24481279d5
- Updated session variables to use 'authorization' array instead of 'username' for user identification across multiple files. - Introduced a new function `getUserPermissions` to consolidate user permissions retrieval based on assigned roles. - Modified API calls to use the new authorization structure and updated endpoints to v2. - Enhanced language support by adding 'PL' to the list of supported languages. - Cleaned up redundant code and improved session management during user login and registration processes. - Added a new API endpoint for fetching user permissions based on user ID.
210 lines
7.2 KiB
PHP
210 lines
7.2 KiB
PHP
<?php
|
|
|
|
ini_set('display_errors', '1');
|
|
ini_set('display_startup_errors', '1');
|
|
error_reporting(E_ALL);
|
|
|
|
include './assets/functions.php';
|
|
include './settings/settings_redirector.php';
|
|
include './settings/config_redirector.php';
|
|
|
|
if (session_status() == PHP_SESSION_NONE) {
|
|
session_start();
|
|
}
|
|
|
|
//=========================================
|
|
//GET Language
|
|
//=========================================
|
|
// Check for GET parameter override first
|
|
if (isset($_GET['language']) && $_GET['language'] != ''){
|
|
$lang = strtoupper(trim($_GET['language']));
|
|
$lang = in_array($lang, $supportedLanguages) ? $lang : 'US';
|
|
$_SESSION['country_code'] = $lang;
|
|
}
|
|
// Check for existing session language
|
|
elseif (isset($_SESSION['country_code'])){
|
|
$lang = strtoupper($_SESSION['country_code']);
|
|
$lang = in_array($lang, $supportedLanguages) ? $lang : 'US';
|
|
}
|
|
// Default to browser language
|
|
else {
|
|
$lang = strtoupper(substr($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2));
|
|
$lang = in_array($lang, $supportedLanguages) ? $lang : 'US';
|
|
}
|
|
|
|
//INCLUDE THE TRANSLATION
|
|
include_once './settings/translations/translations_'.$lang.'.php';
|
|
include_once './settings/countries.php';
|
|
//=========================================
|
|
//GET DOMAIN FOR CORRECT STYLING AND SETTINGS
|
|
//=========================================
|
|
|
|
$domain = getDomainName($_SERVER['SERVER_NAME']);
|
|
$custom_css = (file_exists(dirname(__FILE__).'/custom/'.$domain.'/style/'.$domain.'_login.css') ? './custom/'.$domain.'/style/'.$domain.'_login.css' : './style/admin_login.css');
|
|
|
|
// Check if the user is already logged in, if yes then redirect him to welcome page
|
|
if(isset($_SESSION["loggedin"]) && $_SESSION["loggedin"] === true){
|
|
header("location: index.php");
|
|
exit();
|
|
}
|
|
|
|
// Define variables and initialize with empty values
|
|
$username = $password = '';
|
|
$username_err = $password_err = '';
|
|
$retry = 0;
|
|
|
|
// Process submitted form data
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
|
|
// Check if username is empty
|
|
if(empty(trim($_POST['username']))){
|
|
$username_err = $username_enter ?? 'Please enter username' ;
|
|
} else{
|
|
$username = trim($_POST['username']);
|
|
}
|
|
|
|
// Check if password is empty
|
|
if(empty(trim($_POST['password']))){
|
|
$password_err = $password_enter ?? 'Please enter your password';
|
|
} else{
|
|
$password = trim($_POST['password']);
|
|
}
|
|
|
|
// Validate credentials
|
|
if (empty($username_err) && empty($password_err) && $retry < 3) {
|
|
$data = json_encode(array("username" => $username, "password" => $password), JSON_UNESCAPED_UNICODE);
|
|
//API call
|
|
$responses = ioServer('/v2/authorization', $data);
|
|
|
|
//Decode Payload
|
|
if (!empty($responses)){$responses = json_decode($responses,true);}else{$responses = '400';}
|
|
|
|
if ($responses === 'NOK'){
|
|
$retry++;
|
|
$password_err = $password_err_1 ?? 'Not authorized, please retry';
|
|
} elseif ($responses == '1'){
|
|
$password_err = $password_err_2 ?? 'Too many login attempts. User blocked, please contact your administrator';
|
|
} else {
|
|
// Start a new session
|
|
session_start();
|
|
|
|
// Store data in session
|
|
$_SESSION['loggedin'] = true;
|
|
$_SESSION['authorization'] = $responses;
|
|
|
|
$language_user = trim($_SESSION['authorization']['language']) ?? 'US';
|
|
if($responses->profile == 'firmwaretool,products_software,application'){
|
|
header('location: index.php?page=firmwaretool');
|
|
exit();
|
|
|
|
} else {
|
|
header('location: index.php?language='.$language_user.'');
|
|
exit();
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
// Display an error for passord mismatch
|
|
$password_err = $password_err_3 ?? 'Not authorized';
|
|
}
|
|
}
|
|
echo'
|
|
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<meta http-equiv="Content-type" content="text/html; charset=UTF-8" />
|
|
<title>'.site_title.'</title>
|
|
<link rel="shortcut icon" href="'.icon_image.'" type="image/x-icon" />
|
|
<link href="'.$custom_css.'" rel="stylesheet" type="text/css">
|
|
</head>
|
|
<body>
|
|
';
|
|
|
|
//Logon view
|
|
echo'
|
|
<div class="login-container">
|
|
<div class="login-form">
|
|
<div class="logo"></div>
|
|
<a href="register.php" class="register-link">'.strtolower($account_create ?? 'create account').'</a>';
|
|
|
|
if (maintenance_mode)
|
|
{
|
|
//Maintenance mode is on => Show maintenance mode text
|
|
echo '
|
|
<div class="message">
|
|
<p>'.maintenance_mode_text.'</p>
|
|
</div>
|
|
';
|
|
|
|
} else {
|
|
//Maintenance mode is off => Show login
|
|
echo '
|
|
<div class="header">
|
|
<h1>'.($login_h1 ?? 'Login to your account').'</h1>
|
|
<p>'.($login_p ?? 'Enter your details to login.').'</p>
|
|
</div>
|
|
<form action="'.$_SERVER['PHP_SELF'].'" method="POST">
|
|
<div class="input-group">
|
|
<input type="text" id="username" name="username" placeholder="'.($User_username ?? 'Username').'" value="'.$username.'" autofocus>
|
|
</div>
|
|
|
|
<div class="input-group">
|
|
<input type="password" id="password" name="password" placeholder="'.($account_create_password ?? 'Password').'" value="'.$password.'">
|
|
<a href="reset.php'.(isset($_GET['language'])? '?language='.$_GET['language'].'' : '').'" class="forgot-password">'.($button2 ?? 'Forgot password?').'</a>
|
|
</div>
|
|
|
|
<div class="remember-me">
|
|
<label for="remember-me"></label>
|
|
</div>
|
|
|
|
<button type="submit" class="login-btn">'.($button1 ?? 'Login').'</button>
|
|
</form>';
|
|
}
|
|
|
|
if($password_err !='' || $username_err != ''){
|
|
echo'
|
|
<div class="message"><p>'.$username_err.''.$password_err.'</p></div>
|
|
';
|
|
}
|
|
//Maintenance mode notification message
|
|
if (maintenance_mode_communication){
|
|
echo'
|
|
<div class="maintenance">
|
|
<p style="text-align: center;">
|
|
<small>'.maintenance_mode_notification.'</small>
|
|
</p>
|
|
</div>';
|
|
}
|
|
|
|
echo'
|
|
<div class="trademark">'.site_title.'</div>
|
|
<div class="language-selector">
|
|
<span>🌐</span>
|
|
<select id="language-selector">';
|
|
foreach ($supportedLanguages as $language){
|
|
echo ' <option value="'.$language.'" '.((isset($_SESSION['country_code']) && $_SESSION['country_code'] == $language) ? 'selected' : '').'>'.$language.'</option>';
|
|
}
|
|
echo'
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="login-visual">
|
|
|
|
</div>
|
|
</div>
|
|
</body>
|
|
<script>
|
|
document.getElementById(\'language-selector\').addEventListener(\'change\', function() {
|
|
if (this.value) {
|
|
// Get the current URL
|
|
let currentUrl = window.location.pathname;
|
|
|
|
// Append the selected value as a query parameter
|
|
window.location.href = `${currentUrl}?language=${this.value}`;
|
|
}
|
|
});
|
|
</script>
|
|
</html>';
|
|
|
|
?>
|