]> git.mxchange.org Git - mailer.git/blob - inc/modules/admin.php
Forgot it to comment out ... :(
[mailer.git] / inc / modules / admin.php
1 <?php
2 /************************************************************************
3  * Mailer v0.2.1-FINAL                                Start: 08/31/2003 *
4  * ===================                          Last change: 07/02/2004 *
5  *                                                                      *
6  * -------------------------------------------------------------------- *
7  * File              : admin.php                                        *
8  * -------------------------------------------------------------------- *
9  * Short description : Administration module                            *
10  * -------------------------------------------------------------------- *
11  * Kurzbeschreibung  : Administrationsmodul                             *
12  * -------------------------------------------------------------------- *
13  * $Revision::                                                        $ *
14  * $Date::                                                            $ *
15  * $Tag:: 0.2.1-FINAL                                                 $ *
16  * $Author::                                                          $ *
17  * -------------------------------------------------------------------- *
18  * Copyright (c) 2003 - 2009 by Roland Haeder                           *
19  * Copyright (c) 2009 - 2012 by Mailer Developer Team                   *
20  * For more information visit: http://mxchange.org                      *
21  *                                                                      *
22  * This program is free software; you can redistribute it and/or modify *
23  * it under the terms of the GNU General Public License as published by *
24  * the Free Software Foundation; either version 2 of the License, or    *
25  * (at your option) any later version.                                  *
26  *                                                                      *
27  * This program is distributed in the hope that it will be useful,      *
28  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
29  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
30  * GNU General Public License for more details.                         *
31  *                                                                      *
32  * You should have received a copy of the GNU General Public License    *
33  * along with this program; if not, write to the Free Software          *
34  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
35  * MA  02110-1301  USA                                                  *
36  ************************************************************************/
37
38 // Some security stuff...
39 if (!defined('__SECURITY')) {
40         exit();
41 } // END - if
42
43 // Load include file
44 loadIncludeOnce('inc/modules/admin/admin-inc.php');
45
46 // Fix "deleted" cookies in PHP4 (PHP5 does remove them, PHP4 sets them to deleted!)
47 fixDeletedCookies(array('admin_id', 'admin_md5', 'admin_last'));
48
49 // Init return value
50 $ret = 'init';
51
52 // Is no admin registered?
53 if (!isAdminRegistered()) {
54         // Register first admin
55         registerFirstAdmin();
56 } elseif (isGetRequestElementSet('reset_pass')) {
57         // Is the form submitted?
58         if ((isPostRequestElementSet('send_link')) && (isPostRequestElementSet('email'))) {
59                 // Output result
60                 displayMessage(sendAdminPasswordResetLink(postRequestElement('email')));
61         } elseif (isGetRequestElementSet('hash')) {
62                 // Output form for hash validation
63                 loadTemplate('admin_validate_reset_hash_form', FALSE, getRequestElement('hash'));
64         } elseif ((isPostRequestElementSet('validate_hash')) && (isPostRequestElementSet('admin_login')) && (isPostRequestElementSet('hash'))) {
65                 // Validate the login data and hash
66                 $valid = adminResetValidateHashLogin(postRequestElement('hash'), postRequestElement('admin_login'));
67
68                 // Valid?
69                 if ($valid === TRUE) {
70                         // Prepare content first
71                         $content = array(
72                                 'hash'        => postRequestElement('hash'),
73                                 'admin_login' => postRequestElement('admin_login')
74                         );
75
76                         // Validation okay so display form for final password change
77                         loadTemplate('admin_reset_password_form', FALSE, $content);
78                 } else {
79                         // Cannot validate the login data and hash
80                         displayMessage('{--ADMIN_VALIDATION_RESET_LOGIN_HASH_FAILED--}');
81                 }
82         } elseif ((isPostRequestElementSet('reset_pass')) && (isPostRequestElementSet('hash')) && (isPostRequestElementSet('admin_login')) && (isPostRequestElementSet('admin_pass1')) && (postRequestElement('admin_pass1') == postRequestElement('admin_pass2'))) {
83                 // Okay, we shall the admin password here. So first revalidate the hash
84                 if (adminResetValidateHashLogin(postRequestElement('hash'), postRequestElement('admin_login'))) {
85                         // Output result
86                         loadTemplate('admin_reset_password_done', FALSE, doResetAdminPassword(postRequestElement('admin_login'), postRequestElement('admin_pass1')));
87                 } else {
88                         // Validation failed
89                         displayMessage('{--ADMIN_VALIDATION_RESET_LOGIN_HASH_FAILED2--}');
90                 }
91         } else {
92                 // Output reset password form
93                 loadTemplate('admin_reset_password_send_link');
94         }
95 } elseif ((!isSessionVariableSet('admin_id')) || (!isSessionVariableSet('admin_md5')) || (!isSessionVariableSet('admin_last'))) {
96         // At leat one administrator account was created
97         if ((isSessionVariableSet('admin_id')) && (isSessionVariableSet('admin_md5')) && (isSessionVariableSet('admin_last'))) {
98                 // Timeout for last login, we have to logout first!
99                 redirectToUrl('modules.php?module=admin&amp;logout=1');
100         } // END - if
101
102         if (isGetRequestElementSet('register')) {
103                 // Registration of first admin is done
104                 if (getRequestElement('register') == 'done') {
105                         // Regisration done!
106                         displayMessage('{--ADMIN_REGISTER_DONE--}');
107                 } // END - if
108         } // END - if
109
110         // Check if the admin has submitted data or not
111         if ((isFormSent()) && ((!isPostRequestElementSet('admin_login')) || (!isPostRequestElementSet('admin_password')) || (strlen(postRequestElement('admin_password')) < getConfig('minium_admin_pass_length')))) {
112                 setPostRequestElement('login', '***');
113         } // END - if
114
115         if ((isFormSent('login')) && (postRequestElement('login') != '***')) {
116                 // All required data was entered so we check his account
117                 $ret = ifAdminLoginDataIsValid(postRequestElement('admin_login'), postRequestElement('admin_password'));
118
119                 // Which status do we have?
120                 switch ($ret) {
121                         case 'done': // Admin and password are okay, so we log in now
122                                 // Load URL
123                                 redirectToUrl('modules.php?' . addAllGetRequestParameters());
124                                 break;
125
126                         case '404': // Administrator login not found
127                                 setPostRequestElement('login', $ret);
128                                 $ret = '{%message,ADMIN_ACCOUNT_404=' . postRequestElement('admin_login') . '%}';
129                                 destroyAdminSession(TRUE);
130                                 break;
131
132                         case 'password': // Wrong password
133                                 setPostRequestElement('login', $ret);
134                                 $ret = '{--WRONG_PASS--} [<a href="{%url=modules.php?module=admin&amp;reset_pass=1%}">{--ADMIN_RESET_PASS--}</a>]';
135                                 destroyAdminSession(TRUE);
136                                 break;
137
138                         default: // Others will be logged
139                                 logDebugMessage(__FILE__, __LINE__, sprintf("Unknown return code %s from ifAdminLoginDataIsValid()", $ret));
140                                 break;
141                 } // END - switch
142         } // END - if
143
144         // Error detected?
145         if ($ret != 'done') {
146                 $content['admin_login'] = '';
147                 if (isPostRequestElementSet('admin_login')) {
148                         $content['admin_login'] = postRequestElement('admin_login');
149                 } // END - if
150
151                 // Init array elements
152                 $content['login_message'] = '';
153                 $content['pass_message']  = '';
154
155                 if (isFormSent('login')) {
156                         // Set messages to zero
157                         $loginMessage = '';
158                         $passwdMessage = '';
159
160                         // Check for login
161                         if (!isPostRequestElementSet('admin_login')) {
162                                 // No login entered?
163                                 $loginMessage = '{--ADMIN_NO_LOGIN--}';
164                         } elseif ((!empty($ret)) && (postRequestElement('login') == '404')) {
165                                 // An error comes back from login?
166                                 $loginMessage = $ret;
167                         }
168
169                         // Check for password
170                         if (!isPostRequestElementSet('admin_password')) {
171                                 // No password entered?
172                                 $passwdMessage = '{--ADMIN_NO_PASS--}';
173                         } elseif (strlen(postRequestElement('admin_password')) < getConfig('minium_admin_pass_length')) {
174                                 // Or password too short?
175                                 $passwdMessage = '{--ADMIN_SHORT_PASS--}';
176                         } elseif ((!empty($ret)) && (postRequestElement('login') == 'password')) {
177                                 // An error comes back from login?
178                                 $passwdMessage = $ret;
179                         }
180
181                         // Load message templates if the messages have been set
182                         if (!empty($loginMessage)) {
183                                 $content['login_message'] = loadTemplate('admin_login_msg', TRUE, $loginMessage);
184                         } // END - if
185                         if (!empty($passwdMessage)) {
186                                 $content['pass_message']  = loadTemplate('admin_login_msg', TRUE, $passwdMessage);
187                         } // END - if
188                 } // END - if
189
190                 // Add all parameter
191                 $content['all_parameter'] = addAllGetRequestParameters();
192
193                 // Load login form template
194                 loadTemplate('admin_login_form', FALSE, $content);
195         } // END - if
196 } elseif (isGetRequestElementSet('logout')) {
197         // Only try to remove cookies
198         if (destroyAdminSession(TRUE)) {
199                 // Load logout template
200                 if (isGetRequestElementSet('register')) {
201                         // Secure input
202                         $register = getRequestElement('register');
203
204                         // Special logout redirect for installation of given extension
205                         loadTemplate(sprintf("admin_logout_%s_install", $register));
206                 } elseif (isGetRequestElementSet('remove')) {
207                         // Secure input
208                         $remove = getRequestElement('remove');
209
210                         // Special logout redirect for removal of given extension
211                         loadTemplate(sprintf("admin_logout_%s_remove", $remove));
212                 } else {
213                         // Logged out normally
214                         loadTemplate('admin_logout');
215                 }
216         } else {
217                 // Something went wrong here...
218                 loadTemplate('admin_settings_unsaved', FALSE, '{--ADMIN_LOGOUT_FAILED--}');
219
220                 // Add fatal message
221                 addFatalMessage(__FILE__, __LINE__, '{--CANNOT_UNREG_SESS--}');
222         }
223 } else {
224         // Maybe an Admin want's to login?
225         $ret = ifAdminCookiesAreValid(getCurrentAdminId(), getAdminMd5());
226
227         // Check status
228         switch ($ret) {
229                 case 'done':
230                         // Check for access control line of current menu entry
231                         runFilterChain('check_admin_acl');
232
233                         // Check for version and switch between old menu system and new intelligent menu system
234                         if (adminGetMenuMode() == 'NEW') {
235                                 // Load include for admin AJAX
236                                 loadIncludeOnce('inc/ajax/ajax_admin.php');
237
238                                 // Load main template
239                                 loadTemplate('admin_ajax_main');
240                         } else {
241                                 /*
242                                  * This little call constructs the whole default old and lacky menu system
243                                  * on left side. It also renders the content on right side
244                                  */
245                                 doAdminAction();
246                         }
247                         break;
248
249                 case '404': // Administrator login not found
250                         setPostRequestElement('login', $ret);
251                         displayMessage('{%message,ADMIN_ACCOUNT_404=' . getCurrentAdminId() . '%}');
252                         destroyAdminSession(TRUE);
253                         break;
254
255                 case 'password': // Wrong password
256                         setPostRequestElement('login', $ret);
257                         displayMessage('{--WRONG_PASS--}');
258                         destroyAdminSession(TRUE);
259                         break;
260
261                 case 'session': // Invalid admin session
262                         setPostRequestElement('login', $ret);
263                         displayMessage('{--INVALID_ADMIN_SESSION--}');
264                         destroyAdminSession(TRUE);
265                         break;
266
267                 default: // Others will be logged
268                         logDebugMessage(__FILE__, __LINE__, sprintf("Unknown return code %s from ifAdminCookiesAreValid()", $ret));
269                         break;
270         } // END - switch
271 }
272
273 // [EOF]
274 ?>