Grisu/PunkteSystem-KSP
1
0
Fork 0
Code Issues 2 Pull Requests Packages Projects Releases Wiki Activity

added login check to the pages which add entries to the tables

Browse Source
This commit is contained in:
Grisu
2022-06-09 20:47:50 +02:00
parent 80a03ec557
commit 07becd4502
4 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/public/add_entry.php
View File

@@ -2,6 +2,8 @@
session_start(); session_start();
include("../scripts/connection.php"); include("../scripts/connection.php");
include("../scripts/functions.php"); include("../scripts/functions.php");
$user_data = check_login($con);
if($_SERVER['REQUEST_METHOD'] == "POST") { if($_SERVER['REQUEST_METHOD'] == "POST") {
$points = $_POST['points']; $points = $_POST['points'];
$minutes = $_POST['minutes']; $minutes = $_POST['minutes'];

1
app/public/add_station.php
View File

@@ -2,6 +2,7 @@
session_start(); session_start();
include("../scripts/connection.php"); include("../scripts/connection.php");
include("../scripts/functions.php"); include("../scripts/functions.php");
$user_data = check_login($con);
if($_SERVER['REQUEST_METHOD'] == "POST") { if($_SERVER['REQUEST_METHOD'] == "POST") {
write_station($con, $_POST['station_name'], $_POST['station_pos']); write_station($con, $_POST['station_name'], $_POST['station_pos']);

1
app/public/add_team.php
View File

@@ -2,6 +2,7 @@
session_start(); session_start();
include("../scripts/connection.php"); include("../scripts/connection.php");
include("../scripts/functions.php"); include("../scripts/functions.php");
$user_data = check_login($con);
if($_SERVER['REQUEST_METHOD'] == "POST") { if($_SERVER['REQUEST_METHOD'] == "POST") {
write_team($con, $_POST['team_name'], $_POST['fire_department']); write_team($con, $_POST['team_name'], $_POST['fire_department']);

1
app/public/login.php
View File

@@ -13,6 +13,7 @@
$phash = generate_password_hash($password, $user_data['salt']); $phash = generate_password_hash($password, $user_data['salt']);
if($user_data['password'] === $phash) { if($user_data['password'] === $phash) {
$_SESSION['user_id'] = $user_data['user_id']; $_SESSION['user_id'] = $user_data['user_id'];
$_SESSION['user_group'] = $user_data['user_group'];
header("Location: index.php"); header("Location: index.php");
die; die;
} else { } else {