api/login.php

   1 <?php
   2 include 'functions.php';
   3 include 'server_info.php';
   4 session_issruning();
   5 if (isset($_POST['mail']) and isset($_POST['password'])){
   6     $conn=mysqli_connect($db_link,$db_user,$db_password,$db_name);
   7     $query=mysqli_query($conn,'SELECT mail_user,mail_password FROM mail');
   8     $cnt=mysqli_num_rows($query);
   9     $count=0;
  10     $selfUrl=$_SERVER['HTTP_HOST'].preg_replace('/api\/login.php/','',$_SERVER['PHP_SELF']);
  11     while ($i=mysqli_fetch_array($query,MYSQLI_ASSOC)){
  12         if($_POST['mail'].'@'.$selfUrl==$i['mail_user']){
  13             if (password_verify($_POST['password'],$i['mail_password'])){
  14                 echo json_encode('{password:200}');
  15                 $_SESSION['m_user']=$_POST['mail'].'@'.$selfUrl;
  16                 $_SESSION['m_password']=$_POST['password'];
  17                 header('Location: ../mailbox/mailb.php?info=<text>Succefully_Loged</text>');
  18             }
  19             else{
  20                 http_response_code(404);
  21                 echo json_encode('{password:404}');
  22                 header('Location: ../login.php?info=<text>The_user_or_password_was_incorrect</text>');
  23             }
  24         }
  25         elseif ($_POST['mail']==$i['mail_user']){
  26             if (password_verify($_POST['password'],$i['mail_password'])){
  27                 echo json_encode('{password:200}');
  28                 $_SESSION['m_user']=$_POST['mail'];
  29                 $_SESSION['m_password']=$_POST['password'];
  30                                 header('Location: ../mailbox/mailb.php?info=<text>Succefully_Loged</text>');
  31             }
  32             else{
  33                 http_response_code(404);
  34                 echo json_encode('{password:404}');
  35                 header('Location: ../login.php?info=<text>The_user_or_password_was_incorrect</text>');
  36             }
  37         }
  38         else{
  39             $count=$count+1;
  40             if ($count==$cnt){
  41                 http_response_code(500);
  42                 echo json_encode('{user: 500}');
  43                 break;
  44                 header('Location: ../login.php?info=<text>The_user_or_password_was_incorrect</text>');
  45             }
  46         }
  47     }
  48 }
  49 else{
  50     echo json_encode('{code: 400}');
  51 }
  52 ?>