Comments-Contest-Helper/auth.php at main · Oscillograph/Comments-Contest-Helper · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
<?php

// session_start();

$logged_in = false;

function authorized()
{
	if (isset($_SESSION['userid']))
	{
		if ($_SESSION['userid'] >= 0)
			return true;
	}
	return false;
}

function login()
{
	global $config;
	global $users;

	$login = get_var('login');
	$password = get_var('password');
	$register = $config['open_registration'] ? get_var('register') : false;

	if ($login && $password)
	{
		if ($register)
		{
			register_new_user($login, $password);
		}

		if (($login == $config['admin_login']) && ($password == $config['admin_password']))
		{
			$_SESSION['userid'] = 0;
			$_SESSION['group'] = 'admin';
			return true;
		} elseif (($login == $config['admin_login']) || ($password == $config['admin_password'])) {
			error_message('Неверный логин или пароль!');
			return false;
		}

		for ($i = 0; $i < count($users); ++$i)
		{
			if (($login == $users[$i]['login']) && ($password == $users[$i]['password']))
			{
				$_SESSION['userid'] = $i;
				$_SESSION['group'] = 'user';
				return true;
			} elseif (($login == $users[$i]['login']) || ($password == $users[$i]['password'])) {
				error_message('Неверный логин или пароль!');
				return false;
			}
		}

		return false;
	} else {
		$_SESSION['userid'] = -1;
		$_SESSION['group'] = 'guest';
		return false;
	}
}

function login_form()
{
?>
	<form action='./' method='POST' id='theForm'>
		<div class='gbox'>
			<div class='header'>
				Форма входа
			</div>

			<center>
				Введите логин: <br>
				<input type='text' class='input-edit' name='login' value=''><br>
				Введите пароль: <br>
				<input type='text' class='input-edit' name='password' value=''>
				<br> &nbsp; <br>
				<input type='submit' class='input-button green' name='submit' value='Войти'>
			</center>
		</div>
	</form>
<?php
}

function logout()
{
	unset($_SESSION['login']);
	session_destroy();
}

?>