From 8df2b0debb7158af1ac7792559cbefe96ec0d520 Mon Sep 17 00:00:00 2001
From: max/sooulix <maxime@freepoteries.fr>
Date: Wed, 12 Feb 2025 10:21:48 +0100
Subject: [PATCH] login / logout

---
 src/auth.php           | 32 ++++++++++++++++++++++++++++++++
 src/common.php         | 12 ++++++++++++
 src/config_sanddir.php |  2 ++
 src/index.php          | 13 +++++++++++++
 4 files changed, 59 insertions(+)
 create mode 100644 src/auth.php

diff --git a/src/auth.php b/src/auth.php
new file mode 100644
index 0000000..fc7a6dd
--- /dev/null
+++ b/src/auth.php
@@ -0,0 +1,32 @@
+<?php
+require_once('common.php');
+require_once('config_sanddir.php');
+function login()
+{
+    if (checkpw())
+    {
+        $_SESSION['token'] = md5($_POST['user'] .  $_POST['password']);
+        header('Location: /');
+    }
+}
+
+session_start();
+
+if (isset($_POST['user']) && isset($_POST['password']))
+{
+    login();
+}
+?>
+
+<form method="POST" action="/auth.php">
+    <label>User:
+        <input type="text" name="user" id="user" />
+    </label>
+    </br>
+    <label>Password:
+        <input type="password" name="password" id="password" />
+    </label>
+    </br>
+    <input type="submit" value="Submit" />
+</form>
+
diff --git a/src/common.php b/src/common.php
index 563b2fb..9d11a96 100644
--- a/src/common.php
+++ b/src/common.php
@@ -1,4 +1,16 @@
 <?php
+function checkpw()
+{
+    return (
+            isset($_SESSION['token']) &&
+            $_SESSION['token'] == md5($GLOBALS['SANDDIR_USER'] . $GLOBALS['SANDDIR_PASSWORD'])
+        ) ||
+        isset($_POST['user']) &&
+        isset($_POST['password']) &&
+        $_POST['user'] == $GLOBALS['SANDDIR_USER'] &&
+        $_POST['password'] == $GLOBALS['SANDDIR_PASSWORD'];
+}
+
 
 function gen_identifier($share)
 {
diff --git a/src/config_sanddir.php b/src/config_sanddir.php
index 82c1b62..be3b75d 100644
--- a/src/config_sanddir.php
+++ b/src/config_sanddir.php
@@ -1,4 +1,6 @@
 <?php
 $SANDDIR_ROOT_DIR = './share';
 $SANDDIR_SALT = 'abcde12345abcde12345';
+$SANDDIR_USER = 'a';
+$SANDDIR_PASSWORD = 'b';
 ?>
diff --git a/src/index.php b/src/index.php
index 68a281c..4c1a2af 100644
--- a/src/index.php
+++ b/src/index.php
@@ -3,10 +3,17 @@
 $new_share = NULL;
 $selected_dir = NULL;
 
+session_start();
+
 require_once('./common.php');
 
 require_once('./config_sanddir.php');
 
+if (!checkpw())
+{
+    header('Location: /auth.php');
+}
+
 if (isset($_GET['dir']))
 {
     $selected_dir = $_GET['dir'];
@@ -34,4 +41,10 @@ else if ($selected_dir)
 }
 
 ?>
+
+<footer>
+    <form method="POST" action="/auth.php">
+        <input type="submit" value="Log out" />
+    </form>
+</footer>
 </html>