From 99ed05d3de67c4c6767150e4c8d266b336d824ab Mon Sep 17 00:00:00 2001
From: Ryan <ryantl66@gmail.com>
Date: Thu, 27 Mar 2025 13:39:47 -0400
Subject: [PATCH] basic auth login

---
 index.html      |  4 ++++
 login_basic.php | 62 +++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 66 insertions(+)
 create mode 100644 login_basic.php

diff --git a/index.html b/index.html
index 7972e8d..2ab88e0 100644
--- a/index.html
+++ b/index.html
@@ -162,6 +162,10 @@
                 <label for="rememberMeCheckbox">Remember me</label>
               </div>
             </form>
+            <!-- Basic HTTP Login Option -->
+            <div class="text-center mt-3">
+              <a href="login_basic.php" class="btn btn-secondary">Use Basic HTTP Login</a>
+            </div>
           </div>
         </div>
 
diff --git a/login_basic.php b/login_basic.php
new file mode 100644
index 0000000..a91fa7c
--- /dev/null
+++ b/login_basic.php
@@ -0,0 +1,62 @@
+<?php
+require 'config.php';
+session_start();
+
+$usersFile = USERS_DIR . USERS_FILE;
+
+// Reuse the same authentication function
+function authenticate($username, $password)
+{
+    global $usersFile;
+    if (!file_exists($usersFile)) {
+        return false;
+    }
+    $lines = file($usersFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
+    foreach ($lines as $line) {
+        list($storedUser, $storedPass, $storedRole) = explode(':', trim($line), 3);
+        if ($username === $storedUser && password_verify($password, $storedPass)) {
+            return $storedRole; // Return the user's role
+        }
+    }
+    return false;
+}
+
+// Check if the user has sent HTTP Basic auth credentials.
+if (!isset($_SERVER['PHP_AUTH_USER'])) {
+    header('WWW-Authenticate: Basic realm="FileRise Login"');
+    header('HTTP/1.0 401 Unauthorized');
+    echo 'Authorization Required';
+    exit;
+} else {
+    $username = trim($_SERVER['PHP_AUTH_USER']);
+    $password = trim($_SERVER['PHP_AUTH_PW']);
+
+    // Validate username format (optional)
+    if (!preg_match('/^[A-Za-z0-9_\- ]+$/', $username)) {
+        header('WWW-Authenticate: Basic realm="FileRise Login"');
+        header('HTTP/1.0 401 Unauthorized');
+        echo 'Invalid username format';
+        exit;
+    }
+
+    // Attempt authentication
+    $userRole = authenticate($username, $password);
+    if ($userRole !== false) {
+        // Successful login
+        session_regenerate_id(true);
+        $_SESSION["authenticated"] = true;
+        $_SESSION["username"] = $username;
+        $_SESSION["isAdmin"] = ($userRole === "1"); // Assuming "1" means admin
+
+        // Redirect to the main page
+        header("Location: index.html");
+        exit;
+    } else {
+        // Invalid credentials; prompt again
+        header('WWW-Authenticate: Basic realm="FileRise Login"');
+        header('HTTP/1.0 401 Unauthorized');
+        echo 'Invalid credentials';
+        exit;
+    }
+}
+?>
\ No newline at end of file