From a3094caeb564821870870d57efb4a4fc3fd659e7 Mon Sep 17 00:00:00 2001
From: Mateja <mail@matejamaric.com>
Date: Sun, 4 Oct 2020 00:16:49 +0200
Subject: A whole lot of shaking going on...

---
 login.php | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 login.php

(limited to 'login.php')

diff --git a/login.php b/login.php
new file mode 100644
index 0000000..6d51326
--- /dev/null
+++ b/login.php
@@ -0,0 +1,32 @@
+<?php
+session_start();
+
+# IS LOGIN LEGITIMATE?
+if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['email']) && isset($_POST['password'])) {
+	# DB CONNECT
+	try {
+		$user = "yota_user";
+		$password = "gahdeer6shai9hogai2sai4quuaj1eVu";
+		$database = "yota_call_db";
+
+		$conn = new PDO("mysql:host=localhost;dbname=$database", $user, $password);
+		$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+
+		$stmt = $conn->prepare("SELECT * FROM admins WHERE email=:email");
+		$stmt->bindParam(':email', $_POST['email']);
+		$stmt->execute();
+		$row = $stmt->fetch();
+
+		if (password_verify($_POST['password'], $row['password'])) {
+			$_SESSION['admin'] = true;
+		} else {
+			$_SESSION['admin'] = false;
+		}
+	} catch (PDOException $e) {
+			die("Error!: " . $e->getMessage());
+	}
+	$stmt=null;
+	$conn=null;
+}
+
+header("Location: admin.php");
-- 
cgit v1.2.3