mirror of
https://bitbucket.org/jsuto/piler.git
synced 2025-04-06 01:40:32 +02:00
111 lines
2.8 KiB
PHP
111 lines
2.8 KiB
PHP
<?php
|
|
|
|
|
|
class ControllerLoginGA extends Controller {
|
|
private $error = array();
|
|
|
|
public function index(){
|
|
|
|
$this->id = "content";
|
|
$this->template = "login/ga.tpl";
|
|
$this->layout = "common/layout-empty";
|
|
|
|
|
|
$request = Registry::get('request');
|
|
$session = Registry::get('session');
|
|
|
|
$db = Registry::get('db');
|
|
|
|
$this->load->model('user/auth');
|
|
$this->load->model('user/user');
|
|
$this->load->model('user/prefs');
|
|
|
|
if(ENABLE_SAAS == 1) {
|
|
$this->load->model('saas/ldap');
|
|
$this->load->model('saas/customer');
|
|
}
|
|
|
|
require(DIR_BASE . 'system/helper/PHPGangsta_GoogleAuthenticator.php');
|
|
|
|
$this->data['title'] = $this->data['text_login'];
|
|
$this->data['title_prefix'] = TITLE_PREFIX;
|
|
|
|
$this->data['failed_login_count'] = $this->model_user_auth->get_failed_login_count();
|
|
|
|
|
|
if($this->request->server['REQUEST_METHOD'] == 'POST' && $this->validate() == true) {
|
|
|
|
$GA = new PHPGangsta_GoogleAuthenticator();
|
|
|
|
$data = $session->get("auth_data");
|
|
|
|
if(!isset($data['username'])) {
|
|
header("Location: " . SITE_URL . "/login.php");
|
|
exit;
|
|
}
|
|
|
|
$settings = $this->model_user_prefs->get_ga_settings($data['username']);
|
|
|
|
if(strlen($this->request->post['ga_code']) > 5 && $GA->verifyCode($settings['ga_secret'], $this->request->post['ga_code'], 2)) {
|
|
|
|
syslog(LOG_INFO, "GA auth successful for " . $data['username']);
|
|
|
|
$session->set("ga_block", "");
|
|
|
|
if($session->get("four_eyes") == 1) {
|
|
header("Location: " . SITE_URL . "index.php?route=login/foureyes");
|
|
exit;
|
|
}
|
|
|
|
$this->model_user_auth->apply_user_auth_session($data);
|
|
$session->remove("auth_data");
|
|
|
|
$this->model_user_prefs->get_user_preferences($session->get($data['username']));
|
|
|
|
if(ENABLE_SAAS == 1) {
|
|
$this->model_saas_customer->online($session->get('email'));
|
|
}
|
|
|
|
LOGGER('logged in');
|
|
|
|
if(isAdminUser() == 1) {
|
|
header("Location: " . SITE_URL . "index.php?route=health/health");
|
|
exit;
|
|
}
|
|
|
|
header("Location: " . SITE_URL . "search.php");
|
|
exit;
|
|
}
|
|
else {
|
|
$this->model_user_auth->increment_failed_login_count($this->data['failed_login_count']);
|
|
$this->data['failed_login_count']++;
|
|
}
|
|
|
|
$this->data['x'] = $this->data['text_invalid_pin_code'];
|
|
|
|
}
|
|
|
|
$this->render();
|
|
}
|
|
|
|
|
|
private function validate() {
|
|
|
|
if(!isset($this->request->post['ga_code'])){
|
|
$this->error['ga_code'] = $this->data['text_invalid_data'];
|
|
}
|
|
|
|
|
|
if (!$this->error) {
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
?>
|