e990ef3542
Created the following function: - checkLoggedIn - checkAdminUser - redirectToDefaultPage
136 lines
4.3 KiB
PHP
136 lines
4.3 KiB
PHP
<?php
|
|
|
|
/**
|
|
* ownCloud
|
|
*
|
|
* @author Frank Karlitschek
|
|
* @copyright 2010 Frank Karlitschek karlitschek@kde.org
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
* License as published by the Free Software Foundation; either
|
|
* version 3 of the License, or any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
$RUNTIME_NOAPPS = TRUE; //no apps, yet
|
|
|
|
require_once('lib/base.php');
|
|
|
|
// Setup required :
|
|
$not_installed = !OC_Config::getValue('installed', false);
|
|
$install_called = (isset($_POST['install']) AND $_POST['install']=='true');
|
|
if($not_installed OR $install_called) {
|
|
OC_Util::addScript('setup');
|
|
require_once('setup.php');
|
|
exit();
|
|
}
|
|
|
|
// Handle WebDAV
|
|
if($_SERVER['REQUEST_METHOD']=='PROPFIND'){
|
|
header('location: '.OC_Helper::linkTo('files','webdav.php'));
|
|
exit();
|
|
}
|
|
|
|
// Someone is logged in :
|
|
elseif(OC_User::isLoggedIn()) {
|
|
if(isset($_GET["logout"]) and ($_GET["logout"])) {
|
|
OC_User::logout();
|
|
header("Location: ".OC::$WEBROOT.'/');
|
|
exit();
|
|
}
|
|
else {
|
|
OC_Util::redirectToDefaultPage();
|
|
}
|
|
}
|
|
|
|
// remember was checked after last login
|
|
elseif(isset($_COOKIE["oc_remember_login"]) && $_COOKIE["oc_remember_login"]) {
|
|
OC_App::loadApps();
|
|
error_log("Trying to login from cookie");
|
|
// confirm credentials in cookie
|
|
if(OC_User::userExists($_COOKIE['oc_username']) &&
|
|
OC_Preferences::getValue($_COOKIE['oc_username'], "login", "token") == $_COOKIE['oc_token']) {
|
|
OC_User::setUserId($_COOKIE['oc_username']);
|
|
OC_Util::redirectToDefaultPage();
|
|
}
|
|
else {
|
|
OC_Template::printGuestPage("", "login", array("error" => true));
|
|
}
|
|
}
|
|
|
|
// Someone wants to log in :
|
|
elseif(isset($_POST["user"]) && isset($_POST['password'])) {
|
|
OC_App::loadApps();
|
|
if(OC_User::login($_POST["user"], $_POST["password"])) {
|
|
if(!empty($_POST["remember_login"])){
|
|
error_log("Setting remember login to cookie");
|
|
$token = md5($_POST["user"].time());
|
|
OC_Preferences::setValue($_POST['user'], 'login', 'token', $token);
|
|
OC_User::setMagicInCookie($_POST["user"], $token);
|
|
}
|
|
else {
|
|
OC_User::unsetMagicInCookie();
|
|
}
|
|
OC_Util::redirectToDefaultPage();
|
|
}
|
|
else {
|
|
if(isset($_COOKIE["oc_username"])){
|
|
OC_Template::printGuestPage("", "login", array("error" => true, "username" => $_COOKIE["oc_username"]));
|
|
}else{
|
|
OC_Template::printGuestPage("", "login", array("error" => true));
|
|
}
|
|
}
|
|
}
|
|
|
|
// Someone lost their password:
|
|
elseif(isset($_GET['lostpassword'])) {
|
|
OC_App::loadApps();
|
|
if (isset($_POST['user'])) {
|
|
if (OC_User::userExists($_POST['user'])) {
|
|
$token = sha1($_POST['user']+uniqId());
|
|
OC_Preferences::setValue($_POST['user'], "owncloud", "lostpassword", $token);
|
|
// TODO send email with link+token
|
|
OC_Template::printGuestPage("", "lostpassword", array("error" => false, "requested" => true));
|
|
} else {
|
|
OC_Template::printGuestPage("", "lostpassword", array("error" => true, "requested" => false));
|
|
}
|
|
} else {
|
|
OC_Template::printGuestPage("", "lostpassword", array("error" => false, "requested" => false));
|
|
}
|
|
}
|
|
|
|
// Someone wants to reset their password:
|
|
elseif(isset($_GET['resetpassword']) && isset($_GET['token']) && isset($_GET['user']) && OC_Preferences::getValue($_GET['user'], "owncloud", "lostpassword") === $_GET['token']) {
|
|
OC_App::loadApps();
|
|
if (isset($_POST['password'])) {
|
|
if (OC_User::setPassword($_GET['user'], $_POST['password'])) {
|
|
OC_Preferences::deleteKey($_GET['user'], "owncloud", "lostpassword");
|
|
OC_Template::printGuestPage("", "resetpassword", array("success" => true));
|
|
} else {
|
|
OC_Template::printGuestPage("", "resetpassword", array("success" => false));
|
|
}
|
|
} else {
|
|
OC_Template::printGuestPage("", "resetpassword", array("success" => false));
|
|
}
|
|
}
|
|
|
|
// For all others cases, we display the guest page :
|
|
else {
|
|
OC_App::loadApps();
|
|
if(isset($_COOKIE["username"])){
|
|
OC_Template::printGuestPage("", "login", array("error" => false, "username" => $_COOKIE["username"]));
|
|
}else{
|
|
OC_Template::printGuestPage("", "login", array("error" => false));
|
|
}
|
|
}
|
|
|
|
?>
|