root/trunk/redirectors/login.php

<?php

/**
 * Package: Spam Board 5
 * File: redirectors/login.php
 * Description: called by the login form; checks user identity
 *
 * Copyright (C) 2007, 2009 Hannes Schueller
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, version 3 of the
 * License.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program (see LICENCE). If not,
 * see <http://www.gnu.org/licenses/>.
 **/

// since this is not called from /index.php, get the necessary includes
require('../includes/config/settings.php');

// load classes on demand
function __autoload($class) {
    global $SETTINGS;
    if (is_file($SETTINGS['fspath'] . 'classes/pages/' . $class . '.php')) {
        require_once($SETTINGS['fspath'] . 'classes/pages/' . $class . '.php');
    } elseif (is_file($SETTINGS['fspath'] . 'classes/misc/' . $class . '.php')) {
        require_once($SETTINGS['fspath'] . 'classes/misc/' . $class . '.php');
    } else { die('Class ' . $class . ' not found.'); }
}

// initialize global warnings array
$WARNINGS = Array();

// import version number
require_once($SETTINGS['fspath'] . 'includes/config/version.php');
// bots definition
require_once($SETTINGS['fspath'] . 'includes/config/bots.php');
// crypto module
require($SETTINGS['fspath'] . 'includes/config/crypt.php');
// load formatting functions
$F = new Format();
require($SETTINGS['fspath'] . 'includes/lang/' . $SETTINGS['language'] . '.php');
require($SETTINGS['fspath'] . 'includes/input.php');
// open database connection
$C = new Connection();
Member::session();
if (isset($_SESSION['lang']) && $_SESSION['lang'] != '') {
    // override global language setting by user setting
    include($SETTINGS['fspath'] . 'includes/lang/' . $_SESSION['lang'] . '.php');
}

if (Page::checkLogins()) {

    // check if user has permission; required: write; independent from id
    if (Member::checkRights('Login', 'w')) {
        // permission granted
        // try authenticating member
        if (Member::authenticate($INPUT['user'], $INPUT['password'])) {
            if (!isset($INPUT['remember'])) {
                $INPUT['remember'] = 'n';
            }
            if (isset($INPUT['admin'])) {
                Member::login($INPUT['user'], $INPUT['remember'], $INPUT['admin']);
            } else {
                Member::login($INPUT['user'], $INPUT['remember']);
            }
            // close database connection
            $C = NULL;
            // handle refering page
            if (strpos($_SESSION['page_ref2'], '?') === FALSE) {
                $ref = $_SESSION['page_ref2'] . '?';
            } else {
                $ref = $_SESSION['page_ref2'];
            }
            // do forward
            header('Location: ' . $SETTINGS['webpath'] . $ref . '&' . strip_tags(SID));
            // in case something went wrong with redirecting, display message at least
            print($LANG['login_success']);
        } else {
            // login failed
            print($LANG['error_userpassword']);
        }
    } else {
        print($LANG['error_permission_denied']);
    }

}

?>