From 3ad5f5bdd6dee70d4106e941c99f2a7f5acd263c Mon Sep 17 00:00:00 2001 From: root Date: Mon, 5 Oct 2026 10:52:31 +0200 Subject: [PATCH] Add Database structure --- .env | 0 api/auth/login.php | 4 ++-- api/setup/save.php | 4 ++-- db_structure.sql | 15 +++++++++++++++ 4 files changed, 19 insertions(+), 4 deletions(-) mode change 100644 => 100755 .env mode change 100644 => 100755 api/auth/login.php create mode 100644 db_structure.sql diff --git a/.env b/.env old mode 100644 new mode 100755 diff --git a/api/auth/login.php b/api/auth/login.php old mode 100644 new mode 100755 index 44d674b..de50f76 --- a/api/auth/login.php +++ b/api/auth/login.php @@ -28,14 +28,14 @@ $hash = hash("sha256", $password); $command = "SELECT username, password FROM users WHERE username = :username AND password = :password"; $args = [ ":username" => $username, - ":password" => $password + ":password" => $hash ]; // Execute SQL Command $result = $api->dbCommand($command, true, true, $args); // Check Result -if ($result) { +if ($result && password_verify($password, $result["password"])) { // Login successful. Generate Auth Token $token = $api->generateToken($username); diff --git a/api/setup/save.php b/api/setup/save.php index d7fb894..b6836a1 100755 --- a/api/setup/save.php +++ b/api/setup/save.php @@ -2,7 +2,7 @@ // Load Main Libary require "../api.php"; -$api = new gbAPI(true); +$api = new gbAPI(false); // Check Request body if ($_SERVER["REQUEST_METHOD"] !== "POST") { @@ -32,7 +32,7 @@ if ($password !== $password_repeat) { } // Hash Password -$hash = hash("sha256", $password); +$hash = password_hash($password); diff --git a/db_structure.sql b/db_structure.sql new file mode 100644 index 0000000..fde2727 --- /dev/null +++ b/db_structure.sql @@ -0,0 +1,15 @@ +CREATE TABLE IF NOT EXISTS "users" ( + "id" INTEGER NOT NULL, + "username" VARCHAR NOT NULL, + "password" VARCHAR NOT NULL, + "owner" INTEGER NOT NULL, + PRIMARY KEY("id", "username", "owner") +); + +CREATE TABLE IF NOT EXISTS "entrys" ( + "id" INTEGER NOT NULL, + "name" VARCHAR NOT NULL, + "text" VARCHAR NOT NULL, + "status" INTEGER, + PRIMARY KEY("id") +);