| Newsgroups |
php.notes |
| Message-ID |
<[email protected]> |
<?php
$pseudo = '';
$password = '';
if (!empty($_COOKIE['pseudo'])) {
$pseudo = $_COOKIE['pseudo'];
}
if (!empty($_COOKIE['password'])) {
$password = $_COOKIE['password'];
}
?>
<!doctype html>
<html lang="fr">
<head>
<meta charset="utf-8">
<title>Formulaire persistant</title>
</head>
<body>
<form action="authentificate.php" method="post">
<div>
<label for="pseudo">Nom</label><br>
<input type="text" id="pseudo" name="pseudo" value="<?php echo htmlentities($pseudo); ?>" required>
</div>
<div>
<label for="password">Mot de passe</label><br>
<input type="password" id="password" name="password" value="<?php echo htmlentities($password); ?>" required>
<?php if (!empty($_GET['retry'])): ?>
<p style="color: red;">Nom ou mot de passe incorrect</p>
<?php endif; ?>
</div>
<div>
<button type="submit">Se connecter</button>
</div>
</form>
</body>
</html>
<?php
$pseudo = $_POST['pseudo'] ?? '';
$password = $_POST['password'] ?? '';
$users = array(
"jojo" => array("password" => "pass1", "status" => "administrator"),
"raoul" => array("password" => "pass2", "status" => "visitor"),
"roméo" => array("password" => "pass3", "status" => "customer"),
);
function authenticate(string $pseudo, string $password, array $users): bool {
if ($pseudo === '' || $password === '') {
return false;
}
if (!isset($users[$pseudo])) {
return false;
}
return $users[$pseudo]['password'] === $password;
}
if (!authenticate($pseudo, $password, $users)) {
header('Location: persistent_form.php?retry=1');
exit();
}
setcookie(name: "pseudo", value: $pseudo);
setcookie(name: "password", value: $password);
session_start();
$_SESSION['pseudo'] = $pseudo;
$_SESSION['status'] = $users[$pseudo]['status'];
header('Location: site.php');
?>
<?php
session_start();
$pseudo = $_SESSION['pseudo'] ?? 'Guest';
$status = $_SESSION['status'] ?? 'unknown';
if ($status === 'customer') {
echo htmlentities($pseudo);
echo "<br>";
echo "<br>";
echo "consulter, acheter";
} else if ($status === 'administrator') {
echo htmlentities($pseudo);
echo "<br>";
echo "<br>";
echo "consulter, acheter, administrer";
} else if ($status === 'visitor') {
echo htmlentities($pseudo);
echo "<br>";
echo "<br>";
echo "consulter";
} else {
echo "acces refuse";
}
?>
<pre>
<?php
$keys = array_keys($_POST);
foreach ($keys as $key) {
echo $key . ' : ' . $_POST[$key];
echo '<br>';
echo '<br>';
}
?>
</pre>
----
Server IP: 45.112.84.4
Probable Submitter: 80.90.5.137 (proxied: 2001:660:7220:385:193:52:103:33)
----
Manual Page -- https://php.net/manual/en/features.cookies.php
Edit -- https://main.php.net/note/edit/130550
Del: integrated -- https://main.php.net/note/delete/130550/integrated
Del: useless -- https://main.php.net/note/delete/130550/useless
Del: bad code -- https://main.php.net/note/delete/130550/bad+code
Del: spam -- https://main.php.net/note/delete/130550/spam
Del: non-english -- https://main.php.net/note/delete/130550/non-english
Del: in docs -- https://main.php.net/note/delete/130550/in+docs
Del: other reasons-- https://main.php.net/note/delete/130550
Reject -- https://main.php.net/note/reject/130550
Search -- https://main.php.net/manage/user-notes.php