[Armin]

@miz

you can a hack post only with user/pass what works without ip

PHP Code:

if (!isset($_SERVER['PHP_AUTH_USER'])) { 
    header('WWW-Authenticate: Basic realm="Restricted area"'); 
    header("HTTP/1.0 401 Unauthorized"); 
    echo "Unauthorized login attempts are logged.\n"; 
    echo "bla"; 
    exit; 
} else { 
    //checking database 
    $userinf=$DB_site->query_first("SELECT user.password,user.userid,user.salt FROM user WHERE username='$_SERVER[PHP_AUTH_USER]'"); 
}
//checking if the user login is ok 
     
        $salt = $userinf['salt']; 
        $pass = $userinf['password']; 
        $userp = md5(md5($_SERVER['PHP_AUTH_PW']) . $salt); 
                    
    if ($pass != $userp) { 
        //we have a looser:) 
        header('WWW-Authenticate: Basic realm="Restricted area"'); 
        header('HTTP/1.0 401 Unauthorized'); 
        echo "Unauthorized login attempts are logged.\n"; 
        exit; 

    } 


so I think once, however, doesn't work on gold


what's wrong :devious: