From d0601a55010cd9fe2f2587ce157ce059e5da732e Mon Sep 17 00:00:00 2001
From: Star Rauchenberger <fefferburbia@gmail.com>
Date: Sat, 21 Feb 2009 18:05:42 -0500
Subject: Started admin panel

---
 admin/login.php | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 admin/login.php

(limited to 'admin/login.php')

diff --git a/admin/login.php b/admin/login.php
new file mode 100644
index 0000000..f938664
--- /dev/null
+++ b/admin/login.php
@@ -0,0 +1,30 @@
+<?php
+
+if (!isset($_GET['submit']))
+{
+
+?>
+<FORM ACTION="/admin/login.php?submit=" METHOD="POST">
+Username: <INPUT TYPE="text" NAME="user"><BR>
+Password: <INPUT TYPE="password" NAME="pass"><BR>
+<INPUT TYPE="submit"></FORM>
+<?php
+
+} else {
+	$getconfig = "SELECT * FROM config WHERE name = \"username\" OR name = \"password\" ORDER BY name DESC";
+	$getconfig2 = mysql_query($getconfig) or die($getconfig);
+	$username = mysql_fetch_array($getconfig2);
+	$password = mysql_fetch_array($getconfig2);
+
+	if (($username['value'] == $_POST['user']) && ($password['value'] == md5($_POST['pass'])))
+	{
+		$_SESSION['username'] = $_POST['user'];
+
+		header('Location: /admin/');
+		exit;
+	} else {
+?><H2>Incorrect login</H2><?php
+	}
+}
+
+?>
-- 
cgit 1.4.1