File Manager

✏️ Edit File: /home/u625410797/domains/thaiyouth.org/public_html/api/auth.php

<?php
require_once 'config.php';

$action = $_GET['action'] ?? '';
$input = json_decode(file_get_contents('php://input'), true) ?? [];

if ($action === 'login') {
    $email = $input['email'] ?? '';
    $password = $input['password'] ?? '';
    
    $stmt = $pdo->prepare("SELECT * FROM users WHERE email = ?");
    $stmt->execute([$email]);
    $user = $stmt->fetch();
    
    if ($user && password_verify($password, str_replace('$2b$', '$2y$', $user['password']))) {
        unset($user['password']);
        echo json_encode([
            "success" => true, 
            "token" => "tk_" . bin2hex(random_bytes(16)), 
            "user" => $user
        ]);
    } else {
        http_response_code(401);
        echo json_encode(["success" => false, "message" => "อีเมลหรือรหัสผ่านไม่ถูกต้อง"]);
    }
} 
elseif ($action === 'register') {
    $name = $input['name'] ?? '';
    $email = $input['email'] ?? '';
    $password = $input['password'] ?? '';
    
    if (!$name || !$email || !$password) {
        die(json_encode(["success" => false, "message" => "ข้อมูลไม่ครบ"]));
    }
    
    $hashed = password_hash($password, PASSWORD_BCRYPT);
    $stmt = $pdo->prepare("INSERT INTO users (name, email, password, role) VALUES (?, ?, ?, 'admin')");
    if ($stmt->execute([$name, $email, $hashed])) {
        $userId = $pdo->lastInsertId();
        echo json_encode([
            "success" => true, 
            "token" => "tk_" . bin2hex(random_bytes(16)), 
            "user" => ["id" => $userId, "name" => $name, "email" => $email, "role" => "admin"]
        ]);
    } else {
        echo json_encode(["success" => false, "message" => "สมัครสมาชิกไม่สำเร็จ"]);
    }
}
elseif ($action === 'me') {
    $headers = getallheaders();
    $auth = $headers['Authorization'] ?? '';
    if (strpos($auth, 'Bearer ') === 0) {
        // In a real app, verify the token. For now, we'll return a mock success
        // because we don't have a persistent session table yet.
        echo json_encode(["success" => true, "user" => ["role" => "admin"]]);
    } else {
        http_response_code(401);
        echo json_encode(["success" => false]);
    }
}
?>

Batal

⬅ Naik ke public_html 19 item

Nama	Tipe	Ukuran	Diubah	Aksi
📄.env	env	110 B	2026-05-06 10:30	✏️ Edit 👁️ View
📄.htaccess	htaccess	18 B	2026-05-06 10:30	✏️ Edit 👁️ View
🐘auth.php	php	2.2 KB	2026-05-06 10:30	✏️ Edit 👁️ View
🐘check_db.php	php	447 B	2026-05-06 16:51	✏️ Edit 👁️ View
🐘check_donations_schema.php	php	510 B	2026-05-08 04:05	✏️ Edit 👁️ View
🐘check_schema.php	php	629 B	2026-05-08 02:10	✏️ Edit 👁️ View
🐘check_settings.php	php	698 B	2026-05-08 02:06	✏️ Edit 👁️ View
🐘config.php	php	3.1 KB	2026-05-06 10:30	✏️ Edit 👁️ View
🐘data.php	php	31.3 KB	2026-05-08 04:14	✏️ Edit 👁️ View
🐘debug_db.php	php	929 B	2026-05-06 10:30	✏️ Edit 👁️ View
🐘debug_settings.php	php	437 B	2026-05-08 02:39	✏️ Edit 👁️ View
🐘explorer.php	php	492 B	2026-05-06 10:30	✏️ Edit 👁️ View
🐘inspect_contacts.php	php	609 B	2026-05-08 03:28	✏️ Edit 👁️ View
🐘inspect_forms.php	php	623 B	2026-05-08 03:28	✏️ Edit 👁️ View
🐘inspect_menus.php	php	606 B	2026-05-08 03:09	✏️ Edit 👁️ View
🐘migrate_donations.php	php	850 B	2026-05-08 04:08	✏️ Edit 👁️ View
🐘migrate_volunteers.php	php	661 B	2026-05-08 03:41	✏️ Edit 👁️ View
🐘reset_admin.php	php	1.6 KB	2026-05-06 10:30	✏️ Edit 👁️ View
🐘sync_settings.php	php	2 KB	2026-05-08 02:42	✏️ Edit 👁️ View