require '../includes/basics.php';
// =========================
// = authentication method =
// =========================
require WEBROOT . 'auth/kimai.php';
$authPlugin = new KimaiAuth();
$action = isset($_REQUEST['action']) ? $_REQUEST['action'] : '';
$banned = false;
switch ($action) {
case 'login':
$name = htmlspecialchars(trim($_REQUEST['name']));
$password = $_REQUEST['password'];
// perform login of user
if ($authPlugin->authenticate($name, $password, $userId)) {
if ($userId === false) {
$userId = usr_create(array('usr_name' => $name, 'usr_grp' => $authPlugin->getDefaultGroupId(), 'usr_sts' => 2, 'usr_active' => 1));
}
$userData = usr_get_data($userId);
if ($userData['ban'] < $kga['conf']['loginTries'] || time() - $userData['banTime'] > $kga['conf']['loginBanTime']) {
// logintries not used up OR
// bantime is over
// => grant access
$keymai = random_code(30);
setcookie("kimai_key", $keymai);
setcookie("kimai_usr", $userData['usr_name']);
loginSetKey($userId, $keymai);
header("Location: record.php");
} else {
// login attempt even though logintries are used up and bantime is not over => deny
setcookie("kimai_key", "0");
setcookie("kimai_usr", "0");
*/
// ================
// = AP PROCESSOR =
// ================
// insert KSPI
$isCoreProcessor = 0;
$dir_templates = "templates/";
require "../../includes/kspi.php";
switch ($axAction) {
case "createUsr":
// create new user account
$usr_data['usr_name'] = trim($axValue);
$usr_data['usr_grp'] = $kga['usr']['usr_grp'];
$usr_data['usr_sts'] = 2;
$usr_data['usr_active'] = 0;
echo usr_create($usr_data);
break;
case "createGrp":
// create new group
$grp_data['grp_name'] = trim($axValue);
$new_grp_id = grp_create($grp_data);
if ($new_grp_id != false) {
assign_grp2ldrs($new_grp_id, array($kga['usr']['usr_ID']));
}
break;
case "refreshSubtab":
// builds either user/group/advanced/DB subtab
$tpl->assign('curr_user', $kga['usr']['usr_name']);
if ($kga['usr']['usr_sts'] == 0) {
$tpl->assign('arr_grp', get_arr_grp(get_cookie('ap_ext_show_deleted_groups', 0)));
} else {
