login.php File Reference

Login form for registered users. More...

Go to the source code of this file.

Functions
	do_login ()
	Login form for admins, staff and professors.

---

Detailed Description

Login form for registered users.

Definition in file login.php.

---

Function Documentation

do_login

(

)

Login form for admins, staff and professors.

Parameters:

	$_POST['login']	-- user's login name
	$_POST['password']	-- user's password

If login was successful, $_SESSION['user'] is set to information about the currently active user, and $_SESSION['mode'] is set to an appropriate display mode.

Definition at line 26 of file login.php.

References $validation_info, check_input(), do_template(), redirect(), smarty_init(), sql_exit(), sql_init(), and sql_query().

                    {

global $validation_info;

$smarty =& smarty_init();

## parameters accepted by this php script

$valid_input = array(
        "login"  => "/^.+$/",
        "password"  => "/^.+$/",
);      

## check user input 

$INPUT = array_merge($_GET, $_POST);
$errors = check_input($INPUT, $validation_info); 

if ($debug_level > 10) {
         print "<hr><pre>Input: ";
        print_r($INPUT);
        print "</pre><hr>";
}

if (empty($errors) and $INPUT['mode'] == "edit" and empty($INPUT['id']) ) {
        $errors[] = 'id';
}

if (!empty($errors)) {
        user_error("Missing or malformed input parameter(s): " . join($errors, ", "),
                E_USER_ERROR); 
}


## process buttons

# "OK" button pressed? 

$display_html_form = (isset($INPUT['b_ok'])) ? FALSE : TRUE;

# "Cancel" button pressed?

if (isset($INPUT['b_cancel'])) {
        redirect($_SESSION['last_page']);
        exit(0);
}


# stricter checks for user input (per item)

if (!$display_html_form) {

        $errors = check_input($INPUT, $valid_input, FALSE); 

        if (!empty($errors)) {
                # user input was invalid, user must correct it
                $display_html_form = TRUE;
        } 
}

if ($display_html_form) {

        ## (re-)display the input form

        $tpl_vars = $INPUT;
        $tpl_vars['errors_info'] = $errors;
        do_template($smarty, 'login.tpl' , $tpl_vars);

} else  {

        # init mysql connection
        $db = sql_init();
        
        # encrypt password
        $INPUT['password'] = "{SHA1}" .  sha1($INPUT['password']);
        sleep(2);

        $ans = sql_query('check_pw', $INPUT, $db);
        sql_exit($db);

        if (empty($ans)) {
                # wrong login / password

                $tpl_vars['errors_info'][] = 'password';
                do_template($smarty, 'login.tpl' , $tpl_vars);

        } else {
                $_SESSION['user'] = $ans[0];

                # xxx

                switch ($ans[0]['role_id']) {
                        case 1:  $_SESSION['mode'] = 'admin'; break;
                        case 2:  $_SESSION['mode'] = 'staff'; break;
                        default: $_SESSION['mode'] = 'edit'; 
                }

                redirect('index.php');
        }
}

}

Here is the call graph for this function:

---