edit: allow any non-hidden filename

[minimedit.git] / login.php

diff --git a/login.php b/login.php
index eb09f8a571dbb80e765d0f11ae9df9554549b488..490422f1e11ca6dc5b6b07cf51ebdd52aae3ad62 100644 (file)
--- a/login.php
+++ b/login.php
@@ -1,17 +1,28 @@
 <?php
-require 'auth.inc.php';
-
-if (!$Admin) {
-       require 'logout.php';
-       exit;
-}
-
-include 'head.inc.php';
+include 'page.inc.php';
 ?>
+<h2>Inloggen</h2>
+
+<?php
+if (isset($_POST['login'])) {
+       if ($user = login($_POST['login'], $_POST['pass'])) {
+               setcookie('login', $user['auth'], 0, '/');
 
-<h2>Sitebeheer</h2>
+               header("Location: /"); //TODO: goto
+               http_response_code(302);
+               exit;
+       }
 
-<p>
-Welkom, je bent ingelogd als <em><?php echo $User; ?></em>. Onderaan elke pagina staat een link om inhoud aan te passen.
-</p>
+       echo '<p class="warn">Ongeldige gebruikersnaam of wachtwoord.</p>'."\n\n";
+}
+elseif (!empty($User)) {
+       setcookie('login', '', time(), '/'); # expire immediately
+       echo '<p class="warn">Uitgelogd.</p>'."\n\n";
+}
 
+?>
+<form action="" method="post">
+       <input id="login" name="login" placeholder="Huisnummer" />
+       <input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
+       <input type="submit" value="Log in" />
+</form>