notify if login failed

1 files changed, 8 insertions, 0 deletions

diff --git a/login.php b/login.php
index 9deae75..8a142d0 100644
--- a/login.php
+++ b/login.php
@@ -3,6 +3,8 @@
 
 	@$op = $_REQUEST["op"];
 
+	$login_notice = "";
+
 	if ($op == "perform-login") {
 		$user = trim(mb_strtolower($_REQUEST["user"]));
 		$password = 'SHA256:' . hash('sha256', "$user:" . trim($_REQUEST["password"]));
@@ -19,6 +21,8 @@
 
 			$_SESSION["owner"] = $user;
 			header("Location: index.php");
+		} else {
+			$login_notice = "Incorrect username or password";
 		}
 	}
 
@@ -57,6 +61,10 @@
 
 <div class="container">
 
+	<?php if ($login_notice) { ?>
+		<div class="alert alert-danger"><?php echo $login_notice ?></div>
+	<?php } ?>
+
 	<form method="post">
 		<input type="hidden" name="op" value="perform-login">