应一个网友要求做的一个基于discuz论坛用户名密码的下载功能

复制PHP内容到剪贴板

PHP代码:

<?php
session_start();
$filename="xzy.rar";
if($_POST['login']=='login'){
        $username=mysql_escape_string($_POST['username']);
        $password=md5(mysql_escape_string($_POST['password']));
        $islogin=islogin($username,$password);
        if($islogin===true){
                down($filename);
        }else{
                echo $islogin;
                exit;
        }
}
function  islogin($username,$password)
{
        if(empty($username) || empty($password)){
                $msg="用户名或密码为空";
        }else{
                $conn=@mysql_connect('localhost','root','root') or die("不能连接到数据库！");
                mysql_query("set names 'gb2312'") ;
                $db=@mysql_select_db("discuz",$conn);
                $result=@mysql_query("select `uid`,`username` from `cdb_members` where `username`='$username' and `password`='$password'",$conn);
                $is=@mysql_num_rows($result);
                mysql_close($conn);
                if($is==0){
                        $msg="用户名或密码出错";
                }elseif($is>0) return true;
        }
        return "<script language='Javascript'>alert('".$msg."');history.go(-1);</script>";
}
function down($filename)
{
        if (!file_exists($filename)) {
                echo "文件找不到";
                exit; 
        }else{
                $file=fopen($filename,"r");
                header("content-type: application/octet-stream");
                header("accept-ranges: bytes");
                header("accept-length: ".filesize($filename));
                header("content-disposition: attachment; filename=".$filename);
                echo fread($file,filesize($filename));
                fclose($file);
                exit;
        }
}
@header("content-Type: text/html; charset=gb2312");
echo "请输入用户名密码进行下载<br>";
echo "软件名:xzy.rar<br>";
echo "<FORM METHOD=POST ACTION=''>";
echo '<INPUT TYPE="text" NAME="username"><br>';
echo '<INPUT TYPE="password" NAME="password"><br>';
echo '<INPUT TYPE="hidden" NAME="login" value="login">';
echo '<INPUT TYPE="submit" value="确定下载">';
echo "</FORM>";
?>