X-Git-Url: https://git.ucc.asn.au/?a=blobdiff_plain;f=testing%2FMCTXWeb%2Fpublic_html%2Fusers%2Flogin.php;h=257fa4dff3a8b5d94792b5335d74ced435a73505;hb=5303f53cb44fffd4c59890d3c333f74d7cd7cb4e;hp=2c45d1fe09a1e39464879b283f71f7e085eb7f03;hpb=3dfde391486e81a357e08a24ccb7903c8adfa5aa;p=matches%2FMCTX3420.git diff --git a/testing/MCTXWeb/public_html/users/login.php b/testing/MCTXWeb/public_html/users/login.php index 2c45d1f..257fa4d 100644 --- a/testing/MCTXWeb/public_html/users/login.php +++ b/testing/MCTXWeb/public_html/users/login.php @@ -8,7 +8,7 @@ require_once("models/config.php"); if (!securePage($_SERVER['PHP_SELF'])){die();} //Prevent the user visiting the logged in page if he/she is already logged in -if(isUserLoggedIn()) { header("Location: account.php"); die(); } +if(isUserLoggedIn()) { header("Location: index.php"); die(); } //Forms posted if(!empty($_POST)) @@ -48,7 +48,7 @@ if(!empty($_POST)) //Hash the password and use the salt from the database to compare the password. $entered_pass = generateHash($password,$userdetails["password"]); - echo "".$userdetails["password"]; + //echo "".$userdetails["password"]; //Wut is dis if($entered_pass != $userdetails["password"]) { @@ -69,13 +69,22 @@ if(!empty($_POST)) $loggedInUser->displayname = $userdetails["display_name"]; $loggedInUser->username = $userdetails["user_name"]; - //Update last sign in - $loggedInUser->updateLastSignIn(); - $_SESSION["userCakeUser"] = $loggedInUser; - - //Redirect to user account page - header("Location: account.php"); - die(); + //Only allow login to admins + if ($loggedInUser->checkPermission(array(2))) + { + //Update last sign in + $loggedInUser->updateLastSignIn(); + + $_SESSION["userCakeUser"] = $loggedInUser; + + //Redirect to user account page + header("Location: index.php"); + die(); + } + else + { + $errors[] = ("You are no admin :("); + } } } } @@ -83,45 +92,43 @@ if(!empty($_POST)) } require_once("models/header.php"); +startPage(); -echo " - -

UserCake

Login

"; - -include("left-nav.php"); - -echo " -

"; - +echo ' +

+ + +

+ '; -echo " -

- -

- -"; +finishPage(); ?>