66 lines
2.1 KiB
PHP
66 lines
2.1 KiB
PHP
<?php
|
||
error_reporting(E_ALL);
|
||
ini_set('display_errors', 0);
|
||
ini_set('display_startup_errors', 0);
|
||
header('Content-Type: application/json; charset=utf-8');
|
||
require_once '../config/db.php';
|
||
require_once '../config/session.php';
|
||
|
||
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
|
||
http_response_code(405);
|
||
echo json_encode(['success' => false, 'message' => 'Метод не поддерживается']);
|
||
exit;
|
||
}
|
||
|
||
$data = json_decode(file_get_contents('php://input'), true);
|
||
if (!is_array($data)) {
|
||
http_response_code(400);
|
||
echo json_encode(['success' => false, 'message' => 'Некорректные данные']);
|
||
exit;
|
||
}
|
||
|
||
$login = trim($data['username'] ?? '');
|
||
$password = $data['password'] ?? '';
|
||
$siteAlias = strtolower(trim($data['site_alias'] ?? ''));
|
||
|
||
if ($siteAlias === '') {
|
||
http_response_code(400);
|
||
echo json_encode(['success' => false, 'message' => 'Не указан сайт']);
|
||
exit;
|
||
}
|
||
|
||
// Поиск пользователя по username
|
||
$stmt = $pdo->prepare("SELECT id, username, password_hash, ok5, o7, o10m, o10a, webp FROM users WHERE username = ?");
|
||
$stmt->execute([$login]);
|
||
$user = $stmt->fetch(PDO::FETCH_ASSOC);
|
||
|
||
if ($user && password_verify($password, $user['password_hash'])) {
|
||
$allowedAliases = ['ok5', 'o7', 'o10m', 'o10a', 'webp'];
|
||
if (!in_array($siteAlias, $allowedAliases, true)) {
|
||
echo json_encode(['success' => false, 'message' => 'Неизвестный сайт']);
|
||
exit;
|
||
}
|
||
|
||
if ((int)$user[$siteAlias] !== 1) {
|
||
echo json_encode(['success' => false, 'message' => 'Нет доступа к сайту']);
|
||
exit;
|
||
}
|
||
|
||
// Успешная авторизация
|
||
session_regenerate_id(true);
|
||
$_SESSION['user_id'] = $user['id'];
|
||
$_SESSION['username'] = $user['username'];
|
||
|
||
echo json_encode([
|
||
'success' => true,
|
||
'message' => 'Вход выполнен успешно',
|
||
'user' => [
|
||
'id' => $user['id'],
|
||
'username' => $user['username'],
|
||
]
|
||
]);
|
||
} else {
|
||
echo json_encode(['success' => false, 'message' => 'Неверные учетные данные']);
|
||
}
|
||
?>
|