yolanda/trunk/login.pl
erlehmann f7f24dd5bf fixed spelling error
git-svn-id: http://yolanda.mister-muffin.de/svn@26 7eef14d0-6ed0-489d-bf55-20463b2d70db
2007-10-11 16:25:56 +00:00

72 lines
1.9 KiB
Perl

#!/usr/bin/perl
require "/var/www/perl/include.pl";
#initialize session data
CGI::Session->name($session_name);
$query = new CGI;
$session = new CGI::Session;
#check if action is set
if($query->param('action')) {
#connect to db
$dbh = DBI->connect("DBI:mysql:$database:$dbhost", $dbuser, $dbpass);
#if login is requested
if($query->param('action') eq "login") {
#save POST data in local variables
my $user = $query->param('user');
my $pass = $query->param('pass');
#prepare query
my $sth = $dbh->prepare(qq{select username from users
where password = password('$pass')
and username = '$user'
limit 1 });
#execute query
$sth->execute();
#if something was returned username and password match
if($sth->fetchrow_array()) {
#store session id in local variable
my $sid = $session->id;
#store session id in database
$sth = $dbh->prepare(qq{update users set sid = '$sid' where username = '$user'});
$sth->execute();
$sth->finish();
print $session->header();
print "logged in";
} else {
#if not, print error
print $session->header();
print "could not log you in";
}
} elsif($query->param('action') eq "logout") {
#if logout is requested
#remove sid from database
$sth = $dbh->prepare(qq{update users set sid = '' where username = '$user'});
$sth->execute();
$sth->finish();
$session->delete();
print $session->header();
print "logged out";
} else {
#something ugly was passed
print $session->header();
print "wtf?";
}
#disconnect db
$dbh->disconnect();
} else {
#print login form
print $session->header();
print '<form action="" method="POST"><p>
<input name="action" type="hidden" value="login">
<input name="user" type="text" size="30" maxlength="30">
<input name="pass" type="password" size="30" maxlength="30">
<input type="submit" name="login" value=" login ">
</p></form>';
}