\n";
echo "It is recommended that you turn register_globals to off.
\n";
echo "You can turn this message off by changing the GLOBALCHECK = 0 in the cwispy-settings.php";
}
}
/**
* If a username and password has been sent
* check it against the database.
*/
if( isset( $_POST['username'] ) && ( $_POST['username'] != "" ) ) {
$username = $_POST['username'];
if (DB::isError($user_result = $db->query("SELECT * FROM users WHERE username='$username'")))
{
echo $user_result->getDebugInfo();
}
$user_row = $user_result->fetchRow(DB_FETCHMODE_ASSOC);
if (crypt($_POST['password'], $user_row['password']) == $user_row['password']) {
/** User has been authenticated. Start the session for the login. */
session_start();
$_SESSION['sess_lang'] = $user_row["language"];
if (DB::isError($res2 = $db->query("SELECT firstname,lastname FROM userinfo WHERE userid='$user_row[userid]'")))
{
echo $res->getDebugInfo();
}
$row2 = $res2->fetchRow(DB_FETCHMODE_ASSOC);
$_SESSION['sess_name'] = $row2['firstname']." ".$row2['lastname'];
$_SESSION['sess_admin'] = "No";
$_SESSION['sess_uid'] = $user_row['userid'];
$_SESSION['sess_acl'] = getacl($user_row['userid']);
if ($_SESSION['sess_acl']["admin"]) {
$_SESSION['sess_admin'] = "Yes";
}
$_SESSION['sess_user'] = $username;
$_SESSION['sess_customer'] = $username;
syslog(LOG_NOTICE, "Successful login by user ".$_SESSION['sess_user']." (uid: ".$_SESSION['sess_uid'].") from ".$_SERVER['REMOTE_ADDR']."");
header("Location: main.php");
exit;
} else {
/** Login Failed */
syslog(LOG_WARNING, "Failed login from ".$_SERVER['REMOTE_ADDR']." using username ".$username." ");
header("Location: index.php");
die();
}
} else {
beginDocument($lLogin, $lNotLoggedIn);
echo "
";
echo "";
openForm("login", $_SERVER['PHP_SELF']);
beginPrettyTable("2", $lLogin);
makeTextField($lUsername, "username", "");
makePasswordField($lPassword, "password", "");
makeSubmitter();
endPrettyTable();
closeForm();
echo "";
?>
