From bb6a08e5d6a1718f775650f51c13379c1eab88ab Mon Sep 17 00:00:00 2001
From: Jean Wasilewski <henyxia@live.fr>
Date: Sun, 9 Nov 2014 15:44:36 +0100
Subject: [PATCH] Added full creds authentication

---
 checkCreds.php | 25 +++++++++++++++++++++++++
 connect.php    | 10 ++++++++++
 2 files changed, 35 insertions(+), 0 deletions(-)
 create mode 100644 checkCreds.php

diff --git a/checkCreds.php b/checkCreds.php
new file mode 100644
index 0000000..79dd3f2
--- /dev/null
+++ b/checkCreds.php
@@ -0,0 +1,25 @@
+<?php
+
+if(!(isset($_GET["user"])&&isset($_GET["pass"])))
+	die("Nop");
+
+$link = mysql_connect(__MYSQL_HOSTNAME__, __MYSQL_USERNAME__, __MYSQL_PASSWORD__)
+	or die("Nop");
+
+if(!mysql_select_db('crep', $link))
+	die 'Nop';
+
+$requete = 'SELECT pk, admin FROM users WHERE username=\''.$_GET["user"].'\' AND password=\''.$_GET["password"].'\'';
+$resultat = mysql_query($requete);
+	
+if (!$resultat)
+	die("Nop");
+	
+if(row = mysql_fetch_assoc($resultat))
+	echo 'Yep';
+else
+	echo 'Nop';
+
+	
+mysql_close($link);
+?>
diff --git a/connect.php b/connect.php
index bf2bf13..b5a3058 100644
--- a/connect.php
+++ b/connect.php
@@ -46,5 +46,15 @@ $('#afficherMotDePasse')[0].addEventListener('mouseup', function()
 $('#validCreds')[0].addEventListener('click', function()
 {
 	$("#validCreds")[0].disabled=true;
+	var checkPath = "checkCreds.php?user=";
+	checkCreds += $("#Entrer_Identifiant_3")[0].value;
+	checkCreds += "&pass=";
+	checkCreds += Whirlpool($("#entrer_mot_de_passe_3")[0].value);
+	ret = file(checkCreds);
+	if(ret=="yep")
+		document.location.reload();
+	else
+		alert("Mauvais identifiants");
+	$("#validCreds")[0].disabled=false;
 });
 </script>
--
libgit2 0.21.2