Example #1
0
 function ValidateUser(&$usr, &$pwd, $autologin, $encrypted = FALSE)
 {
     global $Language;
     $ValidateUser = FALSE;
     $CustomValidateUser = FALSE;
     // Call User Custom Validate event
     if (EW_USE_CUSTOM_LOGIN) {
         $CustomValidateUser = $this->User_CustomValidate($usr, $pwd);
         if ($CustomValidateUser) {
             $_SESSION[EW_SESSION_STATUS] = "login";
             $this->setCurrentUserName($usr);
             // Load user name
         }
     }
     // Check hard coded admin first
     if (!$ValidateUser) {
         if (EW_CASE_SENSITIVE_PASSWORD) {
             $ValidateUser = !$CustomValidateUser && EW_ADMIN_USER_NAME == $usr && EW_ADMIN_PASSWORD == $pwd || $CustomValidateUser && EW_ADMIN_USER_NAME == $usr;
         } else {
             $ValidateUser = !$CustomValidateUser && strtolower(EW_ADMIN_USER_NAME) == strtolower($usr) && strtolower(EW_ADMIN_PASSWORD) == strtolower($pwd) || $CustomValidateUser && strtolower(EW_ADMIN_USER_NAME) == strtolower($usr);
         }
         if ($ValidateUser) {
             $_SESSION[EW_SESSION_STATUS] = "login";
             $_SESSION[EW_SESSION_SYS_ADMIN] = 1;
             // System Administrator
             $this->setCurrentUserName($Language->Phrase("UserAdministrator"));
             // Load user name
         }
     }
     if ($CustomValidateUser) {
         return $CustomValidateUser;
     }
     if (!$ValidateUser && !IsPasswordExpired()) {
         $_SESSION[EW_SESSION_STATUS] = "";
     }
     // Clear login status
     return $ValidateUser;
 }
Example #2
0
 function ValidateUser(&$usr, &$pwd, $autologin)
 {
     global $conn, $Language;
     global $UserTable;
     $ValidateUser = FALSE;
     $CustomValidateUser = FALSE;
     // Call User Custom Validate event
     if (EW_USE_CUSTOM_LOGIN) {
         $CustomValidateUser = $this->User_CustomValidate($usr, $pwd);
         if ($CustomValidateUser) {
             $_SESSION[EW_SESSION_STATUS] = "login";
             $this->setCurrentUserName($usr);
             // Load user name
         }
     }
     // Check hard coded admin first
     if (!$ValidateUser) {
         if (EW_CASE_SENSITIVE_PASSWORD) {
             $ValidateUser = !$CustomValidateUser && EW_ADMIN_USER_NAME == $usr && EW_ADMIN_PASSWORD == $pwd || $CustomValidateUser && EW_ADMIN_USER_NAME == $usr;
         } else {
             $ValidateUser = !$CustomValidateUser && strtolower(EW_ADMIN_USER_NAME) == strtolower($usr) && strtolower(EW_ADMIN_PASSWORD) == strtolower($pwd) || $CustomValidateUser && strtolower(EW_ADMIN_USER_NAME) == strtolower($usr);
         }
         if ($ValidateUser) {
             $_SESSION[EW_SESSION_STATUS] = "login";
             $_SESSION[EW_SESSION_SYS_ADMIN] = 1;
             // System Administrator
             $this->setCurrentUserName("Administrator");
             // Load user name
             $this->setSessionUserID(-1);
             // System Administrator
         }
     }
     // Check other users
     if (!$ValidateUser) {
         $sFilter = str_replace("%u", ew_AdjustSql($usr), EW_USER_NAME_FILTER);
         $sFilter .= " AND " . EW_USER_ACTIVATE_FILTER;
         // Set up filter (SQL WHERE clause) and get return SQL
         // SQL constructor in <UserTable> class, <UserTable>info.php
         $sSql = $UserTable->GetSQL($sFilter, "");
         if ($rs = $conn->Execute($sSql)) {
             if (!$rs->EOF) {
                 $ValidateUser = $CustomValidateUser || ew_ComparePassword($rs->fields('contrasenia'), $pwd);
                 if ($ValidateUser) {
                     $_SESSION[EW_SESSION_STATUS] = "login";
                     $_SESSION[EW_SESSION_SYS_ADMIN] = 0;
                     // Non System Administrator
                     $this->setCurrentUserName($rs->fields('usuario'));
                     // Load user name
                     $this->setSessionUserID($rs->fields('codigo'));
                     // Load User ID
                     $this->setSessionParentUserID($rs->fields('codigo'));
                     // Load parent User ID
                     // Call User Validated event
                     $row = $rs->fields;
                     $this->User_Validated($row);
                 }
             }
             $rs->Close();
         }
     }
     if ($CustomValidateUser) {
         return $CustomValidateUser;
     }
     if (!$ValidateUser && !IsPasswordExpired()) {
         $_SESSION[EW_SESSION_STATUS] = "";
     }
     // Clear login status
     return $ValidateUser;
 }
Example #3
0
 function ValidateUser(&$usr, &$pwd, $autologin)
 {
     global $conn, $Language;
     $ValidateUser = FALSE;
     $CustomValidateUser = FALSE;
     // Call User Custom Validate event
     if (EW_USE_CUSTOM_LOGIN) {
         $CustomValidateUser = $this->User_CustomValidate($usr, $pwd);
         if ($CustomValidateUser) {
             $_SESSION[EW_SESSION_STATUS] = "login";
             $this->setCurrentUserName($usr);
             // Load user name
         }
     }
     if ($CustomValidateUser) {
         return $CustomValidateUser;
     }
     if (!$ValidateUser && !IsPasswordExpired()) {
         $_SESSION[EW_SESSION_STATUS] = "";
     }
     // Clear login status
     return $ValidateUser;
 }
Example #4
0
 function ValidateUser(&$usr, &$pwd, $autologin)
 {
     global $conn, $Language;
     global $UserTable;
     $ValidateUser = FALSE;
     $CustomValidateUser = FALSE;
     // Call User Custom Validate event
     if (EW_USE_CUSTOM_LOGIN) {
         $CustomValidateUser = $this->User_CustomValidate($usr, $pwd);
         if ($CustomValidateUser) {
             $_SESSION[EW_SESSION_STATUS] = "login";
             $this->setCurrentUserName($usr);
             // Load user name
         }
     }
     // Check other users
     if (!$ValidateUser) {
         $sFilter = str_replace("%u", ew_AdjustSql($usr), EW_USER_NAME_FILTER);
         // Set up filter (SQL WHERE clause) and get return SQL
         // SQL constructor in <UserTable> class, <UserTable>info.php
         $sSql = $UserTable->GetSQL($sFilter, "");
         if ($rs = $conn->Execute($sSql)) {
             if (!$rs->EOF) {
                 $ValidateUser = $CustomValidateUser || ew_ComparePassword($rs->fields('Password'), $pwd);
                 if ($ValidateUser) {
                     $_SESSION[EW_SESSION_STATUS] = "login";
                     $_SESSION[EW_SESSION_SYS_ADMIN] = 0;
                     // Non System Administrator
                     $this->setCurrentUserName($rs->fields('UserName'));
                     // Load user name
                     // Call User Validated event
                     $row = $rs->fields;
                     $this->User_Validated($row);
                 }
             }
             $rs->Close();
         }
     }
     if ($CustomValidateUser) {
         return $CustomValidateUser;
     }
     if (!$ValidateUser && !IsPasswordExpired()) {
         $_SESSION[EW_SESSION_STATUS] = "";
     }
     // Clear login status
     return $ValidateUser;
 }