From f9030b3157226733a8154abe235f78a8f35a1df5 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Tue, 24 Jul 2018 12:01:50 +0300
Subject: notify if login failed

---
 login.php | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/login.php b/login.php
index 9deae75..8a142d0 100644
--- a/login.php
+++ b/login.php
@@ -3,6 +3,8 @@
 
 	@$op = $_REQUEST["op"];
 
+	$login_notice = "";
+
 	if ($op == "perform-login") {
 		$user = trim(mb_strtolower($_REQUEST["user"]));
 		$password = 'SHA256:' . hash('sha256', "$user:" . trim($_REQUEST["password"]));
@@ -19,6 +21,8 @@
 
 			$_SESSION["owner"] = $user;
 			header("Location: index.php");
+		} else {
+			$login_notice = "Incorrect username or password";
 		}
 	}
 
@@ -57,6 +61,10 @@
 
 <div class="container">
 
+	<?php if ($login_notice) { ?>
+		<div class="alert alert-danger"><?php echo $login_notice ?></div>
+	<?php } ?>
+
 	<form method="post">
 		<input type="hidden" name="op" value="perform-login">
 
-- 
cgit v1.2.3