mahdahar
02762bb355
- Refactor 'app/Views/superuser/users.php' to fix user creation/editing logic using Alpine.js. - Ensure efficient form state management (userid, username, password handling) in user modal. - Standardize dashboard layouts and script initialization (window.BASEURL) across 'admin', 'cs', 'lab', 'phlebo', and 'superuser' main views. - Remove redundant 'app/Views/admin/users.php' to consolidate user management.
79 lines
1.9 KiB
PHP
79 lines
1.9 KiB
PHP
<?php
|
|
|
|
namespace App\Controllers;
|
|
|
|
use App\Controllers\BaseController;
|
|
|
|
class AuthController extends BaseController
|
|
{
|
|
|
|
public function loginPage()
|
|
{
|
|
return view("login");
|
|
}
|
|
|
|
public function login()
|
|
{
|
|
helper(['form', 'url']);
|
|
$session = session();
|
|
$db = \Config\Database::connect();
|
|
|
|
$userid = strtoupper(trim($this->request->getPost('userid')));
|
|
$password = $this->request->getPost('password');
|
|
|
|
$query = $db->query("SELECT * FROM gdc_cmod.dbo.USERS WHERE USERID = ?", [$userid]);
|
|
$user = $query->getRowArray();
|
|
|
|
if ($user && !empty($user['PASSWORD']) && password_verify($password, $user['PASSWORD'])) {
|
|
|
|
$roleId = (int) $user['USERROLEID'];
|
|
$role = ROLE_NAMES[$roleId] ?? '';
|
|
|
|
$session->set([
|
|
'isLoggedIn' => true,
|
|
'userid' => (string) $user['USERID'],
|
|
'userroleid' => (int) $user['USERROLEID'],
|
|
'userrole' => (string) $role,
|
|
]);
|
|
|
|
switch ((int) $user['USERROLEID']) {
|
|
case 0:
|
|
return redirect()->to('superuser');
|
|
case 1:
|
|
return redirect()->to('admin');
|
|
case 2:
|
|
return redirect()->to('lab');
|
|
case 3:
|
|
return redirect()->to('phlebo');
|
|
case 4:
|
|
return redirect()->to('cs');
|
|
default:
|
|
return redirect()->to('login');
|
|
}
|
|
} else {
|
|
$session->setFlashdata('error', 'USERID atau PASSWORD salah.');
|
|
return redirect()->back();
|
|
}
|
|
}
|
|
|
|
public function logout()
|
|
{
|
|
$session = session();
|
|
$session->destroy();
|
|
return redirect()->to('login');
|
|
}
|
|
|
|
public function setPassword()
|
|
{
|
|
$input = $this->request->getJSON(true);
|
|
$userid = $input['userid'];
|
|
$password = $input['password'];
|
|
$password = password_hash($password, PASSWORD_DEFAULT);
|
|
$db = db_connect();
|
|
$sql = "update GDC_CMOD.dbo.USERS set PASSWORD='$password' where USERID='$userid'";
|
|
$db->query($sql);
|
|
$data = ['status' => 'success', 'message' => 'Password updated successfully', 'data' => "$userid"];
|
|
return $this->response->setJSON($data);
|
|
}
|
|
}
|