1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
<?php
/**
* $Horde: gollem/redirect.php,v 1.55.2.6 2006/01/19 02:47:48 slusarz Exp $
*
* Copyright 1999-2006 Charles J. Hagenbuch <chuck@horde.org>
* Copyright 1999-2006 Max Kalika <max@horde.org>
*
* See the enclosed file COPYING for license information (GPL). If you
* did not receive this file, see http://www.fsf.org/copyleft/gpl.html.
*/
@define('AUTH_HANDLER', true);
@define('GOLLEM_BASE', dirname(__FILE__));
$authentication = 'none';
require_once GOLLEM_BASE . '/lib/base.php';
require GOLLEM_BASE . '/config/credentials.php';
$actionID = Util::getFormData('actionID');
$backend_key = Util::getFormData('backend_key');
if (is_null($backend_key)) {
$autologin = Util::getFormData('autologin', false);
} else {
$autologin = Util::getFormData('autologin', Gollem::canAutoLogin($backend_key, true));
}
$user = (empty($autologin)) ? Util::getPost('username') : Gollem::getAutologinID($backend_key);
$pass = (empty($autologin)) ? Util::getPost('password') : Auth::getCredential('password');
/* If we already have a session. */
if (isset($_SESSION['gollem']) &&
is_array($_SESSION['gollem']) &&
($_SESSION['gollem']['backend_key'] == $backend_key)) {
/* Make sure that if a username was specified, it is the current
* username. */
if ((is_null($user) ||
($user == $GLOBALS['gollem_be']['params']['username'])) &&
(is_null($pass) ||
($pass == Secret::read(Secret::getKey('gollem'), $GLOBALS['gollem_be']['params']['password'])))) {
$url = Util::getFormData('url');
if (empty($url)) {
$url = Horde::applicationUrl('manager.php', true);
} elseif (!empty($actionID)) {
$url = Util::addParameter($url, 'actionID', $actionID);
}
if (Util::getFormData('load_frameset')) {
$full_url = Horde::applicationUrl($registry->get('webroot', 'horde') . '/index.php', true);
$url = Util::addParameter($full_url, 'url', $url, false);
}
header('Refresh: 0; URL=' . $url);
exit;
} else {
/* Disable the old session. */
unset($_SESSION['gollem']);
header('Location: ' . Auth::addLogoutParameters(Gollem::logoutUrl(), AUTH_REASON_FAILED));
exit;
}
}
/* Create a new session if we're given the proper parameters. */
if (Util::getFormData('gollem_loginform') ||
Util::getFormData('nocredentials') ||
$autologin) {
if (Auth::getProvider() == 'gollem') {
/* Destroy any existing session on login and make sure to use
* a new session ID, to avoid session fixation issues. */
Horde::getCleanSession();
}
/* Get the required parameters from the form data. */
$args = array();
$postdata = array_keys($GLOBALS['gollem_backends'][$backend_key]['loginparams']);
if (empty($autologin)) {
$GLOBALS['gollem_vfs'] = &VFS::singleton($GLOBALS['gollem_backends'][$backend_key]['driver']);
$postdata = array_merge($postdata, $GLOBALS['gollem_vfs']->getRequiredCredentials());
} else {
/* We are attempting autologin. If hordeauth is off, we need to make
* sure we are not trying to use horde auth info to login. */
if (empty($GLOBALS['gollem_backends'][$backend_key]['hordeauth'])) {
$pass = Util::getPost('password');
}
}
foreach ($postdata as $val) {
$args[$val] = Util::getPost($val);
}
require_once GOLLEM_BASE . '/lib/Session.php';
if (Gollem_Session::createSession($backend_key, $user, $pass, $args)) {
$entry = sprintf('Login success for User %s [%s] using backend %s.', Auth::getAuth(), $_SERVER['REMOTE_ADDR'], $backend_key);
Horde::logMessage($entry, __FILE__, __LINE__, PEAR_LOG_NOTICE);
$ie_version = Util::getFormData('ie_version');
if ($ie_version) {
$browser->setIEVersion($ie_version);
}
if (($horde_language = Util::getFormData('new_lang'))) {
$_SESSION['horde_language'] = $horde_language;
}
$url = '';
if (Util::getFormData('url')) {
$url = Horde::url(Util::removeParameter(Util::getFormData('url'), session_name()), true);
if ($actionID) {
$url = Util::addParameter($url, 'actionID', $actionID, false);
}
} elseif (Auth::getProvider() == 'gollem') {
$url = Horde::applicationUrl($registry->get('webroot', 'horde') . '/index.php', true);
} else {
$url = Horde::applicationUrl('manager.php', true);
}
} else {
$url = Util::addParameter(Auth::addLogoutParameters(Gollem::logoutUrl()), 'backend_key', $backend_key, false);
if (!empty($autologin)) {
$url = Util::addParameter($url, 'autologin_fail', '1', false);
}
}
if (Util::getFormData('load_frameset')) {
$full_url = Horde::applicationUrl($registry->get('webroot', 'horde') . '/index.php', true);
$url = Util::addParameter($full_url, 'url', $url, false);
}
header('Refresh: 0; URL=' . $url);
exit;
}
/* No session, and no login attempt. Just go to the login page. */
require GOLLEM_BASE . '/login.php';
|
