mirror of
https://github.com/Cacti/cacti.git
synced 2026-11-09 05:26:50 +09:00
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/trunk/cacti@1363 860744bd-22fc-0310-8c96-e9fe5004b5ca
120 lines
4.3 KiB
PHP
120 lines
4.3 KiB
PHP
<?php
|
|
/*
|
|
+-------------------------------------------------------------------------+
|
|
| Copyright (C) 2003 Ian Berry |
|
|
| |
|
|
| This program is free software; you can redistribute it and/or |
|
|
| modify it under the terms of the GNU General Public License |
|
|
| as published by the Free Software Foundation; either version 2 |
|
|
| of the License, or (at your option) any later version. |
|
|
| |
|
|
| This program is distributed in the hope that it will be useful, |
|
|
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
| GNU General Public License for more details. |
|
|
+-------------------------------------------------------------------------+
|
|
| cacti: a php-based graphing solution |
|
|
+-------------------------------------------------------------------------+
|
|
| Most of this code has been designed, written and is maintained by |
|
|
| Ian Berry. See about.php for specific developer credit. Any questions |
|
|
| or comments regarding this code should be directed to: |
|
|
| - iberry@raxnet.net |
|
|
+-------------------------------------------------------------------------+
|
|
| - raXnet - http://www.raxnet.net/ |
|
|
+-------------------------------------------------------------------------+
|
|
*/
|
|
|
|
include("./include/config.php");
|
|
|
|
$user = db_fetch_row("select * from user_auth where id=" . $_SESSION["sess_user_id"]);
|
|
|
|
/* default to !bad_password */
|
|
$bad_password = false;
|
|
|
|
/* set default action */
|
|
if (!isset($_REQUEST["action"])) { $_REQUEST["action"] = ""; }
|
|
|
|
switch ($_REQUEST["action"]) {
|
|
case 'changepassword':
|
|
if (($_POST["password"] == $_POST["confirm"]) && ($_POST["password"] != "")) {
|
|
db_execute("insert into user_log (username,result,ip) values('" . $user["username"] . "',3,'" . $_SERVER["REMOTE_ADDR"] . "')");
|
|
db_execute("update user_auth set must_change_password='',password='" . md5($_POST["password"]) . "' where id=" . $_SESSION["sess_user_id"]);
|
|
|
|
kill_session_var("sess_change_password");
|
|
|
|
/* ok, at the point the user has been sucessfully authenticated; so we must
|
|
decide what to do next */
|
|
switch ($user["login_opts"]) {
|
|
case '1': /* referer */
|
|
header("Location: " . $_POST["ref"]); break;
|
|
case '2': /* default console page */
|
|
header("Location: index.php"); break;
|
|
case '3': /* default graph page */
|
|
header("Location: graph_view.php"); break;
|
|
}
|
|
|
|
exit;
|
|
}else{
|
|
$bad_password = true;
|
|
}
|
|
|
|
break;
|
|
}
|
|
?>
|
|
<html>
|
|
<head>
|
|
<title>Login to cacti</title>
|
|
<STYLE TYPE="text/css">
|
|
<!--
|
|
BODY, TABLE, TR, TD {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px;}
|
|
A {text-decoration: none;}
|
|
A:active { text-decoration: none;}
|
|
A:hover {text-decoration: underline; color: #333333;}
|
|
A:visited {color: Blue;}
|
|
-->
|
|
</style>
|
|
</head>
|
|
|
|
<body onload="document.login.password.focus()">
|
|
|
|
<form name="login" method="post" action="<?php print basename($_SERVER["PHP_SELF"]);?>">
|
|
|
|
<table align="center">
|
|
<tr>
|
|
<td colspan="2"><img src="images/auth_login.gif" border="0" alt=""></td>
|
|
</tr>
|
|
<?php if ($bad_password == true) {?>
|
|
<tr height="10"><td></td></tr>
|
|
<tr>
|
|
<td colspan="2"><font color="#FF0000"><strong>Your passwords do not match, please retype:</strong></font></td>
|
|
</tr>
|
|
<?php }?>
|
|
<tr height="10"><td></td></tr>
|
|
<tr>
|
|
<td colspan="2">
|
|
<strong><font color="#FF0000">*** Forced Password Change ***</font></strong><br><br>
|
|
Please enter a new password for cacti:
|
|
</td>
|
|
</tr>
|
|
<tr height="10"><td></td></tr>
|
|
<tr>
|
|
<td>Password:</td>
|
|
<td><input type="password" name="password" size="40"></td>
|
|
</tr>
|
|
<tr>
|
|
<td>Confirm:</td>
|
|
<td><input type="password" name="confirm" size="40"></td>
|
|
</tr>
|
|
<tr height="10"><td></td></tr>
|
|
<tr>
|
|
<td><input type="submit" value="Save"></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<input type="hidden" name="action" value="changepassword">
|
|
<input type="hidden" name="ref" value="<?php print $_REQUEST["ref"];?>">
|
|
|
|
</form>
|
|
|
|
</body>
|
|
</html>
|