API tools faq
paste
Advertisement
Guest User

michel

a guest
Jan 6th, 2010
248
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 4.01 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.     //set session
  3.     session_start();
  4.     //generate session id
  5.     //$sessionId = hash('whirlpool', (uniqid(microtime()) . $_SERVER['REMOTE_ADDR'] . $_SERVER['HTTP_USER_AGENT']));
  6.     //set session id
  7.     //$_SESSION['SESID'] = $sessionId;
  8.     //set default session status
  9.     //$_SESSION['SESSTATUS'] = "false";
  10.  
  11.     //Include header
  12.     include_once ("header.php");
  13.  
  14.     echo "<title>Login</title>";
  15.     echo "</head>";
  16.     echo "<body>";
  17.  
  18.     //Define database connection details
  19.     define('DB_NAME', 'test');
  20.     define('DB_USER', 'root');
  21.     define('DB_PASSWORD', '');
  22.     define('DB_HOST', 'localhost');
  23.  
  24.     //Autoload classes
  25.     function __autoload($class_name) {
  26.         require_once "classes/$class_name.class.php";
  27.     }
  28.  
  29.     //check for status from form
  30.     if(isset($_POST['status'])){
  31.         $submit = $_POST['status'];
  32.         if($submit == 'login'){
  33.  
  34.             //start instance of class Secure
  35.             $secure = new secure;
  36.  
  37.             //make data secure
  38.             $inputUsername = $_POST['username'];
  39.             $inputPassword = $_POST['password'];
  40.             $username = $secure->sanitizeUsername($inputUsername);
  41.             $password = $secure->sanitizePassword($inputPassword);
  42.  
  43.             //start db connection
  44.             $dbObj = new PDOcon("mysql:host=".DB_HOST.";dbname=".DB_NAME,DB_USER, DB_PASSWORD, array(PDO::ATTR_PERSISTENT, false));
  45.             $dbFetch = $dbObj->queryFetchAllAssoc("SELECT email, password FROM `test` WHERE `email` = '".$username."' AND `password` = '".$password."'");
  46.  
  47.             //count number of elements fetched from databse. If 1 then password/username is correct.
  48.             $count = count($dbFetch);
  49.             if($count == '1'){
  50.                 //extra check for password
  51.                 if($password == $dbFetch[0]['password']){
  52.                     //extra check for username
  53.                     if($username == $dbFetch[0]['email']){
  54.                         //set sessionstatus to true to indicated that login was succeeded
  55.                         $_SESSION['SESSTATUS'] = "true";
  56.                         //generate session id
  57.                         $sessionId = hash('whirlpool', (uniqid(microtime()) . $_SERVER['REMOTE_ADDR'] . $_SERVER['HTTP_USER_AGENT']));
  58.                         //set session id
  59.                         $_SESSION['SESID'] = $sessionId;
  60.                         //congratulate user with login
  61.                         echo "Gefeliciteerd ".$username.", u bent succesvol ingelogd.<br>";
  62.                         //set sessionid in cookie
  63.                         setcookie("LoginCookie", $sessionId, time()+3600, "/", ".127.0.0.1", 0,0);
  64.                         echo "<b><a href=\"logincheck.php\" target=\"_self\">Check login</a></b> <br>";
  65.                     }
  66.                     //if usercheck fails
  67.                     else{
  68.                         echo "De gebruikersnaam of het wachtwoord is onjuist.<br>";
  69.                         echo "<b><a href=\"index.php\" target=\"_self\">Opnieuw inloggen</a></b> <br>";
  70.                     }
  71.                 }
  72.                 //if passwordcheck fails
  73.                 else{
  74.                     echo "De gebruikersnaam of het wachtwoord is onjuist.<br>";
  75.                     echo "<b><a href=\"index.php\" target=\"_self\">Opnieuw inloggen</a></b> <br>";
  76.                 }
  77.             }
  78.             //if logincheck in db fails
  79.             else{
  80.                 echo "De gebruikersnaam of het wachtwoord is onjuist.<br>";
  81.                 echo "<b><a href=\"index.php\" target=\"_self\">Opnieuw inloggen</a></b> <br>";
  82.             }
  83.         }
  84.         //if status from form is logout, log user out
  85.         elseif($submit == 'logout'){
  86.             $_SESSION['SESSTATUS'] = "false";
  87.             echo "U bent uitgelogd<br>";
  88.             echo "<b><a href=\"index.php\" target=\"_self\">Log hier in opnieuw in.</a></b> <br>";
  89.         }
  90.         else{
  91.             echo "U bent niet ingelogd<br>";
  92.             echo "<b><a href=\"index.php\" target=\"_self\">Log hier in.</a></b> <br>";
  93.         }
  94.     }
  95.     //if no _POST status, check for session
  96.     else{
  97.         if(isset($_SESSION['SESID'])){
  98.             if ($_SESSION['SESSTATUS'] == "true") {
  99.                 echo "U bent ingelogd.";
  100.                 echo "<form action=\"login.php\" method=\"post\">";
  101.                 echo "<INPUT TYPE=\"hidden\" NAME=\"status\" VALUE=\"logout\">";
  102.                 echo "<input type=\"submit\" value=\"Logout\"   />";
  103.                 echo "</form>";
  104.             }
  105.             else{
  106.                 echo"U bent niet ingelogd<br>";
  107.                 echo "<b><a href=\"index.php\" target=\"_self\">Log hier in.</a></b> <br>";
  108.             }
  109.         }
  110.         else{
  111.             echo"U bent niet ingelogd<br>";
  112.             echo "<b><a href=\"index.php\" target=\"_self\">Log hier in.</a></b> <br>";
  113.         }
  114.     }
  115.     //manual check into session
  116.     print_r($_SESSION);
  117.  
  118.     //include footer
  119.     include_once("footer.php");
  120. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!