From 80bdf785d7909f4c11ba98f35417f3b8cb44f317 Mon Sep 17 00:00:00 2001
From: Alib <aliboba@free.fr>
Date: Tue, 23 Mar 2010 19:11:03 +0100
Subject: added auth

---
 bin/auth.php    | 36 ++++++++++++++++++++++++++++++++++++
 bin/backend.php |  1 +
 2 files changed, 37 insertions(+)
 create mode 100644 bin/auth.php

(limited to 'bin')

diff --git a/bin/auth.php b/bin/auth.php
new file mode 100644
index 0000000..1545b7c
--- /dev/null
+++ b/bin/auth.php
@@ -0,0 +1,36 @@
+<?php
+
+global $user, $pass;
+
+session_start();
+
+if (isset($_COOKIE['istream']))
+{
+       if(sha1($pass) == $_COOKIE['istream'] ) {
+ 		setcookie ("istream", sha1($pass), time()+60*60*24*30);
+		$authorized = true;
+	} else {
+		$authorised = false;
+	}
+}
+
+# checkup login and password
+if (isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW']))
+{
+    if (($user == $_SERVER['PHP_AUTH_USER']) && ($pass == ($_SERVER['PHP_AUTH_PW'])) )
+    {
+    setcookie ("istream", sha1($pass), time()+60*60*24*30);
+    $authorized = true;
+    }
+}
+
+# login
+if (!$authorized)
+{
+    header('WWW-Authenticate: Basic Realm="Login please"');
+    header('HTTP/1.0 401 Unauthorized');
+    echo "Login";
+    exit;
+}
+
+?>
diff --git a/bin/backend.php b/bin/backend.php
index f312ed0..706dd91 100755
--- a/bin/backend.php
+++ b/bin/backend.php
@@ -6,6 +6,7 @@ if (file_exists('../config.php'))
 	include ('../config.php');
 else
 	include ('../config_default.php');
+include ('./auth.php');
 include ('../getid3/getid3.php');
 include ('./utils.php');
 include ('./files.php');
-- 
cgit v1.2.3