Ejemplo n.º 1
0
    } else {
        header("Location: {$conf['siteURL']}/{$conf['linkPrefixAdmin']}/dashboard/{$conf['linkConj']}CSRFCode=" . $admin->getCSRFCode('navibar'));
    }
}
if ($canonical->currentArgs['mainAction'] == 'login') {
    if ($canonical->currentArgs['subAction'] == 'logout') {
        if (array_key_exists('authmobile', $_SESSION)) {
            stopError(bw::$conf['l']['admin:msg:CannotLogout']);
        }
        $admin->checkCSRFCode('logout');
        @session_destroy();
        header("Location: {$conf['siteURL']}/index.php?cleartoken");
        exit;
    } elseif ($canonical->currentArgs['subAction'] == 'verify') {
        $s_token = $_REQUEST['s_token'];
        $admin->verifyToken($s_token);
        if (!$admin->verified) {
            stopError('');
        } else {
            $admin->storeSessionToken($s_token);
            $navCSRFCode = $admin->getCSRFCode('navibar');
            ajaxSuccess('-' . $navCSRFCode);
        }
    } else {
        $view->setTheme(bw::$conf['siteTheme']);
        $view->setMaster('adminlogin');
        $view->setWorkFlow(array('adminlogin'));
        $view->finalize();
    }
}
if ($canonical->currentArgs['mainAction'] == 'center') {
Ejemplo n.º 2
0
    }
    $uaDev = $conf['authorName'] . $conf['l']['page:Conj'] . $uaDev;
    $view->setMaster('authmobile');
    $view->setPassData(array('deviceName' => $uaDev));
    $view->setWorkFlow(array('authmobile'));
    $authX = $view->getOutput();
    $view->setMaster('plainpage');
    $view->setPassData(array('plainContent' => $authX));
    $view->setWorkFlow(array('plainpage'));
    $view->finalize();
} elseif ($canonical->currentArgs['mainAction'] == 'nado') {
    if (!isset($_POST['s_token']) || !isset($_POST['s_myname'])) {
        stopError(bw::$conf['l']['page:ComError1']);
    }
    $admin = new bwAdmin();
    $admin->verifyToken($_POST['s_token']);
    if (!$admin->verified) {
        stopError(bw::$conf['l']['page:AuthMobileError']);
    } else {
        $s_myname = htmlspecialchars($_POST['s_myname']);
        $keyNewAdd = sha1($conf['siteKey'] . 'mobile' . $s_myname);
        $allMobileKeys = array();
        if (file_exists(P . 'conf/mobileauth.php')) {
            include_once P . 'conf/mobileauth.php';
        }
        $allMobileKeys[$s_myname] = $keyNewAdd;
        $valString = "<?php\r\n\$allMobileKeys=" . var_export($allMobileKeys, true) . ";?>";
        $rS = file_put_contents(P . "conf/mobileauth.php", $valString);
        if ($rS) {
            $view->setMaster('authmobilefinish');
            $view->setPassData(array('deviceName' => $s_myname, 'deviceMobileToken' => $keyNewAdd));