diff --git a/CONTRIBUTORS.MD b/CONTRIBUTORS.MD
new file mode 100644
index 0000000..fe0deb1
--- /dev/null
+++ b/CONTRIBUTORS.MD
@@ -0,0 +1,22 @@
+# loginpagefoo
+## Authors
+- Lara Schradick
+- Miriam Schroth
+
+## License
+
+Written under AGPLv3.
+
+For more infos see [/LICENSE](/LICENSE)
+## External Sources
+### Stylesheets:
+- Bootstrap
+
+### Javascript:
+- Bootstrap
+
+### Database Design:
+- Thies Müller
+
+### PHP Code:
+- contributions from Thies Müller
diff --git a/FEATURES.MD b/FEATURES.MD
deleted file mode 100644
index f739020..0000000
--- a/FEATURES.MD
+++ /dev/null
@@ -1,17 +0,0 @@
-# FEATURES
-
-## Password Login
-
-## PHP Session
-
-## Logout
-
-## Forget Password
-
-## Password Complexibility Check
-
-## Admin Functions
-
-## Activate E-Mail
-
-## More to come
\ No newline at end of file
diff --git a/activatedarea.php b/activatedarea.php
index b73c10e..2dbe19b 100644
--- a/activatedarea.php
+++ b/activatedarea.php
@@ -24,9 +24,9 @@ if(isset($_GET['notimplemented'])) { //if "?notimplemented=1" is received, print
//some html links to other pages
?>
Change Profile Picture
+Some Feature
Change Description Some other Feature Back '.$url_activationcode.' ';
+/*
+this would be the prod implementation
+instead we just print the link and never ever use this in prod!
+mail($mailrcpt, $mailsubject, $text, $from); //sending the mail with the build-in mail function.
echo 'Link send. Going back to profile page. heres the admin world
';
+echo 'heres the admin world. poc of rights management
';
-echo 'User Admin Session Admin Admin Admin Back Admin Area
-heres the admin world
';
-echo 'GIVE TAKE Enter the username ";
- } else {
- $statement = $pdo->prepare("SELECT * FROM users WHERE username = :username");
- $result = $statement->execute(array('username' => $_POST['username']));
- $user = $statement->fetch();
-
- if($user === false) {
- $error = "no user found ";
- } else {
- echo $user['isadmin'];
- $showForm = false;
-
- }
- }
-}
-
-if($showForm):
-?>
-
-Search for Admin Rights!
-Please enter the username below.Back Admin Area
-heres the admin world
';
-
-$showForm = true;
-
-if(isset($_GET['user']) ) {
- if(!isset($_POST['username']) || empty($_POST['username'])) {
- $error = "Enter the username ";
- } else {
- $statement = $pdo->prepare("SELECT * FROM users WHERE username = :username");
- $result = $statement->execute(array('username' => $_POST['username']));
- $user = $statement->fetch();
-
- if($user === false) {
- $error = "no user found ";
- } else {
-
-
- //check if theres a code already
- $statement = $pdo->prepare("UPDATE users SET isadmin = '1' WHERE id = :userid");
- $result = $statement->execute(array('userid' => $user['id']));
-
-
- echo 'Successfully granted ';
- echo $user['username'];
- echo ' ADMIN rights.
';
- $showForm = false;
- }
- }
-}
-
-if($showForm):
-?>
-
-Give Admin Rights!
-Please enter the username below.Back Admin Area
-heres the admin world
';
-
-$showForm = true;
-
-if(isset($_GET['user']) ) {
- if(!isset($_POST['username']) || empty($_POST['username'])) {
- $error = "Enter the username ";
- } else {
- $statement = $pdo->prepare("SELECT * FROM users WHERE username = :username");
- $result = $statement->execute(array('username' => $_POST['username']));
- $user = $statement->fetch();
-
- if($user === false) {
- $error = "no user found ";
- } else {
-
-
- //check if theres a code already
- $statement = $pdo->prepare("UPDATE users SET isadmin = '0' WHERE id = :userid");
- $result = $statement->execute(array('userid' => $user['id']));
-
-
- echo 'Successfully took the ADMIN rights from ';
- echo $user['username'];
- echo '
';
- $showForm = false;
- }
- }
-}
-
-if($showForm):
-?>
-
-Give Admin Rights!
-Please enter the username below.Back Admin Area
-heres the admin world
';
-
-
-
-//create connection
-$connection = mysqli_connect($mysqlhost, $dbuser, $dbpass, $dbname);
-
-//test if connection failed
-if(mysqli_connect_errno()){
- die("connection failed: "
- . mysqli_connect_error()
- . " (" . mysqli_connect_errno()
- . ")");
-}
-
-//get results from database
-$result = mysqli_query($connection,"SELECT * FROM users");
-$all_property = array(); //declare an array for saving property
-
-//showing property
-echo '
- '; //initialize table tag
-while ($property = mysqli_fetch_field($result)) {
- echo '' . $property->name . ' '; //get field name for header
- array_push($all_property, $property->name); //save those to array
-}
-echo ' '; //end tr tag
-
-//showing all data
-while ($row = mysqli_fetch_array($result)) {
- echo "";
- foreach ($all_property as $item) {
- echo '' . $row[$item] . ' '; //get items using property value
- }
- echo ' ';
-}
-echo "
";
-
-echo 'Back Password needs to be more complex.Please implement at least 8 chars, upper & downer caser, one number & one special char. start now.somethings wrong (maybe wrong password or wrong user)
Change Password
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-*/
\ No newline at end of file
diff --git a/changeprofilepicture.php b/changeprofilepicture.php
deleted file mode 100644
index 1d09b9c..0000000
--- a/changeprofilepicture.php
+++ /dev/null
@@ -1,68 +0,0 @@
-
-
-
-Activated Area
-profile now.profile now.
-
-
Right now you need to upload the picture somewhere and input the URL here.
-
Please be aware that only the following filetypes will work!
-
jpg
-
gif
-
png
-
-
-
-
-
-
Back
-
-
login page. '.$url_passwordcode.' ';
$showForm = false;
}
}
diff --git a/forlaterpurposemaybe.html b/forlaterpurposemaybe.html
deleted file mode 100644
index dc78c39..0000000
--- a/forlaterpurposemaybe.html
+++ /dev/null
@@ -1,66 +0,0 @@
-
-
-
- Profile Page
-
-
-
- loginpagefoo
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
diff --git a/fullinstalldocker.sql b/fullinstalldocker.sql
index 75bfff6..b715b30 100644
--- a/fullinstalldocker.sql
+++ b/fullinstalldocker.sql
@@ -17,6 +17,5 @@ CREATE TABLE `users` (
`activated` VARCHAR(1) NOT NULL ,
`passwordcode` VARCHAR(255) NULL ,
`passwordcode_time` TIMESTAMP NULL ,
- `profilepicture` VARCHAR(255) NULL DEFAULT 'https://web.td00.de/woddle.gif' ,
PRIMARY KEY (`id`), UNIQUE (`email`), UNIQUE (`username`)
) ENGINE = InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci;
diff --git a/login.php b/login.php
index a85460e..65272aa 100644
--- a/login.php
+++ b/login.php
@@ -1,11 +1,5 @@
successfull. go to: start page somethings wrong (maybe wrong password or wrong user)
login
diff --git a/register.php b/register.php
index 3a7aa6e..bdbb746 100644
--- a/register.php
+++ b/register.php
@@ -1,12 +1,7 @@
-
Crappy Login POC
+
Login POC
- Git
+
0){ //if the user is logged in (has a userid above 0) then print this:
echo 'Hi '.$_SESSION['username'].' ';
@@ -175,22 +175,19 @@ if ($isadmin == 1) { //if admin rights are granted, print a admin area button