~daniel-sonck/smdb/1.0

<?php

function head()

{

 

}

 

function initialize()

{

        if(!isset($_SESSION["trial"]))

                $_SESSION["trial"] = date("YMDHi");

 

        if(isset($_GET["naam"]) && isset($_GET["passwd"]))

        {

 

                $query = "select * from user where name = '{$_GET['naam']}'";

                $resultaat = mysql_query($query);

 

                $correct = false;

 

                if(!$resultaat)

                {

                        echo "<div class=\"error\">Kon niet de gebruikerstabel opvragen: ".mysql_error()."</div>";

                }

                else

                {

                        while($row = mysql_fetch_array($resultaat))

                        {

                                if($_GET['passwd'] == md5($row['passwd'] . ":" . $_SESSION["trial"]))

                                        $correct = true;

                        }

                }

                if($correct)

                {

                        $_SESSION['login'] = true;

                        $_SESSION['name'] = $_GET["naam"];

                }

        }

}

 

function render()

{

        if (isset($_SESSION['login'])

                        and ($_SESSION['login'] == TRUE))

        {

                ?>

<p>

        Welkom

        <?php echo $_SESSION['name'] ?>

</p>

<?php

        }

        else

        {

                ?>

<input

        type="button" value="Login" onclick="Popup.show('login_popup')" />

<div id="login_popup" style="display: none">

        <form id="login" method="get"

                onSubmit="login()">

                <input type="hidden" name="admin" value="00-welkom"> <input

                        type="hidden" id="trial" value="<?php echo $_SESSION["trial"]; ?>">

                <table class="generic">

                    <tr>

                        <th colspan="2">Login</th>

                    </tr>

                        <tr>

                                <th>Naam</th>

                                <td><input type="text" value="" id="naam"></td>

                        </tr>

                        <tr>

                                <th>Wachtwoord</th>

                                <td><input type="password" value="" id="passwd"></td>

                        </tr>

                        <tr>

                                <td><input type="button" value="Terug" onclick="history.back()">

                                </td>

                                <td><input type="button" value="Login" onclick="login()"></td>

                        </tr>

                </table>

        </form>

</div>

<?php

        }

}

?>