Files
lootjes/login.php
2025-11-12 14:02:47 +01:00

105 lines
3.0 KiB
PHP

<?php
session_start(); // start de sessie
require __DIR__ . '/auth/ldap.php';
require __DIR__ . '/data/db.php';
require __DIR__ . '/functions/logging.php';
require __DIR__ . '/functions/ldap_groups.php';
// Afmelden
if (isset($_POST['logout'])) {
if (isset($_SESSION['user'])) {
log_action($pdo, $_SESSION['user']['username'], 'Uitgelogd', 'Test-login script');
}
session_destroy();
header('Location: ' . $_SERVER['PHP_SELF']);
exit;
}
// Inloggen
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['username'], $_POST['password'])) {
$username = $_POST['username'];
$password = $_POST['password'];
$user = ldap_authenticate($username, $password);
if ($user) {
$_SESSION['user'] = $user;
log_action($pdo, $user['username'], 'Inloggen via LDAP', 'Test-login script');
header('Location: ' . $_SERVER['PHP_SELF']);
exit;
} else {
$error = "Ongeldige inloggegevens.";
log_action($pdo, $username, 'Mislukte login via LDAP', 'Test-login script');
}
}
// Uitloggen
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['logout'])) {
if (isset($_SESSION['user'])) {
// Log de uitlogactie
log_action($pdo, $_SESSION['user']['username'], 'Uitloggen via LDAP', 'Test-login script');
}
// Sessie verwijderen
session_unset();
session_destroy();
// Herlaad de pagina om het loginformulier te tonen
header('Location: ' . $_SERVER['PHP_SELF']);
exit;
}
?>
<!DOCTYPE html>
<html lang="nl">
<head>
<meta charset="UTF-8">
<title>LDAP Login Test</title>
</head>
<body>
<?php if (isset($_SESSION['user'])): ?>
<h3 style="color:green;">✅ Ingelogd als <?= htmlspecialchars($_SESSION['user']['displayName']) ?></h3>
<ul>
<li>Voornaam: <?= htmlspecialchars($_SESSION['user']['givenName']) ?></li>
<li>Achternaam: <?= htmlspecialchars($_SESSION['user']['sn']) ?></li>
<li>Gebruikersnaam: <?= htmlspecialchars($_SESSION['user']['username']) ?></li>
<li>Email: <?= htmlspecialchars($_SESSION['user']['email']) ?></li>
</ul>
<?php
// Leden van APP_LootjesTrekken
$members = get_group_members('APP_LootjesTrekken');
if (!empty($members)):
?>
<h3>Deelnemers aan de trekking:</h3>
<ul>
<?php foreach ($members as $name): ?>
<li><?= htmlspecialchars($name) ?></li>
<?php endforeach; ?>
</ul>
<?php endif; ?>
<form method="post">
<button type="submit" name="logout">Afmelden</button>
</form>
<?php else: ?>
<?php if (!empty($error)): ?>
<p style="color:red;"><?= htmlspecialchars($error) ?></p>
<?php endif; ?>
<form method="post">
<label>Gebruikersnaam (zonder domein): <input type="text" name="username" required></label><br>
<label>Wachtwoord: <input type="password" name="password" required></label><br>
<button type="submit">Login</button>
</form>
<?php endif; ?>
</body>
</html>