access/login.php

   1 <?php
   2 /**********************************************************************
   3     Copyright (C) FrontAccounting, LLC.
   4         Released under the terms of the GNU General Public License, GPL,
   5         as published by the Free Software Foundation, either version 3
   6         of the License, or (at your option) any later version.
   7     This program is distributed in the hope that it will be useful,
   8     but WITHOUT ANY WARRANTY; without even the implied warranty of
   9     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  10     See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
  11 ***********************************************************************/
  12         if (!isset($path_to_root) || isset($_GET['path_to_root']) || isset($_POST['path_to_root']))
  13                 die(_("Restricted access"));
  14         include_once($path_to_root . "/includes/ui.inc");
  15         include_once($path_to_root . "/includes/page/header.inc");
  16
  17         $js = "<script language='JavaScript' type='text/javascript'>
  18 function defaultCompany()
  19 {
  20         document.forms[0].company_login_name.options[".user_company()."].selected = true;
  21 }
  22 </script>";
  23
  24         add_js_file('login.js');
  25         // Display demo user name and password within login form if allow_demo_mode option is true
  26         if ($SysPrefs->allow_demo_mode == true)
  27         {
  28             $demo_text = _("Login as user: demouser and password: password");
  29         }
  30         else
  31         {
  32                 $demo_text = _("Please login here");
  33         if (@$SysPrefs->allow_password_reset) {
  34                 $demo_text .= " "._("or")." <a href='$path_to_root/index.php?reset=1'>"._("request new password")."</a>";
  35         }
  36         }
  37
  38         if (check_faillog())
  39         {
  40                 $blocked_msg = '<span class="redfg">'._('Too many failed login attempts.<br>Please wait a while or try later.').'</span>';
  41
  42             $js .= "<script>setTimeout(function() {
  43                 document.getElementsByName('SubmitUser')[0].disabled=0;
  44                 document.getElementById('log_msg').innerHTML='$demo_text'}, 1000*".$SysPrefs->login_delay.");</script>";
  45             $demo_text = $blocked_msg;
  46         }
  47         flush_dir(user_js_cache());
  48         if (!isset($def_coy))
  49                 $def_coy = 0;
  50         $def_theme = "default";
  51
  52         $login_timeout = $_SESSION["wa_current_user"]->last_act;
  53
  54         $title = $login_timeout ? _('Authorization timeout') : $SysPrefs->app_title." ".$version." - "._("Login");
  55         $encoding = isset($_SESSION['language']->encoding) ? $_SESSION['language']->encoding : "iso-8859-1";
  56         $rtl = isset($_SESSION['language']->dir) ? $_SESSION['language']->dir : "ltr";
  57         $onload = !$login_timeout ? "onload='defaultCompany()'" : "";
  58
  59         echo "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">\n";
  60         echo "<html dir='$rtl' >\n";
  61         echo "<head profile=\"http://www.w3.org/2005/10/profile\"><title>$title</title>\n";
  62         echo "<meta http-equiv='Content-type' content='text/html; charset=$encoding' >\n";
  63         echo "<link href='$path_to_root/themes/$def_theme/default.css' rel='stylesheet' type='text/css'> \n";
  64         echo "<link href='$path_to_root/themes/default/images/favicon.ico' rel='icon' type='image/x-icon'> \n";
  65         send_scripts();
  66         if (!$login_timeout)
  67         {
  68                 echo $js;
  69         }
  70
  71         echo "</head>\n";
  72
  73         echo "<body id='loginscreen' $onload>\n";
  74
  75         echo "<table class='titletext'><tr><td>$title</td></tr></table>\n";
  76
  77         div_start('_page_body');
  78         br();br();
  79         start_form(false, false, $_SESSION['timeout']['uri'], "loginform");
  80         start_table(false, "class='login'");
  81         start_row();
  82         echo "<td align='center' colspan=2>";
  83         if (!$login_timeout) { // FA logo
  84         echo "<a target='_blank' href='".$SysPrefs->power_url."'><img src='$path_to_root/themes/$def_theme/images/logo_frontaccounting.png' alt='FrontAccounting' height='50' onload='fixPNG(this)' border='0' ></a>";
  85         } else {
  86                 echo "<font size=5>"._('Authorization timeout')."</font>";
  87         }
  88         echo "</td>\n";
  89         end_row();
  90         if (!$login_timeout)
  91                 table_section_title(_("Version")." $version   Build ".$SysPrefs->build_version." - "._("Login"));
  92         $value = $login_timeout ? $_SESSION['wa_current_user']->loginname : ($SysPrefs->allow_demo_mode ? "demouser":"");
  93
  94         text_row(_("User name"), "user_name_entry_field", $value, 20, 30);
  95
  96         $password = $SysPrefs->allow_demo_mode ? "password":"";
  97
  98         password_row(_("Password:"), 'password', $password);
  99
 100         if ($login_timeout) {
 101                 hidden('company_login_name', user_company());
 102         } else {
 103                 $coy =  user_company();
 104                 if (!isset($coy))
 105                         $coy = $def_coy;
 106                 if (!@$SysPrefs->text_company_selection) {
 107                         echo "<tr><td>"._("Company")."</td><td><select name='company_login_name'>\n";
 108                         for ($i = 0; $i < count($db_connections); $i++)
 109                                 echo "<option value=$i ".($i==$coy ? 'selected':'') .">" . $db_connections[$i]["name"] . "</option>";
 110                         echo "</select>\n";
 111                         echo "</td></tr>";
 112                 } else {
 113                         text_row(_("Company"), "company_login_nickname", "", 20, 50);
 114                 }
 115         };
 116         start_row();
 117         label_cell($demo_text, "colspan=2 align='center' id='log_msg'");
 118         end_row();
 119         end_table(1);
 120         echo "<input type='hidden' id=ui_mode name='ui_mode' value='".!fallback_mode()."' >\n";
 121         echo "<center><input type='submit' value='&nbsp;&nbsp;"._("Login -->")."&nbsp;&nbsp;' name='SubmitUser'"
 122                 ." onclick='".(in_ajax() ? 'retry();': 'set_fullmode();')."'".(isset($blocked_msg) ? " disabled" : '')." ></center>\n";
 123
 124         foreach($_SESSION['timeout']['post'] as $p => $val) {
 125                 // add all request variables to be resend together with login data
 126                 if (!in_array($p, array('ui_mode', 'user_name_entry_field',
 127                         'password', 'SubmitUser', 'company_login_name')))
 128                         if (!is_array($val))
 129                                 echo "<input type='hidden' name='$p' value='$val'>";
 130                         else
 131                                 foreach($val as $i => $v)
 132                                         echo "<input type='hidden' name='{$p}[$i]' value='$v'>";
 133         }
 134         end_form(1);
 135         $Ajax->addScript(true, "if (document.forms.length) document.forms[0].password.focus();");
 136
 137     echo "<script language='JavaScript' type='text/javascript'>
 138     //<![CDATA[
 139             <!--
 140             document.forms[0].user_name_entry_field.select();
 141             document.forms[0].user_name_entry_field.focus();
 142             //-->
 143     //]]>
 144     </script>";
 145     div_end();
 146         echo "<table class='bottomBar'>\n";
 147         echo "<tr>";
 148         if (isset($_SESSION['wa_current_user']))
 149                 $date = Today() . " | " . Now();
 150         else
 151                 $date = date("m/d/Y") . " | " . date("h.i am");
 152         echo "<td class='bottomBarCell'>$date</td>\n";
 153         echo "</tr></table>\n";
 154         echo "<table class='footer'>\n";
 155         echo "<tr>\n";
 156         echo "<td><a target='_blank' href='".$SysPrefs->power_url."' tabindex='-1'>".$SysPrefs->app_title." $version - " . _("Theme:") . " " . $def_theme . "</a></td>\n";
 157         echo "</tr>\n";
 158         echo "<tr>\n";
 159         echo "<td><a target='_blank' href='".$SysPrefs->power_url."' tabindex='-1'>".$SysPrefs->power_by."</a></td>\n";
 160         echo "</tr>\n";
 161         echo "</table><br><br>\n";
 162         echo "</body></html>\n";
 163