Initial commit

public/login.php

@@ -0,0 +1,45 @@
+<?php
+/*  Mailadminscript
+    Copyright (C) 2019  Paul Schürholz contact AT roteserver . de
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>. */
+$config = parse_ini_file('../private/config.ini');
+session_start();
+try {
+    $dbh = new PDO('mysql:host=' . $config['dbservername'] . ';dbname=' . $config['dbname'], $config['dbusername'], $config['dbpassword'], array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION));
+} catch (PDOException $e) {
+    //echo 'Connection failled: '. $e->getMessage(); // Errormessage kann Sicherheitsrelevantes enthalen
+    echo 'Connection failed';
+}
+$user = $_POST['username'];
+$pw = $_POST['password'];
+
+$abfrage = "SELECT `id`, `password`, `email`, `username`, `admin` FROM `virtual_users` WHERE `email` = :username";
+$sth = $dbh->prepare($abfrage);
+$sth->execute(array(':username' => $user));
+$userdata = $sth->fetchAll();
+if ($sth->rowCount() > 0) {
+    if (password_verify($pw, $userdata[0]['password'])) {
+        $_SESSION['log'] = 1;
+        $_SESSION['username'] = $userdata[0]['username'];
+        $_SESSION['email'] = $userdata[0]['email'];
+        $_SESSION['admin'] = $userdata[0]['admin'];
+        $_SESSION['mailID'] = $userdata[0]['id'];
+        header("Location: settings.php");
+        exit;
+    }
+}
+header("Location: index.php?badlogin=1");
+exit;
+?>