great job with this
but i'm very sory for my language
i can't find my f*ing pincode ( can't login in staff panel ) because pincode is not that one i set up on admin account creation
says error
invalid pin code :shock: ....
i saw this lines in install.php
Code:
$sechash = md5 ($_SESSION['SITENAME']);
$pincode = md5 (md5 ($sechash) . md5 ($_SESSION['pincode']));
mysql_query ('INSERT INTO pincode SET pincode = ' . sqlesc ($pincode) . ', sechash = ' . sqlesc ($sechash) . ', area = 1');
so it's good ? ( i'm not god in php ) but
pincode is a md5 hash with site name and with our custom pincode
so how is checked up ?