Webbserverprogrammering 1

Show sourcecode

The following files exists in this folder. Click to view.

webbserverprogrammering/projekt/snake_oil_seller/php/

about_us.php
admin.php
contact.php
create_products.php
create_tables.php
createtable.php
dbconnection.php
delete_post.php
delete_tables.php
deletepost.php
deletetable.php
entry.php
header.php
insert_posts.php
insertposts.php
leaderboard.php
log_in.php
log_out.php
main.php
my_account.php
question_maker.php
quiz_form.php
quiz_list.php
quiz_maker.php
result.php
select_posts.php
selectposts.php
shop.php
shop_item.php
shopping_cart.php
sign_in.php
title_card.php
update_posts.php
updateposts.php
user_verified.php
verify_page.php

log_in.php

88 lines UTF-8 Windows (CRLF)
<!DOCTYPE html>
<html lang="sv">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>Log in</title>
  <link href="../css/snake_oil.css" rel="stylesheet">
  <link href="../css/log-sign_in.css" rel="stylesheet"> 
</head>
  <body>
    <?php
      
include ('dbconnection.php');
      
$message null;
      if (isset(
$_POST['username']) && isset($_POST['password']) && !empty($_POST['username']) && !empty($_POST['password'])) {
          
          
// Hämtar användarnamn och lösenord från formuläret
          
$username $_POST['username'];
          
$password $_POST['password'];

          
// Förbereder frågan till databasen
          
$stmt $dbconn->prepare("SELECT username, usertype, password FROM users WHERE username = ?");
          
$stmt->execute([$username]);
          
$user $stmt->fetch(PDO::FETCH_ASSOC);

          
// Kollar om användaren finns i databasen
          
if ($user){
            if (
password_verify($password$user["password"])) {
              
// Användaren finns, skickas till quiz listan
              
try {    
                
# prepare

                
session_start();

                
$_SESSION["username"] = $username;
                
$_SESSION["usertype"] = $user["usertype"];
              }
              catch(
PDOException $e)
                  {
                  echo 
$sql "<br>" $e->getMessage();
              }
              
$dbconn null;
              
              
header("Location: verify_page.php");
            } else {
              
// Användaren finns inte
              
echo "Fel användarnamn eller lösenord";
            }
          } else {
            
// Användaren finns inte
            
echo "Fel användarnamn eller lösenord";
          }
        }
        
      echo 
$message;
    
?>
    <!-- Titel -->
    <?php include "title_card.php";?>
  
    <!-- Logga In Ruta-->
    <main>
      <h2><strong>Logga In:</strong></h2>
      <form method="post" action="" id="form"> 
        <table> 
          <tr>
            <td><span style="display:flex; justify-content: right;">Användarnamn:</span></td>
            <td><input type="text" name="username" size=40 maxlength=100 placeholder="Kristian Tyrann"></td>
          </tr> 
          <tr>
            <td><span style="display:flex; justify-content: right;">Lösenord:</span></td>
            <td><input type="password" name="password" size=40 maxlength=100 placeholder="XxRIPTheGoatxX"></td>
          </tr>
          <tr>
            <td><span style="display:flex; justify-content: right;">* = obligatoriskt:</span></td>
            <td><button type="submit">Logga in</button></td></tr></td>
          </tr>
        </table>
      </form>
    </main>
    <!--Tillbaka-->
    <div id="exit_div">
      <h4>Tillbaka</h4>
      <span>
        <a href="log_out.php">Startsida</a>
        <a href="sign_in.php">Skapa Konto</a>
      </span>
    </div>
  </body>
</html>