$data['error'] = "Login Failed - Account not active";
$this->logger->info("Login Failed - Account status: " . $status);
}
if (!$pwdCorrect) {
$data['error'] = "Login Failed - Wrong Password";
$this->logger->info("Login Failed - Wrong password");
}
return $response->withHeader('Content-Type', 'application/json')->write(json_encode($data));
}
$accountType = get_account_type_from_email($this, $email);
if ($accountType == "user") {
$query = "SELECT major, interests FROM accounts INNER JOIN users ON accounts.id=users.account_id WHERE email=?";
$SQLparams = array($email);
$link = mysqli_connect(HOST, USER, PASSWORD, DATABASE);
$result = mysqli_prepared_query($this, $link, $query, "s", $SQLparams);
mysqli_close($link);
$major = $result[0]['major'];
//protection again extra db matches
$interests = $result[0]['interests'];
$data['major'] = $major;
$data['interests'] = $interests;
}
$this->logger->info("Login Successful: " . $email);
$data['login'] = True;
$data['accountType'] = $accountType;
$data['token'] = get_session_key_from_email($this, $email);
$data['name'] = $name;
$data['status'] = $status;
//var_dump($data);
return $response->withJson($data);
});
return $this->renderer->render($response, 'html.php', array_merge($params, $args));
});
$app->post('/login', function ($request, $response, $args) {
$params = $request->getParsedBody();
$email = $params["email"];
$password = $params["password"];
$result = login($this, $email, $password);
$isActive = $result["isActive"];
$pwdCorrect = $result["pwdCorrect"];
$name = $result["name"];
if ($isActive && $pwdCorrect) {
$role = get_account_type_from_email($this, $email);
$_SESSION["email"] = $email;
$_SESSION["name"] = $name;
$_SESSION["role"] = $role;
$_SESSION['token'] = get_session_key_from_email($this, $email);
if ($role == "user") {
$profile = getUserProfile($this, $email);
$_SESSION["major"] = $profile["major"];
return $response->withStatus(303)->withHeader('Location', '/recommendation');
} elseif ($role == "admin") {
return $response->withStatus(303)->withHeader('Location', '/admin');
}
}
if (!$isActive && $pwdCorrect) {
$error = "Account is disabled";
} else {
$error = "Username or Password Incorrect";
}
$url = buildInterstitialURL("Back to Login", "/", $error);
return $response->withStatus(303)->withHeader('Location', $url);
