iger
/
engelsystem
9
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

add external auth

This commit is contained in:
Angelo Cuccato 2010-12-29 14:06:07 +01:00
parent 4ebc072511
commit 4836a82eb9
2 changed files with 69 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
default-conf/var_www_includes/config.php
View File

@ -52,4 +52,7 @@ $PentabarfGetWith = "fsockopen"; // "fsockopen"/"fopen"/"wget"/"lynx"
//Mailing List: is is not defined, the option is not shown
//$SubscribeMailinglist = "*-subscribe@lists.*";
/// Passord for external Authorization, function only active if the var is defined
//$CurrentExternAuthPass = 23;
?>

66
www-ssl/nonpublic/auth.php Executable file
View File

@ -0,0 +1,66 @@
<?PHP
header('Content-Type: application/json');
include ("../../includes/config.php");
include ("../../includes/config_db.php");
$User = $_POST['user'];
$Pass = $_POST['pw'];
$SourceOuth = $_POST['so'];
/*
$User = $_GET['user'];
$Pass = $_GET['pw'];
$SourceOuth = $_GET['so'];
*/
/*
$User = "admin";
$Pass = "21232f297a57a5a743894a0e4a801fc3"; // "admin";
$SourceOuth = 23;
*/
if ( isset($CurrentExternAuthPass) &&
($SourceOuth == $CurrentExternAuthPass) )
{ // User ist noch nicht angemeldet
$sql = "SELECT * FROM `User` WHERE `Nick`='". $User. "'";
$Erg = mysql_query( $sql, $con);
if ( mysql_num_rows( $Erg) == 1)
{ // Check, ob User angemeldet wird...
if (mysql_result( $Erg, 0, "Passwort") == $Pass)
{ // Passwort ok...
// Session wird eingeleitet und Session-Variablen gesetzt..
$UID = mysql_result( $Erg, 0, "UID");
// get CVS import Data
$SQL = "SELECT * FROM `UserCVS` WHERE `UID`='". $UID. "'";
$Erg_CVS = mysql_query($SQL, $con);
$CVS = mysql_fetch_array($Erg_CVS);
$msg = array(
'status' => 'success',
'rights' => $CVS
);
echo json_encode($msg);
}
else
{
echo json_encode(array('status' => 'failed'));
}
}
else
{
echo json_encode(array('status' => 'failed'));
}
}
else
{
echo json_encode(array('status' => 'failed'));
}
?>