/login.php
PHP | 351 lines | 237 code | 75 blank | 39 comment | 74 complexity | 6aba937ac3b01d2d364f4b86ae65a756 MD5 | raw file
Possible License(s): GPL-2.0
- <?php
- /**
- * Copyright (C) 2008-2010 FluxBB
- * based on code by Rickard Andersson copyright (C) 2002-2008 PunBB
- * License: http://www.gnu.org/licenses/gpl.html GPL version 2 or higher
- */
- if (isset($_GET['action']))
- define('PUN_QUIET_VISIT', 1);
- define('PUN_ROOT', dirname(__FILE__).'/');
- require PUN_ROOT.'include/common.php';
- // Load the login.php language file
- require PUN_ROOT.'lang/'.$pun_user['language'].'/login.php';
- $action = isset($_GET['action']) ? $_GET['action'] : null;
- if (isset($_POST['form_sent']) && $action == 'in')
- {
- $form_username = pun_trim($_POST['req_username']);
- $form_password = pun_trim($_POST['req_password']);
- $save_pass = isset($_POST['save_pass']);
- $username_sql = ($db_type == 'mysql' || $db_type == 'mysqli' || $db_type == 'mysql_innodb' || $db_type == 'mysqli_innodb') ? 'u.username=\''.$db->escape($form_username).'\'' : 'LOWER(u.username)=LOWER(\''.$db->escape($form_username).'\')';
- $result = $db->query('SELECT * FROM '.$db->prefix.'users AS u LEFT JOIN '.$db->prefix.'session AS s ON s.user_id=u.id WHERE '.$username_sql) or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
- $cur_user = $db->fetch_assoc($result);
- $authorized = false;
- if (!empty($cur_user['password']))
- {
- $form_password_hash = pun_hash($form_password); // Will result in a SHA-1 hash
- // If there is a salt in the database we have upgraded from 1.3-legacy though havent yet logged in
- if (!empty($cur_user['salt']))
- {
- if (sha1($cur_user['salt'].sha1($form_password)) == $cur_user['password']) // 1.3 used sha1(salt.sha1(pass))
- {
- $authorized = true;
- $db->query('UPDATE '.$db->prefix.'users SET password=\''.$form_password_hash.'\', salt=NULL WHERE id='.$cur_user['id']) or error('Unable to update user password', __FILE__, __LINE__, $db->error());
- }
- }
- // If the length isn't 40 then the password isn't using sha1, so it must be md5 from 1.2
- else if (strlen($cur_user['password']) != 40)
- {
- if (md5($form_password) == $cur_user['password'])
- {
- $authorized = true;
- $db->query('UPDATE '.$db->prefix.'users SET password=\''.$form_password_hash.'\' WHERE id='.$cur_user['id']) or error('Unable to update user password', __FILE__, __LINE__, $db->error());
- }
- }
- // Otherwise we should have a normal sha1 password
- else {
- $authorized = ($cur_user['password'] == $form_password_hash);
- } //End if - else.
- }
- if (!$authorized) {
- sleep(3);
- foreach ($_HOOKS['users'] as $hook) {
- $hook->login_failed($cur_user['id']);
- } //End foreach().
- message($lang_login['Wrong user/pass'].' <a href="login.php?action=forget">'.$lang_login['Forgotten pass'].'</a>');
- } //End if.
-
- foreach ($_HOOKS['users'] as $hook) {
- $hook->login($cur_user['id']);
- } //End foreach().
- // Update the status if this is the first time the user logged in
- if ($cur_user['group_id'] == PUN_UNVERIFIED) {
- $db->query('UPDATE '.$db->prefix.'users SET group_id='.$pun_config['o_default_user_group'].' WHERE id='.$cur_user['id']) or error('Unable to update user status', __FILE__, __LINE__, $db->error());
-
- $log = '';
- apply_rules($log);
-
- // Regenerate the users info cache
- if (!defined('FORUM_CACHE_FUNCTIONS_LOADED'))
- require PUN_ROOT.'include/cache.php';
-
- generate_users_info_cache();
- } //End if.
- // Remove this users guest entry from the online list
- $db->query('DELETE FROM '.$db->prefix.'online WHERE ident=\''.$db->escape(get_remote_address()).'\'') or error('Unable to delete from online list', __FILE__, __LINE__, $db->error());
-
- $now = gmmktime();
-
- $new_token = gen_token();
-
- //Should we prevent them from getting a new token?
- if ($pun_config['o_regen_token'] != '1' && $save_pass == '1') {
- //Try and set the token if it exists, otherwise use the new token stil.
- $new_token = (strlen($cur_user['token']) == 32) ? $cur_user['token'] : $new_token;
- } //End if.
-
- //Lets update all our tracking bits.
- $db->insert_or_update(
- array(
- 'user_id' => $cur_user['id'],
- 'token' => $new_token,
- 'stamp' => $now,
- 'length' => (($save_pass == '1') ? 2629743 : $pun_config['session_length']),
- 'ip' => $_SERVER['REMOTE_ADDR'],
- ),
- 'user_id',
- $db->prefix.'session'
- ) or error('Unable to update session data.', __FILE__, __LINE__, $db->error());
-
- //Have they never logged logged out before?
- if ($cur_user['last_visit'] == 0) {
- $db->query("UPDATE ".$db->prefix."users SET last_visit=".$now." WHERE id=".$cur_user['id']);
- } //End if.
- // Send a new, updated cookie with a new expiration timestamp
- if ($save_pass == '1') {
- forum_setcookie(str_replace('=', '', base64_encode($_SERVER['SERVER_NAME'])), $cur_user['id'].':'.$new_token.':'.md5($cur_user['id'].$cookie_seed.$new_token), $now+2629743); //Expire the cookie in 1 month.
- } //End if - else.
-
- //Update the PHP Session.
- $_SESSION[str_replace('=', '', base64_encode($_SERVER['SERVER_NAME']))] = $cur_user['id'].':'.$new_token.':'.md5($cur_user['id'].$cookie_seed.$new_token);
-
- /*$now = $offset > 0 ? $now - $offset : $now + offset;
- $expire = ($save_pass == '1') ? $now + 1209600 : $now +$pun_config['o_timeout_visit'];
- pun_setcookie($cur_user['id'], $form_password_hash, $expire);*/
- // Reset tracked topics
- set_tracked_topics(null);
- redirect(htmlspecialchars($_POST['redirect_url']), $lang_login['Login redirect']);
- }
- else if ($action == 'out')
- {
- if ($pun_user['is_guest'] || !isset($_GET['id']) || $_GET['id'] != $pun_user['id'] || !isset($_GET['csrf_token']) || $_GET['csrf_token'] != pun_hash($pun_user['id'].pun_hash(get_remote_address())))
- {
- header('Location: index.php');
- exit;
- } //End if.
-
- $db->query("DELETE FROM ".$db->prefix."session WHERE user_id=".$pun_user['user_id']); //Get rid of the old session.
-
- unset($_SESSION[$cookie_name]);
- // Remove user from "users online" list
- $db->query('DELETE FROM '.$db->prefix.'online WHERE user_id='.$pun_user['id']) or error('Unable to delete from online list', __FILE__, __LINE__, $db->error());
-
- $db->query("DELETE FROM ".$db->prefix."session WHERE user_id=".$pun_user['id']) or error('Unable to delete from session list', __FILE__, __LINE__, $db->error()); //Get rid of the old session.
- // Update last_visit (make sure there's something to update it with)
- if (isset($pun_user['logged']))
- $db->query('UPDATE '.$db->prefix.'users SET last_visit='.$pun_user['logged'].' WHERE id='.$pun_user['id']) or error('Unable to update user visit data', __FILE__, __LINE__, $db->error());
- forum_setcookie(str_replace('=', '', base64_encode($_SERVER['SERVER_NAME'])), pun_hash(uniqid(rand(), true)), time() + 31536000);
- redirect('index.php', $lang_login['Logout redirect']);
- }
- else if ($action == 'forget' || $action == 'forget_2')
- {
- if (!$pun_user['is_guest'])
- header('Location: index.php');
- if (isset($_POST['form_sent']))
- {
- // Start with a clean slate
- $errors = array();
- require PUN_ROOT.'include/email.php';
- // Validate the email address
- $email = strtolower(trim($_POST['req_email']));
- if (!is_valid_email($email))
- $errors[] = $lang_common['Invalid email'];
- // Did everything go according to plan?
- if (empty($errors))
- {
- $result = $db->query('SELECT id, username, last_email_sent FROM '.$db->prefix.'users WHERE email=\''.$db->escape($email).'\'') or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
- if ($db->num_rows($result))
- {
- // Load the "activate password" template
- $mail_tpl = trim(file_get_contents(PUN_ROOT.'lang/'.$pun_user['language'].'/mail_templates/activate_password.tpl'));
- // The first row contains the subject
- $first_crlf = strpos($mail_tpl, "\n");
- $mail_subject = trim(substr($mail_tpl, 8, $first_crlf-8));
- $mail_message = trim(substr($mail_tpl, $first_crlf));
- // Do the generic replacements first (they apply to all emails sent out here)
- $mail_message = str_replace('<base_url>', get_base_url().'/', $mail_message);
- $mail_message = str_replace('<board_mailer>', $pun_config['o_board_title'].' '.$lang_common['Mailer'], $mail_message);
- // Loop through users we found
- while ($cur_hit = $db->fetch_assoc($result))
- {
- if ($cur_hit['last_email_sent'] != '' && (time() - $cur_hit['last_email_sent']) < 3600 && (time() - $cur_hit['last_email_sent']) >= 0)
- message($lang_login['Email flood'], true);
- // Generate a new password and a new password activation code
- $new_password = random_pass(8);
- $new_password_key = random_pass(8);
- $db->query('UPDATE '.$db->prefix.'users SET activate_string=\''.pun_hash($new_password).'\', activate_key=\''.$new_password_key.'\', last_email_sent = '.time().' WHERE id='.$cur_hit['id']) or error('Unable to update activation data', __FILE__, __LINE__, $db->error());
- // Do the user specific replacements to the template
- $cur_mail_message = str_replace('<username>', $cur_hit['username'], $mail_message);
- $cur_mail_message = str_replace('<activation_url>', get_base_url().'/profile.php?id='.$cur_hit['id'].'&action=change_pass&key='.$new_password_key, $cur_mail_message);
- $cur_mail_message = str_replace('<new_password>', $new_password, $cur_mail_message);
- pun_mail($email, $mail_subject, $cur_mail_message);
- }
- message($lang_login['Forget mail'].' <a href="mailto:'.$pun_config['o_admin_email'].'">'.$pun_config['o_admin_email'].'</a>.', true);
- }
- else
- $errors[] = $lang_login['No email match'].' '.htmlspecialchars($email).'.';
- }
- }
- $page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_login['Request pass']);
- $required_fields = array('req_email' => $lang_common['Email']);
- $focus_element = array('request_pass', 'req_email');
- define ('PUN_ACTIVE_PAGE', 'login');
- require PUN_ROOT.'header.php';
- // If there are errors, we display them
- if (!empty($errors))
- {
- ?>
- <div id="posterror" class="block">
- <h2><span><?php echo $lang_login['New password errors'] ?></span></h2>
- <div class="box">
- <div class="inbox error-info">
- <p><?php echo $lang_login['New passworderrors info'] ?></p>
- <ul class="error-list">
- <?php
- foreach ($errors as $cur_error)
- echo "\t\t\t\t".'<li><strong>'.$cur_error.'</strong></li>'."\n";
- ?>
- </ul>
- </div>
- </div>
- </div>
- <?php
- }
- ?>
- <div class="blockform">
- <h2><span><?php echo $lang_login['Request pass'] ?></span></h2>
- <div class="box">
- <form id="request_pass" method="post" action="login.php?action=forget_2" onsubmit="this.request_pass.disabled=true;if(process_form(this)){return true;}else{this.request_pass.disabled=false;return false;}">
- <div class="inform">
- <fieldset>
- <legend><?php echo $lang_login['Request pass legend'] ?></legend>
- <div class="infldset">
- <input type="hidden" name="form_sent" value="1" />
- <label class="required"><strong><?php echo $lang_common['Email'] ?> <span><?php echo $lang_common['Required'] ?></span></strong><br /><input id="req_email" type="text" name="req_email" size="50" maxlength="80" /><br /></label>
- <p><?php echo $lang_login['Request pass info'] ?></p>
- </div>
- </fieldset>
- </div>
- <p class="buttons"><input type="submit" name="request_pass" value="<?php echo $lang_common['Submit'] ?>" /><?php if (empty($errors)): ?> <a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a><?php endif; ?></p>
- </form>
- </div>
- </div>
- <?php
- require PUN_ROOT.'footer.php';
- }
- if (!$pun_user['is_guest'])
- header('Location: index.php');
- // Try to determine if the data in HTTP_REFERER is valid (if not, we redirect to index.php after login)
- if (!empty($_SERVER['HTTP_REFERER']))
- {
- $referrer = parse_url($_SERVER['HTTP_REFERER']);
- // Remove www subdomain if it exists
- if (strpos($referrer['host'], 'www.') === 0)
- $referrer['host'] = substr($referrer['host'], 4);
- // Make sure the path component exists
- if (!isset($referrer['path']))
- $referrer['path'] = '';
- $valid = parse_url(get_base_url());
- // Remove www subdomain if it exists
- if (strpos($valid['host'], 'www.') === 0)
- $valid['host'] = substr($valid['host'], 4);
- // Make sure the path component exists
- if (!isset($valid['path']))
- $valid['path'] = '';
- if ($referrer['host'] == $valid['host'] && preg_match('#^'.preg_quote($valid['path']).'/(.*?)\.php#i', $referrer['path']))
- $redirect_url = $_SERVER['HTTP_REFERER'];
- }
- if (!isset($redirect_url))
- $redirect_url = 'index.php';
- $page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_common['Login']);
- $required_fields = array('req_username' => $lang_common['Username'], 'req_password' => $lang_common['Password']);
- $focus_element = array('login', 'req_username');
- define('PUN_ACTIVE_PAGE', 'login');
- require PUN_ROOT.'header.php';
- ?>
- <div class="blockform">
- <h2><span><?php echo $lang_common['Login'] ?></span></h2>
- <div class="box">
- <form id="login" method="post" action="login.php?action=in" onsubmit="return process_form(this)">
- <div class="inform">
- <fieldset>
- <legend><?php echo $lang_login['Login legend'] ?></legend>
- <div class="infldset">
- <input type="hidden" name="form_sent" value="1" />
- <input type="hidden" name="redirect_url" value="<?php echo pun_htmlspecialchars($redirect_url) ?>" />
- <label class="conl required"><strong><?php echo $lang_common['Username'] ?> <span><?php echo $lang_common['Required'] ?></span></strong><br /><input type="text" name="req_username" size="25" maxlength="25" tabindex="1" /><br /></label>
- <label class="conl required"><strong><?php echo $lang_common['Password'] ?> <span><?php echo $lang_common['Required'] ?></span></strong><br /><input type="password" name="req_password" size="25" tabindex="2" /><br /></label>
- <div class="rbox clearb">
- <label><input type="checkbox" name="save_pass" value="1" tabindex="3" /><?php echo $lang_login['Remember me'] ?><br /></label>
- </div>
- <p class="clearb"><?php echo $lang_login['Login info'] ?></p>
- <p class="actions"><span><a href="register.php" tabindex="4"><?php echo $lang_login['Not registered'] ?></a></span> <span><a href="login.php?action=forget" tabindex="5"><?php echo $lang_login['Forgotten pass'] ?></a></span></p>
- </div>
- </fieldset>
- </div>
- <p class="buttons"><input type="submit" name="login" value="<?php echo $lang_common['Login'] ?>" tabindex="3" /></p>
- </form>
- </div>
- </div>
- <?php
- require PUN_ROOT.'footer.php';