init comit of php_xcstat on TA-HOPPE
This commit is contained in:
12
www/geheim.php
Normal file
12
www/geheim.php
Normal file
@ -0,0 +1,12 @@
|
||||
<?php
|
||||
session_start();
|
||||
if(!isset($_SESSION['userid']))
|
||||
{
|
||||
die('Bitte zuerst <a href="login.php">einloggen</a>');
|
||||
}
|
||||
|
||||
//Abfrage der Nutzer ID vom Login
|
||||
$userid = $_SESSION['userid'];
|
||||
|
||||
echo "Hallo User: ".$userid;
|
||||
?>
|
||||
51
www/login.php
Normal file
51
www/login.php
Normal file
@ -0,0 +1,51 @@
|
||||
<?php
|
||||
session_start();
|
||||
$pdo = new PDO('mysql:host=rdbms.strato.de;dbname=dbs9336961', 'dbu1516891', 'C5ZrqVZDDBtv9SfloCh3');
|
||||
|
||||
if(isset($_GET['login']))
|
||||
{
|
||||
$email = $_POST['email'];
|
||||
$passwort = $_POST['passwort'];
|
||||
|
||||
$statement = $pdo->prepare("SELECT * FROM users WHERE email = :email");
|
||||
$result = $statement->execute(array('email' => $email));
|
||||
$user = $statement->fetch();
|
||||
|
||||
//Überprüfung des Passworts
|
||||
if ($user !== false && password_verify($passwort, $user['passwort']))
|
||||
{
|
||||
$_SESSION['userid'] = $user['id'];
|
||||
die('Login erfolgreich. Weiter zu <a href="./geheim.php">internen Bereich</a>');
|
||||
}
|
||||
else
|
||||
{
|
||||
$errorMessage = "E-Mail oder Passwort war ungültig<br>";
|
||||
}
|
||||
|
||||
}
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<title>Login</title>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<?php
|
||||
if(isset($errorMessage))
|
||||
{
|
||||
echo $errorMessage;
|
||||
}
|
||||
?>
|
||||
|
||||
<form action="?login=1" method="post">
|
||||
E-Mail:<br>
|
||||
<input type="email" size="40" maxlength="250" name="email"><br><br>
|
||||
|
||||
Dein Passwort:<br>
|
||||
<input type="password" size="40" maxlength="250" name="passwort"><br>
|
||||
|
||||
<input type="submit" value="Abschicken">
|
||||
</form>
|
||||
</body>
|
||||
</html>
|
||||
94
www/registrieren.php
Normal file
94
www/registrieren.php
Normal file
@ -0,0 +1,94 @@
|
||||
<?php
|
||||
session_start();
|
||||
$pdo = new PDO('mysql:host=rdbms.strato.de;dbname=dbs9336961', 'dbu1516891', 'C5ZrqVZDDBtv9SfloCh3');
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<title>Registrierung</title>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<?php
|
||||
$showFormular = true; //Variable ob das Registrierungsformular anezeigt werden soll
|
||||
|
||||
if(isset($_GET['register']))
|
||||
{
|
||||
$error = false;
|
||||
$email = $_POST['email'];
|
||||
$passwort = $_POST['passwort'];
|
||||
$passwort2 = $_POST['passwort2'];
|
||||
|
||||
if(!filter_var($email, FILTER_VALIDATE_EMAIL))
|
||||
{
|
||||
echo 'Bitte eine gültige E-Mail-Adresse eingeben<br>';
|
||||
$error = true;
|
||||
}
|
||||
if(strlen($passwort) == 0)
|
||||
{
|
||||
echo 'Bitte ein Passwort angeben<br>';
|
||||
$error = true;
|
||||
}
|
||||
if($passwort != $passwort2)
|
||||
{
|
||||
echo 'Die Passwörter müssen übereinstimmen<br>';
|
||||
$error = true;
|
||||
}
|
||||
|
||||
//Überprüfe, dass die E-Mail-Adresse noch nicht registriert wurde
|
||||
if(!$error)
|
||||
{
|
||||
$statement = $pdo->prepare("SELECT * FROM users WHERE email = :email");
|
||||
$result = $statement->execute(array('email' => $email));
|
||||
$user = $statement->fetch();
|
||||
|
||||
if($user !== false)
|
||||
{
|
||||
echo 'Diese E-Mail-Adresse ist bereits vergeben<br>';
|
||||
$error = true;
|
||||
}
|
||||
}
|
||||
|
||||
//Keine Fehler, wir können den Nutzer registrieren
|
||||
if(!$error)
|
||||
{
|
||||
$passwort_hash = password_hash($passwort, PASSWORD_DEFAULT);
|
||||
|
||||
$statement = $pdo->prepare("INSERT INTO users (email, passwort) VALUES (:email, :passwort)");
|
||||
$result = $statement->execute(array('email' => $email, 'passwort' => $passwort_hash));
|
||||
|
||||
if($result)
|
||||
{
|
||||
echo 'Du wurdest erfolgreich registriert. <a href="login.php">Zum Login</a>';
|
||||
$showFormular = false;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo 'Beim Abspeichern ist leider ein Fehler aufgetreten<br>';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if($showFormular)
|
||||
{
|
||||
?>
|
||||
|
||||
<form action="?register=1" method="post">
|
||||
E-Mail:<br>
|
||||
<input type="email" size="40" maxlength="250" name="email"><br><br>
|
||||
|
||||
Dein Passwort:<br>
|
||||
<input type="password" size="40" maxlength="250" name="passwort"><br>
|
||||
|
||||
Passwort wiederholen:<br>
|
||||
<input type="password" size="40" maxlength="250" name="passwort2"><br><br>
|
||||
|
||||
<input type="submit" value="Abschicken">
|
||||
</form>
|
||||
|
||||
<?php
|
||||
} //Ende von if($showFormular)
|
||||
?>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
Reference in New Issue
Block a user