diff options
Diffstat (limited to 'www/index.php')
| -rw-r--r-- | www/index.php | 98 |
1 files changed, 57 insertions, 41 deletions
diff --git a/www/index.php b/www/index.php index b05b565..726b1eb 100644 --- a/www/index.php +++ b/www/index.php @@ -2,17 +2,64 @@ session_start(); -echo $_GET[name]; -echo $_GET[folder]; +require_once("functions.php"); -if($_SESSION["login"] && $_GET["name"] != $_SESSION["username"]){ - header("Refresh: 0; /$_SESSION[username]"); - exit; +if(empty($_GET)){ + if($_SESSION["login"]){ + header("Refresh: 0; /$_SESSION[username]"); + exit; + } else { + header("Refresh: 0; /login"); + exit; + } +} else { + + $db = new SQLite3("../database/sqlite.db"); + $name = SQLite3::escapeString("$_GET[name]"); + + if(empty($_GET["name"])){ + switch($_GET["task"]){ + case("login"): + login(); + break; + case("logout"): + logout(); + break; + case("invite"): + invite(); + break; + case("register"): + register(); + break; + case("download"): + register(); + break; + case("user"): + user(); + break; + default: + 404(); + break; + } + } else { + $name_id_db = $db->query("SELECT id FROM user WHERE name='$name';"); + $name_id_ar = $name_id_db->fetchArray(SQLITE3_NUM); + + if(empty($name_id_ar)){ + if($_SESSION["login"]){ + $_GET["folder"] = "" . $_GET["name"] . "" . $_GET["folder"] . ""; + select(); + } else { + 404(); + } + } else { + select(); + } + } } -echo "<br><br>Currently loged in as: "; -echo $_SESSION["username"]; +echo "loged in as: " . $_SESSION["username"]; $safe_name=SQLite3::escapeString("$_SESSION[username]"); @@ -24,41 +71,7 @@ $safe_name=SQLite3::escapeString("$_SESSION[username]"); echo "<br><br>"; echo "You have currently $invite invites."; -echo "<br><br>"; - -if(empty($_GET)){ - if($_SESSION[login]){ - header("Refresh: 0; $_SESSION[username]"); - } else { - - header("Refresh: 0; /login"); - } -} else { - - #print_r($_GET); - #$ar =array($_GET); - #echo "<br> "; - #echo $ar[0]; - #echo "<br> "; - - $i = 0; - foreach ($_GET as $name => $value) { //value leer? - $args[$i] = $name; -// echo 'Name: ' . $name . ' Value: ' . $value . '<br />'; - $i++; - } - - $length = count($args); - for ($i=0;$i<$length;$i++){ - echo "$args[$i] <br>"; - } - - echo "<br><br>Ende"; - #header("Refresh: 0; /login"); - -} -?> <form method="post" action="testreg.php"> <p>Name: <input type="text" name="name"></p> <p>pswd: <input type="text" name="pswd"></p> @@ -67,3 +80,6 @@ if(empty($_GET)){ <p>email: <input type="text" name="email"></p> <p><input type="submit"></p> </form> + +*/ +?> |
