interface/login/login.php

   1 <?php
   2 /**
   3  * Login screen.
   4  *
   5  * LICENSE: This program is free software; you can redistribute it and/or
   6  * modify it under the terms of the GNU General Public License
   7  * as published by the Free Software Foundation; either version 2
   8  * of the License, or (at your option) any later version.
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  12  * GNU General Public License for more details.
  13  * You should have received a copy of the GNU General Public License
  14  * along with this program. If not, see <http://opensource.org/licenses/gpl-license.php>;.
  15  *
  16  * @package OpenEMR
  17  * @author  Rod Roark <rod@sunsetsystems.com>
  18  * @author  Brady Miller <brady.g.miller@gmail.com>
  19  * @author  Kevin Yeh <kevin.y@integralemr.com>
  20  * @author  Scott Wakefield <scott.wakefield@gmail.com>
  21  * @author  ViCarePlus <visolve_emr@visolve.com>
  22  * @author  Julia Longtin <julialongtin@diasp.org>
  23  * @author  cfapress
  24  * @author  markleeds
  25  * @link    http://www.open-emr.org
  26  */
  27
  28
  29
  30 use OpenEMR\Core\Header;
  31
  32 $ignoreAuth=true;
  33 require_once("../globals.php");
  34
  35 // mdsupport - Add 'App' functionality for user interfaces without standard menu and frames
  36 // If this script is called with app parameter, validate it without showing other apps.
  37 //
  38 // Build a list of valid entries
  39 $emr_app = array();
  40 if ($GLOBALS['new_tabs_layout']) {
  41     $rs = sqlStatement(
  42         "SELECT option_id, title,is_default FROM list_options
  43                         WHERE list_id=? and activity=1 ORDER BY seq, option_id",
  44         array ('apps')
  45     );
  46     if (sqlNumRows($rs)) {
  47         while ($app = sqlFetchArray($rs)) {
  48             $app_req = explode('?', trim($app['title']));
  49             if (! file_exists('../'.$app_req[0])) {
  50                 continue;
  51             }
  52
  53                 $emr_app [trim($app ['option_id'])] = trim($app ['title']);
  54             if ($app ['is_default']) {
  55                 $emr_app_def = $app ['option_id'];
  56             }
  57         }
  58     }
  59 }
  60
  61 $div_app = '';
  62 if (count($emr_app)) {
  63     // Standard app must exist
  64     $std_app = 'main/main_screen.php';
  65     if (!in_array($std_app, $emr_app)) {
  66         $emr_app['*OpenEMR'] = $std_app;
  67     }
  68
  69     if (isset($_REQUEST['app']) && $emr_app[$_REQUEST['app']]) {
  70         $div_app = sprintf('<input type="hidden" name="appChoice" value="%s">', attr($_REQUEST['app']));
  71     } else {
  72         foreach ($emr_app as $opt_disp => $opt_value) {
  73             $opt_htm .= sprintf(
  74                 '<option value="%s" %s>%s</option>\n',
  75                 attr($opt_disp),
  76                 ($opt_disp == $opt_default ? 'selected="selected"' : ''),
  77                 text(xl_list_label($opt_disp))
  78             );
  79         }
  80
  81         $div_app = sprintf(
  82             '
  83 <div id="divApp" class="form-group">
  84         <label for="appChoice" class="control-label text-right">%s:</label>
  85     <div>
  86         <select class="form-control" id="selApp" name="appChoice" size="1">%s</select>
  87     </div>
  88 </div>',
  89             xlt('App'),
  90             $opt_htm
  91         );
  92     }
  93 }
  94
  95 ?>
  96 <html>
  97 <head>
  98     <title><?php echo text($openemr_name) . " " . xlt('Login'); ?></title>
  99     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
 100
 101     <?php Header::setupHeader(['jquery-ui', 'jquery-ui-darkness']); ?>
 102
 103     <link rel="stylesheet" href="../themes/login.css?v=<?php echo $v_js_includes; ?>" type="text/css">
 104
 105     <link rel="shortcut icon" href="<?php echo $GLOBALS['images_static_relative']; ?>/favicon.ico" />
 106
 107     <script type="text/javascript">
 108         var registrationTranslations = <?php echo json_encode(array(
 109             'title' => xla('OpenEMR Product Registration'),
 110             'pleaseProvideValidEmail' => xla('Please provide a valid email address'),
 111             'success' => xla('Success'),
 112             'registeredSuccess' => xla('Your installation of OpenEMR has been registered'),
 113             'submit' => xla('Submit'),
 114             'noThanks' => xla('No Thanks'),
 115             'registeredEmail' => xla('Registered email'),
 116             'registeredId' => xla('Registered id'),
 117             'genericError' => xla('Error. Try again later'),
 118             'closeTooltip' => ''
 119         ));
 120         ?>;
 121
 122         var registrationConstants = <?php echo json_encode(array(
 123             'webroot' => $GLOBALS['webroot']
 124         ))
 125         ?>;
 126     </script>
 127
 128     <script type="text/javascript" src="<?php echo $webroot ?>/interface/product_registration/product_registration_service.js?v=<?php echo $v_js_includes; ?>"></script>
 129     <script type="text/javascript" src="<?php echo $webroot ?>/interface/product_registration/product_registration_controller.js?v=<?php echo $v_js_includes; ?>"></script>
 130
 131     <script type="text/javascript">
 132         jQuery(document).ready(function() {
 133             init();
 134
 135             var productRegistrationController = new ProductRegistrationController();
 136             productRegistrationController.getProductRegistrationStatus(function(err, data) {
 137                 if (err) { return; }
 138
 139                 if (data.statusAsString === 'UNREGISTERED') {
 140                     productRegistrationController.showProductRegistrationModal();
 141                 }
 142             });
 143         });
 144
 145         function init() {
 146             $("#authUser").focus();
 147         }
 148
 149         function transmit_form() {
 150             document.forms[0].submit();
 151         }
 152
 153         function imsubmitted() {
 154             <?php if (!empty($GLOBALS['restore_sessions'])) { ?>
 155                 // Delete the session cookie by setting its expiration date in the past.
 156                 // This forces the server to create a new session ID.
 157                 var olddate = new Date();
 158                 olddate.setFullYear(olddate.getFullYear() - 1);
 159                 document.cookie = '<?php echo session_name() . '=' . session_id() ?>; path=<?php echo($web_root ? $web_root : '/');?>; expires=' + olddate.toGMTString();
 160             <?php } ?>
 161             return false; //Currently the submit action is handled by the encrypt_form().
 162         }
 163     </script>
 164
 165 </head>
 166 <body class="login">
 167     <div class="container">
 168         <form method="POST" id="login_form"
 169             action="../main/main_screen.php?auth=login&site=<?php echo attr($_SESSION['site_id']); ?>"
 170             target="_top" name="login_form" onsubmit="return imsubmitted();">
 171             <div class="row">
 172                 <div class="col-sm-12">
 173                     <div>
 174                         <div class="center-block" style="max-width:400px">
 175                             <img class="img-fluid img-responsive center-block" src="<?php echo $GLOBALS['images_static_relative']; ?>/login-logo.png" />
 176                         </div>
 177
 178                         <input type='hidden' name='new_login_session_management' value='1' />
 179
 180                         <?php
 181                         // collect groups
 182                         $res = sqlStatement("select distinct name from `groups`");
 183                         for ($iter = 0; $row = sqlFetchArray($res); $iter++) {
 184                               $result[$iter] = $row;
 185                         }
 186
 187                         if (count($result) == 1) {
 188                               $resvalue = $result[0]{"name"};
 189                               echo "<input type='hidden' name='authProvider' value='" . attr($resvalue) . "' />\n";
 190                         }
 191
 192                         // collect default language id
 193                         $res2 = sqlStatement("select * from lang_languages where lang_description = ?", array($GLOBALS['language_default']));
 194                         for ($iter = 0; $row = sqlFetchArray($res2); $iter++) {
 195                             $result2[$iter] = $row;
 196                         }
 197
 198                         if (count($result2) == 1) {
 199                             $defaultLangID = $result2[0]{"lang_id"};
 200                             $defaultLangName = $result2[0]{"lang_description"};
 201                         } else {
 202                             //default to english if any problems
 203                             $defaultLangID = 1;
 204                             $defaultLangName = "English";
 205                         }
 206
 207                         // set session variable to default so login information appears in default language
 208                         $_SESSION['language_choice'] = $defaultLangID;
 209                         // collect languages if showing language menu
 210                         if ($GLOBALS['language_menu_login']) {
 211                             // sorting order of language titles depends on language translation options.
 212                             $mainLangID = empty($_SESSION['language_choice']) ? '1' : $_SESSION['language_choice'];
 213                             if ($mainLangID == '1' && !empty($GLOBALS['skip_english_translation'])) {
 214                                 $sql = "SELECT *,lang_description as trans_lang_description FROM lang_languages ORDER BY lang_description, lang_id";
 215                                   $res3=SqlStatement($sql);
 216                             } else {
 217                                 // Use and sort by the translated language name.
 218                                 $sql = "SELECT ll.lang_id, " .
 219                                     "IF(LENGTH(ld.definition),ld.definition,ll.lang_description) AS trans_lang_description, " .
 220                                       "ll.lang_description " .
 221                                     "FROM lang_languages AS ll " .
 222                                     "LEFT JOIN lang_constants AS lc ON lc.constant_name = ll.lang_description " .
 223                                     "LEFT JOIN lang_definitions AS ld ON ld.cons_id = lc.cons_id AND " .
 224                                     "ld.lang_id = ? " .
 225                                     "ORDER BY IF(LENGTH(ld.definition),ld.definition,ll.lang_description), ll.lang_id";
 226                                 $res3=SqlStatement($sql, array($mainLangID));
 227                             }
 228
 229                             for ($iter = 0; $row = sqlFetchArray($res3); $iter++) {
 230                                 $result3[$iter] = $row;
 231                             }
 232
 233                             if (count($result3) == 1) {
 234                                   //default to english if only return one language
 235                                 echo "<input type='hidden' name='languageChoice' value='1' />\n";
 236                             }
 237                         } else {
 238                             echo "<input type='hidden' name='languageChoice' value='".attr($defaultLangID)."' />\n";
 239                         }
 240                         ?>
 241                     </div>
 242                 </div>
 243             </div>
 244             <div class="row">
 245                 <div class="col-sm-12">
 246                     <?php if (isset($_SESSION['relogin']) && ($_SESSION['relogin'] == 1)) : // Begin relogin dialog ?>
 247                     <div class="alert alert-info m-1">
 248                         <strong>
 249                             <?php echo xlt('Password security has recently been upgraded.').'&nbsp;&nbsp;'.xlt('Please login again.'); ?>
 250                         </strong>
 251                     </div>
 252                     <?php unset($_SESSION['relogin']);
 253                     endif;
 254 if (isset($_SESSION['loginfailure']) && ($_SESSION['loginfailure'] == 1)) : // Begin login failure block ?>
 255                     <div class="alert alert-danger login-failure m-1">
 256                         <?php echo xlt('Invalid username or password'); ?>
 257                     </div>
 258                     <?php endif; // End login failure block?>
 259                 </div>
 260             </div>
 261             <div class="row">
 262                 <?php
 263                 $extraLogo = $GLOBALS['extra_logo_login'];
 264                 $loginFormColumnCount = ($extraLogo == 1) ? '6' : '12';
 265                 ?>
 266                 <?php if ($extraLogo) : ?>
 267                     <div class="col-sm-6">
 268                         <?php echo $logocode; ?>
 269                     </div>
 270                 <?php endif; ?>
 271                 <div class="col-sm-<?php echo $loginFormColumnCount;?>">
 272                     <div class="row">
 273                         <div class="center-block login-title-label">
 274                             <?php if ($GLOBALS['show_label_login']) : ?>
 275                                 <?php echo text($openemr_name); ?>
 276                             <?php endif; ?>
 277                         </div>
 278                         <?php
 279                         // Figure out how to display the tiny logos
 280                         $t1 = $GLOBALS['tiny_logo_1'];
 281                         $t2 = $GLOBALS['tiny_logo_2'];
 282                         if ($t1 && !$t2) : ?>
 283                             <div class="col-sm-12 center-block">
 284                                 <?php echo $tinylogocode1; ?>
 285                             </div>
 286                         <?php
 287                         endif;
 288                         if ($t2 && !$t1) : ?>
 289                             <div class="col-sm-12 center-block">
 290                                 <?php echo $tinylogocode2; ?>
 291                             </div>
 292                         <?php
 293                         endif;
 294                         if ($t1 && $t2) : ?>
 295                             <div class="col-sm-6 center-block"><?php echo $tinylogocode1;?></div>
 296                             <div class="col-sm-6 center-block"><?php echo $tinylogocode2;?></div>
 297                         <?php
 298                         endif;
 299                         ?>
 300                     </div>
 301                     <?php if (count($result) > 1) : // Begin Display check for groups ?>
 302                         <div class="form-group">
 303                             <label for="group" class="control-label text-right"><?php echo xlt('Group:'); ?></label>
 304                             <div>
 305                                 <select name="authProvider" class="form-control">
 306                                     <?php
 307                                     foreach ($result as $iter) {
 308                                         echo "<option value='".attr($iter{"name"})."'>".text($iter{"name"})."</option>\n";
 309                                     }
 310                                     ?>
 311                                 </select>
 312                             </div>
 313                         </div>
 314                     <?php endif; // End Display check for groups ?>
 315                     <div class="form-group">
 316                         <label for="authUser" class="control-label text-right"><?php echo xlt('Username:'); ?></label>
 317                         <input type="text" class="form-control" id="authUser" name="authUser" placeholder="<?php echo xla('Username:'); ?>">
 318                     </div>
 319                     <div class="form-group">
 320                         <label for="clearPass" class="control-label text-right"><?php echo xlt('Password:'); ?></label>
 321                         <input type="password" class="form-control" id="clearPass" name="clearPass" placeholder="<?php echo xla('Password:'); ?>">
 322                     </div>
 323                     <?php echo $div_app ?>
 324                     <?php if ($GLOBALS['language_menu_login'] && (count($result3) != 1)) : // Begin language menu block ?>
 325                         <div class="form-group">
 326                             <label for="language" class="control-label text-right"><?php echo xlt('Language'); ?>:</label>
 327                             <div>
 328                                 <select class="form-control" name="languageChoice" size="1">
 329                                     <?php
 330                                     echo "<option selected='selected' value='" . attr($defaultLangID) . "'>" . xlt('Default') . " - " . xlt($defaultLangName) . "</option>\n";
 331                                     foreach ($result3 as $iter) :
 332                                         if ($GLOBALS['language_menu_showall']) {
 333                                             if (!$GLOBALS['allow_debug_language'] && $iter['lang_description'] == 'dummy') {
 334                                                 continue; // skip the dummy language
 335                                             }
 336
 337                                                 echo "<option value='".attr($iter['lang_id'])."'>".text($iter['trans_lang_description'])."</option>\n";
 338                                         } else {
 339                                             if (in_array($iter['lang_description'], $GLOBALS['language_menu_show'])) {
 340                                                 if (!$GLOBALS['allow_debug_language'] && $iter['lang_description'] == 'dummy') {
 341                                                     continue; // skip the dummy language
 342                                                 }
 343
 344                                                     echo "<option value='".attr($iter['lang_id'])."'>" . text($iter['trans_lang_description']) . "</option>\n";
 345                                             }
 346                                         }
 347                                     endforeach; ?>
 348                                 </select>
 349                             </div>
 350                         </div>
 351                     <?php endif; // End language menu block ?>
 352                     <div class="form-group pull-right">
 353                         <button type="submit" class="btn btn-default btn-lg" onClick="transmit_form()"><i class="fa fa-sign-in"></i>&nbsp;&nbsp;<?php echo xlt('Login');?></button>
 354                     </div>
 355                 </div>
 356                 <div class="col-sm-12 text-center">
 357                     <p class="small">
 358                         <a href="../../acknowledge_license_cert.html" target="main"><?php echo xlt('Acknowledgments, Licensing and Certification'); ?></a>
 359                     </p>
 360                 </div>
 361                 <div class="product-registration-modal" style="display: none">
 362                     <p class="context"><?php echo xlt("Register your installation with OEMR to receive important notifications, such as security fixes and new release announcements."); ?></p>
 363                     <input placeholder="<?php echo xlt('email'); ?>" type="email" class="email" style="width: 100%; color: black" />
 364                     <p class="message" style="font-style: italic"></p>
 365                 </div>
 366             </div>
 367         </form>
 368     </div>
 369 </body>
 370 </html>