Security fixes.
[openemr.git] / login.php
blob0c6267c263e39f61d116d8f729337f441f958841
1 <?php
3 $ignoreAuth=true;
4 include_once("../globals.php");
5 include_once("$srcdir/sha1.js");
6 include_once("$srcdir/sql.inc");
7 ?>
8 <html>
9 <head>
10 <link rel=stylesheet href="<?php echo $css_header;?>" type="text/css">
11 </head>
12 <body topmargin=0 rightmargin=0 leftmargin=2 bottommargin=0 marginwidth=2 marginheight=0 onload="javascript:document.login_form.authUser.focus();" >
14 <span class="text"></span>
16 <center>
18 <form method="POST" action="../main/main_screen.php?auth=login" target="_top" name=login_form>
20 <?php
22 $res = sqlStatement("select distinct name from groups");
23 for ($iter = 0;$row = sqlFetchArray($res);$iter++)
24 $result[$iter] = $row;
25 if (count($result) == 1) {
26 $resvalue = $result[0]{"name"};
27 echo "<input type='hidden' name='authProvider' value='$resvalue' />\n";
31 <table width=100% height="90%">
32 <tr>
33 <td valign=middle width=33%>
34 <?php echo $logocode;?>
35 </td>
36 <td align='center' valign='middle' width=34%>
37 <table>
38 <?php
40 if (count($result) != 1) {
42 <tr>
43 <td><span class="text"><?xl('Group:','e')?></span></td>
44 <td>
45 <select name=authProvider>
46 <?php
48 foreach ($result as $iter) {
49 echo "<option value='".$iter{"name"}."'>".$iter{"name"}."</option>\n";
52 </select>
53 </td></tr>
54 <?php
58 <tr>
59 <td><span class="text"><?xl('Username:','e')?></span></td>
60 <td>
61 <input type="entry" size=10 name=authUser>
62 </td></tr><tr>
63 <td><span class="text"><?xl('Password:','e')?></span></td>
64 <td>
65 <input type="password" size=10 name=clearPass>
66 </td></tr>
67 <tr><td>&nbsp;</td><td>
68 <input type="hidden" name="authPass">
69 <!-- ViCareplus : As per NIST standard, the SHA1 encryption algorithm is used-->
70 <input type="submit" onClick="javascript:this.form.authPass.value=SHA1(this.form.clearPass.value);this.form.clearPass.value='';" value="<?php xl('Login','e'); ?>">
71 </td></tr>
72 </table>
74 </td>
75 <td width=33%>
77 <!-- Uncomment this for the OpenEMR demo installation
78 <p><center>login = admin
79 <br>password = pass
80 -->
82 </center></p>
84 </td>
85 </table>
89 </form>
91 <address>
92 <a href="copyright_notice.html" target="main"><?xl('Copyright Notice','e')?></a><br />
93 </address>
95 </center>
96 </body>
97 </html>