member.php 3.6 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091
  1. <?php
  2. /**
  3. * Copyright (c) UNA, Inc - https://una.io
  4. * MIT License - https://opensource.org/licenses/MIT
  5. *
  6. * @defgroup UnaCore UNA Core
  7. * @{
  8. */
  9. require_once('./inc/header.inc.php');
  10. require_once(BX_DIRECTORY_PATH_INC . "design.inc.php");
  11. bx_import('BxDolLanguages');
  12. if (isset($_POST['ID'])) { // login form is submitted
  13. $oForm = BxDolForm::getObjectInstance('sys_login', 'sys_login');
  14. bx_alert('account', 'before_login', 0, 0, array('form' => $oForm));
  15. $oForm->initChecker();
  16. $oForm->setRole(bx_get('role'));
  17. $bLoginSuccess = $oForm->isSubmittedAndValid();
  18. $bAjxMode = (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest') ? true : false;
  19. if ($bAjxMode) {
  20. if ($bLoginSuccess) {
  21. $s = 'OK';
  22. $oAccount = BxDolAccount::getInstance(trim($oForm->getCleanValue('ID')));
  23. $aAccount = bx_login($oAccount->id(), $oForm->getRememberMe());
  24. }
  25. else {
  26. $s = $oForm->getLoginError();
  27. }
  28. if (isset($_SERVER['HTTP_ACCEPT'])) {
  29. if (false !== strpos($_SERVER['HTTP_ACCEPT'], 'application/json') || false !== strpos($_SERVER['HTTP_ACCEPT'], 'text/javascript')) {
  30. header('Content-type: application/json; charset=utf-8');
  31. echo json_encode(['res' => $s, 'form' => $oForm->getCode()]);
  32. exit;
  33. }
  34. }
  35. header('Content-type: text/html; charset=utf-8');
  36. echo $s;
  37. exit;
  38. }
  39. elseif ($bLoginSuccess) {
  40. $sId = trim($oForm->getCleanValue('ID'));
  41. $oAccount = BxDolAccount::getInstance($sId);
  42. $aAccountInfo = $oAccount->getInfo();
  43. if (
  44. (getParam('sys_account_activation_2fa_enable') == 'on' && getParam('sys_twilio_gate_sid') != '' && getParam('sys_twilio_gate_token') != '' && getParam('sys_twilio_gate_from_number') != '')
  45. && (getParam('sys_account_activation_2fa_lifetime') == 0 || (time() - $aAccountInfo['logged'] > getParam('sys_account_activation_2fa_lifetime')))){
  46. $oSession = BxDolSession::getInstance();
  47. $oSession->setValue(BX_ACCOUNT_SESSION_KEY_FOR_2FA_LOGIN_ACCOUNT_ID, trim($oForm->getCleanValue('ID')));
  48. $oSession->setValue(BX_ACCOUNT_SESSION_KEY_FOR_2FA_LOGIN_IS_REMEMBER, $oForm->getRememberMe());
  49. header('Location: ' . BX_DOL_URL_ROOT . BxDolPermalinks::getInstance()->permalink('page.php?i=login-step2'));
  50. }
  51. else{
  52. $aAccount = bx_login($oAccount->id(), $oForm->getRememberMe());
  53. $sUrlRelocate = $oForm->getCleanValue('relocate');
  54. if (!$sUrlRelocate || 0 !== strncmp($sUrlRelocate, BX_DOL_URL_ROOT, strlen(BX_DOL_URL_ROOT)))
  55. $sUrlRelocate = BX_DOL_ROLE_ADMIN == $oForm->getRole() ? BX_DOL_URL_STUDIO . 'launcher.php' : BX_DOL_URL_ROOT . 'member.php';
  56. bx_alert('account', 'login_after', $oAccount->id(), false, array(
  57. 'account' => $aAccount,
  58. 'url_relocate' => &$sUrlRelocate
  59. ));
  60. BxDolTemplate::getInstance()->setPageNameIndex (BX_PAGE_TRANSITION);
  61. BxDolTemplate::getInstance()->setPageHeader (_t('_Please Wait'));
  62. BxDolTemplate::getInstance()->setPageContent ('page_main_code', MsgBox(_t('_Please Wait')));
  63. BxDolTemplate::getInstance()->setPageContent ('url_relocate', bx_html_attribute($sUrlRelocate, BX_ESCAPE_STR_QUOTE));
  64. BxDolTemplate::getInstance()->getPageCode();
  65. exit;
  66. }
  67. }
  68. }
  69. bx_require_authentication();
  70. header('Location: ' . BX_DOL_URL_ROOT);
  71. /** @} */