CrestRoad/website/includes/auth.php

51 lines
1001 B
PHP

<?php
require_once __DIR__ . '/data.php';
if (session_status() === PHP_SESSION_NONE) {
session_start();
}
function require_login(): void
{
if (!is_logged_in()) {
$loginPath = 'login.php';
if (strpos($_SERVER['REQUEST_URI'] ?? '', '/admin/') === false) {
$loginPath = '/admin/login.php';
}
header('Location: ' . $loginPath);
exit;
}
}
function is_logged_in(): bool
{
return isset($_SESSION['admin_id']);
}
function current_admin_email(): ?string
{
return $_SESSION['admin_email'] ?? null;
}
function attempt_login(string $email, string $password): bool
{
$admin = get_admin_by_email($email);
if (!$admin) {
return false;
}
if (password_verify($password, $admin['password_hash'])) {
$_SESSION['admin_id'] = $admin['id'];
$_SESSION['admin_email'] = $admin['email'];
return true;
}
return false;
}
function logout(): void
{
$_SESSION = [];
session_destroy();
}