sessions

milosnowcat · Sep 14, 2022 · 23dc276 · 23dc276
1 parent af6db6e
commit 23dc276
Show file tree

Hide file tree

Showing 5 changed files with 30 additions and 59 deletions.
diff --git a/index.php b/index.php
@@ -68,7 +68,9 @@
     <script src="https://www.rahcode.com/assets/js/main.js"></script>
 
     <?php
-        if (isset($_COOKIE['user'])) {
+        session_start();
+
+        if (isset($_SESSION['user'])) {
             header('Location: inventory.php');
         }
     ?>

diff --git a/inventory.php b/inventory.php
@@ -1,7 +1,5 @@
 <?php
 include('session.php');
-
-if($start == 1 || $start == 2 || $start == 3){
 ?>
 
 <!DOCTYPE html>
@@ -315,7 +313,4 @@ class="button button--flex button--small button--link services__button"
 </body>
 </html>
 <?php
-}else{
-
-}
 ?>
diff --git a/login.php b/login.php
@@ -1,28 +1,37 @@
 <?php
 include('conn.php');
+include('superuser.php');
+include('session.php');
 
 $user = $_POST["txtuser"];
 $pass = $_POST["txtpass"];
 
-$query = mysqli_query($conn,"SELECT `user`, `pass` FROM `users` WHERE user='$user' AND pass='$pass'");
+$query = mysqli_query($conn,"SELECT * FROM `users` WHERE user='$user' AND pass='$pass'");
 $nr = mysqli_num_rows($query);
+$row=mysqli_fetch_array($query);
 
 if($nr == 1)
 {
-
-    $cookie_name = "user";
-    $cookie_value = $user;
-    setcookie($cookie_name, $cookie_value, time() + (86400), "/");
-
-    $cookie_name = "pass";
-    $cookie_value = $pass;
-    setcookie($cookie_name, $cookie_value, time() + (86400), "/");
+    $_SESSION["start"] = 3;
+
+    session_start();
+
+    $_SESSION["user"]=$user;
+    $_SESSION["pass"]=$pass;
+
+    if ($row['admin'] == true){
+        $_SESSION["start"] = 2;
+
+        if ($row['id'] == $superuser){
+            $_SESSION["start"] = 1;
+        }
+    }
 
     date_default_timezone_set("America/Mexico_City");
     $currentDate = date('Y-m-d');
 
     mysqli_query($conn,"UPDATE `users` SET `date`='$currentDate' WHERE user='$user'");
-    
+
 	header("Location: inventory.php");
 }
 else if ($nr == 0) 

diff --git a/logout.php b/logout.php
@@ -1,11 +1,7 @@
 <?php
-    $cookie_name = "user";
-    $cookie_value = '';
-    setcookie($cookie_name, $cookie_value, time() + (86400), "/");
-
-    $cookie_name = "pass";
-    $cookie_value = '';
-    setcookie($cookie_name, $cookie_value, time() + (86400), "/");
+    session_start();
+
+    session_unset();
 
     echo "<script> alert('Good bye!');window.location= 'index.php' </script>";
 ?>
diff --git a/session.php b/session.php
@@ -2,43 +2,12 @@
 include('conn.php');
 include('superuser.php');
 
-$start = 0;
+session_start();
 
-if(!isset($_COOKIE['user']) || !isset($_COOKIE['pass']) || ($_COOKIE['user']=='') || ($_COOKIE['pass']=='')){
+if(!isset($_SESSION['user']) || !isset($_SESSION['pass'])){
     header("Location: index.php");
-  }
-  else{
-    $user = $_COOKIE["user"];
-    $pass = $_COOKIE["pass"];
-
-    $query = mysqli_query($conn,"SELECT `user`, `pass` FROM `users` WHERE user='$user' AND pass='$pass'");
-    $nr = mysqli_num_rows($query);
-
-
-    if ($nr == 1){
-        $start = 3;
-
-        $query2 = mysqli_query($conn,"SELECT `id`, `admin` FROM `users` WHERE user = '$user'");
-        $row=mysqli_fetch_array($query2);
-
-        if ($row['admin'] == true){
-            $start = 2;
-
-            if ($row['id'] == $superuser){
-                $start = 1;
-            }
-        }
-    }
-    else if ($nr == 0){
-        $cookie_name = "user";
-        $cookie_value = '';
-        setcookie($cookie_name, $cookie_value, time() + (86400), "/");
-
-        $cookie_name = "pass";
-        $cookie_value = '';
-        setcookie($cookie_name, $cookie_value, time() + (86400), "/");
-
-        echo "<script> alert('Please login first');window.location= 'index.php' </script>";
-    }
+} else {
+    $user=$_SESSION['user'];
+    $start=$_SESSION["start"];
 }
 ?>