mirror of
https://github.com/moodle/moodle.git
synced 2025-08-04 16:36:37 +02:00
5b2ae5848c
The page must contain a form with an action field set to /login/index.php and return fields username and password TODO It may be worth checking the URL when it's entered at admin/auth.php to ensure it is at least pointing to a valid page as an incorrect URL could potentially lock all users out of a site.
235 lines
8.9 KiB
PHP
235 lines
8.9 KiB
PHP
<?php // $Id$
|
|
|
|
require_once("../config.php");
|
|
optional_variable($loginguest, false); // determines whether visitors are logged in as guest automatically
|
|
|
|
// Check if the guest user exists. If not, create one.
|
|
if (! record_exists("user", "username", "guest")) {
|
|
$guest->auth = "manual";
|
|
$guest->username = "guest";
|
|
$guest->password = md5("guest");
|
|
$guest->firstname = addslashes(get_string("guestuser"));
|
|
$guest->lastname = " ";
|
|
$guest->email = "root@localhost";
|
|
$guest->description = addslashes(get_string("guestuserinfo"));
|
|
$guest->confirmed = 1;
|
|
$guest->lang = $CFG->lang;
|
|
$guest->timemodified= time();
|
|
|
|
if (! $guest->id = insert_record("user", $guest)) {
|
|
notify("Could not create guest user record !!!");
|
|
}
|
|
}
|
|
|
|
if ($CFG->auth == 'cas' && !empty($CFG->cas_enabled)) {
|
|
require($CFG->dirroot.'/auth/cas/login.php');
|
|
}
|
|
|
|
//Define variables used in page
|
|
if (!$site = get_site()) {
|
|
error("No site found!");
|
|
}
|
|
|
|
if (empty($CFG->langmenu)) {
|
|
$langmenu = "";
|
|
} else {
|
|
$currlang = current_language();
|
|
$langs = get_list_of_languages();
|
|
if (empty($CFG->loginhttps)) {
|
|
$wwwroot = $CFG->wwwroot;
|
|
} else {
|
|
$wwwroot = str_replace('http','https',$CFG->wwwroot);
|
|
}
|
|
$langmenu = popup_form ("$wwwroot/login/index.php?lang=", $langs, "chooselang", $currlang, "", "", "", true);
|
|
}
|
|
|
|
$loginsite = get_string("loginsite");
|
|
|
|
|
|
$frm = false;
|
|
$user = false;
|
|
if ((!empty($SESSION->wantsurl) and strstr($SESSION->wantsurl,'username=guest')) or $loginguest) {
|
|
/// Log in as guest automatically (idea from Zbigniew Fiedorowicz)
|
|
$frm->username = 'guest';
|
|
$frm->password = 'guest';
|
|
} else if (!empty($SESSION->wantsurl) && file_exists($CFG->dirroot.'/login/weblinkauth.php')) {
|
|
// Handles the case of another Moodle site linking into a page on this site
|
|
include($CFG->dirroot.'/login/weblinkauth.php');
|
|
if (function_exists(weblink_auth)) {
|
|
$user = weblink_auth($SESSION->wantsurl);
|
|
}
|
|
if ($user) {
|
|
$frm->username = $user->username;
|
|
} else {
|
|
$frm = data_submitted($CFG->alternateloginurl);
|
|
}
|
|
} else {
|
|
$frm = data_submitted($CFG->alternateloginurl);
|
|
}
|
|
|
|
if ($frm and (get_moodle_cookie() == '')) { // Login without cookie
|
|
|
|
$errormsg = get_string("cookiesnotenabled");
|
|
|
|
} else if ($frm) { // Login WITH cookies
|
|
|
|
$frm->username = trim(moodle_strtolower($frm->username));
|
|
|
|
if (($frm->username == 'guest') and empty($CFG->guestloginbutton)) {
|
|
$user = false; /// Can't log in as guest if guest button is disabled
|
|
$frm = false;
|
|
} else if (!$user) {
|
|
$user = authenticate_user_login($frm->username, $frm->password);
|
|
}
|
|
update_login_count();
|
|
|
|
if ($user) {
|
|
if (! $user->confirmed ) { // they never confirmed via email
|
|
print_header(get_string("mustconfirm"), get_string("mustconfirm") );
|
|
print_heading(get_string("mustconfirm"));
|
|
print_simple_box(get_string("emailconfirmsent", "", $user->email), "center");
|
|
print_footer();
|
|
die;
|
|
}
|
|
|
|
$USER = $user;
|
|
if (!empty($USER->description)) {
|
|
$USER->description = true; // No need to cart all of it around
|
|
}
|
|
$USER->loggedin = true;
|
|
$USER->site = $CFG->wwwroot; // for added security, store the site in the session
|
|
sesskey(); // for added security, used to check script parameters
|
|
|
|
if ($USER->username == "guest") {
|
|
$USER->lang = $CFG->lang; // Guest language always same as site
|
|
$USER->firstname = get_string("guestuser"); // Name always in current language
|
|
$USER->lastname = " ";
|
|
}
|
|
|
|
if (!update_user_login_times()) {
|
|
error("Wierd error: could not update login records");
|
|
}
|
|
|
|
set_moodle_cookie($USER->username);
|
|
|
|
unset($SESSION->lang);
|
|
unset($SESSION->encoding);
|
|
|
|
$SESSION->justloggedin = true;
|
|
$SESSION->encoding = get_string('thischarset');
|
|
|
|
// Restore the calendar filters, if saved
|
|
if(intval(get_user_preferences('calendar_persistflt', 0))) {
|
|
include_once($CFG->dirroot.'/calendar/lib.php');
|
|
calendar_set_filters_status(get_user_preferences('calendar_savedflt', 0xff));
|
|
}
|
|
|
|
//Select password change url
|
|
if (is_internal_auth() || $CFG->{'auth_'.$USER->auth.'_stdchangepassword'}){
|
|
$passwordchangeurl=$CFG->wwwroot.'/login/change_password.php';
|
|
} elseif($CFG->changepassword) {
|
|
$passwordchangeurl=$CFG->changepassword;
|
|
}
|
|
|
|
|
|
// check whether the user should be changing password
|
|
if (get_user_preferences('auth_forcepasswordchange', false)){
|
|
if (isset($passwordchangeurl)) {
|
|
redirect($passwordchangeurl);
|
|
} else {
|
|
error("You cannot proceed without changing your password.
|
|
However there is no available page for changing it.
|
|
Please contact your Moodle Administrator.");
|
|
}
|
|
}
|
|
|
|
|
|
add_to_log(SITEID, "user", "login", "view.php?id=$user->id&course=".SITEID, $user->id, 0, $user->id);
|
|
|
|
if (user_not_fully_set_up($USER)) {
|
|
$urltogo = $CFG->wwwroot.'/user/edit.php?id='.$USER->id.'&course='.SITEID;
|
|
// We don't delete $SESSION->wantsurl yet, so we get there later
|
|
|
|
} else if (isset($SESSION->wantsurl) and (strpos($SESSION->wantsurl, $CFG->wwwroot) === 0)) {
|
|
$urltogo = $SESSION->wantsurl; /// Because it's an address in this site
|
|
unset($SESSION->wantsurl);
|
|
|
|
} else {
|
|
$urltogo = $CFG->wwwroot.'/'; /// Go to the standard home page
|
|
unset($SESSION->wantsurl); /// Just in case
|
|
}
|
|
|
|
// check if user password has expired
|
|
// Currently supported only for ldap-authentication module
|
|
if (isset($CFG->ldap_expiration) && $CFG->ldap_expiration == 1 ) {
|
|
if (function_exists('auth_password_expire')){
|
|
$days2expire = auth_password_expire($USER->username);
|
|
if (intval($days2expire) > 0 && intval($days2expire) < intval($CFG->{$USER->auth.'_expiration_warning'})) {
|
|
print_header("$site->fullname: $loginsite", "$site->fullname", $loginsite, $focus, "", true, "<div align=\"right\">$langmenu</div>");
|
|
notice_yesno(get_string('auth_passwordwillexpire', 'auth', $days2expire), $passwordchangeurl, $urltogo);
|
|
print_footer();
|
|
exit;
|
|
} elseif (intval($days2expire) < 0 ) {
|
|
print_header("$site->fullname: $loginsite", "$site->fullname", $loginsite, $focus, "", true, "<div align=\"right\">$langmenu</div>");
|
|
notice_yesno(get_string('auth_passwordisexpired', 'auth'), $passwordchangeurl, $urltogo);
|
|
print_footer();
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
|
|
reset_login_count();
|
|
|
|
redirect($urltogo);
|
|
|
|
exit;
|
|
|
|
} else {
|
|
$errormsg = get_string("invalidlogin");
|
|
}
|
|
}
|
|
|
|
|
|
if (empty($errormsg)) {
|
|
$errormsg = "";
|
|
}
|
|
|
|
if (empty($SESSION->wantsurl)) {
|
|
$SESSION->wantsurl = array_key_exists('HTTP_REFERER',$_SERVER) ? $_SERVER["HTTP_REFERER"] : $CFG->wwwroot;
|
|
}
|
|
|
|
if (get_moodle_cookie() == '') {
|
|
set_moodle_cookie('nobody'); // To help search for cookies
|
|
}
|
|
|
|
if (empty($frm->username)) {
|
|
$frm->username = get_moodle_cookie() === 'nobody' ? '' : get_moodle_cookie();
|
|
$frm->password = "";
|
|
}
|
|
|
|
if (!empty($frm->username)) {
|
|
$focus = "login.password";
|
|
} else {
|
|
$focus = "login.username";
|
|
}
|
|
|
|
if ($CFG->auth == "email" or $CFG->auth == "none" or chop($CFG->auth_instructions) <> "" ) {
|
|
$show_instructions = true;
|
|
} else {
|
|
$show_instructions = false;
|
|
}
|
|
|
|
if (!empty($CFG->alternateloginurl)) {
|
|
redirect($CFG->alternateloginurl);
|
|
exit;
|
|
}
|
|
|
|
print_header("$site->fullname: $loginsite", "$site->fullname", $loginsite, $focus, "", true, "<div align=\"right\">$langmenu</div>");
|
|
include("index_form.html");
|
|
print_footer();
|
|
|
|
exit;
|
|
|
|
// No footer on this page
|
|
|
|
?>
|