From 2156d3f5c6e9cf369b6aa75d51aa68833cd7323d Mon Sep 17 00:00:00 2001
From: jeena <spam@jeenaparadies.net>
Date: Mon, 8 Jul 2013 22:40:09 +0200
Subject: [PATCH] added admin password file

---
 .gitignore                                           |  2 ++
 application/controller/AdminController.php           | 12 +++++++++++-
 config/admin.ini.example                             |  1 +
 ...tabase.config.ini => database.config.ini.example} |  8 ++++----
 4 files changed, 18 insertions(+), 5 deletions(-)
 create mode 100644 config/admin.ini.example
 rename config/{database.config.ini => database.config.ini.example} (96%)

diff --git a/.gitignore b/.gitignore
index e43b0f9..e6e8feb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,3 @@
 .DS_Store
+config/admin.ini
+config/database.config.ini
diff --git a/application/controller/AdminController.php b/application/controller/AdminController.php
index 342e69a..9513371 100644
--- a/application/controller/AdminController.php
+++ b/application/controller/AdminController.php
@@ -12,7 +12,7 @@ class AdminController extends Katharsis_Controller_Abstract
 	
 	public function loginAction()
 	{
-		if($this->_getParam('password') == '')
+		if($this->_getParam('password') == $this->getPassword())
 		{
 			$_SESSION['logged'] = 1;
 			$this->_location('index');
@@ -29,4 +29,14 @@ class AdminController extends Katharsis_Controller_Abstract
 		$_SESSION['logged'] = 0;
 		$this->_location('gate');
 	}
+
+	// Private
+
+	private function getPassword()
+	{
+		$admin_ini = parse_ini_file('config/admin.ini');
+		$password = $admin_ini["password"];
+
+		return $password;
+	}
 }
diff --git a/config/admin.ini.example b/config/admin.ini.example
new file mode 100644
index 0000000..3e61712
--- /dev/null
+++ b/config/admin.ini.example
@@ -0,0 +1 @@
+password = test
\ No newline at end of file
diff --git a/config/database.config.ini b/config/database.config.ini.example
similarity index 96%
rename from config/database.config.ini
rename to config/database.config.ini.example
index 3925417..c13bf57 100644
--- a/config/database.config.ini
+++ b/config/database.config.ini.example
@@ -1,5 +1,5 @@
-[connection:development:default]
-host = 127.0.0.1
-user = root
-password = 
+[connection:development:default]
+host = 127.0.0.1
+user = root
+password = 
 database = seinheit_ch
\ No newline at end of file