X-Git-Url: http://git.shiar.nl/minimedit.git/blobdiff_plain/59d16d1daa1748a056efc2317510fd3d541b7144..880e7ccaecd3d018325be05e63770863502bcbae:/login.php

diff --git a/login.php b/login.php
index 35dc55e..714b5c5 100644
--- a/login.php
+++ b/login.php
@@ -1,18 +1,40 @@
 <?php
-require 'auth.inc.php';
+$message = NULL;
 
-if ($editable) {
-	http_response_code(307);
-	header('Location: /');
-	exit;
+if (isset($_POST['login'])) {
+	if ($User = login($_POST['login'], $_POST['pass'])) {
+		login_setcookie();
+	}
+	else {
+		$message = 'Ongeldige gebruikersnaam of wachtwoord.';
+	}
+}
+elseif (isset($_GET['logout'])) {
+	setcookie('login', '', time(), '/'); # expire immediately
+	$User = NULL;
+	$message = 'Uitgelogd.';
 }
 
-header('WWW-Authenticate: Basic realm=""');
-http_response_code(401);
+if (empty($User)) {
+	ob_clean();
+	require_once 'login.inc.php';
+	return TRUE;
+}
 
-// fallback page shown on authentication failure
-include 'head.inc.php';
-?>
-<h2>Inloggen mislukt</h2>
-<p>Geen geldige login voor sitebeheer.</p>
+if (isset($_GET['goto'])) {
+	ob_clean();
+	$target = ltrim($_GET['goto'], '/');
+	header("Location: /$target");
+	http_response_code(302);
+	exit;
+}
+
+$part = [
+	'user'  => $User['name'],
+];
+print getoutput($part);
 
+if (empty($Args) and !empty($User['admin'])) {
+	include_once 'admin/index.html';
+	include_once 'admin.php';
+}