diff --git a/src/server/cyberhex-code/install/create_admin.php b/src/server/cyberhex-code/install/create_admin.php index d50f3d6..bc916f3 100644 --- a/src/server/cyberhex-code/install/create_admin.php +++ b/src/server/cyberhex-code/install/create_admin.php @@ -78,9 +78,9 @@ $email=htmlspecialchars($_POST["email"]); $username=htmlspecialchars($_POST["username"]); - $password=htmlspecialchars($_POST["password"]); + $password=$_POST["password"]; $permissions="1111111111"; - $hash=password_hash('user_password_here', PASSWORD_BCRYPT); + $hash=password_hash($password, PASSWORD_BCRYPT); $stmt->execute(); $stmt->close(); diff --git a/src/server/cyberhex-code/system/insecure_zone/php/login.php b/src/server/cyberhex-code/system/insecure_zone/php/login.php index 8cb9a8a..f2471dc 100644 --- a/src/server/cyberhex-code/system/insecure_zone/php/login.php +++ b/src/server/cyberhex-code/system/insecure_zone/php/login.php @@ -4,6 +4,7 @@ + Cyberhex login page @@ -12,7 +13,7 @@
-

Login

+

Login to Cyberhex

@@ -31,6 +32,56 @@
+connect_error) { + die("Connection failed: " . $conn->connect_error); + } + $sql = "SELECT * FROM users WHERE username = ?"; + $stmt = $conn->prepare($sql); + $stmt->bind_param("s", $username); + + // Execute the statement + $stmt->execute(); + + // Get the result + $result = $stmt->get_result(); + + // Check if the user exists and verify the password + if ($result->num_rows > 0) { + $row = $result->fetch_assoc(); + if (password_verify($password, $row['password'])) { + echo ''; + } else { + echo ''; + } + } else { + echo ''; + } + + // Close the connection + $stmt->close(); + $conn->close(); + } +?> diff --git a/src/server/cyberhex-code/system/secure_zone/php/index.php b/src/server/cyberhex-code/system/secure_zone/php/index.php index 804ca4b..3eb199a 100644 --- a/src/server/cyberhex-code/system/secure_zone/php/index.php +++ b/src/server/cyberhex-code/system/secure_zone/php/index.php @@ -24,6 +24,7 @@ if(isset($_GET["page"])){ + Cyberhex