AuthMeReloaded/samples/website_integration/index.php

<!--
  This is a demo page for AuthMe website integration.
  See AuthMeController.php and the extending classes for the PHP code you need.
-->
<!DOCTYPE html>
<html lang="en">
 <head>
   <title>AuthMe Integration Sample</title>
   <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 </head>
 <body>
<?php
error_reporting(E_ALL);

require 'AuthMeController.php';

// Change this to the file of the hash encryption you need, e.g. Bcrypt.php or Sha256.php
require 'Sha256.php';
// The class name must correspond to the file you have in require above! e.g. require 'Sha256.php'; and new Sha256();
$authme_controller = new Sha256();

$action = get_from_post_or_empty('action');
$user = get_from_post_or_empty('username');
$pass = get_from_post_or_empty('password');

$was_successful = false;
if ($action && $user && $pass) {
    require_once('Bcrypt.php');
    if ($action === 'Log in') {
        $was_successful = process_login($user, $pass, $authme_controller);
    } else if ($action === 'Register') {
        $was_successful = process_register($user, $pass, $authme_controller);
    }
}

if (!$was_successful) {
    echo '<h1>Login sample</h1>
This is a demo form for AuthMe website integration. Enter your AuthMe login details
into the following form to test it.
<form method="post">
 <table>
   <tr><td>Name</td><td><input type="text" value="' . htmlspecialchars($user) . '" name="username" /></td></tr>
   <tr><td>Pass</td><td><input type="password" value="' . htmlspecialchars($pass) . '" name="password" /></td></tr>
   <tr>
     <td><input type="submit" name="action" value="Log in" /></td>
     <td><input type="submit" name="action" value="Register" /></td>
   </tr>
 </table>
</form>';
}

function get_from_post_or_empty($index_name) {
    return trim(
        filter_input(INPUT_POST, $index_name, FILTER_UNSAFE_RAW, FILTER_REQUIRE_SCALAR | FILTER_FLAG_STRIP_LOW)
            ?: '');
}


// Login logic
function process_login($user, $pass, AuthMeController $controller) {
    if ($controller->checkPassword($user, $pass)) {
        printf('<h1>Hello, %s!</h1>', htmlspecialchars($user));
        echo 'Successful login. Nice to have you back!'
            . '<br /><a href="index.php">Back to form</a>';
        return true;
    } else {
        echo '<h1>Error</h1> Invalid username or password.';
    }
    return false;
}

// Register logic
function process_register($user, $pass, AuthMeController $controller) {
    if ($controller->isUserRegistered($user)) {
        echo '<h1>Error</h1> This user already exists.';
    } else {
        // Note that we don't validate the password or username at all in this demo...
        $register_success = $controller->register($user, $pass);
        if ($register_success) {
            printf('<h1>Welcome, %s!</h1>Thanks for registering', htmlspecialchars($user));
            echo '<br /><a href="index.php">Back to form</a>';
            return true;
        } else {
            echo '<h1>Error</h1>Unfortunately, there was an error during the registration.';
        }
    }
    return false;
}

?>

 </body>
</html>
#518 Create injection-safe website integration and demo form 2016-02-13 10:56:15 +01:00			`<!--`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`This is a demo page for AuthMe website integration.`
			`See AuthMeController.php and the extending classes for the PHP code you need.`
#518 Create injection-safe website integration and demo form 2016-02-13 10:56:15 +01:00			`-->`
			`<!DOCTYPE html>`
			`<html lang="en">`
			`<head>`
			`<title>AuthMe Integration Sample</title>`
			`<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />`
			`</head>`
			`<body>`
			`<?php`
			`error_reporting(E_ALL);`

#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`require 'AuthMeController.php';`

			`// Change this to the file of the hash encryption you need, e.g. Bcrypt.php or Sha256.php`
			`require 'Sha256.php';`
			`// The class name must correspond to the file you have in require above! e.g. require 'Sha256.php'; and new Sha256();`
			`$authme_controller = new Sha256();`

#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`$action = get_from_post_or_empty('action');`
#518 Create injection-safe website integration and demo form 2016-02-13 10:56:15 +01:00			`$user = get_from_post_or_empty('username');`
			`$pass = get_from_post_or_empty('password');`

			`$was_successful = false;`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`if ($action && $user && $pass) {`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`require_once('Bcrypt.php');`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`if ($action === 'Log in') {`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`$was_successful = process_login($user, $pass, $authme_controller);`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`} else if ($action === 'Register') {`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`$was_successful = process_register($user, $pass, $authme_controller);`
Minor - replace tabs to spaces in php integration sample 2016-02-13 11:00:56 +01:00			`}`
#518 Create injection-safe website integration and demo form 2016-02-13 10:56:15 +01:00			`}`

			`if (!$was_successful) {`
Minor - replace tabs to spaces in php integration sample 2016-02-13 11:00:56 +01:00			`echo '<h1>Login sample</h1>`
#518 Create injection-safe website integration and demo form 2016-02-13 10:56:15 +01:00			`This is a demo form for AuthMe website integration. Enter your AuthMe login details`
			`into the following form to test it.`
			`<form method="post">`
			`<table>`
			`<tr><td>Name</td><td><input type="text" value="' . htmlspecialchars($user) . '" name="username" /></td></tr>`
			`<tr><td>Pass</td><td><input type="password" value="' . htmlspecialchars($pass) . '" name="password" /></td></tr>`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`<tr>`
			`<td><input type="submit" name="action" value="Log in" /></td>`
			`<td><input type="submit" name="action" value="Register" /></td>`
			`</tr>`
#518 Create injection-safe website integration and demo form 2016-02-13 10:56:15 +01:00			`</table>`
			`</form>';`
			`}`

			`function get_from_post_or_empty($index_name) {`
Minor - replace tabs to spaces in php integration sample 2016-02-13 11:00:56 +01:00			`return trim(`
			`filter_input(INPUT_POST, $index_name, FILTER_UNSAFE_RAW, FILTER_REQUIRE_SCALAR \| FILTER_FLAG_STRIP_LOW)`
			`?: '');`
#518 Create injection-safe website integration and demo form 2016-02-13 10:56:15 +01:00			`}`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00

			`// Login logic`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`function process_login($user, $pass, AuthMeController $controller) {`
			`if ($controller->checkPassword($user, $pass)) {`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`printf('<h1>Hello, %s!</h1>', htmlspecialchars($user));`
			`echo 'Successful login. Nice to have you back!'`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`. '<br /><a href="index.php">Back to form</a>';`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`return true;`
			`} else {`
			`echo '<h1>Error</h1> Invalid username or password.';`
			`}`
			`return false;`
			`}`

			`// Register logic`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`function process_register($user, $pass, AuthMeController $controller) {`
			`if ($controller->isUserRegistered($user)) {`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`echo '<h1>Error</h1> This user already exists.';`
			`} else {`
			`// Note that we don't validate the password or username at all in this demo...`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`$register_success = $controller->register($user, $pass);`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`if ($register_success) {`
			`printf('<h1>Welcome, %s!</h1>Thanks for registering', htmlspecialchars($user));`
#702 Implement SHA256 php registration - Refactor Bcrypt and Sha256 examples to use common abstract parent class - Implement hashing logic for Sha256 2016-05-19 21:44:24 +02:00			`echo '<br /><a href="index.php">Back to form</a>';`
#533 Add integration sample for BCrypt 2016-02-19 19:13:49 +01:00			`return true;`
			`} else {`
			`echo '<h1>Error</h1>Unfortunately, there was an error during the registration.';`
			`}`
			`}`
			`return false;`
			`}`

#518 Create injection-safe website integration and demo form 2016-02-13 10:56:15 +01:00			`?>`

			`</body>`
			`</html>`