Wallos v0.9

2023-10-05 22:39:37 +02:00
commit 63ce5b099a
166 changed files with 6337 additions and 0 deletions
@@ -0,0 +1,68 @@
+<?php
+    session_start();
+    if (isset($_SESSION['loggedin']) && $_SESSION['loggedin'] === true) {
+        $username = $_SESSION['username'];
+        $sql = "SELECT * FROM user WHERE username = :username";
+        $stmt = $db->prepare($sql);
+        $stmt->bindValue(':username', $username, SQLITE3_TEXT);
+        $result = $stmt->execute();
+        $userData = $result->fetchArray(SQLITE3_ASSOC);
+        if ($userData['avatar'] == "") {
+            $userData['avatar'] = "0";
+        }
+    } else {
+
+        if (isset($_COOKIE['wallos_login'])) {
+            $cookie = explode('|', $_COOKIE['wallos_login'], 2) ;
+            $username = $cookie[0];
+            $token = $cookie[1];
+
+            $sql = "SELECT * FROM user WHERE username = :username";
+            $stmt = $db->prepare($sql);
+            $stmt->bindValue(':username', $username, SQLITE3_TEXT);
+            $result = $stmt->execute();
+            
+            if ($result) {
+                $userData = $result->fetchArray(SQLITE3_ASSOC);
+                if (!isset($userData['id'])) {
+                    $db->close();
+                    header("Location: logout.php");
+                    exit();
+                }
+
+                if ($userData['avatar'] == "") {
+                    $userData['avatar'] = "0";
+                }
+                $userId = $userData['id'];
+                $main_currency = $userData['main_currency'];
+                $sql = "SELECT * FROM login_tokens WHERE user_id = ? AND token = ?";
+                $stmt = $db->prepare($sql);
+                $stmt->bindParam(1, $userId, SQLITE3_TEXT);
+                $stmt->bindParam(2, $token, SQLITE3_TEXT);
+                $result = $stmt->execute();
+                $row = $result->fetchArray(SQLITE3_ASSOC);
+
+                if ($row != false) {
+                    $_SESSION['username'] = $username;
+                    $_SESSION['token'] = $token;
+                    $_SESSION['loggedin'] = true;
+                    $_SESSION['main_currency'] = $main_currency;
+                } else {
+                    $db->close();
+                    header("Location: logout.php");
+                    exit();
+                }
+            } else {
+                $db->close();
+                header("Location: logout.php");
+                exit();
+            }
+
+            
+        } else {
+            $db->close();
+            header("Location: login.php");
+            exit();
+        }
+    }
+?>