LBYCPG2-FinalProject/createAccount.php at main · kfcampit/LBYCPG2-FinalProject · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
<?php
    $sqlconnect = mysqli_connect('localhost', 'root', '');
    if (!$sqlconnect){
        die("Failed to connect to the database: ");
    }

    $selectDB = mysqli_select_db($sqlconnect, 'APSMS');
    if (!$selectDB){
         die("Failed to connect to the database: ");
    }
?>

<html>
    <head>
        <title>CSO - APSMS</title>
        <meta charset = "UTF-8">
        <meta http-equiv = "X-UA-Compatible" content = "IE=edge">
        <meta name = "viewport" content = "width = device - width, initialize-scale = 1.0">
        <script src="https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.7/dist/umd/popper.min.js" integrity="sha384-zYPOMqeu1DAVkHiLqWBUTcbYfZ8osu1Nd6Z89ify25QV9guujx43ITvfi12/QExE" crossorigin="anonymous"></script>
        <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.min.js" integrity="sha384-Y4oOpwW3duJdCWv5ly8SCFYWqFDsfob/3GkgExXKV4idmbt98QcxXYs9UoXAB7BZ" crossorigin="anonymous"></script>
        <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-KK94CHFLLe+nY2dmCWGMq91rCGa5gtU4mk92HdvYe+M/SXH301p5ILy+dN9+nJOZ" crossorigin="anonymous">
        <style>.error {color: #FF0000}</style>
    </head>
    <body>
        <?php include("_navbar.php") ?>
        <div>
            <h1 style="text-align: center; padding-bottom: 16px">CSO - APS Management System</h1>

            <div class="container-sm">
                <form action = "<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method = "post">
                    <div class="row justify-content-md-center" style = "padding-bottom: 8px">
                        <div class="col-1">
                            <input type="text" readonly class="form-control-plaintext" value="Username:">
                        </div>
                        <div class="col-3">
                            <label for="user" class="visually-hidden">user</label>
                            <input type="text" class="form-control" name="user">
                        </div>
                    </div>
                    <div class="row justify-content-md-center" style = "padding-bottom: 16px">
                        <div class="col-1">
                            <input type="text" readonly class="form-control-plaintext" value="Password:">
                        </div>
                        <div class="col-3">
                            <label for="pass" class="visually-hidden">pass</label>
                            <input type="password" class="form-control" name="pass">
                        </div>
                    </div>
                    <div class="row justify-content-md-center" style = "padding-bottom: 16px">
                        <div class="col-1">
                            <input type="text" readonly class="form-control-plaintext" value="Password:">
                        </div>
                        <div class="col-3">
                            <label for="pass" class="visually-hidden">pass</label>
                            <input type="password" class="form-control" name="pass">
                        </div>
                    </div>
                    <div class="row justify-content-md-center">
                    <div class="d-grid gap-2 col-2">
                        <button type="submit" class="btn btn-primary mb-3" name="b1">Login</button>
                    </div>
                    </div>
            </form>
            </div>

        </div>

        <?php

            function cleanInput($data) {
                $data = trim($data);
                $data = stripslashes($data);
                $data = htmlspecialchars($data);

                return $data;
            }

            function checkIfValid($connection, $user, $pass) {
                $searchForUser = mysqli_query($connection, "SELECT * FROM accountDetails WHERE username = '". cleanInput($user) ."'");
                if (!$searchForUser) return false;

                $data = mysqli_fetch_array($searchForUser);
                if (!empty($data)) {
                    if ($data['password'] == cleanInput($pass)) {
                        $_SESSION['username'] = $data['username'];
                        $_SESSION['accountID'] = $data['accountID'];
                        $_SESSION['accountName'] = $data['accountName'];
                        $_SESSION['classification'] = $data['classification'];

                        return true;
                    }
                }
                return false;
            }

            if (isset($_POST['b1'])) {
                $user = $_POST['user'];
                $pass = $_POST['pass'];

                if (checkIfValid($sqlconnect, $user, $pass) && !empty($user) && !empty($pass)) header('Location: dts.php');
                else echo "<div class = 'error' style='text-align: center'>Incorrect username or password.</div>";
                die();
            }
        ?>
    </body>
</html>