From 52eff9d1062163ba62e89b3b9c2a4cb3304f06b8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E1=84=8B=E1=85=A2=E1=84=91=E1=85=B3=E1=86=AF=20=E1=84=82?=
 =?UTF-8?q?=E1=85=A9=E1=84=90=E1=85=B3=E1=84=87=E1=85=AE=E1=86=A8?=
 <jisangs@gmail.com>
Date: Fri, 20 Jul 2018 10:23:50 +0900
Subject: [PATCH] Add: admin DB

---
 src/web/admin/login.html       | 13 ++---
 src/web/server/admin/login.php | 89 ++++++++++++++++++++++++++++++++++
 src/web/sql/make_db.sql        |  9 ++++
 3 files changed, 102 insertions(+), 9 deletions(-)
 create mode 100644 src/web/server/admin/login.php

diff --git a/src/web/admin/login.html b/src/web/admin/login.html
index 76db4a4..01c343a 100644
--- a/src/web/admin/login.html
+++ b/src/web/admin/login.html
@@ -13,23 +13,18 @@
 	<script type="text/javascript" src="./../js/request_server.js"></script>
 	<script type="text/javascript">
 		$(document).ready(function() {
-			sessionStorage.setItem("maestroID", -1);
-
 			$("#section").load("admin_section.html");
 		});
 
 		function login() {
-			let name = $("#maestro_name").val();
+			let name = $("#admin_name").val();
 			let password = $("#password").val();
 
 			sendRequestServer(	//url, sendParams, onSuccess, onFail, isDebugMode);
-				"./../server/maestro/login.php",
-				"maestro_name=" + name + "&password=" + password,
+				"./../server/admin/login.php",
+				"admin_name=" + name + "&password=" + password,
 
 				(jsonData) => {
-					maestroID = jsonData["maestroID"];
-					sessionStorage.setItem("maestroID", maestroID);
-
 					location.href = 'admin_register_list.html';
 				},
 
@@ -52,7 +47,7 @@
 
 	<div>
 		관리자 아이디
-		<input type="text" id="maestro_name" name="maestro_name"><br/>
+		<input type="text" id="admin_name" name="admin_name"><br/>
 		암호
 		<input type="password" id="password" name="password"><br/>
 	</div>
diff --git a/src/web/server/admin/login.php b/src/web/server/admin/login.php
new file mode 100644
index 0000000..9db217f
--- /dev/null
+++ b/src/web/server/admin/login.php
@@ -0,0 +1,89 @@
+<?php
+header("Content-Type: application/json");
+
+include "./../lib/send_reply_json.php";
+include "./../setup/connect_db.php";
+
+$adminName = $_POST["admin_name"];
+$password = $_POST["password"];
+
+
+$maestroID = get_admin_id($adminName);
+if($maestroID === null) {
+	set_error_code("not_registered_id");
+	set_error_message("등록되지 않은 서비스 관리자 아이디입니다.");
+	send_result_fail();
+	exit;
+}
+
+$loginData = login($adminName, $password);
+
+if($loginData === null) {
+	set_error_code("no_data");
+	set_error_message("로그인하지 못했습니다.");
+	send_result_fail();
+	exit;
+} else if($loginData[activateStatus] == 0) {
+	set_error_code("not_activated");
+	set_error_message("서비스 관리자 계정이 아직 활성화되지 않았습니다.");
+	send_result_fail();
+	exit;
+} else if($loginData[adminID] === null) {
+	set_error_code("wrong_password");
+	set_error_message("비밀번호가 틀렸습니다.");
+	send_result_fail();
+	exit;
+}
+
+set_data("adminID", $loginData[adminID]);
+set_data("accountType", $loginData[accountType]);
+set_data("activateStatus", $loginData[activateStatus]);
+send_result_success();
+exit;
+
+
+
+function get_admin_id($adminName) {
+	global $db_conn;
+
+	$query = "
+		SELECT AdminID
+		FROM moty_admin
+		WHERE Name = ?
+	";
+	$stmt = $db_conn->prepare($query);
+	$stmt->bind_param("s", $adminName);
+	$stmt->execute();
+	$stmt->bind_result($maestroID);
+	// while($stmt->fetch()) {
+	// 	;
+	// }
+	$stmt->fetch();
+	$stmt->close();
+
+	return $maestroID;
+}
+
+function login($adminName, $password) {
+	global $db_conn;
+
+	$query = "
+		SELECT AdminID, AccountType, ActivateStatus
+		FROM moty_admin
+		WHERE Name = ? AND Password = PASSWORD(?)
+	";
+	$stmt = $db_conn->prepare($query);
+	$stmt->bind_param("ss", $adminName, $password);
+	$stmt->execute();
+	$stmt->bind_result($adminID, $accountType, $activateStatus);
+	// while($stmt->fetch())
+	$stmt->fetch();
+	$stmt->close();
+
+	$result["adminID"] = $adminID;
+	$result["accountType"] = $accountType;
+	$result["activateStatus"] = $activateStatus;
+	return $result;
+}
+
+?>
\ No newline at end of file
diff --git a/src/web/sql/make_db.sql b/src/web/sql/make_db.sql
index a747541..1cb740d 100644
--- a/src/web/sql/make_db.sql
+++ b/src/web/sql/make_db.sql
@@ -1,3 +1,12 @@
+CREATE TABLE moty_admin (
+	AdminID INT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+	Name CHAR(50) NOT NULL,
+	Password CHAR(50) NOT NULL,
+	Email CHAR(50) NOT NULL,
+	AccountType INT UNSIGNED NOT NULL,
+	ActivateStatus INT UNSIGNED NOT NULL
+);
+
 CREATE TABLE moty_maestro (
 	MaestroID INT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
 	Name CHAR(50) NOT NULL,