Add files via upload

2020-09-08 18:06:28 +02:00
parent 4ac9cd811a
commit 97df13f3f0
58 changed files with 67790 additions and 0 deletions
@@ -0,0 +1,80 @@
+<?php
+/**
+* PHP Dynamic Qr code
+*
+* @author    Giandonato Inverso <info@giandonatoinverso.it>
+* @copyright Copyright (c) 2020-2021
+* @license   https://opensource.org/licenses/MIT MIT License
+* @link      https://github.com/giandonatoinverso/PHP-Dynamic-Qr-code
+* @version   1.0
+*/
+
+require_once 'config/config.php';
+session_start();
+
+if ($_SERVER['REQUEST_METHOD'] === 'POST')
+{
+	$username = filter_input(INPUT_POST, 'username');
+	$password = filter_input(INPUT_POST, 'password');
+	$remember = filter_input(INPUT_POST, 'remember');
+
+	// Get DB instance.
+	$db = getDbInstance();
+
+	$db->where('user_name', $username);
+	$row = $db->getOne('admin_accounts');
+
+	if ($db->count >= 1)
+    {
+		$db_password = $row['password'];
+		$user_id = $row['id'];
+
+		if (password_verify($password, $db_password))
+        {
+			$_SESSION['user_logged_in'] = TRUE;
+			$_SESSION['admin_type'] = $row['admin_type'];
+            $_SESSION['user_id'] = $row['id'];
+
+			if ($remember)
+            {
+				$series_id = randomString(16);
+				$remember_token = getSecureRandomToken(20);
+				$encryted_remember_token = password_hash($remember_token,PASSWORD_DEFAULT);
+
+				$expiry_time = date('Y-m-d H:i:s', strtotime(' + 30 days'));
+				$expires = strtotime($expiry_time);
+
+				setcookie('series_id', $series_id, $expires, '/');
+				setcookie('remember_token', $remember_token, $expires, '/');
+
+				$db = getDbInstance();
+				$db->where ('id',$user_id);
+
+				$update_remember = array(
+					'series_id'=> $series_id,
+					'remember_token' => $encryted_remember_token,
+					'expires' =>$expiry_time
+				);
+				$db->update('admin_accounts', $update_remember);
+			}
+			// Authentication successfull redirect user
+			header('Location: index.php');
+		}
+        else
+        {
+			$_SESSION['login_failure'] = 'Invalid username or password';
+			header('Location: login.php');
+		}
+		exit;
+	}
+    else
+    {
+		$_SESSION['login_failure'] = 'Invalid username or password';
+		header('Location: login.php');
+		exit;
+	}
+}
+else
+{
+	die('Method Not allowed');
+}