login.php

   1 <?php
   2
   3 function login_get_fields() {
   4         $username = format_oneline($_REQUEST['username']);
   5         tem_set('username', $username);
   6
   7         $password = format_oneline($_REQUEST['password']);
   8
   9         $url = format_unix($_REQUEST['url']);
  10         tem_set('url', $url);
  11
  12         return array($username, $password, $url);
  13 }
  14
  15 function login_main() {
  16         if(isset($GLOBALS['url'])) {
  17                 $_REQUEST['url'] = $GLOBALS['url'];
  18                 tem_set('url', $GLOBALS['url']);
  19         }
  20
  21         if(isset($_REQUEST['username'])) {
  22                 list($username, $password, $url) = login_get_fields();
  23
  24                 $row = db_get_row('people', 'id,password', 'where username=%"', $username);
  25
  26                 if($row) {
  27                         list($id, $password_hash) = $row;
  28
  29                         if($password_hash && check_password($password_hash, $password)) {
  30                                 message("Logged in successfully.");
  31                                 session_new();
  32                                 session_set('auth_username', "$id");
  33                                 if($url) {
  34                                         return $url;
  35                                 } else {
  36                                         return './';
  37                                 }
  38                         }
  39                 }
  40
  41                 tem_sub('failed');
  42         }
  43         tem_sub('main_body');
  44 }
  45
  46 ?>