View Code - 20260723

auth.php | 20260723_000646.php Initial Domain Snapshot

<?php
require_once __DIR__ . '/../../core/db.php';
if (session_status() === PHP_SESSION_NONE) session_start();

function auth_user() { return $_SESSION['user'] ?? null; }

function require_login() {
  if (!auth_user()) { header('Location: /login.php'); exit; }
}

function auth_login($email, $password) {
  $pdo = DB::pdo();
  $q = $pdo->prepare('SELECT * FROM su_users WHERE email=? LIMIT 1');
  $q->execute([$email]);
  $user = $q->fetch();
  if ($user && password_verify($password, $user['password_hash'])) {
    session_regenerate_id(true);
    $_SESSION['user'] = [
      'id'    => (int)$user['id'],
      'name'  => $user['name'],
      'email' => $user['email'],
      'role'  => $user['role'],
    ];
    return true;
  }
  return false;
}

function auth_logout() {
  $_SESSION = [];
  if (ini_get("session.use_cookies")) {
    $p = session_get_cookie_params();
    setcookie(session_name(), '', time()-42000, $p["path"], $p["domain"], $p["secure"], $p["httponly"]);
  }
  session_destroy();
}