115 lines
3.7 KiB
PHP
115 lines
3.7 KiB
PHP
<?php
|
|
session_start();
|
|
|
|
// initializing variables
|
|
$username = "";
|
|
$email = "";
|
|
$errors = array();
|
|
|
|
// connect to the database
|
|
$db = mysqli_connect('', '', '', '');
|
|
mysqli_set_charset($db, "utf8");
|
|
|
|
// REGISTER USER
|
|
if (isset($_POST['reg_user'])) {
|
|
// receive all input values from the form
|
|
$username = mysqli_real_escape_string($db, $_POST['username']);
|
|
$email = mysqli_real_escape_string($db, $_POST['email']);
|
|
$password_1 = mysqli_real_escape_string($db, $_POST['password_1']);
|
|
$password_2 = mysqli_real_escape_string($db, $_POST['password_2']);
|
|
|
|
// form validation: ensure that the form is correctly filled ...
|
|
// by adding (array_push()) corresponding error unto $errors array
|
|
if (empty($username)) { array_push($errors, "Benutzername wird benötigt"); }
|
|
if (empty($email)) { array_push($errors, "email-Adresse wird benötigt"); }
|
|
if (empty($password_1)) { array_push($errors, "Passwort wird benötigt"); }
|
|
if ($password_1 != $password_2) {
|
|
array_push($errors, "Die Passwörter stimmen nicht überein");
|
|
}
|
|
|
|
// first check the database to make sure
|
|
// a user does not already exist with the same username and/or email
|
|
$user_check_query = "SELECT * FROM repair_users WHERE username='$username' OR email='$email' LIMIT 1";
|
|
$result = mysqli_query($db, $user_check_query);
|
|
$user = mysqli_fetch_assoc($result);
|
|
|
|
if ($user) { // if user exists
|
|
if ($user['username'] === $username) {
|
|
array_push($errors, "Benutzername ist bereits vorhanden");
|
|
}
|
|
|
|
if ($user['email'] === $email) {
|
|
array_push($errors, "eMail-Adresse ist bereits vorhanden.");
|
|
}
|
|
}
|
|
|
|
// Finally, register user if there are no errors in the form
|
|
if (count($errors) == 0) {
|
|
$password = md5($password_1);//encrypt the password before saving in the database
|
|
|
|
$query = "INSERT INTO repair_users (username, email, password)
|
|
VALUES('$username', '$email', '$password')";
|
|
mysqli_query($db, $query);
|
|
$_SESSION['username'] = $username;
|
|
$_SESSION['success'] = "Sie sind nun eingeloggt.";
|
|
header('location: index.php');
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
// LOGIN USER
|
|
if (isset($_POST['login_user'])) {
|
|
$username = mysqli_real_escape_string($db, $_POST['username']);
|
|
$password = mysqli_real_escape_string($db, $_POST['password']);
|
|
|
|
if (empty($username)) {
|
|
array_push($errors, "Benutzername wird benötigt");
|
|
}
|
|
if (empty($password)) {
|
|
array_push($errors, "Passwort wird benötigt");
|
|
}
|
|
|
|
if (count($errors) == 0) {
|
|
$password = md5($password);
|
|
$query = "SELECT * FROM repair_users WHERE username='$username' AND password='$password'";
|
|
$results = mysqli_query($db, $query);
|
|
if (mysqli_num_rows($results) == 1) {
|
|
$_SESSION['username'] = $username;
|
|
$_SESSION['success'] = "Sie sind nun eingeloggt.";
|
|
header('location: index.php');
|
|
}else {
|
|
array_push($errors, "Falsche Kombination aus Benutzername und Passwort");
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
// MAKE ENTRY
|
|
|
|
if (isset($_POST['make_entry'])) {
|
|
$does = mysqli_real_escape_string($db, $_POST['does']);
|
|
$wants = mysqli_real_escape_string($db, $_POST['wants']);
|
|
if (empty($does)) { array_push($errors, "Angebot wird benötigt"); }
|
|
if (!isset($_SESSION['username'])){ array_push($errors, "Nicht eingeloggt"); }
|
|
if (count($errors) == 0) {
|
|
$username = $_SESSION['username'];
|
|
$user_check_query = "SELECT * FROM repair_users WHERE username='$username' LIMIT 1";
|
|
$result = mysqli_query($db, $user_check_query);
|
|
$user = mysqli_fetch_assoc($result);
|
|
$userID = $user['id'];
|
|
$thisdate = date('Y-m-d H:i:s');
|
|
$query = "INSERT INTO repair_entries (user, date, does, wants)
|
|
VALUES('$userID', '$thisdate', '$does', '$wants')";
|
|
mysqli_query($db, $query);
|
|
$_SESSION['success'] = "Eintrag wurde erstellt.";
|
|
header('location: index.php');
|
|
}
|
|
}
|
|
|
|
// GET ENTRIES
|
|
|
|
|
|
?>
|