|
|
@ -15,20 +15,16 @@ function user($key, $user = null) { |
|
|
// Create a session
|
|
|
// Create a session
|
|
|
function session($user, $pass, $str = null) { |
|
|
function session($user, $pass, $str = null) { |
|
|
$user_file = 'config/users/' . $user . '.ini'; |
|
|
$user_file = 'config/users/' . $user . '.ini'; |
|
|
$user_enc = user('encryption', $user); |
|
|
|
|
|
$user_pass = user('password', $user); |
|
|
$user_pass = user('password', $user); |
|
|
$password = (strlen($user_enc) > 0 && $user_enc !== 'clear' && $user_enc !== 'none')?hash($user_enc,$pass):$pass; |
|
|
|
|
|
|
|
|
|
|
|
if(file_exists($user_file)) { |
|
|
|
|
|
if($pass === $user_pass) { |
|
|
|
|
|
|
|
|
if (file_exists($user_file)) { |
|
|
|
|
|
if ($pass === $user_pass) { |
|
|
$_SESSION[config("site.url")]['user'] = $user; |
|
|
$_SESSION[config("site.url")]['user'] = $user; |
|
|
header('location: admin'); |
|
|
header('location: admin'); |
|
|
} |
|
|
|
|
|
else { |
|
|
|
|
|
|
|
|
} else { |
|
|
return $str = '<li>Your username and password mismatch.</li>'; |
|
|
return $str = '<li>Your username and password mismatch.</li>'; |
|
|
} |
|
|
} |
|
|
} |
|
|
|
|
|
else { |
|
|
|
|
|
|
|
|
} else { |
|
|
return $str = '<li>Username not found in our record.</li>'; |
|
|
return $str = '<li>Username not found in our record.</li>'; |
|
|
} |
|
|
} |
|
|
} |
|
|
} |
|
|
|