Weblabor

Nagyon titkos oldal.

<?php
$data = array();
if (isset($_SESSION['message']))
{
 $data['message'] = $_SESSION['message'];
 unset($_SESSION['message']);
}
if (isset($_SESSION['formdata']['user']))
{
 $data['user'] = $_SESSION['formdata']['user'];
 unset($_SESSION['formdata']);
}

$content = renderTemplate("index", $data);

<?php

$login = false;
if (isset($_POST['user']) && isset($_POST['password']))
{
 $query = "SELECT * FROM company ";
 $query .= "WHERE (C_ID='".mysql_real_escape_string($_POST['user'])."'";  
 $query .= " AND PW='".mysql_real_escape_string($_POST['password'])."')"; ";
 $result = mysql_query($sql);  
 if (mysql_num_rows($result) !== 0)  
 {
  $login = true;
 }
}

if (!$login)
{
 $_SESSION['message'] = 'Belépés sikertelen.';
 $_SESSION['formdata'] = array();
 if (isset($_POST['user']))
 {
  $_SESSION['formdata']['user'] = $_POST['user'];
 }
 $_SESSION['C_ID'] = $_POST['user'];
 $_SESSION['belepett'] = true;
 header('Location: /');
} else {
 header('Location: /?page=secret');
}
$useTemplate = false;

<?php
if (isset($_SESSION['user']))
{
 $content = renderTemplate('secret');
} else {
 $_SESSION['message'] = "Az oldal megtekintéséhez belépés szükséges!";
 header("Location: /");
 $useTemplate = false;
}

<?php

function renderTemplate($name, $data = array())
{
 $file = dirname(__FILE__) . "/templates/" . $name . ".php";
 if (!preg_match(/^[a-zA-Z0-9]+$/, $name) || !file_exists($file))
 {
  return false;
 }
 extract($data);
 ob_start();
 include($file);
 $content = ob_get_contents();
 ob_end_clean();
 return $content;
}

function loadPage($name)
{
 $file = dirname(__FILE__) . "/pages/" . $name . ".php";
 if (!preg_match(/^[a-zA-Z0-9]+$/, $name) || !file_exists($file))
 {
  return false;
 }
 include($file);
 if (isset($content))
 {
  if (!isset($useTemplate) || !$useTemplate())
  {
   echo($content);
  } else {
   include(dirname(__FILE__) . "/template.php");
  }
 }
}

include "config.inc";
mysql_connect($dbhost,$dbuser,$dbpass);
mysql_select_db($dbname);

session_start();

if (!isset($_GET['page']))
{
 $_GET['page'] = "index";
}

loadPage($_GET['page']);