login: show user after login; explicit option for logout

[minimedit.git] / login.php

diff --git a/login.php b/login.php
index c83534cbd2d6946f1be7cc44c829e840a5f3c5b5..bcb1edc44cd709a9f9e1bc4b1c6931ee46621946 100644 (file)
--- a/login.php
+++ b/login.php
@@ -1,17 +1,41 @@
 <?php
-require 'auth.inc.php';
+if (isset($_POST['login'])) {
+       if ($User = login($_POST['login'], $_POST['pass'])) {
+               setcookie('login', $User['auth'], 0, '/');
+       }
+       else {
+               echo '<p class="warn">Ongeldige gebruikersnaam of wachtwoord.</p>'."\n\n";
+       }
+}
+elseif (isset($_GET['logout'])) {
+       setcookie('login', '', time(), '/'); # expire immediately
+       $User = NULL;
+       echo '<p class="warn">Uitgelogd.</p>'."\n\n";
+}
 
-if (!$editable) {
-       require 'logout.php';
+if (isset($_GET['goto']) and isset($User)) {
+       ob_clean();
+       $target = ltrim($_GET['goto'], '/');
+       header("Location: /$target");
+       http_response_code(302);
        exit;
 }
 
-include 'head.inc.php';
+if (empty($User)) {
 ?>
+<form action="" method="post">
+       <input id="login" name="login" placeholder="Huisnummer" />
+       <input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
+       <input type="submit" value="Log in" />
+</form>
+<?php
+       return;
+}
 
-<h2>Sitebeheer</h2>
+ob_clean();
+?>
+<h2>Ingelogd</h2>
 
-<p>
-Welkom, je bent ingelogd als <em><?php echo $User; ?></em>. Onderaan elke pagina staat een link om inhoud aan te passen.
-</p>
+<p>Ingelogd als <em><?php print $User['name']; ?></em>.</p>
 
+<p class="nav"><a href="?logout">Uitloggen</a></p>