📄 File: login.php

Path: /home2/outerorb/assetradar.outerorbittech.com/api/login.php

Size: 982 B

Permissions: 0666

<?php
// api/login.php - returns api_token for valid credentials (simple)
require_once __DIR__ . '/../config.php';
header('Content-Type: application/json');

$data = json_decode(file_get_contents('php://input'), true);
if (!$data) { echo json_encode(['error'=>'invalid']); exit; }
$email = $data['email'] ?? '';
$pwd = $data['password'] ?? '';

$stmt = $mysqli->prepare('SELECT id,password,name FROM users WHERE email=? AND deleted=0 LIMIT 1');
$stmt->bind_param('s', $email);
$stmt->execute();
$res = $stmt->get_result();
if ($user = $res->fetch_assoc()) {
    if (password_verify($pwd, $user['password'])) {
        // generate token
        $token = bin2hex(random_bytes(20));
        $mysqli->query('UPDATE users SET api_token="' . $mysqli->real_escape_string($token) . '" WHERE id=' . (int)$user['id']);
        echo json_encode(['token'=>$token,'user'=>['id'=>$user['id'],'name'=>$user['name']]]);
        exit;
    }
}
echo json_encode(['error'=>'invalid_credentials']);
?>

← Back to Directory Edit File 🔒 Chmod