SWDB/application/action/login.php

<?php

    /**
     * File for the login action.
     *
     * Implements an action function to be called from the {@see Controller}.
     * 
     * @category Action
     */

    /**
     * Logs the user in.
     *
     * Reads the POST parameters looking for the following KEYS:
     *  uname
     *  password
     * If there is a match, it sets cookies and session variables, and
     * redirects to the user homepage.
     * 
     * @return int 0 on success, negative values on error.
     * @category Action
     * @global resource Database connection.
     */
    function action(){

        global $db;

        if (!isset($_POST['uname'], $_POST['password'])){
            header("Location: " . URL::BASE);
            exit();
        }
        $uname = SQLite3::escapeString($_POST['uname']);
        if (strlen($uname) == 0){
            header("Location: " . URL::BASE);
            exit();
        }
        $password = SQLite3::escapeString($_POST['password']);
        if (strlen($password) == 0){
            header("Location: " . URL::BASE);
            exit();
        }
        $password = hash('sha256', $password);
        $statement = $db->prepare("
          SELECT uid 
          FROM player 
          WHERE
            upper(name) = upper(:name) AND 
            password = :password;
        ");
        $statement->bindValue(":name", $uname, SQLITE3_TEXT);
        $statement->bindValue(":password", $password, SQLITE3_TEXT);
        $statement->execute();
        $r = $statement->execute()->fetchArray(SQLITE3_ASSOC);
        if (!$r){
            error_log("REDIRECT TO:" . URL::BASE);
            header("Location: " . URL::BASE);
            exit();
            die();
            return 401;
        }
        $uid = $r["uid"];
        setcookie("uid", $uid, time() + 5 * 24 * 60 * 60); // 5 Days
        session_regenerate_id();
        $_SESSION['session'] = true;
        $_SESSION['name'] = $uname;
        $_SESSION['uid'] = $uid;
        header("Location: " . URL::BASE . "/$uid/");
        exit();
        die();
        return 0;
    }
?>