2013-12-27 12:00:45 +01:00
|
|
|
<?php
|
2013-12-27 13:25:13 +01:00
|
|
|
session_start();
|
2013-12-27 12:00:45 +01:00
|
|
|
if (isset($_POST["benutzername"])) {
|
|
|
|
|
require_once "verbindungsaufbau.php"; //mit Server verbinden
|
|
|
|
|
$user= $_POST["benutzername"];
|
|
|
|
|
$passwort= $_POST["passwort"];
|
|
|
|
|
$salt = "*|!JeFF28S,@Z3Sm5\1?";
|
|
|
|
|
$salted_password = $salt . $passwort;
|
|
|
|
|
$password_hash = hash('sha256', $salted_password);
|
2013-12-29 11:12:38 +01:00
|
|
|
if($stmt = $mysqli->prepare("SELECT passwort,user_id,vorname,nachname FROM benutzer WHERE username=?")) {
|
2013-12-27 12:00:45 +01:00
|
|
|
$stmt->bind_param("s", $user);
|
|
|
|
|
$stmt->execute();
|
2013-12-29 11:12:38 +01:00
|
|
|
$stmt->bind_result($password_db, $user_id, $vorname, $nachname);
|
2013-12-27 12:00:45 +01:00
|
|
|
$stmt->fetch();
|
|
|
|
|
if($password_db == $password_hash) {
|
2013-12-27 13:25:13 +01:00
|
|
|
$_SESSION['user'] = $user;
|
2013-12-29 11:12:38 +01:00
|
|
|
$_SESSION['user_id'] = $user_id;
|
|
|
|
|
$_SESSION['vorname'] = $vorname;
|
|
|
|
|
$_SESSION['nachname'] = $nachname;
|
2013-12-27 12:00:45 +01:00
|
|
|
} else {
|
|
|
|
|
echo "falsches Passwort";
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
} else {
|
|
|
|
|
echo "falscher Benutzername";
|
|
|
|
|
}
|
|
|
|
|
$mysqli->close();
|
|
|
|
|
}
|
2013-12-27 13:25:13 +01:00
|
|
|
if (!isset($_SESSION['user'])) {
|
2013-12-27 12:00:45 +01:00
|
|
|
?>
|
|
|
|
|
<!DOCTYPE html>
|
|
|
|
|
<html lang="de">
|
|
|
|
|
|
|
|
|
|
<head>
|
|
|
|
|
<meta charset="utf-8" />
|
|
|
|
|
<title>Login</title>
|
|
|
|
|
<meta name="author" content="Lukas" >
|
|
|
|
|
|
|
|
|
|
</head>
|
|
|
|
|
|
|
|
|
|
<body>
|
|
|
|
|
<form action="login.php" method="POST">
|
2013-12-30 16:29:10 +01:00
|
|
|
<table>
|
|
|
|
|
<tr>
|
|
|
|
|
<td>Benutzername:</td>
|
|
|
|
|
<td><input type="text" name="benutzername" required autofocus /></td>
|
|
|
|
|
</tr>
|
|
|
|
|
<tr>
|
|
|
|
|
<td>Passwort:</td>
|
|
|
|
|
<td><input type="password" name=passwort required /></td>
|
|
|
|
|
</tr>
|
|
|
|
|
</table>
|
|
|
|
|
<input type="submit" value="anmelden" />
|
2013-12-27 12:00:45 +01:00
|
|
|
</form>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<?php
|
2013-12-27 13:25:13 +01:00
|
|
|
} else {
|
|
|
|
|
echo "Hallo " . $_SESSION['user'] . " - <a href='./login.php?abmelden=1'>Abmelden</a>";
|
2013-12-29 11:12:38 +01:00
|
|
|
echo "<script>window.opener.parent.location.reload();window.close();</script>";
|
2013-12-27 12:00:45 +01:00
|
|
|
}
|
2013-12-29 11:12:38 +01:00
|
|
|
if (isset($_GET["abmelden"])) {session_destroy();}
|
2013-12-27 12:00:45 +01:00
|
|
|
?>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
