登录成功后无法返回到登录之前的页面

输入帐号和密码：http://wo.lz08.cn/do.php?ac=4b33681716aa22cfa89438ce7ff2a167&&ref

手动返回首页，又登录不上；


do.php

1. <?php
   
2. /*
   
3. [UCenter Home] (C) 2007-2008 Comsenz Inc.
   
4. $Id: do.php 12354 2009-06-11 08:14:06Z liguode $
   
5. */
   
6. 
   
7. include_once('./common.php');
   
8. 
   
9. //获取方法
   
10. $ac = empty($_GET['ac'])?'':$_GET['ac'];
    
11. 
    
12. //自定义登录
    
13. if($ac == $_SCONFIG['login_action']) {
    
14. $ac = 'login';
    
15. } elseif($ac == 'login') {
    
16. $ac = '';
    
17. }
    
18. if($ac == $_SCONFIG['register_action']) {
    
19. $ac = 'register';
    
20. } elseif($ac == 'register') {
    
21. $ac = '';
    
22. }
    
23. 
    
24. //允许的方法
    
25. $acs = array('login', 'register', 'lostpasswd', 'swfupload', 'inputpwd',
    
26. 'ajax', 'seccode', 'sendmail', 'stat', 'emailcheck','mobile');
    
27. if(empty($ac) || !in_array($ac, $acs)) {
    
28. showmessage('enter_the_space', 'index.php', 0);
    
29. }
    
30. 
    
31. //链接
    
32. $theurl = 'do.php?ac='.$ac;
    
33. 
    
34. include_once(S_ROOT.'./source/do_'.$ac.'.php');
    
35. 
    
36. ?>

复制代码

do_login.php

1. <?php
   
2. /*
   
3. [UCenter Home] (C) 2007-2008 Comsenz Inc.
   
4. $Id: do_login.php 13210 2009-08-20 07:09:06Z liguode $
   
5. */
   
6. 
   
7. if(!defined('IN_UCHOME')) {
   
8. exit('Access Denied');
   
9. }
   
10. 
    
11. include_once(S_ROOT.'./source/function_cp.php');
    
12. 
    
13. if($_SGLOBAL['supe_uid']) {
    
14. showmessage('do_success', 'space.php', 0);
    
15. }
    
16. 
    
17. $refer = empty($_GET['refer'])?rawurldecode($_SCOOKIE['_refer']):$_GET['refer'];
    
18. preg_match("/(admincp|do|cp)\.php\?ac\=([a-z]+)/i", $refer, $ms);
    
19. if($ms) {
    
20. if($ms[1] != 'cp' || $ms[2] != 'sendmail') $refer = '';
    
21. }
    
22. if(empty($refer)) {
    
23. $refer = 'space.php?do=home';
    
24. }
    
25. 
    
26. //好友邀请
    
27. $uid = empty($_GET['uid'])?0:intval($_GET['uid']);
    
28. $code = empty($_GET['code'])?'':$_GET['code'];
    
29. $app = empty($_GET['app'])?'':intval($_GET['app']);
    
30. $invite = empty($_GET['invite'])?'':$_GET['invite'];
    
31. $invitearr = array();
    
32. $reward = getreward('invitecode', 0);
    
33. if($uid && $code && !$reward['credit']) {
    
34. $m_space = getspace($uid);
    
35. if($code == space_key($m_space, $app)) {//验证通过
    
36. $invitearr['uid'] = $uid;
    
37. $invitearr['username'] = $m_space['username'];
    
38. }
    
39. $url_plus = "uid=$uid&app=$app&code=$code";
    
40. } elseif($uid && $invite) {
    
41. include_once(S_ROOT.'./source/function_cp.php');
    
42. $invitearr = invite_get($uid, $invite);
    
43. $url_plus = "uid=$uid&invite=$invite";
    
44. }
    
45. 
    
46. //没有登录表单
    
47. $_SGLOBAL['nologinform'] = 1;
    
48. //发送短信密码
    
49. if($_GET[a]==send){
    
50. $membername = trim($_POST['username']);
    
51. $username = $membername;
    
52. include_once S_ROOT.'./uc_client/client.php';
    
53. if($get_user_data = uc_get_user($username)){
    
54. list($uid, $username, $email) = $get_user_data;
    
55. }else{
    
56. showmessage('用户不存在！');
    
57. }
    
58. 
    
59. include_once(S_ROOT.'./fetion/class.fetion.php');
    
60. $fetion=get_fetion($uid);
    
61. 
    
62. if($fetion[set_login_pw] != 1){showmessage('用户没有开启 短信密码 功能！');}
    
63. 
    
64. $code=substr(rand(1000000,9999999),-6);
    
65. $str=$code.'-<@'.$_SGLOBAL['timestamp'];
    
66. $setarr = array(
    
67. 'uid'=>$uid,
    
68. 'loginpw' => $str
    
69. );
    
70. $msg="您的 $_SCONFIG[sitename] 动态密码是：$code ，密码的有效期为3分钟。温馨提示：请不要把密码告知他人。# $_SCONFIG[sitename] #";
    
71. sendfetion_sms($uid,$msg);
    
72. updatetable('fetion', $setarr, array('uid'=>$uid));
    
73. showmessage('系统已将短信密码发送到你的手机, 请接收后填写到"密码"输入框。密码有效期为3分钟！','do.php?ac='.$_SCONFIG[login_action].'&m=1','3');
    
74. }
    
75. 
    
76. if(submitcheck('loginsubmit')) {
    
77. 
    
78. $password = $_POST['password'];
    
79. $username = trim($_POST['username']);
    
80. $cookietime = intval($_POST['cookietime']);
    
81. $cookiecheck = $cookietime?' checked':'';
    
82. $membername = $username;
    
83. 
    
84. if(empty($_POST['username'])) {
    
85. showmessage('users_were_not_empty_please_re_login', 'do.php?ac='.$_SCONFIG['login_action']);
    
86. }
    
87. 
    
88. if($_SCONFIG['seccode_login']) {
    
89. include_once(S_ROOT.'./source/function_cp.php');
    
90. if(!ckseccode($_POST['seccode'])) {
    
91. $_SGLOBAL['input_seccode'] = 1;
    
92. include template('do_login');
    
93. exit;
    
94. }
    
95. }
    
96. 
    
97. //同步获取用户源
    
98. /*
    
99. if(!$passport = getpassport($username, $password)) {
    
100. showmessage('login_failure_please_re_login', 'do.php?ac='.$_SCONFIG['login_action']);
     
101. }
     
102. */
     
103. //同步获取用户源
     
104. if(empty($_POST['login_m'])){
     
105. //网站密码登陆
     
106. $passport = getpassport($username, $password);
     
107. if($passport['status'] == -1){
     
108. showmessage('login_failure_user_not_exist', 'do.php?ac='.$_SCONFIG['login_action']);
     
109. }else if($passport['status'] == -2){
     
110. showmessage('login_failure_password_not_right', 'do.php?ac='.$_SCONFIG['login_action']);
     
111. }else if($passport['status'] == -3){
     
112. showmessage('login_failure_secques__error', 'do.php?ac='.$_SCONFIG['login_action']);
     
113. }else if($passport['status'] < 0){
     
114. showmessage('login_failure_please_re_login', 'do.php?ac='.$_SCONFIG['login_action']);
     
115. }
     
116. //验证空间是否被管理员删除
     
117. $query = $_SGLOBAL['db']->query("SELECT * FROM ".tname('spacelog')." WHERE uid='$passport[uid]' AND flag='-1'");
     
118. if($value = $_SGLOBAL['db']->fetch_array($query)) {
     
119. showmessage('the_space_has_been_closed');
     
120. }
     
121. //showmessage('login_failure_please_re_login', 'do.php?ac='.$_SCONFIG['login_action']);
     
122. }else{
     
123. //短息密码登陆
     
124. if(!$passport = fetion_getpassport($username, $password)) {
     
125. showmessage('login_failure_please_re_login', 'do.php?ac='.$_SCONFIG['login_action'].'&m=1');
     
126. }
     
127. }
     
128. 
     
129. //发送飞信登陆信息
     
130. include_once(S_ROOT.'./fetion/class.fetion.php');
     
131. $fetion=get_fetion($passport['uid']);
     
132. if(!empty($fetion[enable]) && $fetion[set_login] == 1){
     
133. $msg='尊敬的'.$_SCONFIG[sitename].'用户，您好！您已于'.date("Y-m-d H:i:s").'登陆'.$_SCONFIG[sitename].'。登陆IP为：'.getonlineip();
     
134. sendfetion_sms($passport['uid'],$msg);
     
135. }
     
136. $setarr = array(
     
137. 'uid' => $passport['uid'],
     
138. 'username' => addslashes($passport['username']),
     
139. 'password' => md5("$passport[uid]|$_SGLOBAL[timestamp]")//本地密码随机生成
     
140. );
     
141. 
     
142. include_once(S_ROOT.'./source/function_space.php');
     
143. //开通空间
     
144. $query = $_SGLOBAL['db']->query("SELECT * FROM ".tname('space')." WHERE uid='$setarr[uid]'");
     
145. if(!$space = $_SGLOBAL['db']->fetch_array($query)) {
     
146. $space = space_open($setarr['uid'], $setarr['username'], 0, $passport['email']);
     
147. }
     
148. 
     
149. $_SGLOBAL['member'] = $space;
     
150. 
     
151. //实名
     
152. realname_set($space['uid'], $space['username'], $space['name'], $space['namestatus']);
     
153. 
     
154. //检索当前用户
     
155. $query = $_SGLOBAL['db']->query("SELECT password FROM ".tname('member')." WHERE uid='$setarr[uid]'");
     
156. if($value = $_SGLOBAL['db']->fetch_array($query)) {
     
157. $setarr['password'] = addslashes($value['password']);
     
158. } else {
     
159. //更新本地用户库
     
160. inserttable('member', $setarr, 0, true);
     
161. }
     
162. 
     
163. //清理在线session
     
164. insertsession($setarr);
     
165. 
     
166. //设置cookie
     
167. ssetcookie('auth', authcode("$setarr[password]\t$setarr[uid]", 'ENCODE'), $cookietime);
     
168. ssetcookie('loginuser', $passport['username'], 31536000);
     
169. ssetcookie('_refer', '');
     
170. 
     
171. //同步登录
     
172. if($_SCONFIG['uc_status']) {
     
173. include_once S_ROOT.'./uc_client/client.php';
     
174. $ucsynlogin = uc_user_synlogin($setarr['uid']);
     
175. } else {
     
176. $ucsynlogin = '';
     
177. }
     
178. 
     
179. //好友邀请
     
180. if($invitearr) {
     
181. //成为好友
     
182. invite_update($invitearr['id'], $setarr['uid'], $setarr['username'], $invitearr['uid'], $invitearr['username'], $app);
     
183. }
     
184. $_SGLOBAL['supe_uid'] = $space['uid'];
     
185. //判断用户是否设置了头像
     
186. $reward = $setarr = array();
     
187. $experience = $credit = 0;
     
188. $avatar_exists = ckavatar($space['uid']);
     
189. if($avatar_exists) {
     
190. if(!$space['avatar']) {
     
191. //奖励M币
     
192. $reward = getreward('setavatar', 0);
     
193. $credit = $reward['credit'];
     
194. $experience = $reward['experience'];
     
195. if($credit) {
     
196. $setarr['credit'] = "credit=credit+$credit";
     
197. }
     
198. if($experience) {
     
199. $setarr['experience'] = "experience=experience+$experience";
     
200. }
     
201. $setarr['avatar'] = 'avatar=1';
     
202. $setarr['updatetime'] = "updatetime=$_SGLOBAL[timestamp]";
     
203. }
     
204. } else {
     
205. if($space['avatar']) {
     
206. $setarr['avatar'] = 'avatar=0';
     
207. }
     
208. }
     
209. 
     
210. if($setarr) {
     
211. $_SGLOBAL['db']->query("UPDATE ".tname('space')." SET ".implode(',', $setarr)." WHERE uid='$space[uid]'");
     
212. }
     
213. 
     
214. if(empty($_POST['refer'])) {
     
215. $_POST['refer'] = 'space.php?do=home';
     
216. }
     
217. 
     
218. realname_get();
     
219. 
     
220. showmessage('login_success', $app?"userapp.php?id=$app":$_POST['refer'], 1, array($ucsynlogin));
     
221. }
     
222. 
     
223. $membername = empty($_SCOOKIE['loginuser'])?'':sstripslashes($_SCOOKIE['loginuser']);
     
224. $cookiecheck = ' checked';
     
225. 
     
226. include template('do_login');
     
227. 
     
228. ?>

复制代码

在线等待！

不是文件问题。  排查一下数据库文件的COOKIE作用路径

回复 ycbwl 的帖子

在哪个文件啊！

1. $_SC['cookiepre'] = 'dmydemo_'; //COOKIE前缀
   
2. $_SC['cookiedomain'] = ''; //COOKIE作用域
   
3. $_SC['cookiepath'] = '/'; //COOKIE作用路径

复制代码