chamilo / chamilo-lms

                $userIsReallyOnline = user_is_online($userId);

                // Trying double login.

                if (!empty($loginData) && $userIsReallyOnline == true) {

                    session_regenerate_id();

                    Session::destroy();

                    header('Location: '.api_get_path(WEB_PATH).'index.php?loginFailed=1&error=multiple_connection_not_allowed');

                    exit;

                } else {

                    // First time

                    Session::write('first_user_login', 1);

                }

            }

        }

    }

                        );

                    }

                }

                if ($matches_domain) {

                    //make all the process of checking

                    //if the user exists (delegated to the sso class)

                    $osso->check_user();

                } else {

                    error_log('Check the sso_referer URL in your script, it doesn\'t match any of the possibilities');

                    //Request comes from unknown source

                    $loginFailed = true;

                    Session::erase('_uid');

                    Session::write('loginFailed', '1');

                    header('Location: '.api_get_path(WEB_PATH).'index.php?loginFailed=1&error=unrecognize_sso_origin');

                    exit;

                }

            }

            //end logout ... else ... login

        } elseif ($logout) {

                }

                // Redirect to login page

                if ($captchaValidated == false) {

                    $loginFailed = true;

                    Session::erase('_uid');

                    Session::write('loginFailed', '1');

                    header('Location: '.api_get_path(WEB_PATH).'index.php?loginFailed=1&error=wrong_captcha');

                    exit;

                }

                // Check if account is blocked by captcha user extra field see function api_block_account_captcha()

                $blockedUntilDate = api_get_user_blocked_by_captcha($login);

                    if (time() > api_strtotime($blockedUntilDate, 'UTC')) {

                        api_clean_account_captcha($login);

                    } else {

                        $loginFailed = true;

                        Session::erase('_uid');

                        Session::write('loginFailed', '1');

                        header('Location: '.api_get_path(WEB_PATH).'index.php?loginFailed=1&error=blocked_by_captcha');

                        exit;

                    }

                }

            }

                                            Session::write('_user', $_user);

                                            Event::event_login($_user['user_id']);

                                            $logging_in = true;

                                        } else {

                                            $loginFailed = true;

                                            Session::erase('_uid');

                                            Session::write('loginFailed', '1');

                                            header(

                                                'Location: '.api_get_path(WEB_PATH)

                                                .'index.php?loginFailed=1&error=access_url_inactive'

                                            );

                                            exit;

                                        }

                                    }

                                }

                            } else {

                                $logging_in = true;

                            }

                        } else {

                            $loginFailed = true;

                            Session::erase('_uid');

                            Session::write('loginFailed', '1');

                            header(

                                'Location: '.api_get_path(WEB_PATH)

                                .'index.php?loginFailed=1&error=account_expired'

                            );

                            exit;

                        }

                    } else {

                        $loginFailed = true;

                        Session::erase('_uid');

                            );

                            exit;

                        }

                    } else {

                        $loginFailed = true;

                        Session::erase('_uid');

                        Session::write('loginFailed', '1');

                        header(

                            'Location: '.api_get_path(WEB_PATH)

                            .'index.php?loginFailed=1&error=account_inactive'

                        );

                        exit;

                    }

                } else {

                    // login failed: username or password incorrect

                    $loginFailed = true;