LDAPAccountManager/lam/templates/login.php

94 lines
2.9 KiB
PHP

<?
/*
$Id$
This code is part of LDAP Account Manager (http://www.sourceforge.net/projects/lam)
Copyright (C) 2003 Michael Duergner
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
LDAP Account Manager checking login data.
*/
include_once("../config/config.php"); // Include config.php which provides Config class
// Get session save path
$path = getcwd();
$path = explode("/", substr($path,1));
for($i = 0; $i < (count($path) - 1); $i++)
{
$session_save_path .= "/" . $path[$i];
}
$session_save_path .= "/sess";
session_save_path($session_save_path); // Set session save path
@session_start(); // Start LDAP Account Manager session
// generate 256 bit key and initialization vector for user/passwd-encryption
$key = mcrypt_create_iv(32, MCRYPT_DEV_RANDOM);
$iv = mcrypt_create_iv(32, MCRYPT_DEV_RANDOM);
// save both in cookie
setcookie("Key", base64_encode($key));
setcookie("IV", base64_encode($iv));
// checking if the submitted username/password is correct.
if($action == "checklogin")
{
include_once("../lib/ldap.php"); // Include ldap.php which provides Ldap class
$ldap = new Ldap($config); //$config); // Create new Ldap object
$result = $ldap->connect($username,$passwd); // Connect to LDAP server for verifing username/password
if($result == True) // Username/password correct. Do some configuration and load main frame.
{
// setting language
$language = explode(":", $language);
putenv("LANG=" . $language[1]);
setlocale(LC_ALL, $language[0]);
bindtextdomain("lam", "../locale");
textdomain("lam");
include("./main.php"); // Load main frame
session_register("ldap"); // Register $ldap object in session
session_register("language"); // Register $language in session
}
else
{
if($ldap->server)
{
$error_message = "Wrong Password/Username combination. Try again.";
include("./login.inc"); // Username/password invalid. Return to login page.
}
else
{
$error_message = "Cannot connect to specified LDAP-Server. Try again.";
include("./login.inc"); // Server not reachable. Return to login page.
}
}
}
// Load login page
else
{
session_register("config"); // Register $config object in session
include_once("../lib/ldap.php"); // Includ ldap.php which provides Ldap class
$config = new Config; // Create new Config object
include("./login.inc"); // Load login page
}
?>