session_start();
if (isset($_SESSION["user_loggedin"])) {
if ($_SESSION["user_loggedin"]) {
$loggedin = true;
} else {
$loggedin = false;
}
}
if (isset($_REQUEST["action"])) {
error_log("action set: " . $_REQUEST["action"]);
switch ($_REQUEST["action"]) {
case "actuallygettoken":
$otkid = $_REQUEST["otkid"];
$username = $_REQUEST["username"];
error_log("requesting otk, {$otk}");
$otk_img = $myAC->getOtkPng($username, $otkid);
header("Content-type: image/png");
echo $otk_img;
exit(0);
break;
case "login":
error_log("being login");
$username = $_REQUEST["username"];
$token = $_REQUEST["tokencode"];
if ($myAC->authUserToken($username, $token)) {
$_SESSION["user_loggedin"] = true;
$_SESSION["username"] = $username;
header("Location: index.php");
} else {
error_log("login failed, {$username}, {$token}");
header("Location: index.php?error=" . urlencode("Login Failed"));
