122 lines
4.1 KiB
PHP
122 lines
4.1 KiB
PHP
<?php
|
|
#Datenbank Verbindung einbinden
|
|
require 'Connections/Connections.php';
|
|
#Session starten und Prüfen ob bereits eingeloggt wurde
|
|
session_name('wportal');
|
|
session_start();
|
|
if(isset($_SESSION["UserID"])){
|
|
header('Location: Bestellen.php');
|
|
}
|
|
$Datenschutz = './Datenschutz.php';
|
|
#Überprüfen ob user Login button gedrückt hat
|
|
if(isset($_POST['Login'])){
|
|
#Variablen umsetzen
|
|
$EM = $_POST['Email'];
|
|
$PW = $_POST['Password'];
|
|
#Prüfen ob login mit Mail oder Username stattfindet und wariablen setzen
|
|
if(filter_var($EM,FILTER_VALIDATE_EMAIL)){
|
|
$result = $con->query("SELECT * FROM user where Email='$EM' AND isactive=1");
|
|
$row = $result->fetch_array(MYSQLI_BOTH);
|
|
}else{
|
|
$result = $con->query("SELECT * FROM user where Username='$EM' AND isactive=1");
|
|
$row = $result->fetch_array(MYSQLI_BOTH);
|
|
};
|
|
|
|
#Password überprüfen
|
|
if(password_verify($PW, $row['Password'] )){
|
|
|
|
if($row['privacy_policy'] != 1){
|
|
print '<div class="DSGVO"><h1>Neue Datenschutzerklärung</h1>
|
|
<form action="" method="post" name="Datenschutz">
|
|
<div class="FormElement">
|
|
<input name="Email" type="text" required="required" class="TField" id="Email" placeholder="Email">
|
|
</div>
|
|
<div class="Datenschutz">
|
|
<input type="checkbox" required name="privacy" id="privacy" />
|
|
Ich stimme hiermit der neuen <a href='.$Datenschutz.' >Datenschutzerklärung</a> zu.
|
|
</div>
|
|
<div class="FormElement">
|
|
<input name="Datenschutz" type="submit" class="button" id="Datenschutz" Value="Zustimmen">
|
|
</div>
|
|
</form></div>';
|
|
|
|
}else{
|
|
|
|
#Session varialen deklarieren
|
|
$_SESSION["UserID"] = $row['UserID'];
|
|
$_SESSION["Fname"] = $row['Fname'];
|
|
$_SESSION["Lname"] = $row['Lname'];
|
|
$_SESSION["Email"] = $row['Email'];
|
|
$_SESSION["IsActive"] = $row['isactive'];
|
|
$_SESSION["Uname"] = $row['Username'];
|
|
$_SESSION["UserLevel"] = $row['UserLevel'];
|
|
#weiterleiten zum Bestell Bereich
|
|
header('Location: Bestellen.php');
|
|
}
|
|
|
|
}else{
|
|
#Login auf fehlgeschlagen setzen
|
|
$_SESSION["LogInFail"] = "Yes";
|
|
}
|
|
}
|
|
|
|
if(isset($_POST['Datenschutz'])){
|
|
#Variablen umsetzen
|
|
$EM = $_POST['Email'];
|
|
if(isset($_POST['privacy'])){
|
|
$privacy = 1;
|
|
}
|
|
#Prüfen ob login mit Mail oder Username stattfindet und wariablen setzen
|
|
if(filter_var($EM,FILTER_VALIDATE_EMAIL)){
|
|
$result = $con->query("Update user set privacy_policy = '$privacy' where Email='$EM' AND isactive=1");
|
|
}else{
|
|
$result = $con->query("Update user set privacy_policy = '$privacy' where Username='$EM' AND isactive=1");
|
|
}
|
|
}
|
|
|
|
#Header und menü einbinden
|
|
$webpagetitle = "Login";
|
|
include "Includes/Header.php";
|
|
include "Includes/Menu.php";
|
|
#html Content ausgeben
|
|
#Timestamp auslesen für Countdown
|
|
$timestamp = $con->query("Select timestamp from timestamp")->fetch_object()->timestamp;
|
|
?>
|
|
<div class="content">
|
|
<div class="Rahmen">
|
|
<div class="center">
|
|
<div class="Countdown">
|
|
<h2 id="c1"></h2>
|
|
<h4 id="c2">Cowntdown Abgelaufen</h4>
|
|
<p>...bis zum nächsten Meeting!</p>
|
|
<script type="text/javascript">
|
|
countdown("<?php echo $timestamp; ?>");
|
|
</script>
|
|
</div>
|
|
</div>
|
|
<div class="center">
|
|
<h2>Bitte Einloggen</h2>
|
|
<br/>
|
|
<form action="" method="post" name="Login">
|
|
<?php if(isset($_SESSION["LogInFail"])){ ?>
|
|
<div class="FormElement">Login Fehlgeschlagen. Bitte versuch es erneut. Vielleicht hast du deinen Account nicht aktiviert?</div>
|
|
<?php } ?>
|
|
<div class="FormElement">
|
|
<input name="Email" type="text" required="required" class="TField" id="Email" placeholder="Email">
|
|
</div>
|
|
<div class="FormElement">
|
|
<input name="Password" type="password" required="required" class="TField" id="Password" placeholder="Passwort">
|
|
</div>
|
|
<div class="FormElement">
|
|
<input name="Login" type="submit" class="button" id="Login" Value="Login">
|
|
</div>
|
|
</form>
|
|
<br /><p>Passwort vergessen? <a href="forgot_password.php">Zurücksetzen</a></p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<?php
|
|
#Footer einbinden
|
|
include "Includes/Footer.php";
|
|
?>
|