1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
<?php
session_start();
$username = $_POST["username"];
$password = $_POST["password"];
$remember = $_POST["remember"];
if ($remember === null)
$remember = false;
elseif ($remember === "on")
$remember = true;
if (in_array(null, [$username, $password, $remember], true) === true || in_array('', [$username, $password, $remember], true) === true) {
header("HTTP/1.0 400 No Teapot here :(");
header("Location: index.php");
$_SESSION['error'] = "You didn't specify username or password or remember option";
exit();
}
require_once "dbCredentials.php";
$pdo = new PDO("mysql:dbname=$dbName;host=$dbHost;charset=utf8mb4", $dbUser, $dbPassword);
$pdo->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);
$stmt = $pdo->prepare("SELECT `firstname`, `lastname`, `email`, `user_type` FROM `cms_user` WHERE `login`=:login AND `password`=:password");
$stmt->execute(["login" => $username, "password" => $password]);
$user = $stmt->fetchAll(PDO::FETCH_ASSOC);
if (count($user) === 0) {
header("HTTP/1.0 403 No Teapot for you :)");
header("Location: index.php");
$_SESSION['error'] = "Wrong username or password";
exit();
}
$user = $user[0];
$_SESSION['firstname'] = $user['firstname'];
$_SESSION['lastname'] = $user['lastname'];
$_SESSION['email'] = $user['email'];
$_SESSION['user_type'] = $user['user_type'];
$_SESSION['logged'] = true;
if ($remember === true) {
setcookie("username", $username, time() + 60 * 60 * 24 * 365);
} else {
unset($_COOKIE['username']);
setcookie('username', '', time() - 3600);
}
header("HTTP/1.0 200 Teapot for you :]");
header("Location: main.php");
|
