Changeset 3448 for branches/2.2/login.php

Timestamp:

11/03/10 08:21:13 (13 years ago)

Author:

rafaelraymundo

Message:

Ticket #990 - Vulnerabilidades no Anti robo Captcha do Login

File:

• branches/2.2/login.php (modified) (1 diff)

branches/2.2/login.php

@@ -99 +99 @@
                 $GLOBALS['phpgw']->session->phpgw_setcookie('serverID', $GLOBALS['phpgw_info']['server']['use_frontend_id']);
         }
-
-if( $GLOBALS[ 'phpgw_info' ][ 'server' ][ 'captcha' ] == 1 )
-{
-        $key_convert = md5_file( dirname( __FILE__ ) . '/header.inc.php' );
-        if ( ! $key_convert )
-        {
-                echo '<b>' . lang( 'Error in access. Please, alert the Administrator.' ) . '</b>';
-                exit;
-        }
-        session_name('ZABX');
-        if($_COOKIE['ZABX'] && $key_convert)
-        {
-                $aux = session_convert(base64_decode($_COOKIE['ZABX']),$key_convert);
-                if(substr($aux,0,32) == $key_convert)
-                {
-                        session_id(substr($aux,32));
-                }
-                else
-                {
-                        $GLOBALS['phpgw']->redirect($GLOBALS['phpgw']->link('/login.php','cd=5'));
-                }
-        }
-        session_start();
-}
-
+if($GLOBALS['phpgw_info']['server']['captcha']==1)
+  {
+     session_start();
+  }
 include(personalize_include_path('phpgwapi','login'));
 ?>