<?php
/**
* login.php -- simple login screen
*
* This a simple login screen. Some housekeeping is done to clean
* cookies and find language.
*
* @copyright 1999-2020 The SquirrelMail Project Team
* @license http://opensource.org/licenses/gpl-license.php GNU Public License
* @version $Id: login.php 14840 2020年01月07日 07:42:38Z pdontthink $
* @package squirrelmail
*/
/** This is the login page */
define ('PAGE_NAME', 'login');
/**
* Path for SquirrelMail required files.
* @ignore
*/
/* SquirrelMail required files. */
require_once(SM_PATH . 'functions/global.php');
require_once(SM_PATH . 'functions/i18n.php');
require_once(SM_PATH . 'functions/plugin.php');
require_once(SM_PATH . 'functions/constants.php');
require_once(SM_PATH . 'functions/page_header.php');
require_once(SM_PATH . 'functions/html.php');
require_once(SM_PATH . 'functions/forms.php');
/**
* $squirrelmail_language is set by a cookie when the user selects
* language and logs out
*/
/**
* In case the last session was not terminated properly, make sure
* we get a new one, but make sure we preserve session_expired_*
*/
$sep = '';
$sel = '';
sqGetGlobalVar('session_expired_post', $sep, SQ_SESSION );
sqGetGlobalVar('session_expired_location', $sel, SQ_SESSION );
/* blow away session */
/**
* in some rare instances, the session seems to stick
* around even after destroying it (!!), so if it does,
* we'll manually flatten the $_SESSION data
*/
if (!empty($_SESSION)) {
$_SESSION = array();
}
/**
* Allow administrators to define custom session handlers
* for SquirrelMail without needing to change anything in
* php.ini (application-level).
*
* In config_local.php, admin needs to put:
*
* $custom_session_handlers = array(
* 'my_open_handler',
* 'my_close_handler',
* 'my_read_handler',
* 'my_write_handler',
* 'my_destroy_handler',
* 'my_gc_handler',
* );
* session_module_name('user');
* session_set_save_handler(
* $custom_session_handlers[0],
* $custom_session_handlers[1],
* $custom_session_handlers[2],
* $custom_session_handlers[3],
* $custom_session_handlers[4],
* $custom_session_handlers[5]
* );
*
* We need to replicate that code once here because PHP has
* long had a bug that resets the session handler mechanism
* when the session data is also destroyed. Because of this
* bug, even administrators who define custom session handlers
* via a PHP pre-load defined in php.ini (auto_prepend_file)
* will still need to define the $custom_session_handlers array
* in config_local.php.
*/
global $custom_session_handlers;
if (!empty($custom_session_handlers)) {
$open = $custom_session_handlers[0];
$close = $custom_session_handlers[1];
$read = $custom_session_handlers[2];
$write = $custom_session_handlers[3];
$destroy = $custom_session_handlers[4];
$gc = $custom_session_handlers[5];
}
/* put session_expired_* variables back in session */
if (!empty($sel)) {
if (!empty($sep))
}
// Disable Browser Caching
//
header ('Cache-Control: no-cache, no-store, must-revalidate');
header ('Expires: Sat, 1 Jan 2000 00:00:00 GMT');
/* Output the javascript onload function. */
$header = "<script language=\"JavaScript\" type=\"text/javascript\">\n" .
"<!--\n".
" var alreadyFocused = false;\n".
" function squirrelmail_loginpage_onload() {\n".
" document.login_form.js_autodetect_results.value = '" .
SMPREF_JS_ON .
"';\n".
" if (alreadyFocused) return;\n".
" var textElements = 0;\n".
" for (i = 0; i < document.login_form.elements.length; i++) {\n".
" if (document.login_form.elements[i].type == \"text\" || document.login_form.elements[i].type == \"password\") {\n".
" textElements++;\n".
" if (textElements == " . (isset($loginname) ? 2 : 1) . ") {\n".
" document.login_form.elements[i].focus();\n".
" break;\n".
" }\n".
" }\n".
" }\n".
" }\n".
"// -->\n".
"</script>\n";
$custom_css = 'none';
// Load default theme if possible
@include ($theme[$theme_default]['PATH']);
if (! isset
($color) ||
! is_array ($color)) {
// Add default color theme, if theme loading fails
$color = array();
$color[0] = '#dcdcdc'; /* light gray TitleBar */
$color[1] = '#800000'; /* red */
$color[2] = '#cc0000'; /* light red Warning/Error Messages */
$color[4] = '#ffffff'; /* white Normal Background */
$color[7] = '#0000cc'; /* blue Links */
$color[8] = '#000000'; /* black Normal text */
}
// if any plugin returns TRUE here, the standard page header will be skipped
echo "<body text=\"$color[8]\" bgcolor=\"$color[4]\" link=\"$color[7]\" vlink=\"$color[7]\" alink=\"$color[7]\" onLoad=\"squirrelmail_loginpage_onload();\">" .
"\n" .
addForm ('redirect.php', 'post', 'login_form');
$username_form_name = 'login_username';
$password_form_name = 'secretkey';
$mailtofield =
addHidden ('mailtodata', $mailtodata);
} else {
$mailtofield = '';
}
/* If they don't have a logo, don't bother.. */
if (isset($org_logo) && $org_logo) {
/* Display width and height like good little people */
$width_and_height = '';
if (isset
($org_logo_width) &&
is_numeric ($org_logo_width) &&
$org_logo_width>0) {
$width_and_height = " width=\"$org_logo_width\"";
}
if (isset
($org_logo_height) &&
is_numeric ($org_logo_height) &&
$org_logo_height>0) {
$width_and_height .= " height=\"$org_logo_height\"";
}
}
'<center>'.
( isset($org_logo) && $org_logo
? '<img src="' . $org_logo . '" alt="' .
sprintf (_ ("%s Logo"), $org_name) .
'"' .
$width_and_height .
' /><br />' . "\n"
: '' ).
( (isset($hide_sm_attributions) && $hide_sm_attributions) ? '' :
'<small>' .
sprintf (_ ("SquirrelMail version %s"), $version) .
'<br />' .
"\n".
' ' .
_ ("By the SquirrelMail Project Team") .
'<br /></small>' .
"\n" ) .
'<b>' .
sprintf (_ ("%s Login"), $org_name) .
"</b>\n",
'center', $color[0] )
) .
'right', '', 'width="30%" id="username_td"' ) .
addInput ($username_form_name, $loginname_value, 0, 0, ' onfocus="alreadyFocused=true;"'),
'left', '', 'width="70%"' )
) . "\n" .
'right', '', 'width="30%" id="secretkey_td"' ) .
addPwField ($password_form_name, null, ' onfocus="alreadyFocused=true;"').
$mailtofield .
'left', '', 'width="70%"' )
) ,
'center', $color[4], 'border="0" width="100%" id="login_table"' ) ,
'left',$color[4] )
) .
'<center>'.
addSubmit (_ ("Login"), 'smsubmit') .
'</center>',
'left' )
),
'', $color[4], 'border="0" width="350"' ) . '</center>',
'center' )
) ,
'', $color[4], 'border="0" cellspacing="0" cellpadding="0" width="100%"' );
echo '</form>' . "\n";
?>
</body></html>