login.php

Go to the documentation of this file.

<?php


set_include_path( '../php' . PATH_SEPARATOR . get_include_path());
set_include_path( '../smarty/libs' . PATH_SEPARATOR . get_include_path());

if (session_id() == "") { session_start(); }

require_once 'Smarty.class.php';
require_once 'error.php';
require_once 'redirect.php';
require_once 'sql.php';
require_once 'util.php';


function do_login() {

global $validation_info;

$smarty =& smarty_init();

## parameters accepted by this php script

$valid_input = array(
        "login"  => "/^.+$/",
        "password"  => "/^.+$/",
);      

## check user input 

$INPUT = array_merge($_GET, $_POST);
$errors = check_input($INPUT, $validation_info); 

if ($debug_level > 10) {
         print "<hr><pre>Input: ";
        print_r($INPUT);
        print "</pre><hr>";
}

if (empty($errors) and $INPUT['mode'] == "edit" and empty($INPUT['id']) ) {
        $errors[] = 'id';
}

if (!empty($errors)) {
        user_error("Missing or malformed input parameter(s): " . join($errors, ", "),
                E_USER_ERROR); 
}


## process buttons

# "OK" button pressed? 

$display_html_form = (isset($INPUT['b_ok'])) ? FALSE : TRUE;

# "Cancel" button pressed?

if (isset($INPUT['b_cancel'])) {
        redirect($_SESSION['last_page']);
        exit(0);
}


# stricter checks for user input (per item)

if (!$display_html_form) {

        $errors = check_input($INPUT, $valid_input, FALSE); 

        if (!empty($errors)) {
                # user input was invalid, user must correct it
                $display_html_form = TRUE;
        } 
}

if ($display_html_form) {

        ## (re-)display the input form

        $tpl_vars = $INPUT;
        $tpl_vars['errors_info'] = $errors;
        do_template($smarty, 'login.tpl' , $tpl_vars);

} else  {

        # init mysql connection
        $db = sql_init();
        
        # encrypt password
        $INPUT['password'] = "{SHA1}" .  sha1($INPUT['password']);
        sleep(2);

        $ans = sql_query('check_pw', $INPUT, $db);
        sql_exit($db);

        if (empty($ans)) {
                # wrong login / password

                $tpl_vars['errors_info'][] = 'password';
                do_template($smarty, 'login.tpl' , $tpl_vars);

        } else {
                $_SESSION['user'] = $ans[0];

                # xxx

                switch ($ans[0]['role_id']) {
                        case 1:  $_SESSION['mode'] = 'admin'; break;
                        case 2:  $_SESSION['mode'] = 'staff'; break;
                        default: $_SESSION['mode'] = 'edit'; 
                }

                redirect('index.php');
        }
}

}

do_login();

?>

---