74 lines
2.6 KiB
PHP
74 lines
2.6 KiB
PHP
<?php
|
|
// File: actions/process_login.php
|
|
// สำคัญ: ต้องไม่มีช่องว่าง, ตัวอักษร, หรือ BOM ก่อน <?php นี้
|
|
session_start();
|
|
|
|
if (isset($_SESSION["loggedin"]) && $_SESSION["loggedin"] === true) {
|
|
header("location: ../dashboard.php");
|
|
exit;
|
|
}
|
|
|
|
require_once '../includes/db_hosoffice.php';
|
|
|
|
if ($_SERVER["REQUEST_METHOD"] == "POST") {
|
|
|
|
$user = trim($_POST['username'] ?? '');
|
|
$pass = trim($_POST['password'] ?? '');
|
|
|
|
if (empty($user) || empty($pass)) {
|
|
$_SESSION['login_error'] = "กรุณากรอก Username และ Password";
|
|
header("location: ../index.php");
|
|
exit;
|
|
}
|
|
|
|
$pass_md5 = MD5($pass);
|
|
|
|
$sql = "SELECT HR_CID, HR_PASSWORD, HR_STATUS_ID, HR_PREFIX_NAME, HR_FNAME, HR_LNAME
|
|
FROM hr_person a
|
|
LEFT OUTER JOIN hr_prefix e ON a.HR_PREFIX_ID=e.HR_PREFIX_ID
|
|
WHERE a.HR_USERNAME = :user LIMIT 1";
|
|
|
|
try {
|
|
$stmt = $pdo_hos->prepare($sql);
|
|
$stmt->execute(['user' => $user]);
|
|
$row = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if (!$row) {
|
|
$_SESSION['login_error'] = "ไม่พบบัญชีผู้ใช้นี้";
|
|
header("location: ../index.php");
|
|
exit;
|
|
}
|
|
|
|
if (strtolower($row['HR_PASSWORD']) !== strtolower($pass_md5)) {
|
|
$_SESSION['login_error'] = "รหัสผ่านไม่ถูกต้อง";
|
|
header("location: ../index.php");
|
|
exit;
|
|
}
|
|
|
|
if ($row['HR_STATUS_ID'] !== '01') {
|
|
$_SESSION['login_error'] = "บัญชีผู้ใช้นี้ถูกปิดการใช้งานไปแล้ว";
|
|
header("location: ../index.php");
|
|
exit;
|
|
}
|
|
|
|
unset($_SESSION['login_error']);
|
|
|
|
$_SESSION['loggedin'] = true;
|
|
$_SESSION['fullname'] = $row['HR_PREFIX_NAME'] . $row['HR_FNAME'] . " " . $row['HR_LNAME'];
|
|
$_SESSION['cid'] = $row['HR_CID'];
|
|
//$_SESSION['dep_id'] = $row['HR_DEPARTMENT_SUB_SUB_ID'];
|
|
//$_SESSION['department'] = $row['HR_DEPARTMENT_SUB_SUB_NAME'];
|
|
|
|
header("location: ../dashboard.php");
|
|
exit;
|
|
} catch (PDOException $e) {
|
|
$_SESSION['login_error'] = "เกิดข้อผิดพลาดของระบบ: " . $e->getMessage();
|
|
header("location: ../index.php");
|
|
exit;
|
|
}
|
|
} else {
|
|
header("location: ../index.php");
|
|
exit;
|
|
}
|
|
// สำคัญ: ต้องไม่มีช่องว่าง หรือบรรทัดว่างหลังโค้ด PHP นี้
|