@@ -331,7 +331,7 @@ |
||
| 331 | 331 | } |
| 332 | 332 | $passwordClear = $_SERVER['PHP_AUTH_PW']; |
| 333 | 333 | $pwdOldEncryption = encryptOld($_SERVER['PHP_AUTH_PW']); |
| 334 | - }else{ |
|
| 334 | + } else{ |
|
| 335 | 335 | $passwordClear = htmlspecialchars_decode($dataReceived['pw']); |
| 336 | 336 | $pwdOldEncryption = encryptOld(htmlspecialchars_decode($dataReceived['pw'])); |
| 337 | 337 | $username = $antiXss->xss_clean(htmlspecialchars_decode($dataReceived['login'])); |
@@ -321,26 +321,26 @@ |
||
| 321 | 321 | $dataReceived = prepareExchangedData($sentData, "decode"); |
| 322 | 322 | |
| 323 | 323 | // prepare variables |
| 324 | - if (isset($SETTINGS['enable_http_request_login']) === true |
|
| 324 | + if (isset($SETTINGS['enable_http_request_login']) === true |
|
| 325 | 325 | && $SETTINGS['enable_http_request_login'] === '1' |
| 326 | 326 | && isset($_SERVER['PHP_AUTH_USER']) === true |
| 327 | 327 | && !(isset($SETTINGS['maintenance_mode']) === true |
| 328 | 328 | && $SETTINGS['maintenance_mode'] === '1') |
| 329 | 329 | ) { |
| 330 | 330 | if (strpos($_SERVER['PHP_AUTH_USER'], '@') !== false) { |
| 331 | - $username = explode("@", $_SERVER['PHP_AUTH_USER'])[0]; |
|
| 332 | - } elseif (strpos($_SERVER['PHP_AUTH_USER'], '\\') !== false) { |
|
| 333 | - $username = explode("\\", $_SERVER['PHP_AUTH_USER'])[1]; |
|
| 334 | - } else { |
|
| 335 | - $username = $_SERVER['PHP_AUTH_USER']; |
|
| 336 | - } |
|
| 337 | - $passwordClear = $_SERVER['PHP_AUTH_PW']; |
|
| 338 | - $pwdOldEncryption = encryptOld($_SERVER['PHP_AUTH_PW']); |
|
| 339 | - }else{ |
|
| 340 | - $passwordClear = htmlspecialchars_decode($dataReceived['pw']); |
|
| 341 | - $pwdOldEncryption = encryptOld(htmlspecialchars_decode($dataReceived['pw'])); |
|
| 342 | - $username = $antiXss->xss_clean(htmlspecialchars_decode($dataReceived['login'])); |
|
| 343 | - } |
|
| 331 | + $username = explode("@", $_SERVER['PHP_AUTH_USER'])[0]; |
|
| 332 | + } elseif (strpos($_SERVER['PHP_AUTH_USER'], '\\') !== false) { |
|
| 333 | + $username = explode("\\", $_SERVER['PHP_AUTH_USER'])[1]; |
|
| 334 | + } else { |
|
| 335 | + $username = $_SERVER['PHP_AUTH_USER']; |
|
| 336 | + } |
|
| 337 | + $passwordClear = $_SERVER['PHP_AUTH_PW']; |
|
| 338 | + $pwdOldEncryption = encryptOld($_SERVER['PHP_AUTH_PW']); |
|
| 339 | + }else{ |
|
| 340 | + $passwordClear = htmlspecialchars_decode($dataReceived['pw']); |
|
| 341 | + $pwdOldEncryption = encryptOld(htmlspecialchars_decode($dataReceived['pw'])); |
|
| 342 | + $username = $antiXss->xss_clean(htmlspecialchars_decode($dataReceived['login'])); |
|
| 343 | + } |
|
| 344 | 344 | $logError = ""; |
| 345 | 345 | $userPasswordVerified = false; |
| 346 | 346 | |
@@ -336,7 +336,7 @@ |
||
| 336 | 336 | } |
| 337 | 337 | $passwordClear = $_SERVER['PHP_AUTH_PW']; |
| 338 | 338 | $pwdOldEncryption = encryptOld($_SERVER['PHP_AUTH_PW']); |
| 339 | - }else{ |
|
| 339 | + } else { |
|
| 340 | 340 | $passwordClear = htmlspecialchars_decode($dataReceived['pw']); |
| 341 | 341 | $pwdOldEncryption = encryptOld(htmlspecialchars_decode($dataReceived['pw'])); |
| 342 | 342 | $username = $antiXss->xss_clean(htmlspecialchars_decode($dataReceived['login'])); |
@@ -700,20 +700,20 @@ |
||
| 700 | 700 | && $SETTINGS['maintenance_mode'] === '1') |
| 701 | 701 | ) { |
| 702 | 702 | if (strpos($_SERVER['PHP_AUTH_USER'], '@') !== false) { |
| 703 | - $username = explode("@", $_SERVER['PHP_AUTH_USER'])[0]; |
|
| 704 | - } elseif (strpos($_SERVER['PHP_AUTH_USER'], '\\') !== false) { |
|
| 705 | - $username = explode("\\", $_SERVER['PHP_AUTH_USER'])[1]; |
|
| 706 | - } else { |
|
| 707 | - $username = $_SERVER['PHP_AUTH_USER']; |
|
| 708 | - } |
|
| 709 | - echo ' |
|
| 703 | + $username = explode("@", $_SERVER['PHP_AUTH_USER'])[0]; |
|
| 704 | + } elseif (strpos($_SERVER['PHP_AUTH_USER'], '\\') !== false) { |
|
| 705 | + $username = explode("\\", $_SERVER['PHP_AUTH_USER'])[1]; |
|
| 706 | + } else { |
|
| 707 | + $username = $_SERVER['PHP_AUTH_USER']; |
|
| 708 | + } |
|
| 709 | + echo ' |
|
| 710 | 710 | <div style="margin-bottom:3px;"> |
| 711 | 711 | <label for="login" class="form_label">', isset($SETTINGS['custom_login_text']) && !empty($SETTINGS['custom_login_text']) ? (string) $SETTINGS['custom_login_text'] : $LANG['index_login'], '</label> |
| 712 | 712 | <input type="text" size="10" id="login" name="login" class="input_text text ui-widget-content ui-corner-all" value="' , $username , '" readonly /> |
| 713 | 713 | <span id="login_check_wait" style="display:none; float:right;"><i class="fa fa-cog fa-spin fa-1x"></i></span> |
| 714 | 714 | </div>'; |
| 715 | - } else { |
|
| 716 | - echo ' |
|
| 715 | + } else { |
|
| 716 | + echo ' |
|
| 717 | 717 | <div style="margin-bottom:3px;"> |
| 718 | 718 | <label for="login" class="form_label">', isset($SETTINGS['custom_login_text']) && !empty($SETTINGS['custom_login_text']) ? (string) $SETTINGS['custom_login_text'] : $LANG['index_login'], '</label> |
| 719 | 719 | <input type="text" size="10" id="login" name="login" class="input_text text ui-widget-content ui-corner-all" value="', empty($post_login) === false ? $post_login : '', '" /> |
@@ -91,34 +91,34 @@ discard block |
||
| 91 | 91 | require_once $SETTINGS['cpassman_dir'].'/sources/core.php'; |
| 92 | 92 | |
| 93 | 93 | // Prepare POST variables |
| 94 | -$post_language = filter_input(INPUT_POST, 'language', FILTER_SANITIZE_STRING); |
|
| 95 | -$post_sig_response = filter_input(INPUT_POST, 'sig_response', FILTER_SANITIZE_STRING); |
|
| 96 | -$post_duo_login = filter_input(INPUT_POST, 'duo_login', FILTER_SANITIZE_STRING); |
|
| 97 | -$post_duo_data = filter_input(INPUT_POST, 'duo_data', FILTER_SANITIZE_STRING); |
|
| 98 | -$post_login = filter_input(INPUT_POST, 'login', FILTER_SANITIZE_STRING); |
|
| 99 | -$post_pw = filter_input(INPUT_POST, 'pw', FILTER_SANITIZE_STRING); |
|
| 94 | +$post_language = filter_input(INPUT_POST, 'language', FILTER_SANITIZE_STRING); |
|
| 95 | +$post_sig_response = filter_input(INPUT_POST, 'sig_response', FILTER_SANITIZE_STRING); |
|
| 96 | +$post_duo_login = filter_input(INPUT_POST, 'duo_login', FILTER_SANITIZE_STRING); |
|
| 97 | +$post_duo_data = filter_input(INPUT_POST, 'duo_data', FILTER_SANITIZE_STRING); |
|
| 98 | +$post_login = filter_input(INPUT_POST, 'login', FILTER_SANITIZE_STRING); |
|
| 99 | +$post_pw = filter_input(INPUT_POST, 'pw', FILTER_SANITIZE_STRING); |
|
| 100 | 100 | |
| 101 | 101 | // Prepare superGlobal variables |
| 102 | -$session_user_language = $superGlobal->get("user_language", "SESSION"); |
|
| 103 | -$session_user_id = $superGlobal->get("user_id", "SESSION"); |
|
| 104 | -$session_user_flag = $superGlobal->get("user_language_flag", "SESSION"); |
|
| 105 | -$session_user_admin = $superGlobal->get("user_admin", "SESSION"); |
|
| 102 | +$session_user_language = $superGlobal->get("user_language", "SESSION"); |
|
| 103 | +$session_user_id = $superGlobal->get("user_id", "SESSION"); |
|
| 104 | +$session_user_flag = $superGlobal->get("user_language_flag", "SESSION"); |
|
| 105 | +$session_user_admin = $superGlobal->get("user_admin", "SESSION"); |
|
| 106 | 106 | $session_user_human_resources = $superGlobal->get("user_can_manage_all_users", "SESSION"); |
| 107 | -$session_user_avatar_thumb = $superGlobal->get("user_avatar_thumb", "SESSION"); |
|
| 108 | -$session_name = $superGlobal->get("name", "SESSION"); |
|
| 109 | -$session_lastname = $superGlobal->get("lastname", "SESSION"); |
|
| 110 | -$session_user_manager = $superGlobal->get("user_manager", "SESSION"); |
|
| 111 | -$session_user_read_only = $superGlobal->get("user_read_only", "SESSION"); |
|
| 112 | -$session_is_admin = $superGlobal->get("is_admin", "SESSION"); |
|
| 113 | -$session_login = $superGlobal->get("login", "SESSION"); |
|
| 114 | -$session_validite_pw = $superGlobal->get("validite_pw", "SESSION"); |
|
| 115 | -$session_nb_folders = $superGlobal->get("nb_folders", "SESSION"); |
|
| 116 | -$session_nb_roles = $superGlobal->get("nb_roles", "SESSION"); |
|
| 117 | -$session_autoriser = $superGlobal->get("autoriser", "SESSION"); |
|
| 118 | -$session_hide_maintenance = $superGlobal->get("hide_maintenance", "SESSION"); |
|
| 119 | -$session_initial_url = $superGlobal->get("initial_url", "SESSION"); |
|
| 120 | -$server_request_uri = $superGlobal->get("REQUEST_URI", "SERVER"); |
|
| 121 | -$session_nb_users_online = $superGlobal->get("nb_users_online", "SESSION"); |
|
| 107 | +$session_user_avatar_thumb = $superGlobal->get("user_avatar_thumb", "SESSION"); |
|
| 108 | +$session_name = $superGlobal->get("name", "SESSION"); |
|
| 109 | +$session_lastname = $superGlobal->get("lastname", "SESSION"); |
|
| 110 | +$session_user_manager = $superGlobal->get("user_manager", "SESSION"); |
|
| 111 | +$session_user_read_only = $superGlobal->get("user_read_only", "SESSION"); |
|
| 112 | +$session_is_admin = $superGlobal->get("is_admin", "SESSION"); |
|
| 113 | +$session_login = $superGlobal->get("login", "SESSION"); |
|
| 114 | +$session_validite_pw = $superGlobal->get("validite_pw", "SESSION"); |
|
| 115 | +$session_nb_folders = $superGlobal->get("nb_folders", "SESSION"); |
|
| 116 | +$session_nb_roles = $superGlobal->get("nb_roles", "SESSION"); |
|
| 117 | +$session_autoriser = $superGlobal->get("autoriser", "SESSION"); |
|
| 118 | +$session_hide_maintenance = $superGlobal->get("hide_maintenance", "SESSION"); |
|
| 119 | +$session_initial_url = $superGlobal->get("initial_url", "SESSION"); |
|
| 120 | +$server_request_uri = $superGlobal->get("REQUEST_URI", "SERVER"); |
|
| 121 | +$session_nb_users_online = $superGlobal->get("nb_users_online", "SESSION"); |
|
| 122 | 122 | |
| 123 | 123 | |
| 124 | 124 | /* DEFINE WHAT LANGUAGE TO USE */ |
@@ -239,10 +239,7 @@ discard block |
||
| 239 | 239 | <div style="float:right; margin:-10px 5px 0 0; color:#FFF;">' |
| 240 | 240 | .$LANG['index_welcome'].' <b>'.$session_name.' '.$session_lastname |
| 241 | 241 | .' ['.$session_login.']</b> - ' |
| 242 | - , $session_user_admin === '1' ? $LANG['god'] : |
|
| 243 | - ($session_user_manager === '1' ? $LANG['gestionnaire'] : |
|
| 244 | - ($session_user_read_only === '1' ? $LANG['read_only_account'] : |
|
| 245 | - ($session_user_human_resources === '1' ? $LANG['human_resources'] :$LANG['user']) |
|
| 242 | + , $session_user_admin === '1' ? $LANG['god'] : ($session_user_manager === '1' ? $LANG['gestionnaire'] : ($session_user_read_only === '1' ? $LANG['read_only_account'] : ($session_user_human_resources === '1' ? $LANG['human_resources'] : $LANG['user']) |
|
| 246 | 243 | ) |
| 247 | 244 | ), ' '.strtolower($LANG['index_login']).'</div>'; |
| 248 | 245 | |
@@ -709,7 +706,7 @@ discard block |
||
| 709 | 706 | echo ' |
| 710 | 707 | <div style="margin-bottom:3px;"> |
| 711 | 708 | <label for="login" class="form_label">', isset($SETTINGS['custom_login_text']) && !empty($SETTINGS['custom_login_text']) ? (string) $SETTINGS['custom_login_text'] : $LANG['index_login'], '</label> |
| 712 | - <input type="text" size="10" id="login" name="login" class="input_text text ui-widget-content ui-corner-all" value="' , $username , '" readonly /> |
|
| 709 | + <input type="text" size="10" id="login" name="login" class="input_text text ui-widget-content ui-corner-all" value="' , $username, '" readonly /> |
|
| 713 | 710 | <span id="login_check_wait" style="display:none; float:right;"><i class="fa fa-cog fa-spin fa-1x"></i></span> |
| 714 | 711 | </div>'; |
| 715 | 712 | } else { |
@@ -733,7 +730,7 @@ discard block |
||
| 733 | 730 | </div>'; |
| 734 | 731 | } |
| 735 | 732 | |
| 736 | - if (!(isset($SETTINGS['enable_http_request_login']) === true && $SETTINGS['enable_http_request_login'] === '1' && isset($_SERVER['PHP_AUTH_USER']) === true && !(isset($SETTINGS['maintenance_mode']) === true && $SETTINGS['maintenance_mode'] === '1')) ) { |
|
| 733 | + if (!(isset($SETTINGS['enable_http_request_login']) === true && $SETTINGS['enable_http_request_login'] === '1' && isset($_SERVER['PHP_AUTH_USER']) === true && !(isset($SETTINGS['maintenance_mode']) === true && $SETTINGS['maintenance_mode'] === '1'))) { |
|
| 737 | 734 | echo ' |
| 738 | 735 | <div id="connect_pw" style="margin-bottom:3px;"> |
| 739 | 736 | <label for="pw" class="form_label" id="user_pwd">'.$LANG['index_password'].'</label> |
@@ -788,7 +785,7 @@ discard block |
||
| 788 | 785 | <script> |
| 789 | 786 | var seconds = 3; |
| 790 | 787 | function updateLogonButton(timeToGo){ |
| 791 | - document.getElementById("but_identify_user").value = "' . $LANG['duration_login_attempt'] . ' " + timeToGo; |
|
| 788 | + document.getElementById("but_identify_user").value = "' . $LANG['duration_login_attempt'].' " + timeToGo; |
|
| 792 | 789 | } |
| 793 | 790 | $( window ).on( "load", function() { |
| 794 | 791 | updateLogonButton(seconds); |
@@ -842,7 +839,7 @@ discard block |
||
| 842 | 839 | <a href="https://www.reddit.com/r/TeamPass/" target="_blank" style="color:#F0F0F0;" class="tip" title="'.addslashes($LANG['admin_help']).'"><i class="fa fa-reddit-alien"></i></a> |
| 843 | 840 | |
| 844 | 841 | ', ($session_user_id !== null && empty($session_user_id) === false) ? ' |
| 845 | - <a href="#" style="color:#F0F0F0;" class="tip" title="'.addslashes($LANG['bugs_page']).'" onclick="generateBugReport()"><i class="fa fa-bug"></i></a>' : '' ,' |
|
| 842 | + <a href="#" style="color:#F0F0F0;" class="tip" title="'.addslashes($LANG['bugs_page']).'" onclick="generateBugReport()"><i class="fa fa-bug"></i></a>' : '', ' |
|
| 846 | 843 | </div> |
| 847 | 844 | <div style="float:left;width:32%;text-align:center;"> |
| 848 | 845 | ', ($session_user_id !== null && empty($session_user_id) === false) ? '<i class="fa fa-users"></i> '.$session_nb_users_online.' '.$LANG['users_online'].' | <i class="fa fa-hourglass-end"></i> '.$LANG['index_expiration_in'].' <div style="display:inline;" id="countdown"></div>' : '', ' |
@@ -13,7 +13,7 @@ |
||
| 13 | 13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
| 14 | 14 | */ |
| 15 | 15 | global $LANG; |
| 16 | -$LANG = array ( |
|
| 16 | +$LANG = array( |
|
| 17 | 17 | 'enable_http_request_login' => 'Automatic login using http header credentials', |
| 18 | 18 | 'duration_login_attempt' => 'Seconds till auto login:', |
| 19 | 19 | 'newly_created_user_role' => 'Newly created user has role', |