edit: extend abort() to output success messages

[minimedit.git] / login.php

diff --git a/login.php b/login.php
index 042dea94f9ea0c1331c38ff7e9948f0f2c7aef42..db276d191b04ff1dbc0f59ab30d9e7fd050f4d8e 100644 (file)
--- a/login.php
+++ b/login.php
@@ -1,3 +1,6 @@
+<?php
+include 'page.inc.php';
+?>
 <h2>Inloggen</h2>
 
 <?php
@@ -5,14 +8,15 @@ if (isset($_POST['login'])) {
        if ($user = login($_POST['login'], $_POST['pass'])) {
                setcookie('login', $user['auth'], 0, '/');
 
-               header("Location: /"); //TODO: goto
+               $target = ltrim(@$_GET['goto'], '/');
+               header("Location: /$target");
                http_response_code(302);
                exit;
        }
 
        echo '<p class="warn">Ongeldige gebruikersnaam of wachtwoord.</p>'."\n\n";
 }
-elseif ($User) {
+elseif (!empty($User)) {
        setcookie('login', '', time(), '/'); # expire immediately
        echo '<p class="warn">Uitgelogd.</p>'."\n\n";
 }