2025-03-01 16:02:45 -05:00
|
|
|
<?php
|
|
|
|
|
session_start();
|
|
|
|
|
?>
|
|
|
|
|
|
|
|
|
|
<!DOCTYPE html>
|
|
|
|
|
|
|
|
|
|
<html>
|
|
|
|
|
|
|
|
|
|
<head>
|
|
|
|
|
<meta charset="UTF-8" />
|
|
|
|
|
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" />
|
2025-03-03 21:46:44 -05:00
|
|
|
<link rel="stylesheet" href="/styles/db_management.css" />
|
|
|
|
|
<link rel="stylesheet" href="/styles/login.css" />
|
2025-03-08 16:38:13 -05:00
|
|
|
<script src="/scripts/tools.js"></script>
|
|
|
|
|
<script>verifyPageInFrame()</script>
|
2025-03-01 16:02:45 -05:00
|
|
|
<title>no title</title>
|
|
|
|
|
</head>
|
|
|
|
|
|
|
|
|
|
<body class="sqlOutput">
|
|
|
|
|
<?php
|
|
|
|
|
// USER-DEFINED VARIABLES
|
|
|
|
|
include("admin/db_config.php"); // Include database stuff
|
|
|
|
|
|
|
|
|
|
try { // Try opening the SQL database connection
|
2025-03-05 21:08:39 -05:00
|
|
|
$conn = new PDO("mysql:host=$servername; dbname=$dbName", $dbUsername, $dbPassword);
|
2025-03-01 16:02:45 -05:00
|
|
|
// set the PDO error mode to exception
|
|
|
|
|
$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
|
|
|
|
|
|
|
|
// Get username and password out of the POST data
|
|
|
|
|
$username = $_POST["username"];
|
|
|
|
|
$password = $_POST["password"];
|
|
|
|
|
|
2025-03-03 21:14:00 -05:00
|
|
|
// Get SQL data
|
2025-03-02 21:14:28 -05:00
|
|
|
$sqlGetData = $conn->prepare("SELECT userID,password,isAdmin FROM " . $userTableName . " WHERE username=\"" . $username . "\"");
|
2025-03-01 16:02:45 -05:00
|
|
|
|
2025-03-02 21:14:28 -05:00
|
|
|
$sqlGetData->execute();
|
2025-03-01 16:02:45 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
} catch (PDOException $e) { // failed connection
|
|
|
|
|
echo "Connection failed: " . $e->getMessage();
|
|
|
|
|
}
|
|
|
|
|
|
2025-03-02 21:14:28 -05:00
|
|
|
$result = $sqlGetData->fetch(PDO::FETCH_ASSOC);
|
|
|
|
|
|
2025-03-01 16:02:45 -05:00
|
|
|
// Grab the hash from the fetched SQL data
|
2025-03-02 21:14:28 -05:00
|
|
|
$passwordHash = $result["password"];
|
|
|
|
|
$userID = $result["userID"];
|
|
|
|
|
$isAdmin = $result["isAdmin"];
|
2025-03-01 16:02:45 -05:00
|
|
|
|
|
|
|
|
|
|
|
|
|
// Verify that the entered password matches the hashed one
|
|
|
|
|
if (password_verify($password, $passwordHash)) {
|
|
|
|
|
echo "<p>Welcome $username, please wait while we redirect you...</p>";
|
|
|
|
|
$_SESSION["userID"] = $userID;
|
|
|
|
|
$_SESSION["username"] = $username;
|
|
|
|
|
$_SESSION["isAdmin"] = $isAdmin;
|
2025-03-02 21:14:28 -05:00
|
|
|
|
2025-03-01 16:02:45 -05:00
|
|
|
// Function from StackOverflow used to get the base URL, to which we append
|
|
|
|
|
// the redirect (where the user came from)
|
|
|
|
|
function url(){
|
|
|
|
|
return sprintf(
|
|
|
|
|
"%s://%s/%s",
|
|
|
|
|
isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off' ? 'https' : 'http',
|
|
|
|
|
$_SERVER['SERVER_NAME'],
|
|
|
|
|
$_GET["redirect"]
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$address = url();
|
2025-03-02 21:14:28 -05:00
|
|
|
echo "<p>Redirecting to <a href=\"$address\">$address</a>...</p>";
|
2025-03-01 16:02:45 -05:00
|
|
|
|
|
|
|
|
echo "<script>window.top.location.href = \"" . $address . "\";</script>";
|
|
|
|
|
|
|
|
|
|
} else {
|
|
|
|
|
echo "<p>Invalid credentials</p>";
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
// Close the SQL connection
|
|
|
|
|
$conn = null;
|
|
|
|
|
|
|
|
|
|
?>
|
|
|
|
|
|
|
|
|
|
</body>
|
|
|
|
|
|
|
|
|
|
</html>
|
