add_style(" body { background-color: #eee; margin: 0; padding: 0; } #login { width: 230px; margin-left: auto; margin-right: auto; margin-top: 150px; padding: 20px; background-color: #fff; border: 1px solid #000; } .center { text-align: center; } h1 { color: #83b217; font-size: 16pt; } .v-spacer { padding-top: 1em; } "); } public function DisplayLoginForm($bFailedLogin = false) { $sAuthUser = utils::ReadParam('auth_user', ''); $sAuthPwd = utils::ReadParam('suggest_pwd', ''); $this->add("
\n"); $this->add("

Welcome to iTop!

\n"); if ($bFailedLogin) { $this->add("

Incorrect login/password, please try again.

\n"); } else { $this->add("

Please identify yourself before continuing.

\n"); } $this->add("
\n"); $this->add("\n"); $this->add("\n"); $this->add("\n"); $this->add("\n"); $this->add("
\n"); $this->add("\n"); $this->add("
\n"); $this->add("
\n"); } static protected function ResetSession() { // Unset all of the session variables. $_SESSION = array(); // If it's desired to kill the session, also delete the session cookie. // Note: This will destroy the session, and not just the session data! if (isset($_COOKIE[session_name()])) { setcookie(session_name(), '', time()-3600, '/'); } // Finally, destroy the session. session_destroy(); } static function SecureConnectionRequired() { $oConfig = new Config(ITOP_CONFIG_FILE); return $oConfig->GetSecureConnectionRequired(); } static function IsConnectionSecure() { $bSecured = false; if ( !empty($_SERVER['HTTPS']) && ($_SERVER['HTTPS']!= 'off') ) { $bSecured = true; } return $bSecured; } static function DoLogin() { if (self::SecureConnectionRequired() && !self::IsConnectionSecure()) { // Non secured URL... redirect to a secured one $sUrl = Utils::GetAbsoluteUrl(true /* query string */, true /* force HTTPS */); header("Location: $sUrl"); exit; } $bHTTPBasicAuthentication = (utils::ReadParam('auth', '', 'get') == 'http_basic'); if ($bHTTPBasicAuthentication) { // Basic HTTP/PHP authentication mecanism // // meme avec ca c'est pourri - return; if (!isset($_SERVER['PHP_AUTH_USER'])) { header('WWW-Authenticate: Basic realm="iTop access is restricted"'); header('HTTP/1.0 401 Unauthorized'); // Note: accessed when the user will click on Cancel echo '

iTop access is restricted. Please, contact an iTop administrator.

'; exit; } else { $sAuthUser = $_SERVER['PHP_AUTH_USER']; $sAuthPwd = $_SERVER['PHP_AUTH_PW']; if (!UserRights::Login($sAuthUser, $sAuthPwd)) { header('WWW-Authenticate: Basic realm="Unknown user \''.$sAuthUser.'\'"'); header('HTTP/1.0 401 Unauthorized'); // Note: accessed when the user will click on Cancel // Todo: count the attempts echo '

iTop access is restricted. Please, contact an iTop administrator.

'; exit; } } return; } // Home-made authentication mecanism // $operation = utils::ReadParam('loginop', ''); session_start(); if ($operation == 'logoff') { self::ResetSession(); } if (!isset($_SESSION['auth_user']) || !isset($_SESSION['auth_pwd'])) { if ($operation == 'loginurl') { $sAuthUser = utils::ReadParam('auth_user', '', 'get'); $sAuthPwd = utils::ReadParam('auth_pwd', '', 'get'); } else if ($operation == 'login') { $sAuthUser = utils::ReadParam('auth_user', '', 'post'); $sAuthPwd = utils::ReadParam('auth_pwd', '', 'post'); } else { $oPage = new LoginWebPage(); $oPage->DisplayLoginForm(); $oPage->output(); exit; } } else { $sAuthUser = $_SESSION['auth_user']; $sAuthPwd = $_SESSION['auth_pwd']; } if (!UserRights::Login($sAuthUser, $sAuthPwd)) { self::ResetSession(); $oPage = new LoginWebPage(); $oPage->DisplayLoginForm( true /* failed attempt */); $oPage->output(); exit; } else { $_SESSION['auth_user'] = $sAuthUser ; $_SESSION['auth_pwd'] = $sAuthPwd; } } } // End of class ?>