51 lines
1.3 KiB
PHP
Executable File
51 lines
1.3 KiB
PHP
Executable File
<?php
|
|
// Load API Library
|
|
require "../api.php";
|
|
|
|
$api = new gbAPI(false);
|
|
|
|
// Check Request Body
|
|
if ($_SERVER["REQUEST_METHOD"] !== "POST") {
|
|
$api->answer(400, [
|
|
"error" => "false_request_method",
|
|
"error_text" => "Only POST allowed"
|
|
], true);
|
|
}
|
|
|
|
$input = json_decode(file_get_contents("php://input"), true);
|
|
|
|
if (!isset($input["username"]) || !isset($input["password"])) {
|
|
$api->answer(400, [
|
|
"error" => "missing_fields",
|
|
"error_text" => "Some fields are missing"
|
|
], true);
|
|
}
|
|
|
|
$username = $input["username"];
|
|
$password = $input["password"];
|
|
|
|
// Prepare SQL Command
|
|
$command = "SELECT username, password FROM users WHERE username = :username";
|
|
$args = [
|
|
":username" => $username
|
|
];
|
|
|
|
// Execute SQL Command
|
|
$result = $api->dbCommand($command, true, true, $args);
|
|
|
|
// Check Result
|
|
if ($result && password_verify($password, $result[0]["password"])) {
|
|
// Login successful. Generate Auth Token
|
|
$token = $api->generateCookieToken($username);
|
|
|
|
// Set cookies
|
|
setcookie("auth_token", $token, time() + 86400, "/");
|
|
setcookie("username", $username, time() + 86400, "/");
|
|
|
|
$api->answer(200);
|
|
}else{
|
|
$api->answer(401, [
|
|
"error" => "unauthorized",
|
|
"error_text" => "A user with this password does not exists."
|
|
], true);
|
|
} |