Webbserverprogrammering 1

Show sourcecode

The following files exists in this folder. Click to view.

webbserver/filmquiz/

api/
createroom.php
createtables.php
createuser.php
css/
dbconnection.php
game.php
index.php
login.php
logout.php
remove.php
rensa.php
results.php
waiting.php

login.php

56 lines UTF-8 Windows (CRLF)
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link href="css/stylesheet.css" rel="stylesheet">
    <title>Login</title>
    <?php
    
include('dbconnection.php');
    
/** @var PDO $dbconn */
    
session_unset();
    if (isset(
$_POST['login'])) {
        
$user $_POST['username'];
        
$pass $_POST['password'];

        
$stmt $dbconn->prepare(
            
"SELECT * FROM fq_users WHERE username = :username"
        
);
        
$stmt->execute([':username' => $user]);
        
$row $stmt->fetch();

        
// Kolla att lösenordet hashat är samma som databasens hashade lösenord
        
if ($row && password_verify($pass$row['password'])) {
            
$_SESSION['user_id'] = $row['id'];
            
$_SESSION['username'] = $row['username'];
            
header("Location: index.php");
            exit;
        } else {
            
$error "Något gick fel, testa igen";
        }
    }
    
?>
</head>

<body>
    <h1>Logga in</h1>
    <form method="post">
        <p>Användarnamn: </p>
        <input class="input" type="text" name="username">
        <p>Lösenord: </p>
        <input class="input" type="password" name="password">
        <br>
        <br>
        <button name="login">
            Logga in
        </button>
        <?php if (isset($error)) echo "<p class='error'>$error</p>"?>
    </form>
    <br>
    <form method="post" action="createuser.php">
        <button type="submit">Skapa Konto</button>
    </form>
</body>

</html>