cief/ARCHIVED-IZYIM
1
0
Fork 0
mirror of https://gitlab.com/CIEFWorldwideSdnBhd/ARCHIVED-IZYIM.git synced 2026-09-02 11:14:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

update login function with encrpytion

Browse Source
This commit is contained in:
Jackk Goh
2018-03-10 19:05:17 +08:00
parent 24314b5e33
commit d087da7ace
3 changed files with 110 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/func.class/login.func.php
+9 -11
View File
@@ -51,19 +51,16 @@ function loginLog($user_id, $status) {
$app->post('/login/auth', function (Request $request) {
global $db;
$username = $request->get('username');
$raw_password = $request->get('password');
// Password encoding
$password = password_hash($raw_password, PASSWORD_BCRYPT);
echo $password;
$password = $request->get('password');
// Prevent SQL Injection
$db->bind("username", $username);
$db->bind("password", (string)$password);
// Execute
$users = $db->query("SELECT * FROM users WHERE username= :username");
$users = $db->query("SELECT * FROM users WHERE username= :username && status = 1");
if (count($users) > 0) {
if (password_verify($password, $users['password'])) {
echo $users['password'];
if (password_verify($password, $users[0]["password"])) {
$_SESSION["username"] = $username;
$_SESSION["user_id"] = $users[0]["user_id"];
$_SESSION["role"] = $users[0]["role"];
@@ -76,14 +73,15 @@ $app->post('/login/auth', function (Request $request) {
$_SESSION["branch_id"] = 0;
}
loginLog($_SESSION["user_id"], "SUCCESS");
return new Response('Success', 200);
return new Response('Success', 200);
}
else{
loginLog($_SESSION["user_id"], "FAILED");
return new Response('Failed', 401);
}
} else {
loginLog($_SESSION["user_id"], "FAILED");
return new Response('Failed', 401);
return new Response('Failed. User not Found.', 401);
}
});
$app->post('/forgot-password/reset', function (Request $request) {
@@ -175,7 +173,7 @@ $app->post('/register/submit', function(Request $request) {
$created_on = date("Y-m-d H:i:s");
// Password encoding
$password = password_hash($raw_password, PASSWORD_BCRYPT);
$password = password_hash($raw_password, PASSWORD_DEFAULT);
// END
// Check if the request match the conditional