'')) {
			member_reg($userid, md5($userpwd), $email, '', '', '', '', 1);
		}
		else {
			$db->query('UPDATE `' . $db_mymps . 'member` SET userpwd = \'' . md5($userpwd) . ('\' WHERE userid = \'' . $userid . '\''));
		}

		$s_uid = $userid;
	}
	else {
		if ($uid == -1) {
			write_msg('用户不存在,或者被删除');
		}
		else if ($uid == -2) {
			write_msg('密码输入错误');
		}
		else {
			write_msg('未定义操作');
		}

		exit();
	}
}

if ($s_uid) {
	if (empty($row['status'])) {
		write_msg('您的账号 [<b>' . $s_uid . '</b>] 目前处于<font color=red>待审状态</font>！<br>请进入邮箱查收验证邮件或等待客服人员开通账号！');
	}
	else {
		$db->query('UPDATE `' . $db_mymps . 'member` SET logintime=\'' . $timestamp . '\',loginip=\'' . $loginip . '\'  WHERE userid = \'' . $userid . '\' ');
		$member_log->in($s_uid, md5($userpwd), $memory, 'noredirect');
	}

	if (PASSPORT_TYPE == 'phpwind' && $user_login['synlogin']) {
		echo $user_login['synlogin'];
	}
	else if (PASSPORT_TYPE == 'ucenter') {
		echo uc_user_synlogin($uid);
	}

	echo mymps_goto($url ? $url : $mymps_global['SiteUrl'] . '/member/index.php');
}
else {
	write_msg('登录失败，您输入了错误的账号或密码！');
}

?>