MyHyvesBookPlus/WebDB
1
0
Fork 0
Code Issues 2 Pull Requests Projects Releases Wiki Activity

Almost finished login/register page #59

Merged
11057122 merged 1 commits from joey-testing into master 2017-01-18 14:51:53 +01:00
Conversation 3 Commits 1 Files Changed 4 +22 -14
4 changed files with 22 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
website/public/login.php
View File

@@ -21,14 +21,16 @@
}
else {
$uname=$_POST["uname"];
$uname=strtolower($_POST["uname"]);
$psw=$_POST["psw"];
$hash=hashPassword()["password"];
$userid=hashPassword()["userID"];
// If there's an account, go to the profile page
if(password_verify($psw, $hash)) {
if(password_verify($psw.$uname, $hash)) {
$_SESSION["userID"] = $userid;
header("location: /profile.php");
header("location: myhyvesbookplus.nl/profile.php");
} else {
$loginErr = "Inloggegevens zijn niet correct";
}

4
website/public/register.php
View File

@@ -88,7 +88,7 @@
$usernameErr = "Gebruikersnaam moet minstens 6 karakters bevatten";
$correct = false;
} else if (getExistingUser() == 1 ){
} else if (getExistingUsername() == 1){
$usernameErr = "Gebruikersnaam bestaat al";
$correct = false;
@@ -153,7 +153,7 @@
} else {
registerAccount();
// header("location: login.php");
header("location: login.php");
}
}

5
website/queries/login.php
View File

@@ -3,11 +3,12 @@
function hashPassword() {
$stmt = $GLOBALS["db"]->prepare("
SELECT
`password`
`password`,
`userID`
FROM
`user`
WHERE
`username` = :username
`username` LIKE :username
");
$stmt->bindParam(":username", $_POST["uname"]);

15
website/queries/register.php
View File

@@ -1,8 +1,13 @@
<?php
function getExistingUser() {
function getExistingUsername() {
$stmt = $GLOBALS["db"]->prepare("
SELECT * FROM `user` WHERE `username` = :username
SELECT
`username`
FROM
`user`
WHERE
`username` LIKE :username
");
$stmt->bindParam(":username", $_POST["username"]);
@@ -41,7 +46,7 @@ function registerAccount() {
:email
)");
$hash=password_hash($_POST["password"], PASSWORD_DEFAULT);
$hash=password_hash($_POST["password"].(strtolower($_POST["username"])), PASSWORD_DEFAULT);
$stmt->bindParam(":fname", $_POST["name"]);
$stmt->bindParam(":lname", $_POST["surname"]);
@@ -51,7 +56,7 @@ function registerAccount() {
$stmt->bindParam(":location", $_POST["location"]);
$stmt->bindParam(":email", $_POST["email"]);
print("execute".$stmt->execute());
print("count".$stmt->rowCount());
$stmt->execute();
$stmt->rowCount();
}
?>