sakura/main/authenticate.php

<?php
/*
 * Sakura Authentication Page
 */

// Declare Namespace
namespace Sakura;

// Include components
require_once str_replace(basename(__DIR__), '', dirname(__FILE__)) .'_sakura/sakura.php';

// Page actions
if(
    isset($_REQUEST['mode']) &&
    isset($_REQUEST['time']) &&
    isset($_REQUEST['session'])
) {

    // Continue
    $continue = true;

    // Compare time and session so we know the link isn't forged
    if($_REQUEST['time'] < time() - 1000) {

        $renderData['page'] = [
            'title'     => 'Action failed',
            'redirect'  => '/authenticate',
            'message'   => 'Timestamps differ too much, please try again.'
        ];

        // Prevent
        $continue = false;

    }

    // Match session ids for the same reason
    if($_REQUEST['session'] != session_id()) {

        $renderData['page'] = [
            'title'     => 'Action failed',
            'redirect'  => '/authenticate',
            'message'   => 'Session IDs do not match.'
        ];

        // Prevent
        $continue = false;

    }

    // Login check
    if(Users::checkLogin()) {

        if($_REQUEST['mode'] != 'logout')
            $continue = false;

    }
        

    if($continue) {
        switch($_REQUEST['mode']) {

            case 'logout':

                // Attempt logout
                $logout = Users::logout();

                // Add page specific data
                $renderData['page'] = [
                    'title'     => 'Logout',
                    'redirect'  => ($logout ? $_REQUEST['redirect'] : '/authenticate'),
                    'message'   => $logout ? 'You are now logged out.' : 'Logout failed.'
                ];

                break;

            // Login processing
            case 'login':

                // Attempt login
                $login = Users::login($_REQUEST['username'], $_REQUEST['password'], isset($_REQUEST['remember']));

                // Array containing "human understandable" messages
                $messages = [
                    'USER_NOT_EXIST'        => 'The user you tried to log into does not exist.',
                    'INCORRECT_PASSWORD'    => 'The password you entered was invalid.',
                    'DEACTIVATED'           => 'Your account is deactivated.',
                    'NO_LOGIN'              => 'Logging into this account is disabled.',
                    'LEGACY_SUCCESS'        => 'Login successful! Taking you to the password changing page...',
                    'LOGIN_SUCESS'          => 'Login successful!'
                ];

                // Add page specific things
                $renderData['page'] = [
                    'title'     => 'Login',
                    'redirect'  => ($login[0] ? $_REQUEST['redirect'] : '/authenticate'),
                    'message'   => $messages[$login[1]]
                ];

                break;

            // Registration processing
            case 'register':

                // Add page specific things
                $renderData['page'] = [
                    'title'     => 'Register on Flashii',
                    'redirect'  => $_SERVER['PHP_SELF'],
                    'message'   => 'what'
                ];

                break;

            // Unforgetting passwords
            case 'forgotpassword':

                // Add page specific things
                $renderData['page'] = [
                    'title'     => 'Forgot Password',
                    'redirect'  => $_SERVER['PHP_SELF'],
                    'message'   => 'what'
                ];

                break;

        }
    }

    // Print page contents or if the AJAX request is set only display the render data
    print   isset($_REQUEST['ajax']) ?
            (
                $renderData['page']['title']
                . ':'
                . $renderData['page']['message']
                . ':'
                . $renderData['page']['redirect']
            ) :
            Templates::render('errors/information.tpl', $renderData);
    exit;

}

// Add page specific things
$renderData['page'] = [
    'title' => 'Login to Flashii'
];
$renderData['auth'] = [
    'redirect' => (
        isset($_REQUEST['chat']) ?
        Configuration::getLocalConfig('urls', 'chat') :
        (
            isset($_SERVER['HTTP_REFERER']) ?
            $_SERVER['HTTP_REFERER'] :
            Configuration::getLocalConfig('urls', 'main')
        )
    ),
    'blockRegister' => [
        'do' => false
    ]
];

// Check if a user has already registered from the current IP address
if(count($regUserIP = Users::getUsersByIP(Main::getRemoteIP()))) {

    $renderData['auth']['blockRegister'] = [
        'do'        => true,
        'username'  => $regUserIP[array_rand($regUserIP)]['username']
    ];

}

// Print page contents
print Templates::render('main/authenticate.tpl', $renderData);