Exemplo n.º 1
0
<?php

require '../../include/ctf.inc.php';
$redirect_url = array_get($_POST, 'redirect');
if (user_is_logged_in()) {
    redirect($redirect_url);
}
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    if ($_POST['action'] == 'login') {
        $email = $_POST[md5(CONFIG_SITE_NAME . 'USR')];
        $password = $_POST[md5(CONFIG_SITE_NAME . 'PWD')];
        $remember_me = isset($_POST['remember_me']);
        if (login_create($email, $password, $remember_me)) {
            enforce_2fa();
            redirect($redirect_url);
        } else {
            message_error('Login failed? Helpful.');
        }
    }
}
Exemplo n.º 2
0
function enforce_authentication($minClass = CONFIG_UC_USER)
{
    login_session_refresh();
    if (!user_is_logged_in()) {
        logout();
    }
    if ($_SESSION['IID'] != $_SESSION['UIID'] && !verifySAGlobal()) {
        logout();
    }
    if ($_SESSION['class'] < $minClass) {
        log_exception(new Exception('Class less than required'));
        logout();
    }
    if (user_is_staff() && $_SESSION['fingerprint'] != get_fingerprint()) {
        logout();
    }
    enforce_2fa();
}
Exemplo n.º 3
0
function enforce_authentication($min_class = CONST_USER_CLASS_USER, $force_user_data_reload = false)
{
    login_session_refresh($force_user_data_reload);
    if (!user_is_logged_in()) {
        logout();
    }
    if ($_SESSION['class'] < $min_class) {
        log_exception(new Exception('Class less than required'));
        logout();
    }
    if (user_is_staff() && $_SESSION['fingerprint'] != get_fingerprint()) {
        logout();
    }
    enforce_2fa();
}