ENGO150/FabrikaHradekTour
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

completed login system

Browse Source
This commit is contained in:
Václav Šmejkal 2024-05-07 21:06:37 +02:00
parent 83ff40ca0d
commit 8f2589c399
Signed by: ENGO150
GPG Key ID: 4A57E86482968843
1 changed files with 34 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
index.php
View File

@ -1,3 +1,6 @@
<?php
session_start();
?>
<!DOCTYPE html> <!DOCTYPE html>
<html lang="cs"> <html lang="cs">
<head> <head>
@ -43,22 +46,50 @@
<div id="login_indicator">Přihlášen jako:</div> <div id="login_indicator">Přihlášen jako:</div>
<?php <?php
//PASSWORD
$secret = fopen("./secret", "r"); $secret = fopen("./secret", "r");
$database = mysqli_connect("109.123.243.163", "fht", fgets($secret), "fht"); $database = mysqli_connect("109.123.243.163", "fht", fgets($secret), "fht");
fclose($secret); fclose($secret);
//CHECK FOR LOGIN
if (isset($_SESSION["username"])) login(null);
if (isset($_POST["sub"])) if (isset($_POST["sub"]))
{ {
$safe_uname = mysqli_real_escape_string($database, $_POST["username"]);
$hashed_pass = hash("sha256", $_POST["password"]);
if (str_starts_with($_POST["sub"], "Registrovat")) if (str_starts_with($_POST["sub"], "Registrovat"))
{ {
$safe_uname = mysqli_real_escape_string($database, $_POST["username"]); $database -> query("INSERT INTO user (username, password) VALUES (\"" . $safe_uname . "\",\"" . $hashed_pass ."\")");
$database -> query("INSERT INTO user (username, password) VALUES (\"" . $safe_uname . "\",\"" . hash("sha256", $_POST["password"]) ."\")"); login($safe_uname);
} else } else
{ {
echo "log"; $res = $database -> query("SELECT username, password FROM user WHERE username=\"" . $safe_uname . "\" AND password = \"" . $hashed_pass . "\"");
if ($res -> num_rows == 1)
{
login($safe_uname);
} else
{
echo "<script>alert(\"Nesprávné uživatelské jméno nebo heslo.\");</script>";
}
} }
} }
function login($uname)
{
if ($uname != null)
{
$_SESSION["username"] = $uname;
} else
{
$uname = $_SESSION["username"];
}
echo "<script>set_login_uname(\"" . $uname . "\")</script>";
}
?> ?>
</body> </body>
</html> </html>