RWA2/admin.php at master · vecimovic/RWA2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
<?php
    session_start();
    $match =  false;
    $save = true;

    $password = $user = "";
    $err = "";

    if ($_SERVER["REQUEST_METHOD"] == "POST") {

        if(empty($_POST["user"]) || empty($_POST["password"])){
            $err = "Prijava neuspješna : neispravno korisničko ime ili lozinka";
            $save = false;
        }else{
            $user = test_input($_POST["user"]);
            $password = test_input($_POST["password"]);

            if($save == true){
                include_once 'db_connection.php';
                $conn = OpenConn();
                $sql = "SELECT * FROM `admin`";
                $result = $conn->query($sql);
                if($result->num_rows > 0){
                    while($row = $result->fetch_assoc()){
                        if($row["user"] == $user && $row["password"] == $password){
                             $match = true;

                            }
                        }
                    }
                    CloseCon($conn);

                    if($match){
                        $err = "Prijava uspješna";
                        unset($_SESSION['korisnikId']);
                        $_SESSION['korisnik'] = "admin";
                        unset($_SESSION['num']);
                        unset($_SESSION['numArt']);
                        unset($_SESSION['kosarica']);
                        $_SESSION["prij/odj"] = "Odjava";


                    }
                    else $err = "Prijava neuspješna : neispravno korisničko ime ili lozinka";
                }
                }
            }

            function test_input($data) {
                $data = trim($data);
                $data = stripslashes($data);
                $data = htmlspecialchars($data);
                return $data;
            }
?>
<html>
    <head>
        <link rel="stylesheet" type="text/css" href="stil.css">
    </head>

    <body>
        <div id="menu">
            <?php include 'templates/menu.php';?>
        </div>

        <div class="row">


        <div id="adminPrijava">
          <?php
          if(!isset($_SESSION['korisnik']) && $_SESSION['korisnik'] = 'admin'){
          ?>
           <form action="admin.php" method="POST">
               <h3>Admin prijava:</h3> <br>
               Korisničko ime:
               <input type="text" class="ftekst"  name = "user">
               <br> <br>
               Lozinka:
               <input type="password"  class="ftekst" name = "password">
               <br>
               <br>
               <input type="submit" class="Button2" value="Prijavi se">
           </form>
           <?php
          }else{
            ?>

            <ul style="list-style-type: none; float:left;">
            <li><b>OPCIJE PREGLEDA:</b></li>

            <a href="adminPregled.php"><li><button class="Button2"> Pregled artikala  </button></li></a>
            <a href="adminNarudzbe.php"><li><button class="Button2"> Pregled narudžbi  </button></li></a>
            <a href="adminPoruke.php"><li><button class="Button2">Pregled poruka </button></li></a>


        </ul>


            <?php
          }
           ?>
        </div>

        </div>
    </body>


</html>