function nav_section() { ?> <!-- navbar --> <nav class="navbar navbar-fixed-top opensans"> <div class="container-fluid"> <!-- navbar header with optional button --> <div class="navbar-header"> <button type="button" class="navbar-toggle" data-toggle="collapse" data-target="#navbar"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="navbar-brand opensans" href="index.php"><span style="display: inline">Theta Tau</span><img class="home-button" src="../images/tht-coat-of-arms.png"></a> </div> <!-- end header --> <!-- standard nav --> <div class="collapse navbar-collapse" id="navbar"> <ul class="nav navbar-nav opensans"> <li><a href="rush.php">Rush</a></li> <li><a href="members.php">Members</a></li> <!--<li><a href="photogallery.php">Photo Gallery</a></li>--> <?php if (tokenauthservice()) { ?> <li><a href="logout.php">Logout</a></li> <?php } else { ?> <li><a href="login.php">Login</a></li> <?php } ?> </ul> </div> <!-- end standard nav --> </div> </nav> <!-- End navbar --> <?php }
<?php include "php/templates/boilerplate.php"; if (!tokenauthservice()) { // handle unauthenticated header("Location: login.php"); die; } ?> <!DOCTYPE html> <html> <?php head_section(array(), array()); ?> <body> <?php nav_section(); ?> <div class="container"> <div class="row"> <div class="col-sm-12"> <h1 class="opensans"><!--INSERT NAME OF USER HERE--></h1> </div> </div> </div> <?php footer_section(); ?> </body> </html>
<?php include 'php/services/login-service.php'; include 'php/services/tokenauth-service.php'; // already logged in and token is set. if (isset($_COOKIE['token'])) { $auth = tokenauthservice(); if ($auth) { header("Location: members.php"); } } $login_failed = false; // post request - logging in if ($_SERVER['REQUEST_METHOD'] === 'POST') { $userid = $_REQUEST['userid']; $pw = $_REQUEST['password']; $auth = loginservice($userid, $pw); // authenticates and then sets token and other important info if ($auth) { header("Location: members.php"); } else { $login_failed = true; } // couldn't authenticate } // we know it's a GET REQUEST include "php/templates/boilerplate.php"; // saves some overhead including here ?>