From b8913a2b52554c98e67785e40bb954303bafd77d Mon Sep 17 00:00:00 2001
From: Horus3
Date: Sun, 23 Feb 2014 14:23:40 +0100
Subject: index
---
www/index.php | 98 ++++++++++++++++++++++++++++++++++-------------------------
1 file changed, 57 insertions(+), 41 deletions(-)
(limited to 'www/index.php')
diff --git a/www/index.php b/www/index.php
index b05b565..726b1eb 100644
--- a/www/index.php
+++ b/www/index.php
@@ -2,17 +2,64 @@
session_start();
-echo $_GET[name];
-echo $_GET[folder];
+require_once("functions.php");
-if($_SESSION["login"] && $_GET["name"] != $_SESSION["username"]){
- header("Refresh: 0; /$_SESSION[username]");
- exit;
+if(empty($_GET)){
+ if($_SESSION["login"]){
+ header("Refresh: 0; /$_SESSION[username]");
+ exit;
+ } else {
+ header("Refresh: 0; /login");
+ exit;
+ }
+} else {
+
+ $db = new SQLite3("../database/sqlite.db");
+ $name = SQLite3::escapeString("$_GET[name]");
+
+ if(empty($_GET["name"])){
+ switch($_GET["task"]){
+ case("login"):
+ login();
+ break;
+ case("logout"):
+ logout();
+ break;
+ case("invite"):
+ invite();
+ break;
+ case("register"):
+ register();
+ break;
+ case("download"):
+ register();
+ break;
+ case("user"):
+ user();
+ break;
+ default:
+ 404();
+ break;
+ }
+ } else {
+ $name_id_db = $db->query("SELECT id FROM user WHERE name='$name';");
+ $name_id_ar = $name_id_db->fetchArray(SQLITE3_NUM);
+
+ if(empty($name_id_ar)){
+ if($_SESSION["login"]){
+ $_GET["folder"] = "" . $_GET["name"] . "" . $_GET["folder"] . "";
+ select();
+ } else {
+ 404();
+ }
+ } else {
+ select();
+ }
+ }
}
-echo "
Currently loged in as: ";
-echo $_SESSION["username"];
+echo "loged in as: " . $_SESSION["username"];
$safe_name=SQLite3::escapeString("$_SESSION[username]");
@@ -24,41 +71,7 @@ $safe_name=SQLite3::escapeString("$_SESSION[username]");
echo "
";
echo "You have currently $invite invites.";
-echo "
";
-
-if(empty($_GET)){
- if($_SESSION[login]){
- header("Refresh: 0; $_SESSION[username]");
- } else {
-
- header("Refresh: 0; /login");
- }
-} else {
-
- #print_r($_GET);
- #$ar =array($_GET);
- #echo "
";
- #echo $ar[0];
- #echo "
";
-
- $i = 0;
- foreach ($_GET as $name => $value) { //value leer?
- $args[$i] = $name;
-// echo 'Name: ' . $name . ' Value: ' . $value . '
';
- $i++;
- }
-
- $length = count($args);
- for ($i=0;$i<$length;$i++){
- echo "$args[$i]
";
- }
-
- echo "
Ende";
- #header("Refresh: 0; /login");
-
-}
-?>