added login thing
This commit is contained in:
41
ucp.php
41
ucp.php
@@ -20,12 +20,47 @@
|
||||
|
||||
include_once 'config.php';
|
||||
|
||||
function check_privileges() {
|
||||
if (!$_SESSION['logged_in']) {
|
||||
$_SESSION['flash'] = "Log in to continue.";
|
||||
header('Location: ucp.php?page=login');
|
||||
exit();
|
||||
}
|
||||
}
|
||||
|
||||
switch ($_GET['page']) {
|
||||
case "login": {
|
||||
$tpl->draw("login");
|
||||
if ($_SESSION['logged_in']) {
|
||||
$_SESSION['flash'] = "You're already logged in.";
|
||||
header('Location: ucp.php');
|
||||
exit();
|
||||
}
|
||||
if (!isset($_POST['login'])) {
|
||||
$tpl->draw("login");
|
||||
} else {
|
||||
$res = $sql->query("SELECT `value` FROM `config` WHERE `key` = \"username\";")->fetch_assoc();
|
||||
$username = $res['value'];
|
||||
$res = $sql->query("SELECT `value` FROM `config` WHERE `key` = \"password\";")->fetch_assoc();
|
||||
$password = $res['value'];
|
||||
$post_pass = crypt($_POST['password'], $password);
|
||||
if (($_POST['username'] === $username) && ($post_pass === $password)) {
|
||||
// successful login
|
||||
$_SESSION['logged_in'] = true;
|
||||
$_SESSION['flash'] = "You are now logged in.";
|
||||
header('Location: ucp.php');
|
||||
exit();
|
||||
} else {
|
||||
// failed login
|
||||
$_SESSION['flash'] = "Wrong user name or password";
|
||||
header('Location: ucp.php?page=login');
|
||||
exit();
|
||||
}
|
||||
}
|
||||
break;
|
||||
}
|
||||
case "logout": {
|
||||
check_privileges();
|
||||
|
||||
session_destroy();
|
||||
session_start();
|
||||
$_SESSION['flash'] = "Sucessfully logged out";
|
||||
@@ -34,11 +69,15 @@ switch ($_GET['page']) {
|
||||
break;
|
||||
}
|
||||
case "settings": {
|
||||
check_privileges();
|
||||
|
||||
$tpl->draw("settings");
|
||||
break;
|
||||
}
|
||||
case "inbox":
|
||||
default: {
|
||||
check_privileges();
|
||||
|
||||
$tpl->draw("inbox");
|
||||
}
|
||||
}
|
Reference in New Issue
Block a user