XCL Web Application Platform 2.5.0
The XoopsCube Legacy Project
Loading...
Searching...
No Matches
login.php
1<?php
13
14// path to your xoops main directory
15$path = './';
16
17include $path.'/mainfile.php';
18if (!defined('XOOPS_ROOT_PATH')) {
19 exit();
20}
21include_once XOOPS_ROOT_PATH.'/language/'.$xoopsConfig['language'].'/user.php';
22$op = (isset($_POST['op']) && 'dologin' == $_POST['op']) ? 'dologin' : 'login';
23
24$username = isset($_POST['username']) ? trim($_POST['username']) : '';
25$password = isset($_POST['userpass']) ? trim($_POST['userpass']) : '';
26if ('' == $username || '' == $password) {
27 $op ='login';
28}
29
30$header = '<html>
31 <head>
32 <meta charset="UTF-8">
33 <meta http-equiv="content-language" content="'._LANGCODE.'" />
34
35 <title>'.htmlspecialchars($xoopsConfig['sitename']).'</title>
36 <link rel="stylesheet" type="text/css" media="all" href="'.XOOPS_URL.'/themes/xcl_default/style.css" />
37';
38$style = getcss($xoopsConfig['theme_set']);
39if ('' == $style) {
40 $style = xoops_getcss($xoopsConfig['theme_set']);
41}
42if ('' !== $style) {
43 $header .= '<link rel="stylesheet" type="text/css" media="all" href="'.$style.'" />';
44}
45$header .= '
46 </head>
47 <body>
48';
49
50if ('dologin' == $op) {
51 $member_handler =& xoops_gethandler('member');
52 $myts = new MyTextsanitizer();
53 $myts->getInstance();
54 $user =& $member_handler->loginUser(addslashes($myts->stripSlashesGPC($username)), $myts->stripSlashesGPC($password));
55 if (is_object($user)) {
56 if (0 == $user->getVar('level')) {
57 redirect_header(XOOPS_URL.'/index.php', 2, _US_NOACTTPADM);
58 exit();
59 }
60 if (1 == $xoopsConfig['closesite']) {
61 $allowed = false;
62 foreach ($user->getGroups() as $group) {
63 if (in_array($group, $xoopsConfig['closesite_okgrp'], true) || XOOPS_GROUP_ADMIN == $group) {
64 $allowed = true;
65 break;
66 }
67 }
68 if (!$allowed) {
69 redirect_header(XOOPS_URL.'/index.php', 1, _NOPERM);
70 exit();
71 }
72 }
73 $user->setVar('last_login', time());
74 if (!$member_handler->insertUser($user)) {
75 //EMPTY
76 }
77 require_once XOOPS_ROOT_PATH . '/include/session.php';
78
79 xoops_session_regenerate();
80 $_SESSION = [];
81 $_SESSION['xoopsUserId'] = $user->getVar('uid');
82 $_SESSION['xoopsUserGroups'] = $user->getGroups();
83
84 $config_handler =& xoops_gethandler('config');
85 $moduleConfigUser =& $config_handler->getConfigsByDirname('user');
86
87 if (!empty($moduleConfigUser['use_ssl'])) {
88 echo $header;
89 xoops_confirm([$moduleConfigUser['sslpost_name'] => session_id()], XOOPS_URL . '/misc.php?action=showpopups&amp;type=ssllogin', _US_PRESSLOGIN, _LOGIN);
90 } else {
91 echo $header;
92 echo sprintf(_US_LOGGINGU, $user->getVar('uname'));
93 echo '<div style="text-align:center;"><input value="'._CLOSE.'" type="button" onclick="document.window.opener.location.reload();document.window.close();" /></div>';
94 }
95 } else {
96 xoops_error('<div style="text-align:center;">'._US_INCORRECTLOGIN.'<br><a href="login.php">'._BACK.'</a></div>');
97 }
98}
99
100if ('login' == $op) {
101 echo $header;
102 echo '
103 <div style="padding: 1em; margin: 0">
104 <form action="login.php" method="post">
105 <label for="username">'._USERNAME.'</label>
106 <br><input type="text" id="username" name="username" value="">
107 <label for="userpass">'._PASSWORD.'</label>
108 <br><input type="password" id="userpass" name="userpass" value="">
109 <input type="hidden" name="op" value="dologin">
110 <p><input class="button" type="submit" name="submit" value="'._LOGIN.'"></p>
111 </form>
112 </div>
113 ';
114}
115
116echo '</body></html>';