From b8913a2b52554c98e67785e40bb954303bafd77d Mon Sep 17 00:00:00 2001 From: Horus3 Date: Sun, 23 Feb 2014 14:23:40 +0100 Subject: index --- www/index.php | 98 ++++++++++++++++++++++++++++++++++------------------------- 1 file changed, 57 insertions(+), 41 deletions(-) (limited to 'www/index.php') diff --git a/www/index.php b/www/index.php index b05b565..726b1eb 100644 --- a/www/index.php +++ b/www/index.php @@ -2,17 +2,64 @@ session_start(); -echo $_GET[name]; -echo $_GET[folder]; +require_once("functions.php"); -if($_SESSION["login"] && $_GET["name"] != $_SESSION["username"]){ - header("Refresh: 0; /$_SESSION[username]"); - exit; +if(empty($_GET)){ + if($_SESSION["login"]){ + header("Refresh: 0; /$_SESSION[username]"); + exit; + } else { + header("Refresh: 0; /login"); + exit; + } +} else { + + $db = new SQLite3("../database/sqlite.db"); + $name = SQLite3::escapeString("$_GET[name]"); + + if(empty($_GET["name"])){ + switch($_GET["task"]){ + case("login"): + login(); + break; + case("logout"): + logout(); + break; + case("invite"): + invite(); + break; + case("register"): + register(); + break; + case("download"): + register(); + break; + case("user"): + user(); + break; + default: + 404(); + break; + } + } else { + $name_id_db = $db->query("SELECT id FROM user WHERE name='$name';"); + $name_id_ar = $name_id_db->fetchArray(SQLITE3_NUM); + + if(empty($name_id_ar)){ + if($_SESSION["login"]){ + $_GET["folder"] = "" . $_GET["name"] . "" . $_GET["folder"] . ""; + select(); + } else { + 404(); + } + } else { + select(); + } + } } -echo "

Currently loged in as: "; -echo $_SESSION["username"]; +echo "loged in as: " . $_SESSION["username"]; $safe_name=SQLite3::escapeString("$_SESSION[username]"); @@ -24,41 +71,7 @@ $safe_name=SQLite3::escapeString("$_SESSION[username]"); echo "

"; echo "You have currently $invite invites."; -echo "

"; - -if(empty($_GET)){ - if($_SESSION[login]){ - header("Refresh: 0; $_SESSION[username]"); - } else { - - header("Refresh: 0; /login"); - } -} else { - - #print_r($_GET); - #$ar =array($_GET); - #echo "
"; - #echo $ar[0]; - #echo "
"; - - $i = 0; - foreach ($_GET as $name => $value) { //value leer? - $args[$i] = $name; -// echo 'Name: ' . $name . ' Value: ' . $value . '
'; - $i++; - } - - $length = count($args); - for ($i=0;$i<$length;$i++){ - echo "$args[$i]
"; - } - - echo "

Ende"; - #header("Refresh: 0; /login"); - -} -?>

Name:

pswd:

@@ -67,3 +80,6 @@ if(empty($_GET)){

email:

+ +*/ +?> -- cgit v1.2.3