68 lines
1.9 KiB
PHP
68 lines
1.9 KiB
PHP
<?php
|
|
|
|
class AuthController {
|
|
|
|
|
|
public function showLoginForm($f3){
|
|
|
|
// store session errors or messages, then clear
|
|
$f3->set('error', $f3->get('SESSION.login_error'));
|
|
$f3->clear('SESSION.login_error');
|
|
|
|
// this can be in our controller base
|
|
$f3->set('content', '../ui/views/login.html');
|
|
echo \Template::instance()->render('../ui/templates/layout.html');
|
|
$f3->clear('error');
|
|
}
|
|
|
|
public function login($f3){
|
|
$username = $f3->get('POST.username');
|
|
$password = $f3->get('POST.password');
|
|
|
|
$db = $f3->get('DB');
|
|
// query for user
|
|
$result = $db->exec(
|
|
'SELECT u.id, u.username, u.password, u.role, r.role as role_name
|
|
FROM users u
|
|
LEFT JOIN roles r ON r.id = u.role
|
|
WHERE username =?
|
|
LIMIT 1', $username
|
|
);
|
|
|
|
// verifiy password
|
|
if($result){
|
|
$user = $result[0]; // first row
|
|
if(password_verify($password, $user['password'])){
|
|
// valid
|
|
$f3->set('SESSION.user', [
|
|
'id'=> $user['id'],
|
|
'username' => $user['username'],
|
|
'role' => $user['role'],
|
|
'role_name' => $user['role_name']
|
|
]);
|
|
|
|
if($f3->exists('SESSION.redirect')){
|
|
$redirect = $f3->get('SESSION.redirect');
|
|
$f3->clear('SESSION.redirect');
|
|
$f3->reroute($redirect);
|
|
}
|
|
|
|
$f3->reroute('/dashboard');
|
|
} else {
|
|
$f3->set('SESSION.login_error', 'Invalid password');
|
|
}
|
|
} else {
|
|
// if here, login failed.
|
|
$f3->set('SESSION.login_error', 'Invalid username');
|
|
}
|
|
|
|
$f3->reroute('/login');
|
|
|
|
}
|
|
|
|
public function logout($f3){
|
|
$f3->clear('SESSION');
|
|
$f3->reroute('/');
|
|
}
|
|
|
|
} |