Cyclone-Team/e949
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Продолжил делать API для манипуляции с юзерами

Browse Source
This commit is contained in:
Shr3dd3r
2023-08-16 06:34:01 +03:00
parent 79a031401a
commit 611e213592
7 changed files with 112 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
api/_auth.php
View File

@ -2,6 +2,13 @@
require_once("_db.php"); //("api/_db.php");
// Check if request was to specified file
function ThisFileIsRequested ($fullpath) {
return substr($fullpath, -strlen($_SERVER["SCRIPT_NAME"])) === $_SERVER["SCRIPT_NAME"];
}
session_start();
$LOGGED_IN = false;
@ -11,7 +18,7 @@ if (isset($_SESSION["userid"])) {
$s = $db->prepare("SELECT * FROM users WHERE id = ?");
$s->bind_param("s", $_SESSION["userid"]);
$s->execute();
if (!(bool)$s->get_result()->fetch_assoc()) {
if (!(bool)$s->get_result()->fetch_assoc()) { // If not, then destroy session
session_unset();
session_destroy();
echo "user id does not exist";