<?session_start();session_destroy();header("Content-type: text/html; charset=utf-8");require("cwispy.php");define_syslog_variables();openlog("cwispy", LOG_ODELAY, LOG_AUTH);if ($GLOBALCHECK !=0) {$isglobals = ini_get(register_globals);if ($isglobals == 1){ echo "Running the program with register_globals turned on in your php.ini is a bad idea.<br>\n"; echo "It is recommended that you turn register_globals to off.<br>\n"; echo "You can turn this message off by changing the GLOBALCHECK = 0 in the cwispy-settings.php"; }}/** * If a username and password has been sent * check it against the database. */if( isset( $_POST['username'] ) && ( $_POST['username'] != "" ) ) { $username = $_POST['username']; if (DB::isError($user_result = $db->query("SELECT * FROM users WHERE username='$username'"))) { echo $user_result->getDebugInfo(); } $user_row = $user_result->fetchRow(DB_FETCHMODE_ASSOC); if (crypt($_POST['password'], $user_row['password']) == $user_row['password']) { /** User has been authenticated. Start the session for the login. */ session_start(); $_SESSION['sess_lang'] = $user_row["language"]; if (DB::isError($res2 = $db->query("SELECT firstname,lastname FROM userinfo WHERE userid='$user_row[userid]'"))) { echo $res->getDebugInfo(); } $row2 = $res2->fetchRow(DB_FETCHMODE_ASSOC); $_SESSION['sess_name'] = $row2['firstname']." ".$row2['lastname']; $_SESSION['sess_admin'] = "No"; $_SESSION['sess_uid'] = $user_row['userid']; $_SESSION['sess_acl'] = getacl($user_row['userid']); if ($_SESSION['sess_acl']["admin"]) { $_SESSION['sess_admin'] = "Yes"; } $_SESSION['sess_user'] = $username; $_SESSION['sess_customer'] = $username; syslog(LOG_NOTICE, "Successful login by user ".$_SESSION['sess_user']." (uid: ".$_SESSION['sess_uid'].") from ".$_SERVER['REMOTE_ADDR'].""); header("Location: main.php"); exit; } else { /** Login Failed */ syslog(LOG_WARNING, "Failed login from ".$_SERVER['REMOTE_ADDR']." using username ".$username." "); header("Location: index.php"); die(); } } else {beginDocument($lLogin, $lNotLoggedIn);echo "<br>";echo "<center>";openForm("login", $_SERVER['PHP_SELF']); beginPrettyTable("2", $lLogin); makeTextField($lUsername, "username", ""); makePasswordField($lPassword, "password", ""); makeSubmitter(); endPrettyTable();closeForm();echo "</center>";?><table summary='' width="100%"> <tr> </p> </td> <td valign="middle" align="center"> <a href='http://ourlan.bounceme.net'><img src="../images/logo.png"border="0" alt="cwISPy Logo"></a> </td> </tr></table><?endDocument();}?>