From 7eb2cea47aa99f7503fc5d17c77a3af45bbb03c9 Mon Sep 17 00:00:00 2001
From: BodgeMaster <>
Date: Fri, 21 Feb 2020 06:54:51 +0100
Subject: [PATCH] login should work now

---
 threadr/userhome/index.php | 25 +++++++++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)
diff --git a/threadr/userhome/index.php b/threadr/userhome/index.php
index a3b83e6..a6d98d6 100644
--- a/threadr/userhome/index.php
+++ b/threadr/userhome/index.php
@@ -1,3 +1,25 @@
+<?php
+session_start();
+//Todo: make this a setting for users that use VPNs/Proxies and seem to jump around the world rather quickly...
+if ($_SESSION['user_ip']!=$_SERVER['REMOTE_ADDR']){
+  // force logout
+  $_SESSION = array();
+  if (ini_get("session.use_cookies")) {
+    $params = session_get_cookie_params();
+    setcookie(session_name(), '', time() - 42000, $params["path"], $params["domain"], $params["secure"], $params["httponly"]);
+  }
+  session_destroy();
+  header("Location: https://lostcave.ddnss.de/common/threadr/login/?error=session");
+  die();
+}
+
+$pdo = new PDO('mysql:host=localhost;dbname=web', 'webstuff', 'Schei// auf Pa$$w0rter!');
+$statement = $pdo->prepare('SELECT name FROM users WHERE id = :user_id;'); // to be replaced with optional user name off the user data table
+$result = $statement->execute(array('user_id' => $_SESSION['user_id']));
+$dbentry = $statement->fetch();
+$username = $dbentry['name'];
+?>
+<!DOCTYPE html>
 <html>
   <head>
     <title>ThreadR</title>
@@ -17,8 +39,7 @@
       <center><h1>ThreadR</h1></center>
     </div>
     <div class="item-2">
-      <center><h3><?php $username = $_POST['name'];
-        echo "Welcome back, $username !";?> </h3></center>
+      <center><h3><?php echo "Welcome back, $username !";?> </h3></center>
     </div>
   </div>
 </html>
