quoije/web_lepainbleu.ca
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add login and functional password verification

Browse Source
This commit is contained in:
quoije
2022-02-27 20:19:58 -05:00
parent 6ea9b8bce3
commit 89ed03cb2e
2 changed files with 25 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/db.php
+3 -3
View File
@@ -1,9 +1,9 @@
<?php <?php
$servername = "127.0.0.1"; $servername = "127.0.0.1";
$username = "cafe"; $username = "root";
$password = "oof"; $password = "";
$dbname = "mmapi"; $dbname = "oof";
$conn = new mysqli($servername,$username ,$password,$dbname); $conn = new mysqli($servername,$username ,$password,$dbname);
api/yeet.php
+22 -13
View File
@@ -1,25 +1,34 @@
<?php <?php
//include 'db.php'; include 'db.php';
$uip = getUserIpAddr(); $uip = getUserIpAddr();
$dog = filter_var($_POST['dog'], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH); $dog = filter_var($_POST['dog'], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH);
$cat = filter_var($_POST['cat'], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH); $cat = filter_var($_POST['cat'], FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_HIGH);
$hash_cat = password_hash($cat, PASSWORD_DEFAULT); $hash_cat = password_hash($cat, PASSWORD_DEFAULT);
$verify_cat = password_verify($cat, $hash_cat); $user_sql = "SELECT user FROM users where user LIKE '". $dog ."'";
/* $user_sql = "SELECT user FROM users where user LIKE '". $dog ."'"; $pass_sql = "SELECT pass FROM users where user LIKE '". $dog ."'";
$pass_sql = "SELECT pass FROM users where pass LIKE '". $cat ."'";
$rus = mysqli_query($conn, $user_sql); $rus = mysqli_query($conn, $user_sql);
$rps = mysqli_query($conn, $pass_sql); */ $rps = mysqli_query($conn, $pass_sql);
if ($verify_cat) { if ($rus->num_rows > 0) {
echo json_encode(array('x'=>$hash_cat, 'ip'=>$uip)); echo "** found user **";
} while($row = $rps->fetch_assoc()) {
else { $oof = password_verify($cat, $row["pass"]);
echo json_encode(array('x'=>"will never happened, like never. this is not supposed to work", 'ip'=>$uip)); if ($oof)
} {
//json($dog,$hash_cat,$uip); jsonLogin("oof","moof","1234");
}
else
{
echo "***** nope";
}
}
} else {
echo "no result :(";
}
$conn->close();
function json($x, $y, $ip) function jsonLogin($x, $y, $ip)
{ {
header("Content-type: application/json"); header("Content-type: application/json");
echo json_encode(array('x'=>$x, 'y'=>$y, 'ip'=>$ip)); echo json_encode(array('x'=>$x, 'y'=>$y, 'ip'=>$ip));