81 lines
2.6 KiB
PHP
Executable File
81 lines
2.6 KiB
PHP
Executable File
<?php
|
|
/*** *** *** *** *** ***
|
|
* @package Quadodo Login Script
|
|
* @file login_process.php
|
|
* @start November 29th, 2007
|
|
* @author Douglas Rennehan
|
|
* @license http://www.opensource.org/licenses/gpl-license.php
|
|
* @version 1.0.1
|
|
* @link http://www.quadodo.net
|
|
*** *** *** *** *** ***
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*** *** *** *** *** ***
|
|
* Comments are always before the code they are commenting.
|
|
*** *** *** *** *** ***/
|
|
if(isset($demoAutoLogin)) {
|
|
// Try to login the user
|
|
if ($qls->User->login_user()) {
|
|
$qls->redirect($qls->config['login_redirect']);
|
|
} else {
|
|
$qls->redirect('login.php?f=' . $qls->User->login_error);
|
|
}
|
|
} else {
|
|
session_start();
|
|
define('QUADODO_IN_SYSTEM', true);
|
|
|
|
// What language?
|
|
require_once('includes/Blank.lang.php');
|
|
require_once('includes/qls.class.php');
|
|
|
|
// Start the main class
|
|
$qls = new qls(SYS_CURRENT_LANG);
|
|
|
|
if (isset($_POST['process'])) {
|
|
// Try to login the user
|
|
if ($qls->User->login_user()) {
|
|
$qls->redirect($qls->config['login_redirect']);
|
|
} else {
|
|
$qls->redirect('login.php?f=' . $qls->User->login_error);
|
|
}
|
|
} else if (isset($_POST['processGAuth'])) {
|
|
$gAuthCode = $_POST['gAuthCode'];
|
|
$username = $_POST['username'];
|
|
|
|
$user_info = $qls->User->fetch_user_info($username);
|
|
$secret = $user_info['mfa_secret'];
|
|
|
|
$gAuthResponse = $qls->gAuth->checkCode($secret, $gAuthCode);
|
|
|
|
$mfaAuthToken = $_SESSION[$qls->config['cookie_prefix'] . 'mfa_auth_token'];
|
|
unset($_SESSION[$qls->config['cookie_prefix'] . 'mfa_auth_token']);
|
|
|
|
if ($gAuthResponse) {
|
|
if($mfaAuthToken == $user_info['mfa_auth_token']) {
|
|
if ($qls->User->login_user($username)) {
|
|
$qls->redirect($qls->config['login_redirect']);
|
|
} else {
|
|
$qls->redirect('login.php?f=' . $qls->User->login_error);
|
|
}
|
|
} else {
|
|
$qls->redirect('login.php?f=' . LOGIN_MFA_FAILURE_CODE);
|
|
}
|
|
} else {
|
|
$qls->redirect('login.php?f=' . LOGIN_MFA_FAILURE_CODE);
|
|
}
|
|
} else {
|
|
$qls->redirect('login.php');
|
|
}
|
|
}
|