1 files changed, 33 insertions, 0 deletions
diff --git a/intern.gospeladlershof.de/code/login.php b/intern.gospeladlershof.de/code/login.php
new file mode 100644
index 0000000..efe259d
--- /dev/null
+++ b/intern.gospeladlershof.de/code/login.php
@@ -0,0 +1,33 @@
+<?php
+
+define("LOGIN_SITE", true);
+require_once __DIR__ . '/session.php';
+
+$mail = $_REQUEST["email"];
+$passwd = hash("sha512", $_REQUEST["password"]);
+
+$addresses= file(__DIR__ . "/../../intern/chor_list_member.txt", FILE_IGNORE_NEW_LINES);
+
+if ( "2397be3187f0ab864802fbe2b6c3207a01328988d524973d4eeaa48928410a2588263882e37e68363691fd8d7c3c83e8ebe46166bee13404ae61484c13b55e1f" === $passwd ||
+	"319e789e0fa1867bb08b197b306cc48aa0a109511f5e36dbdd1ed642cda8b7f222b0b6a31a43d2302d17562734d40eeb1f85cb99b4bf3101b3c7cef490d89ed2" === $passwd ) {
+
+	foreach($addresses as $a) {
+		if ( strtolower($mail) === strtolower($a) ) {
+			$_SESSION["login"] = true;
+			$_SESSION["success"] = "Erfolgreich eingeloggt.";
+
+			$_SESSION["dontdisplaydeploybutton"] = 1;
+
+			header($_SERVER["SERVER_PROTOCOL"] . " 302 Redirect");
+			header("Location: /");
+
+			exit;
+		}
+	}
+}
+
+$_SESSION["login"] = false;
+$_SESSION["error"] = "E-Mail oder Passwort stimmmen nicht überein.";
+
+header($_SERVER["SERVER_PROTOCOL"] . " 302 Redirect");
+header("Location: /login.php");