From 2cd6ec0601b49469a094aacbd2ce9b0d72385689 Mon Sep 17 00:00:00 2001
From: Krystian Rzepa <kryrze@st.amu.edu.pl>
Date: Tue, 27 Nov 2018 17:56:59 +0000
Subject: [PATCH] Zaktualizuj 'index.php'

---
 index.php | 75 ++++++++++++++++++++++++++++++++++++++++++++-----------
 1 file changed, 60 insertions(+), 15 deletions(-)

diff --git a/index.php b/index.php
index 2e4678d..0512bf3 100644
--- a/index.php
+++ b/index.php
@@ -1,15 +1,60 @@
-<?php
-session_start();
-
-$db_servername = 'localhost';
-$db_login = '';
-$db_password = '';
-$db_name = '';
-
-mysql_connect("$db_servername", "$db_login", "$db_password");
-mysql_select_db("$db_name");
-
-
-
-
-?>
+<?php
+session_start();
+
+$db_servername = 'localhost';
+$db_login = '';
+$db_password = '';
+$db_name = '';
+
+mysql_connect("$db_servername", "$db_login", "$db_password");
+mysql_select_db("$db_name");
+
+function filter($variable)
+{
+    if(get_magic_quotes_gpc())
+        $variable = stripslashes($variable);
+
+    return mysql_real_escape_string(htmlspecialchars(trim($variable))); 
+}
+
+if (isset($_GET['wyloguj'])==1) 
+{
+	$_SESSION['zalogowany'] = false;
+	session_destroy();
+}
+
+if (isset($_POST['loguj'])) 
+{
+	
+	if (mysql_num_rows(mysql_query("SELECT * FROM `users` WHERE `user_login`='$login' && `user_pass`='$password' && `aktywne`='1'")) > 0) 
+	{
+		$_SESSION['zalogowany'] = true;
+		$_SESSION['login'] = $login;
+	}
+	else { echo "Wpisano zle dane lub konto nieaktywne."; }
+}
+
+if ($_SESSION['zalogowany']==true)
+{
+	echo "Zalogowano jako <b>".$_SESSION['login']."</b>"; echo '<a href="?wyloguj=1"> [Wyloguj]</a>';
+	
+}
+
+if ($_SESSION['zalogowany']==false): ?>
+
+<form method="POST" action="index.php">
+<b>Login:</b> <input type="text" name="login"><br>
+<b>Hasło:</b> <input type="password" name="password"><br>
+<input type="submit" value="Zaloguj" name="loguj">
+</form>
+
+---------------------------------------------------
+
+<form method="POST" action="rejestracja/index.php">
+<input type="submit" value="Rejestracja nowego konta">
+</form>
+
+<?php 
+endif;
+mysql_close(); 
+?>
\ No newline at end of file