X-Git-Url: http://git.shiar.nl/minimedit.git/blobdiff_plain/39cb639d9e5a8cc13319ddf590569fd3f0c68e3d..6130d2b3fa75b7d350c3eb814b47fead3c0fcce6:/login.php

diff --git a/login.php b/login.php
index c9a60e3..5287678 100644
--- a/login.php
+++ b/login.php
@@ -1,25 +1,59 @@
 <?php
-if (isset($_POST['login'])) {
-	if ($user = login($_POST['login'], $_POST['pass'])) {
-		setcookie('login', $user['auth'], 0, '/');
+$message = NULL;
 
-		ob_clean();
-		$target = ltrim(@$_GET['goto'], '/');
-		header("Location: /$target");
-		http_response_code(302);
-		exit;
+if (isset($_POST['mail'])) {
+	$input = trim($_POST['mail']);
+	$inputq = sprintf('<em>%s</em>', $input);
+	try {
+		require_once 'login/mailpass.inc.php';
+		if ( $found = mailtoken($input) ) {
+			$message = "Er is een e-mail verstuurd naar $inputq.";
+		}
+		else {
+			$message = "E-mailadres $inputq is nergens ingesteld.";
+		}
+	}
+	catch (Exception $e) {
+		$message = "E-mail kon niet verstuurd worden."
+			. " Probeer het later nog eens of neem contact op.";
+	}
+}
+elseif (isset($_POST['login'])) {
+	if ($User = login($_POST['login'], $_POST['pass'])) {
+		login_setcookie();
+	}
+	else {
+		$message = 'Ongeldige gebruikersnaam of wachtwoord.';
 	}
-
-	echo '<p class="warn">Ongeldige gebruikersnaam of wachtwoord.</p>'."\n\n";
 }
-elseif (!empty($User)) {
+elseif (isset($_GET['logout'])) {
 	setcookie('login', '', time(), '/'); # expire immediately
-	echo '<p class="warn">Uitgelogd.</p>'."\n\n";
+	$User = NULL;
+	$message = "Je bent uitgelogd. Graag tot ziens!";
 }
 
-?>
-<form action="" method="post">
-	<input id="login" name="login" placeholder="Huisnummer" />
-	<input id="pass" name="pass" type="password" value="" placeholder="Wachtwoord" />
-	<input type="submit" value="Log in" />
-</form>
+if (empty($User)) {
+	ob_clean();
+	require_once 'login/form.inc.php';
+	$part = ['warn' => $message];
+	print getoutput($part);
+	return TRUE;
+}
+
+if (isset($_GET['goto'])) {
+	ob_clean();
+	$target = ltrim($_GET['goto'], '/');
+	header("Location: /$target");
+	http_response_code(302);
+	exit;
+}
+
+$part = [
+	'user'  => $User['name'],
+];
+print getoutput($part);
+
+if (empty($Args) and !empty($User['admin'])) {
+	include_once 'login/admin.html';
+	include_once 'login/admin.php';
+}