SOFM/login.php

74 lines
1.7 KiB
PHP
Executable File

<?php
session_start();
if(isset($_SESSION['hostz-user']) && isset($_SESSION['hostz-passwd'])) { header("Location: ctrl.php"); }
if(isset($_SESSION['hostz-vpspanel-user']) && isset($_SESSION['hostz-vpspanel-passwd'])) { header("Location: vps-panel.php"); }
include("config.php");
include_once("header.php");
echo "<div class='ptitle'>$title: $desc ~ login</div>\n\n";
if(isset($_GET['action']))
{
$action = $_GET['action'];
if($action=="filehost")
{
if($_POST['hostzusername']!="" && $_POST['hostzpassword']!="")
{
$username = $_POST['hostzusername'];
if(file_exists("users/$username.php"))
{
$password = $_POST['hostzpassword'];
include("users/$username.php");
if($user_password==$password)
{
$_SESSION['hostz-user'] = $_POST['hostzusername'];
$_SESSION['hostz-passwd'] = $_POST['hostzpassword'];
echo "Logged in, <a href=\"ctrl.php\">Redirecting to control panel in 3 seconds</a><meta http-equiv='refresh' content='3;url=ctrl.php'>";
}
else
{
echo "Error: Wrong password";
}
}
else
{
echo "Error: User not found.";
}
}
else
{
echo "Error: No username or password provided";
}
}
}
else
{
print <<<EOD
<div class="form">
<form method="post" action="login.php?action=filehost">
<table>
<tr>
<td>Username:</td>
<td><input type="text" name="hostzusername"></td>
</tr>
<tr>
<td>Password:</td>
<td><input type="password" name="hostzpassword"></td>
</tr>
<tr>
<td>Go!</td>
<td><input type="submit" value="Login"></td>
</tr>
</table>
</form>
</div>
EOD;
}
include_once("footer.php");
?>