Changeset 3437 for branches/2.2/login.php

Timestamp:

10/29/10 10:14:12 (14 years ago)

Author:

rafaelraymundo

Message:

Ticket #990 - Vulnerabilidades no Anti robo Captcha do Login.

File:

• branches/2.2/login.php (modified) (2 diffs)

branches/2.2/login.php

@@ -1 +1 @@
 <?php
-//Valida a existencia do cookie, antes de grava-lo
-if(isset($_COOKIE['contador'])) {
-        $valor_cookie = $_COOKIE['contador'];
-        if( isset( $_POST['user'] ) && isset( $_POST['passwd'] ) )
-                {
-                $valor_cookie = $valor_cookie + 1;
-                setcookie("contador", $valor_cookie,0);
-                }
-        }
-        //Cookie inexistente: tenta gravar um
-        else
-        {
-        if (setcookie("contador", 1,0))
-                //echo "OK, cookie gravado.";
-                $valor_cookie = 1;
-                else
-                //echo "Nao gravou o cookie";
-                $valor_cookie = "9999"; // forca captcha
-        }
-// logout, inicia contador novamente.....
-if( ( isset( $_GET[ 'cd' ] ) && ( $_GET['cd']=='1' || $_GET['cd'] == 10 ) ) || ( isset( $_COOKIE['sessionid'] ) ) )
-        {
-        $valor_cookie = 1;
-        setcookie("contador", 1,0);
-        }
-
         /**************************************************************************\
         * eGroupWare login                                                         *
@@ -125 +99 @@
                 $GLOBALS['phpgw']->session->phpgw_setcookie('serverID', $GLOBALS['phpgw_info']['server']['use_frontend_id']);
         }
-
+if($GLOBALS['phpgw_info']['server']['captcha']==1)
+  {
+    $key_convert = md5_file($_SERVER["DOCUMENT_ROOT"].'header.inc.php');
+    if(!$key_convert)
+        {
+            echo '<b>' . lang('Error in access. Please, alert the Administrator.') . '</b>';
+            exit();
+        }
+    session_name('ZABX');
+    if($_COOKIE['ZABX'] && $key_convert)
+        {
+            $aux = session_convert(base64_decode($_COOKIE['ZABX']),$key_convert);
+            if(substr($aux,0,32) == $key_convert)
+                {
+                    session_id(substr($aux,32));
+                }
+            else
+                {
+                    $GLOBALS['phpgw']->redirect($GLOBALS['phpgw']->link('/login.php','cd=5'));
+                }
+        }
+     session_start();
+  }
 include(personalize_include_path('phpgwapi','login'));
 ?>