d

<?php // Script 8.4 - index.php
/* This is the home page for this site.  It uses templates to create the layout. */


// Include the header:
include('templates/header.php');
// Leave the PHP section to display lots of HTML:
?>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8" />
    <title>Login</title>
</head>
<body>
<h1>Login</h1>
<?php // Script 11.8 - login.php
/* This script logs a user in by check the stored values in text file. */

// Identify the file to use:
$file =  '../users/users.txt';

if ($_SERVER['REQUEST_METHOD'] == 'POST') { // Handle the form.

    $loggedin = FALSE; // Not currently logged in.

    // Enable auto_detect_line_settings:
    ini_set('auto_detect_line_endings', 1);

    // Open the file:
    $fp = fopen($file, 'rb');

    // Loop through the file:
    while ( $line = fgetcsv($fp, 200, "\t") ) {

        // Check the file data against the submitted data:
        if ( ($line[0] == $_POST['username']) AND ($line[1] == md5(trim($_POST['password']))) ) {

            $loggedin = TRUE; // Correct username/password combination.

            // Stop looping through the file:
            break;

        } // End of IF.

    } // End of WHILE.

    fclose($fp); // Close the file.


    // Print a message:
    if ($loggedin) {
        // Redirect the user to the welcome page!
            $_SESSION['loggedin'] = time();
                        $_SESSION['username'] = $_POST['username'];
                        ob_end_clean(); // Destroy the buffer!
            header ('Location: welcome.php');
            exit();
    } else {
        print '<p style="color: red;">The username and password you entered do not match those on file.</p>';
    }

} else { // Display the form.

// Leave PHP and display the form:
?>

<form action="login.php" method="post">
    <p>Username: <input type="text" name="username" size="20" /></p>
    <p>Password: <input type="password" name="password" size="20" /></p>
    <input type="submit" name="submit" value="Login" />
</form>

<?php } // End of submission IF. ?>
<?php // Return to PHP.
 include('templates/footer.html'); // Include the footer.
?>

</body>
</html>