function Handle($Request)
{
try {
if (isset($_POST['submit'])) {
if (isset($_POST['email']) && $_POST['email'] != "") {
$userID = phpsec\User::getUserIDFromEmail($_POST['email']);
if ($userID !== FALSE) {
$nextLocation = \phpsec\HttpRequest::Protocol() . "://" . \phpsec\HttpRequest::Host() . \phpsec\HttpRequest::PortReadable() . "/rnj/framework/temppass?user="******"&mode=temppass" . "&email=" . $_POST['email'];
header("Location: {$nextLocation}");
} else {
$this->error .= "This email ID is not registered in our DB. Please enter the email you provided at the time of sign-up. Alternatively it might happen that multiple accounts are associated with this Email ID. For the time being only 1 email account is supported per userID." . "<BR>";
}
} else {
$this->error .= "ERROR: Empty fields are not allowed." . "<BR>";
}
}
} catch (Exception $e) {
$this->error .= $e->getMessage() . "<BR>";
}
return require_once __DIR__ . "/../../view/default/user/forgotpassword.php";
}
function Handle($Request)
{
try {
$userSession = new phpsec\Session();
$sessionID = $userSession->existingSession();
if ($sessionID != FALSE) {
$userID = \phpsec\Session::getUserIDFromSessionID($sessionID);
$userObj = phpsec\UserManagement::forceLogIn($userID);
phpsec\UserManagement::logOut($userObj);
} else {
phpsec\User::deleteAuthenticationToken();
}
$this->info .= "You are now logged out." . "<BR>";
$nextURL = \phpsec\HttpRequest::Protocol() . "://" . \phpsec\HttpRequest::Host() . \phpsec\HttpRequest::PortReadable() . "/rnj/framework/home";
header("Location: {$nextURL}");
} catch (Exception $e) {
$this->error .= $e->getMessage() . "<BR>";
$lastURL = $_SERVER['HTTP_REFERER'];
header("Location: {$lastURL}");
}
}
function Handle($Request)
{
try {
$config = (require_once __DIR__ . "/../../config/config.php");
$userID = \phpsec\User::checkRememberMe();
if (!$userID) {
if (isset($_POST['submit'])) {
if (isset($_POST['user']) && $_POST['user'] != "" && isset($_POST['pass']) && $_POST['pass'] != "") {
try {
$userID = $_POST['user'];
$userObj = phpsec\UserManagement::logIn($_POST['user'], $_POST['pass']);
} catch (phpsec\WrongPasswordException $e) {
if ($config['BRUTE_FORCE_DETECTION'] === "ON") {
try {
new phpsec\AdvancedPasswordManagement($_POST['user'], $_POST['pass'], TRUE);
} catch (phpsec\BruteForceAttackDetectedException $ex) {
\phpsec\User::lockAccount($_POST['user']);
$this->error .= "Brute Force Attack detected on this account. This account has now been locked. If its not your fault, then please contact the administrator." . "<BR>";
}
}
$this->error .= "Incorrect Username/Password combination!" . "<BR>";
return require_once __DIR__ . "/../../view/default/user/login.php";
} catch (phpsec\UserAccountInactive $e) {
$userEmail = phpsec\User::getPrimaryEmail($_POST['user']);
$activationLink = \phpsec\HttpRequest::Protocol() . "://" . \phpsec\HttpRequest::Host() . \phpsec\HttpRequest::PortReadable() . "/rnj/framework/temppass?user="******"&mode=activation" . "&email=" . $userEmail;
$this->error .= "ERROR: The account is inactive. Please activate your account by clicking <a href=\"{$activationLink}\">here</a>." . "<BR>";
return require_once __DIR__ . "/../../view/default/user/login.php";
}
if (isset($_POST['remember-me']) && $_POST['remember-me'] == "on") {
if (phpsec\HttpRequest::isHTTPS()) {
phpsec\User::enableRememberMe($_POST['user']);
} else {
phpsec\User::enableRememberMe($_POST['user'], FALSE, TRUE);
}
}
} else {
$this->error .= "Empty fields are not allowed. Please fill the required areas." . "<BR>";
}
} else {
return require_once __DIR__ . "/../../view/default/user/login.php";
}
}
$userSession = new phpsec\Session();
try {
$sessionID = $userSession->existingSession();
if ($sessionID) {
$userSessionID = $userSession->rollSession();
} else {
$userSessionID = $userSession->newSession($userID);
}
$userObj = phpsec\UserManagement::forceLogIn($userID);
if ($userObj->isPasswordExpired()) {
$this->info .= "Its been too long since you have changed your password. For security reasons, please change your password." . "<BR>";
}
$url_to_redirect = \phpsec\HttpRequest::Protocol() . "://" . \phpsec\HttpRequest::Host() . \phpsec\HttpRequest::PortReadable() . "/rnj/framework/user/index";
header("HTTP/1.1 302 Found");
header('Location: ' . $url_to_redirect);
} catch (\phpsec\SessionExpired $e) {
$this->error .= $e->getMessage() . "<BR>";
phpsec\User::deleteAuthenticationToken();
}
} catch (Exception $e) {
$this->error .= $e->getMessage() . "<BR>";
}
return require_once __DIR__ . "/../../view/default/user/login.php";
}
