src/web/login.php

   1 <?php
   2 session_start();
   3 require_once('gnucomo_config.php');
   4 include "functions.php";
   5 ?>
   6 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
   7 <html>
   8 <head>
   9 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
  10 <link rel='stylesheet' href='gnucomo.css' type='text/css'>
  11 <title>GNUCoMo login</title>
  12 </head>
  13 <body>
  14 <?php
  15 if( isset($_POST["username"]) and isset($_POST["password"]) and isset($_SESSION['login']) ) {
  16         $name   = $_POST["username"];   // PostgreSQL username
  17         $passw  = $_POST["password"];   // PostgreSQL user password
  18
  19    $config = new gnucomo_config;
  20
  21    $config->read("gnucomo");
  22    //echo "Database Access string = " . $config->Database();
  23
  24    $conn = pg_connect($config->Database());
  25
  26         // connect to the database
  27         //$conn = pg_Connect( "host=$pgsqlhost port=$pgsqlport dbname=$dbname user=$name password=$passw" );
  28         if( !$conn ) {
  29                 echo "Error connecting, try again.";
  30                 echo login_form();
  31                 $_SESSION["login"] = true;
  32         } else {
  33                 $sql = "SELECT * FROM user_gnucomo WHERE username='$name' and password='$passw'";
  34                 $res = query( $conn, $sql );
  35
  36                 if( $res[0] ) {
  37                    if ($res[2] == 1)
  38                    {
  39                         $arr = pg_fetch_array( $res[1], 0 );
  40                         $_SESSION["login.ini"] = $arr;
  41                    }
  42                    else
  43                    {
  44                        echo "Login incorrect.<br>";
  45                    }
  46
  47                         // user is authorised, step to next page.
  48                         echo "Ok!";
  49                 } else {
  50                         pgsql_error( "SQL: error.<br>" . $res[3] );
  51                 }
  52         }
  53 } else {
  54         echo login_form();
  55         $_SESSION["login"] = true;
  56 }
  57 ?>
  58 </body>
  59 </html>