Butforce protection, now banns malicious user.

1 files changed, 15 insertions, 3 deletions

diff --git a/www/index.php b/www/index.php
index d7adf38..be63506 100755
--- a/www/index.php
+++ b/www/index.php
@@ -14,8 +14,16 @@ if(!isset($_SESSION["banned"])){
 }
 
 if($_SESSION["banned"]){
-	echo "You are banned.";
-	exit;
+	if(check_if_banned($db)){
+		$_SESSION["banned"] = false;
+	} else {
+		echo "You are banned. ;_;";
+		exit;
+	}
+}
+
+if(!isset($_SESSION["login_attempts"])){
+	$_SESSION["login_attempts"] = 6;
 }
 
 if(empty($_GET)){
@@ -40,8 +48,12 @@ if(empty($_GET)){
 				if($_SERVER['REQUEST_METHOD'] == 'POST'){
 					$var = login($db);
 					if($var == LOGIN_SUCCESSFULL){
+						$_SESSION["login_attempts"] = 6;
 						header("Refresh: 0; ".$scheme.$_SERVER["HTTP_HOST"]."/".$_SESSION["username"]);
-						//account($db);
+					} elseif ($var == LOGIN_PASSWORD){
+						brutforce_protection($db);
+						print_login($var);
+
 					} else {
 						print_login($var);
 					}