Tristan/OWE
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Compare commits

base: Tristan:fa8e75d747fddc21ab4aa6173eb16400eff66053
Branches Tags
Tristan:master
...
compare: Tristan:7de49f16a648c6bc0aedb863fffbdd7232003fbe
Branches Tags
Tristan:master

2 Commits
fa8e75d747 ... 7de49f16a6

Author SHA1 Message Date
Tristan Schneider
7de49f16a6 Merge branch 'master' of https://tristancloud.ddns.net/gitea/Tristan/OWE 2021-01-09 16:42:37 +01:00
Tristan Schneider
e52945b12f admin page has login 2021-01-09 16:38:46 +01:00
1 changed files with 74 additions and 0 deletions
Show Stats Expand all files Collapse all files

74
admin.php Normal file
View File

@ -0,0 +1,74 @@
<?php
$raw_json_config = file_get_contents("data/config.json");
$config_data = json_decode($raw_json_config, false);
?>
<html>
<head>
<title><?php print("Admin ".($config_data->title ?? "One Word Each")); ?></title>
<link rel="stylesheet" href="style.css">
<link rel="icon" href="<?php print($config_data->logo->icon_path ?? "favicon.ico"); ?>" type="image/x-icon">
</head>
<body>
<?php
if (file_exists('data/admin_pwd')):
$token = $_COOKIE['owe_admin'];
$pwd=base64_decode($token);
if (password_verify($pwd, file_get_contents('data/admin_pwd'))) {
$login = true;
} else {
// either cookie didn't exist or is wrong
}
else:
?>
Du kannst Admin werden.
<form action="./admin.php" method="post">
<label>Passwort: <input type="password" required name="set_pwd" style="font-size: xx-large; border: 2px solid white;"></label>
<button>Registrieren</button>
</form>
<?php
if (null !== $_POST['set_pwd']) {
$pwd = $_POST['set_pwd'];
file_put_contents('data/admin_pwd', password_hash($pwd, PASSWORD_DEFAULT));
setcookie('owe_admin', base64_encode($pwd), ['httponly' => true]);
header('location: admin.php');
}
endif;
if ($login):
?>
Du bist angemeldet.
<?php elseif (file_exists('data/admin_pwd')): ?>
Anmelden<br>
<form action="./admin.php" method="post">
<label>Passwort: <input type="password" required name="pwd" style="font-size: xx-large; border: 2px solid white;"></label>
<button>Anmelden</button>
</form>
<?php
if (null !== $_POST['pwd']) {
$pwd = $_POST['pwd'];
if (password_verify($pwd, file_get_contents('data/admin_pwd'))) {
setcookie('owe_admin', base64_encode($pwd), ['httponly' => true]);
header('location: admin.php');
} else {
print("Nope, falsch");
}
}
endif; ?>
</p>
</body>
</html>