interface/login/login.php

   1 <?php
   2 // This program is free software; you can redistribute it and/or
   3 // modify it under the terms of the GNU General Public License
   4 // as published by the Free Software Foundation; either version 2
   5 // of the License, or (at your option) any later version.
   6
   7 $ignoreAuth=true;
   8 include_once("../globals.php");
   9 include_once("$srcdir/sha1.js");
  10 include_once("$srcdir/sql.inc");
  11 include_once("$srcdir/md5.js");
  12 ?>
  13 <html>
  14 <head>
  15 <?php html_header_show(); ?>
  16 <link rel=stylesheet href="<?php echo $css_header;?>" type="text/css">
  17
  18 <script language='JavaScript' src="../../library/js/jquery-1.4.3.min.js"></script>
  19 <script language='JavaScript'>
  20
  21 //VicarePlus :: Validation function for checking the hashing algorithm used for encrypting password
  22 function chk_hash_fn()
  23 {
  24 var str = document.forms[0].authUser.value;
  25    $.ajax({
  26   url: "validateUser.php?u="+str,
  27   context: document.body,
  28   success: function(data){
  29         if(data == 0) //VicarePlus :: If the hashing algorithm is 'MD5'
  30         {
  31                 document.forms[0].authPass.value=MD5(document.forms[0].clearPass.value);
  32                 document.forms[0].authNewPass.value=SHA1(document.forms[0].clearPass.value);
  33         }
  34         else  //VicarePlus :: If the hashing algorithm is 'SHA1'
  35         {
  36                 document.forms[0].authPass.value=SHA1(document.forms[0].clearPass.value);
  37         }
  38                 document.forms[0].clearPass.value='';
  39                 document.login_form.submit();
  40                 }
  41         });
  42 }
  43
  44 function imsubmitted() {
  45 <?php if (!empty($GLOBALS['restore_sessions'])) { ?>
  46  // Delete the session cookie by setting its expiration date in the past.
  47  // This forces the server to create a new session ID.
  48  var olddate = new Date();
  49  olddate.setFullYear(olddate.getFullYear() - 1);
  50  document.cookie = '<?php echo session_name() . '=' . session_id() ?>; path=/; expires=' + olddate.toGMTString();
  51 <?php } ?>
  52  return false; //Currently the submit action is handled by the chk_hash_fn() function itself.
  53 }
  54 </script>
  55
  56 </head>
  57 <body <?php echo $login_body_line;?> onload="javascript:document.login_form.authUser.focus();" >
  58
  59 <span class="text"></span>
  60 <center>
  61
  62 <form method="POST"
  63  action="../main/main_screen.php?auth=login&site=<?php echo htmlspecialchars($_SESSION['site_id']); ?>"
  64  target="_top" name="login_form" onsubmit="return imsubmitted();">
  65
  66 <?php
  67 // collect groups
  68 $res = sqlStatement("select distinct name from groups");
  69 for ($iter = 0;$row = sqlFetchArray($res);$iter++)
  70         $result[$iter] = $row;
  71 if (count($result) == 1) {
  72         $resvalue = $result[0]{"name"};
  73         echo "<input type='hidden' name='authProvider' value='$resvalue' />\n";
  74 }
  75 // collect default language id
  76 $res2 = sqlStatement("select * from lang_languages where lang_description = '".$GLOBALS['language_default']."'");
  77 for ($iter = 0;$row = sqlFetchArray($res2);$iter++)
  78           $result2[$iter] = $row;
  79 if (count($result2) == 1) {
  80           $defaultLangID = $result2[0]{"lang_id"};
  81           $defaultLangName = $result2[0]{"lang_description"};
  82 }
  83 else {
  84           //default to english if any problems
  85           $defaultLangID = 1;
  86           $defaultLangName = "English";
  87 }
  88 // set session variable to default so login information appears in default language
  89 $_SESSION['language_choice'] = $defaultLangID;
  90 // collect languages if showing language menu
  91 if ($GLOBALS['language_menu_login']) {
  92
  93         // sorting order of language titles depends on language translation options.
  94         $mainLangID = empty($_SESSION['language_choice']) ? '1' : $_SESSION['language_choice'];
  95         if ($mainLangID == '1' && !empty($GLOBALS['skip_english_translation']))
  96         {
  97           $sql = "SELECT * FROM lang_languages ORDER BY lang_description, lang_id";
  98           $res3=SqlStatement($sql);
  99         }
 100         else {
 101           // Use and sort by the translated language name.
 102           $sql = "SELECT ll.lang_id, " .
 103             "IF(LENGTH(ld.definition),ld.definition,ll.lang_description) AS trans_lang_description, " .
 104             "ll.lang_description " .
 105             "FROM lang_languages AS ll " .
 106             "LEFT JOIN lang_constants AS lc ON lc.constant_name = ll.lang_description " .
 107             "LEFT JOIN lang_definitions AS ld ON ld.cons_id = lc.cons_id AND " .
 108             "ld.lang_id = '$mainLangID' " .
 109             "ORDER BY IF(LENGTH(ld.definition),ld.definition,ll.lang_description), ll.lang_id";
 110           $res3=SqlStatement($sql);
 111         }
 112
 113         for ($iter = 0;$row = sqlFetchArray($res3);$iter++)
 114                $result3[$iter] = $row;
 115         if (count($result3) == 1) {
 116                //default to english if only return one language
 117                echo "<input type='hidden' name='languageChoice' value='1' />\n";
 118         }
 119 }
 120 else {
 121         echo "<input type='hidden' name='languageChoice' value='".$defaultLangID."' />\n";
 122 }
 123 ?>
 124
 125 <table width=100% height="90%">
 126 <tr>
 127 <td valign=middle width=33%>
 128 <?php echo $logocode;?>
 129 </td>
 130 <td align='center' valign='middle' width=34%>
 131 <table>
 132 <?php if (count($result) != 1) { ?>
 133 <tr>
 134 <td><span class="text"><?php xl('Group:','e'); ?></span></td>
 135 <td>
 136 <select name=authProvider>
 137 <?php
 138         foreach ($result as $iter) {
 139                 echo "<option value='".$iter{"name"}."'>".$iter{"name"}."</option>\n";
 140         }
 141 ?>
 142 </select>
 143 </td></tr>
 144 <?php } ?>
 145
 146 <?php if (isset($_SESSION['loginfailure']) && ($_SESSION['loginfailure'] == 1)): ?>
 147 <tr><td colspan='2' class='text' style='color:red'>
 148 Invalid username or password
 149 </td></tr>
 150 <?php endif; ?>
 151
 152 <?php if (isset($_SESSION['relogin']) && ($_SESSION['relogin'] == 1)): ?>
 153 <tr><td colspan='2' class='text' style='color:red;background-color:#dfdfdf;border:solid 1px #bfbfbf;text-align:center'>
 154 <b><?php echo xl('Password security has recently been upgraded.'); ?><br>
 155 <?php echo xl('Please login again.'); ?></b>
 156 <?php unset($_SESSION['relogin']); ?>
 157 </td></tr>
 158 <?php endif; ?>
 159
 160 <tr>
 161 <td><span class="text"><?php xl('Username:','e'); ?></span></td>
 162 <td>
 163 <input type="text" size="10" name="authUser">
 164 </td></tr><tr>
 165 <td><span class="text"><?php xl('Password:','e'); ?></span></td>
 166 <td>
 167 <input type="password" size="10" name="clearPass">
 168 </td></tr>
 169
 170 <?php
 171 if ($GLOBALS['language_menu_login']) {
 172 if (count($result3) != 1) { ?>
 173 <tr>
 174 <td><span class="text"><?php xl('Language','e'); ?>:</span></td>
 175 <td>
 176 <select name=languageChoice size="1">
 177 <?php
 178         echo "<option selected='selected' value='".$defaultLangID."'>" . xl('Default','','',' -') . xl($defaultLangName,'',' ') . "</option>\n";
 179         foreach ($result3 as $iter) {
 180                 if ($GLOBALS['language_menu_showall']) {
 181                     if ( !$GLOBALS['allow_debug_language'] && $iter[lang_description] == 'dummy') continue; // skip the dummy language
 182                     echo "<option value='".$iter['lang_id']."'>".$iter['trans_lang_description']."</option>\n";
 183                 }
 184                 else {
 185                     if (in_array($iter[lang_description], $GLOBALS['language_menu_show'])) {
 186                         if ( !$GLOBALS['allow_debug_language'] && $iter['lang_description'] == 'dummy') continue; // skip the dummy language
 187                         echo "<option value='".$iter['lang_id']."'>" . $iter['trans_lang_description'] . "</option>\n";
 188                     }
 189                 }
 190         }
 191 ?>
 192 </select>
 193 </td></tr>
 194 <?php }} ?>
 195
 196 <tr><td>&nbsp;</td><td>
 197 <input type="hidden" name="authPass">
 198 <input type="hidden" name="authNewPass">
 199 <?php if (isset($GLOBALS['use_adldap_auth']) && ($GLOBALS['use_adldap_auth']== true)): ?>
 200 <!-- ViCareplus : As per NIST standard, the SHA1 encryption algorithm is used -->
 201 <input type="submit" onClick="javascript:this.form.authPass.value=SHA1(this.form.clearPass.value);" value=<?php xl('Login','e');?>>
 202 <?php else: ?>
 203 <input type="submit" onClick="chk_hash_fn();" value=<?php xl('Login','e');?>>
 204 <?php endif; ?>
 205 </td></tr>
 206 <tr><td colspan='2' class='text' style='color:red'>
 207 <?php
 208 $ip=$_SERVER['REMOTE_ADDR'];
 209
 210 // The following commented out because it is too slow when the log
 211 // table is large.  -- Rod 2009-11-11
 212 /*********************************************************************
 213 $query = "select user, date, comments from log where event like 'login' and comments like '%".$ip."' order by date desc limit 1";
 214 $statement = sqlStatement($query);
 215 if ($result = sqlFetchArray($statement)) {
 216         if (strpos($result['comments'],"ailure")) {
 217                 echo $result['user']." attempted unauthorized login on this machine: ".$result['date'];
 218         }
 219 }
 220 *********************************************************************/
 221
 222 ?>
 223 </td></tr>
 224 </table>
 225 </td>
 226 <td width=33%>
 227
 228 <!-- Uncomment this for the OpenEMR demo installation
 229 <p><center>login = admin
 230 <br>password = pass
 231 -->
 232
 233 </center></p>
 234
 235 </td>
 236 </table>
 237
 238 </form>
 239
 240 <address>
 241 <a href="../../copyright_notice.html" target="main"><?php xl('Copyright Notice','e'); ?></a><br />
 242 </address>
 243
 244 </center>
 245 </body>
 246 </html>