Context Navigation

source: branches/2.2/mobile/login.php @ 4126

Revision 4126, 7.5 KB checked in by alexandrecorreia, 13 years ago (diff)
Ticket #1787 - Correção para evitar os vários redirecionamentos para o login automatico

Rev	Line
[454]	1	<?php
	2	//TODO: Trocar name="login" para name="user" no campo username
[3492]	3
[454]	4	$phpgw_info = array();
	5	$submit = False;
	6
	7	$GLOBALS['phpgw_info']['flags'] = array(
	8	'disable_Template_class' => True,
	9	'login' => True,
	10	'currentapp' => 'login',
	11	'currentdir' => '/mobile',
	12	'noheader' => True
	13	);
[4116]	14
[4126]	15	include_once('../header.inc.php');
	16	include_once('./mobile_header.inc.php');
[454]	17	$GLOBALS['sessionid'] = @$_GET['sessionid'] ? $_GET['sessionid'] : @$_COOKIE['sessionid'];
[4116]	18
[454]	19	if(isset($GLOBALS['sessionid']) && $_GET['cd'] != 10 && $_GET['cd'] != 1)
[1851]	20	start_prefered_app();
[3553]	21
[4126]	22	if ( $GLOBALS['phpgw_info']['server']['use_https'] > 0 )
	23	{
	24	if ($_SERVER['HTTPS'] != 'on')
	25	{
	26	$proxies = explode(',',$_SERVER['HTTP_X_FORWARDED_HOST']);
[3553]	27	$fwConstruct = isset($_SERVER['HTTP_X_FORWARDED_HOST']) ? $proxies[0] : $_SERVER['HTTP_HOST'];
[1851]	28	Header('Location: https://' . $fwConstruct . '/' . $_SERVER['REQUEST_URI']);
[454]	29	exit;
[3553]	30	}
[454]	31	}
[1851]	32
	33	$GLOBALS['phpgw']->session = CreateObject('phpgwapi.sessions');
	34	$GLOBALS['phpgw_info']['server']['template_dir'] = PHPGW_SERVER_ROOT.$GLOBALS['phpgw_info']['flags']['currentdir'].'/templates/'.$GLOBALS['phpgw_info']['user']['preferences']['common']['template_set'];
[3483]	35	$tmpl = CreateObject('phpgwapi.Template', PHPGW_SERVER_ROOT . '/mobile/templates/'.$GLOBALS['phpgw_info']['server']['template_set']);
[454]	36	$GLOBALS['phpgw_info']['user']['preferences']['common']['template_set'] = $GLOBALS['phpgw_info']['login_template_set'];
	37	$tmpl->set_file(array('login_form' => 'login.tpl'));
[3553]	38	$tmpl->set_block('login_form','page');
	39	$tmpl->set_block('login_form','success_message');
	40	$tmpl->set_block('login_form','error_message');
	41
	42	//verificando a mensagem erro ou sucesso
	43	$cd = check_logoutcode($_GET['cd']);
[3571]	44	$tmpl->set_var('message', $cd);
[3553]	45
	46	if(trim($cd) != "")
[3571]	47	$tmpl->parse('message_box', (($_GET['cd'] == 1) ? 'success_message' : 'error_message') ,true);
[4116]	48	//detect if the user has a mobile browser
	49
	50	$browser = CreateObject('mobile.browser');
	51
[4126]	52	switch ($browser->get_platform())
	53	{
[4116]	54	case browser::PLATFORM_IPHONE:
	55	case browser::PLATFORM_IPOD:
	56	case browser::PLATFORM_IPAD:
	57	case browser::PLATFORM_BLACKBERRY:
	58	case browser::PLATFORM_NOKIA:
	59	case browser::PLATFORM_ANDROID:
	60	$tmpl->set_var('os_browser',$browser->get_platform());
	61	break;
	62	default:
	63	$tmpl->set_var('os_browser',false);
	64	//$tmpl->set_var('os_browser',$browser->get_platform());
	65	break;
	66	}
[1851]	67
[454]	68	function check_logoutcode($code) {
	69	switch($code) {
	70	case 1:
	71	logout();
	72	return lang('You have been successfully logged out');
[4116]	73
[454]	74	case 2:
	75	return lang('Sorry, your login has expired');
[4116]	76
[454]	77	case 4:
	78	return lang('Cookies are required to login to this site.');
[4116]	79
[454]	80	case 5:
[3553]	81	return lang('Bad login or password');
[454]	82	case 6:
[3553]	83	return lang('Your password has expired, and you do not have access to change it');
[454]	84	case 98:
[3553]	85	return lang('Account is expired');
[454]	86	case 99:
[3553]	87	return lang('Blocked, too many attempts');
[454]	88	case 10:
	89	$GLOBALS['phpgw']->session->phpgw_setcookie('sessionid');
	90	$GLOBALS['phpgw']->session->phpgw_setcookie('kp3');
	91	$GLOBALS['phpgw']->session->phpgw_setcookie('domain');
	92	if($GLOBALS['phpgw_info']['server']['sessions_type'] == 'php4') {
	93	$GLOBALS['phpgw']->session->phpgw_setcookie(PHPGW_PHPSESSID);
	94	}
[3553]	95	return lang('Your session could not be verified.');
[454]	96	default:
[3553]	97	return '';
[454]	98	}
	99	}
	100
	101	if($GLOBALS['phpgw_info']['server']['auth_type'] == 'http' && isset($_SERVER['PHP_AUTH_USER'])) {
	102	$submit = True;
	103	$login = $_SERVER['PHP_AUTH_USER'];
	104	$passwd = $_SERVER['PHP_AUTH_PW'];
	105	$passwd_type = 'text';
	106	}
[4116]	107	// Automatic login from browser cookies
	108	elseif(get_var('lem',array('GET','COOKIE')) && get_var('pem',array('GET','COOKIE')))
	109	{
	110	if(!$_GET['cd'] \|\| $_GET['cd'] == '1' \|\| $_GET['cd'] == '10') {
	111	$submit = True;
	112	$login = base64_decode(get_var('lem',array('GET','COOKIE')));
	113	$passwd = base64_decode(get_var('pem',array('GET','COOKIE')));
	114	$passwd_type = 'text';
	115	}
	116	else {
	117	$GLOBALS['phpgw']->session->phpgw_setcookie('lem');
	118	$GLOBALS['phpgw']->session->phpgw_setcookie('pem');
	119	}
	120	}
[4126]	121	else
	122	{
[454]	123	$passwd = $_POST['passwd'];
	124	$passwd_type = $_POST['passwd_type'];
	125	}
	126
[4126]	127	if( isset($passwd_type) \|\| $_POST['submitit_x'] \|\| $_POST['submitit_y'] \|\| $submit )
[4116]	128	{
	129	if( !get_var('pem',array('GET','COOKIE')) && getenv('REQUEST_METHOD') != 'POST'
	130	&& $_SERVER['REQUEST_METHOD'] != 'POST' && !isset($_SERVER['PHP_AUTH_USER']) && !isset($_SERVER['SSL_CLIENT_S_DN']))
	131	{
[454]	132	$GLOBALS['phpgw']->redirect($GLOBALS['phpgw']->link($GLOBALS['phpgw_info']['flags']['currentdir'].'/login.php','cd=5'));
	133	}
	134
	135	if(!$submit)
[4116]	136	{
[454]	137	$login = $_POST['login'];
[4116]	138	}
[454]	139
	140	$GLOBALS['sessionid'] = $GLOBALS['phpgw']->session->create(strtolower($login),$passwd,$passwd_type,'u');
	141
	142	if(!isset($GLOBALS['sessionid']) \|\| ! $GLOBALS['sessionid']){
	143	$GLOBALS['phpgw']->redirect($GLOBALS['phpgw_info']['server']['webserver_url'] .$GLOBALS['phpgw_info']['flags']['currentdir'].'/login.php?cd=' . $GLOBALS['phpgw']->session->cd_reason);
	144	}
[4116]	145	else
	146	{
	147	if(isset($_POST['max_resolution']) && $_POST['max_resolution'] > 600)
	148	{
[3731]	149	$GLOBALS['phpgw_info']['user']['preferences']['common']['default_mobile_app'] = 'mobilemail';
	150	$GLOBALS['phpgw']->session->appsession('mobile.layout','mobile','mini_desktop');
[4116]	151	}
	152	else
	153	{
[3731]	154	$GLOBALS['phpgw']->session->appsession('mobile.layout','mobile','mini_mobile');
	155	}
	156
[3892]	157	$preferences = $GLOBALS['phpgw']->preferences->read();
	158	$_SESSION['phpgw_info']['user']['preferences']['expressoMail'] = $preferences['expressoMail'];
	159
[4116]	160	if($_POST['save_login'] == 'yes')
	161	{
	162	// Time to keep values into cookies
	163	$ttl = time()+15552000; // Six Months
	164	$GLOBALS['phpgw']->session->phpgw_setcookie('lem', base64_encode(strtolower($login)),$ttl); // lem = login
	165	$GLOBALS['phpgw']->session->phpgw_setcookie('pem', base64_encode($passwd), $ttl); // pem = password
	166	}
[623]	167	start_prefered_app();
[454]	168	}
	169	}
[4126]	170	elseif ($_GET['lang'])
	171	{
[454]	172	$GLOBALS['phpgw_info']['user']['preferences']['common']['lang'] = $_GET['lang'];
	173	}
[4126]	174	elseif(!isset($_COOKIE['last_loginid']) \|\| !$prefs->account_id)
	175	{
[454]	176	list($lang) = explode(',',$_SERVER['HTTP_ACCEPT_LANGUAGE']);
	177	$GLOBALS['phpgw_info']['user']['preferences']['common']['lang'] = $lang;
	178	}
	179
	180	$tmpl->set_var('charset',$GLOBALS['phpgw']->translation->charset());
	181	$tmpl->set_var('cookie',$last_loginid);
[3553]	182	$tmpl->set_var('lang_username', lang('username'));
	183	$tmpl->set_var('lang_password', lang('password'));
	184	$tmpl->set_var('lang_login', lang('login'));
	185	$tmpl->set_var('lang_notices', lang('notices'));
[454]	186	$tmpl->set_var('website_title', $GLOBALS['phpgw_info']['server']['site_title']);
	187	$tmpl->set_var('template_set',$GLOBALS['phpgw_info']['login_template_set']);
	188	$tmpl->set_var('language_select','');
	189	$tmpl->set_var($var);
	190	$tmpl->set_block('login_form','language_select');
[3553]	191	$tmpl->pfp('loginout','page');
[454]	192
[4116]	193	function logout()
	194	{
[454]	195	$verified = $GLOBALS['phpgw']->session->verify();
	196	if ($verified)
	197	{
	198	if (file_exists($GLOBALS['phpgw_info']['server']['temp_dir'] . SEP . $GLOBALS['sessionid']))
	199	{
	200	$dh = opendir($GLOBALS['phpgw_info']['server']['temp_dir'] . SEP . $GLOBALS['sessionid']);
	201	while ($file = readdir($dh))
	202	{
	203	if ($file != '.' && $file != '..')
	204	{
	205	unlink($GLOBALS['phpgw_info']['server']['temp_dir'] . SEP . $GLOBALS['sessionid'] . SEP . $file);
	206	}
	207	}
	208	rmdir($GLOBALS['phpgw_info']['server']['temp_dir'] . SEP . $GLOBALS['sessionid']);
	209	}
	210	$GLOBALS['phpgw']->hooks->process('logout');
	211	$GLOBALS['phpgw']->session->destroy($GLOBALS['sessionid'],$GLOBALS['kp3']);
	212	}
	213	}
	214	?>

Note: See TracBrowser for help on using the repository browser.

Download in other formats: