page: prefer named template in parent directory

[minimedit.git] / login.php

diff --git a/login.php b/login.php
index 369a01358f34276c3eb5dd7e4ec0d02e24c2a396..5287678ce1d7c542eb66b65125fadcb68bfeafbd 100644 (file)
--- a/login.php
+++ b/login.php
@@ -1,25 +1,59 @@
-<h2>Inloggen</h2>
-
 <?php
-if (isset($_POST['login'])) {
-       if ($user = login($_POST['login'], $_POST['pass'])) {
-               setcookie('login', $user['auth'], 0, '/');
+$message = NULL;
 
-               header("Location: /"); //TODO: goto
-               http_response_code(302);
-               exit;
+if (isset($_POST['mail'])) {
+       $input = trim($_POST['mail']);
+       $inputq = sprintf('<em>%s</em>', $input);
+       try {
+               require_once 'login/mailpass.inc.php';
+               if ( $found = mailtoken($input) ) {
+                       $message = "Er is een e-mail verstuurd naar $inputq.";
+               }
+               else {
+                       $message = "E-mailadres $inputq is nergens ingesteld.";
+               }
+       }
+       catch (Exception $e) {
+               $message = "E-mail kon niet verstuurd worden."
+                       . " Probeer het later nog eens of neem contact op.";
+       }
+}
+elseif (isset($_POST['login'])) {
+       if ($User = login($_POST['login'], $_POST['pass'])) {
+               login_setcookie();
+       }
+       else {
+               $message = 'Ongeldige gebruikersnaam of wachtwoord.';
        }
-
-       echo '<p class="warn">Ongeldige gebruikersnaam of wachtwoord.</p>'."\n\n";
 }
-elseif (!empty($User)) {
+elseif (isset($_GET['logout'])) {
        setcookie('login', '', time(), '/'); # expire immediately
-       echo '<p class="warn">Uitgelogd.</p>'."\n\n";
+       $User = NULL;
+       $message = "Je bent uitgelogd. Graag tot ziens!";
 }
 
-?>
-<form action="" method="post">
-       <input id="login" name="login" placeholder="Huisnummer" />
-       <input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
-       <input type="submit" value="Log in" />
-</form>
+if (empty($User)) {
+       ob_clean();
+       require_once 'login/form.inc.php';
+       $part = ['warn' => $message];
+       print getoutput($part);
+       return TRUE;
+}
+
+if (isset($_GET['goto'])) {
+       ob_clean();
+       $target = ltrim($_GET['goto'], '/');
+       header("Location: /$target");
+       http_response_code(302);
+       exit;
+}
+
+$part = [
+       'user'  => $User['name'],
+];
+print getoutput($part);
+
+if (empty($Args) and !empty($User['admin'])) {
+       include_once 'login/admin.html';
+       include_once 'login/admin.php';
+}