mirror of
https://github.com/librenms/librenms.git
synced 2024-09-24 20:09:06 +00:00
850359711c
/?logout=yes. git-svn-id: http://www.observium.org/svn/observer/trunk@3096 61d68cd4-352d-0410-923a-c4978735b2b8
90 lines
2.8 KiB
PHP
90 lines
2.8 KiB
PHP
<?php
|
|
|
|
@ini_set("session.gc_maxlifetime","0");
|
|
|
|
session_start();
|
|
|
|
// Preflight checks
|
|
if (!is_dir($config['rrd_dir']))
|
|
{
|
|
echo("<div class='errorbox'>RRD Log Directory is missing ({$config['rrd_dir']}). Graphing may fail.</div>");
|
|
}
|
|
|
|
if (!is_dir($config['temp_dir']))
|
|
{
|
|
echo("<div class='errorbox'>Temp Directory is missing ({$config['temp_dir']}). Graphing may fail.</div>");
|
|
}
|
|
|
|
if (!is_writable($config['temp_dir']))
|
|
{
|
|
echo("<div class='errorbox'>Temp Directory is not writable ({$config['tmp_dir']}). Graphing may fail.</div>");
|
|
}
|
|
|
|
if ($vars['page'] == "logout" && $_SESSION['authenticated'])
|
|
{
|
|
dbInsert(array('user' => $_SESSION['username'], 'address' => $_SERVER["REMOTE_ADDR"], 'result' => 'Logged Out'), 'authlog');
|
|
unset($_SESSION);
|
|
session_destroy();
|
|
header('Location: /');
|
|
setcookie ("username", "", time() - 60*60*24*100, "/");
|
|
setcookie ("password", "", time() - 60*60*24*100, "/");
|
|
$auth_message = "Logged Out";
|
|
}
|
|
|
|
if (isset($_GET['username']) && isset($_GET['password']))
|
|
{
|
|
$_SESSION['username'] = mres($_GET['username']);
|
|
$_SESSION['password'] = $_GET['password'];
|
|
} elseif (isset($_POST['username']) && isset($_POST['password'])) {
|
|
$_SESSION['username'] = mres($_POST['username']);
|
|
$_SESSION['password'] = $_POST['password'];
|
|
} elseif (isset($_COOKIE['username']) && isset($_COOKIE['password'])) {
|
|
$_SESSION['username'] = mres($_COOKIE['username']);
|
|
$_SESSION['password'] = $_COOKIE['password'];
|
|
}
|
|
|
|
if (!isset($config['auth_mechanism']))
|
|
{
|
|
$config['auth_mechanism'] = "mysql";
|
|
}
|
|
|
|
if (file_exists('includes/authentication/' . $config['auth_mechanism'] . '.inc.php'))
|
|
{
|
|
include('includes/authentication/' . $config['auth_mechanism'] . '.inc.php');
|
|
}
|
|
else
|
|
{
|
|
print_error('ERROR: no valid auth_mechanism defined!');
|
|
exit();
|
|
}
|
|
|
|
$auth_success = 0;
|
|
|
|
if (isset($_SESSION['username']))
|
|
{
|
|
if (authenticate($_SESSION['username'],$_SESSION['password']))
|
|
{
|
|
$_SESSION['userlevel'] = get_userlevel($_SESSION['username']);
|
|
$_SESSION['user_id'] = get_userid($_SESSION['username']);
|
|
if (!$_SESSION['authenticated'])
|
|
{
|
|
$_SESSION['authenticated'] = true;
|
|
dbInsert(array('user' => $_SESSION['username'], 'address' => $_SERVER["REMOTE_ADDR"], 'result' => 'Logged In'), 'authlog');
|
|
header("Location: ".$_SERVER['REQUEST_URI']);
|
|
}
|
|
if (isset($_POST['remember']))
|
|
{
|
|
setcookie("username", $_SESSION['username'], time()+60*60*24*100, "/");
|
|
setcookie("password", $_SESSION['password'], time()+60*60*24*100, "/");
|
|
}
|
|
$permissions = permissions_cache($_SESSION['user_id']);
|
|
}
|
|
elseif (isset($_SESSION['username']))
|
|
{
|
|
$auth_message = "Authentication Failed";
|
|
unset ($_SESSION['authenticated']);
|
|
dbInsert(array('user' => $_SESSION['username'], 'address' => $_SERVER["REMOTE_ADDR"], 'result' => 'Authentication Failure'), 'authlog');
|
|
}
|
|
}
|
|
?>
|