Pi-Hole/web
1
0
Fork 0
mirror of https://github.com/pi-hole/web.git synced 2026-04-24 18:59:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

Cookie login

Browse Source 
Allow user to (optionally) set a cookie for automatic login.
Expiry is set for 7 days.
Cookie refreshes, extending for 7 days from each use.
This commit is contained in:
rrobgill
2018-05-05 14:42:04 +10:00
committed by GitHub
parent e48aa295bd
commit 85dd92771a
1 changed files with 18 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
scripts/pi-hole/php/password.php
View File

@@ -24,9 +24,13 @@
}
// If the user wants to log out, we free all session variables currently registered
// and delete any persistent cookie.
if(isset($_GET["logout"]))
{
session_unset();
setcookie('sesshash', '');
header('Location: index.php');
exit();
}
$wrongpassword = false;
@@ -35,8 +39,16 @@
// Test if password is set
if(strlen($pwhash) > 0)
{
// Check for and authorize from persistent cookie
if (isset($_COOKIE["sesshash"]))
{
if ($pwhash = $_COOKIE["sesshash"])
$auth = true;
// Refresh cookie with new expiry
setcookie('sesshash', $pwhash, time()+60*60*24*7);
}
// Compare doubly hashes password input with saved hash
if(isset($_POST["pw"]))
else if(isset($_POST["pw"]))
{
$postinput = hash('sha256',hash('sha256',$_POST["pw"]));
if(hash_equals($pwhash, $postinput))
@@ -45,6 +57,11 @@
// Login successful, redirect the user to the homepage to discard the POST request
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $_SERVER['QUERY_STRING'] === 'login') {
// Set persistent cookie if selected
if (isset($_POST['cook']))
{
setcookie('sesshash', $pwhash, time()+60*60*24*7);
}
header('Location: index.php');
exit();
}