From 31c579d01b42a898bae845825f41f92e19c588e2 Mon Sep 17 00:00:00 2001
From: Mischa POSLAWSKY <perl@shiar.org>
Date: Sun, 17 Sep 2017 02:46:13 +0200
Subject: [PATCH] login: show user after login; explicit option for logout

---
 login.php | 38 +++++++++++++++++++++++++++-----------
 1 file changed, 27 insertions(+), 11 deletions(-)

diff --git a/login.php b/login.php
index c9a60e3..bcb1edc 100644
--- a/login.php
+++ b/login.php
@@ -1,25 +1,41 @@
 <?php
 if (isset($_POST['login'])) {
-	if ($user = login($_POST['login'], $_POST['pass'])) {
-		setcookie('login', $user['auth'], 0, '/');
-
-		ob_clean();
-		$target = ltrim(@$_GET['goto'], '/');
-		header("Location: /$target");
-		http_response_code(302);
-		exit;
+	if ($User = login($_POST['login'], $_POST['pass'])) {
+		setcookie('login', $User['auth'], 0, '/');
+	}
+	else {
+		echo '<p class="warn">Ongeldige gebruikersnaam of wachtwoord.</p>'."\n\n";
 	}
-
-	echo '<p class="warn">Ongeldige gebruikersnaam of wachtwoord.</p>'."\n\n";
 }
-elseif (!empty($User)) {
+elseif (isset($_GET['logout'])) {
 	setcookie('login', '', time(), '/'); # expire immediately
+	$User = NULL;
 	echo '<p class="warn">Uitgelogd.</p>'."\n\n";
 }
 
+if (isset($_GET['goto']) and isset($User)) {
+	ob_clean();
+	$target = ltrim($_GET['goto'], '/');
+	header("Location: /$target");
+	http_response_code(302);
+	exit;
+}
+
+if (empty($User)) {
 ?>
 <form action="" method="post">
 	<input id="login" name="login" placeholder="Huisnummer" />
 	<input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
 	<input type="submit" value="Log in" />
 </form>
+<?php
+	return;
+}
+
+ob_clean();
+?>
+<h2>Ingelogd</h2>
+
+<p>Ingelogd als <em><?php print $User['name']; ?></em>.</p>
+
+<p class="nav"><a href="?logout">Uitloggen</a></p>
-- 
2.30.0