<?php
function login($inuser, $inpass = NULL)
{
	if (empty($inuser)) return;
	if (!isset($inpass)) {
		@list ($inuser, $inauth) = explode(':', $inuser, 2);
	}

	# find password data by user name
	$pwfile = sprintf('login/%s/.passwd', strtolower($inuser));
	if (!file_exists($pwfile)) return;
	$usertest = trim(file_get_contents($pwfile));
	if (!$usertest) return;

	# verify password
	$authhash = md5($usertest);
	if (isset($inpass)) {
		if (!password_verify($inpass, $usertest)) return;
	}
	else {
		if ($inauth !== $authhash) return;
	}

	return [
		'name'  => $inuser,
		'admin' => !empty($inuser) && strtolower($inuser) != 'lid',
		'auth'  => "$inuser:$authhash",
	];
}

if (isset($_COOKIE['login'])) {
	global $User;
	$User = login($_COOKIE['login']);
}