;\$'" . "\n");
define ("SLOGIN_CHARS_FILENAME", "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890.-_");
define ("SLOGIN_CHARS_FILENAME_DATE", "1234567890");
// Define some message strings.
// English strings
$slogin_text["en"]["Username"] = "Username:";
$slogin_text["en"]["Password"] = "Password:";
$slogin_text["en"]["LoginButton"] = "Enter";
$slogin_text["en"]["UserLoggedIn"] = "User logged in";
$slogin_text["en"]["LoginFailed"] = "Login failed for";
$slogin_text["en"]["WrongLogin"] = "Wrong username or password.";
$slogin_text["en"]["ReturnLogList"] = "Return to log list.";
$slogin_text["en"]["ReturnHome"] = "Return to homepage.";
$slogin_text["en"]["PHPRGEnabled"] = "Configuration error: register_globals is enabled.";
$slogin_text["en"]["CantRead"] = "CRITICAL ERROR: The users file cannot be read.";
$slogin_text["en"]["CantLog"] = "It seems we cannot create the log files.";
$slogin_text["en"]["NoAdmin"] = "Only the admin user can view the logs.";
$slogin_text["en"]["EnterPlain"] = "Enter the password in plain text to generate the MD5 hashed string:";
$slogin_text["en"]["GetHashed"] = "The hashed password is:";
$slogin_text["en"]["HashButton"] = "Generate";
$slogin_text["en"]["LogList"] = "Available logs.";
$slogin_text["en"]["ShowPHP"] = "Show PHP configuration.";
$slogin_text["en"]["ShowSFL"] = "Show SiTeFiLo configuration.";
$slogin_text["en"]["UserFileList"] = "Password files.";
$slogin_text["en"]["UFileEdit"] = "edit";
$slogin_text["en"]["UFileBak"] = "backup";
$slogin_text["en"]["UFileDL"] = "download";
$slogin_text["en"]["Used"] = "used";
$slogin_text["en"]["Unused"] = "unused";
$slogin_text["en"]["SaveFile"] = "Save file";
$slogin_text["en"]["Cancel"] = "Cancel";
$slogin_text["en"]["MayNotSave"] = "According to your configuration (slogin_canusefopen), we may not be able to save any file. Try to save one to test if we can do it.";
$slogin_text["en"]["CantSave"] = "Unable to save the file.";
$slogin_text["en"]["FileSaved"] = "The file has been saved.";
$slogin_text["en"]["BakFileDel"] = "delete";
$slogin_text["en"]["CantDelete"] = "Unable to delete the file.";
$slogin_text["en"]["FileDeleted"] = "The file has been deleted.";
$slogin_text["en"]["UserLoggedIn"] = "User logged out";
$slogin_text["en"]["BakList"] = "Available backups.";
$slogin_text["en"]["PasswordHasher"] = "MD5 hash generator.";
// Spanish strings
$slogin_text["es"]["Username"] = "Nombre de usuario:";
$slogin_text["es"]["Password"] = "Contraseña:";
$slogin_text["es"]["LoginButton"] = "Entrar";
$slogin_text["es"]["UserLoggedIn"] = "Usuario inició sesión";
$slogin_text["es"]["LoginFailed"] = "Inicio de sesión fallido para";
$slogin_text["es"]["WrongLogin"] = "Nombre de usuario o contraseña incorrectos.";
$slogin_text["es"]["ReturnLogList"] = "Regresar a la lista de registros.";
$slogin_text["es"]["ReturnHome"] = "Regresar a página principal.";
$slogin_text["en"]["PHPRGEnabled"] = "Error de configuración: register_globals está activado.";
$slogin_text["es"]["CantRead"] = "ERROR CRITICO: No se puede leer el archivo de usuarios.";
$slogin_text["es"]["CantLog"] = "Parece que no podemos crear los registros.";
$slogin_text["es"]["NoAdmin"] = "Sólo el usuario admin puede ver los registros.";
$slogin_text["es"]["EnterPlain"] = "Introduzca la contraseña en texto simple para generar la cadena MD5 encriptada:";
$slogin_text["es"]["GetHashed"] = "La contraseña encryptada es:";
$slogin_text["es"]["HashButton"] = "Generar";
$slogin_text["es"]["LogList"] = "Registros disponibles.";
$slogin_text["es"]["ShowPHP"] = "Mostrar configuración de PHP.";
$slogin_text["es"]["ShowSFL"] = "Mostrar configuración de SiTeFiLo.";
$slogin_text["es"]["UserFileList"] = "Archivos de contraseñas.";
$slogin_text["es"]["UFileEdit"] = "editar";
$slogin_text["es"]["UFileBak"] = "respaldar";
$slogin_text["es"]["UFileDL"] = "descargar";
$slogin_text["es"]["Used"] = "usado";
$slogin_text["es"]["Unused"] = "no usado";
$slogin_text["es"]["SaveFile"] = "Guardar archivo";
$slogin_text["es"]["Cancel"] = "Cancelar";
$slogin_text["es"]["MayNotSave"] = "De acuerdo a su configuración (slogin_canusefopen), quizás no podremos guardar ningún archivo. Intente guardar uno para probar si podemos hacerlo.";
$slogin_text["es"]["CantSave"] = "No fue posible guardar el archivo.";
$slogin_text["es"]["FileSaved"] = "El archivo ha sido guardado.";
$slogin_text["es"]["BakFileDel"] = "borrar";
$slogin_text["es"]["CantDelete"] = "No fue posible borrar el archivo.";
$slogin_text["es"]["FileDeleted"] = "El archivo ha sido borrado.";
$slogin_text["es"]["UserLoggedIn"] = "Usuario terminó sesión";
$slogin_text["es"]["BakList"] = "Respaldos disponibles.";
$slogin_text["es"]["PasswordHasher"] = "Generador de hash MD5.";
// French strings contributed by Christophe Helson (christophe.helson@free.fr).
$slogin_text["fr"]["Username"] = "Utilisateur :";
$slogin_text["fr"]["Password"] = "Mot de passe :";
$slogin_text["fr"]["LoginButton"] = "Entrer";
$slogin_text["fr"]["UserLoggedIn"] = "Utilisateur identifié";
$slogin_text["fr"]["LoginFailed"] = "Identification échouée àcause de";
$slogin_text["fr"]["WrongLogin"] = "Nom d'utilisateur ou mot de passe incorrect.";
$slogin_text["fr"]["ReturnLogList"] = "Retour àla liste des logs.";
$slogin_text["fr"]["ReturnHome"] = "Retour àla page d'accueil.";
$slogin_text["en"]["PHPRGEnabled"] = "Configuration error: register_globals is enabled.";
$slogin_text["fr"]["CantRead"] = "ERREUR CRITIQUE: le fichier utilisateurs ne peut pas être lu.";
$slogin_text["fr"]["CantLog"] = "Il semble impossible de créer les fichiers logs.";
$slogin_text["fr"]["NoAdmin"] = "Seul l'administrateur peut consulter les logs.";
$slogin_text["fr"]["EnterPlain"] = "Entrez le mot de passe en texte simple pour générer la chaîne cryptée MD5:";
$slogin_text["fr"]["GetHashed"] = "Le mot de passe cryptéest:";
$slogin_text["fr"]["HashButton"] = "Générer";
$slogin_text["fr"]["LogList"] = "Logs disponibles.";
$slogin_text["fr"]["ShowPHP"] = "Montrer la configuration de PHP.";
$slogin_text["fr"]["ShowSFL"] = "Montrer la configuration de SiTeFiLo.";
$slogin_text["fr"]["UserFileList"] = "Password files.";
$slogin_text["fr"]["UFileEdit"] = "edit";
$slogin_text["fr"]["UFileBak"] = "backup";
$slogin_text["fr"]["UFileDL"] = "download";
$slogin_text["fr"]["Used"] = "used";
$slogin_text["fr"]["Unused"] = "unused";
$slogin_text["fr"]["SaveFile"] = "Save file";
$slogin_text["fr"]["Cancel"] = "Cancel";
$slogin_text["fr"]["MayNotSave"] = "According to your configuration (slogin_canusefopen), we may not be able to save any file. Try to save one to test if we can do it.";
$slogin_text["fr"]["CantSave"] = "Unable to save the file.";
$slogin_text["fr"]["FileSaved"] = "The file has been saved.";
$slogin_text["fr"]["BakFileDel"] = "delete";
$slogin_text["fr"]["CantDelete"] = "Unable to delete the file.";
$slogin_text["fr"]["FileDeleted"] = "The file has been deleted.";
$slogin_text["fr"]["UserLoggedIn"] = "User logged out";
$slogin_text["fr"]["BakList"] = "Available backups.";
$slogin_text["fr"]["PasswordHasher"] = "MD5 hash generator.";
// German strings contributed by Anja Pregowski (pregoanj@zhwin.ch).
$slogin_text["de"]["Username"] = "Benutzername:";
$slogin_text["de"]["Password"] = "Passwort:";
$slogin_text["de"]["LoginButton"] = "anmelden";
$slogin_text["de"]["UserLoggedIn"] = "Benutzer angemeldet";
$slogin_text["de"]["LoginFailed"] = "Anmeldung fehlgeschlagen";
$slogin_text["de"]["WrongLogin"] = "Falscher Benutzername oder Passwort";
$slogin_text["de"]["ReturnLogList"] = "Zurück zur Logliste";
$slogin_text["de"]["ReturnHome"] = "Zurück zur Startseite";
$slogin_text["en"]["PHPRGEnabled"] = "Configuration error: register_globals is enabled.";
$slogin_text["de"]["CantRead"] = "FEHLER: Die Seite kann nicht gelesen werden.";
$slogin_text["de"]["CantLog"] = "Leider kann kein Logfile erstellt werden.";
$slogin_text["de"]["NoAdmin"] = "Nur der Administrator kann diese Files lesen.";
$slogin_text["de"]["EnterPlain"] = "Bitte Passwort eingeben um die Verschlüsselung zu erzeugen:";
$slogin_text["de"]["GetHashed"] = "Das verschlüsselte Passwort hat den Wert:";
$slogin_text["de"]["HashButton"] = "Generieren";
$slogin_text["de"]["LogList"] = "Vorhandene Logs";
$slogin_text["de"]["ShowPHP"] = "Zeige die PHP Konfiguration.";
$slogin_text["de"]["ShowSFL"] = "Zeige die SiTeFiLo Konfiguration.";
$slogin_text["de"]["UserFileList"] = "Password files.";
$slogin_text["de"]["UFileEdit"] = "edit";
$slogin_text["de"]["UFileBak"] = "backup";
$slogin_text["de"]["UFileDL"] = "download";
$slogin_text["de"]["Used"] = "used";
$slogin_text["de"]["Unused"] = "unused";
$slogin_text["de"]["SaveFile"] = "Save file";
$slogin_text["de"]["Cancel"] = "Cancel";
$slogin_text["de"]["MayNotSave"] = "According to your configuration (slogin_canusefopen), we may not be able to save any file. Try to save one to test if we can do it.";
$slogin_text["de"]["CantSave"] = "Unable to save the file.";
$slogin_text["de"]["FileSaved"] = "The file has been saved.";
$slogin_text["de"]["BakFileDel"] = "delete";
$slogin_text["de"]["CantDelete"] = "Unable to delete the file.";
$slogin_text["de"]["FileDeleted"] = "The file has been deleted.";
$slogin_text["de"]["UserLoggedIn"] = "User logged out";
$slogin_text["de"]["BakList"] = "Available backups.";
$slogin_text["de"]["PasswordHasher"] = "MD5 hash generator.";
// Stop if the environment is misconfigured.
if (ini_get ("register_globals")) {
echo "{$slogin_text[$slogin_lang]["PHPRGEnabled"]}
";
}
// Include alternative user file if needed.
$slogin_user = array ();
$slogin_pass = array ();
if (!$slogin_canusefopen) {
include ($slogin_altuser);
}
// Get login data from login-form or session variables.
$slogin_logout = (!empty ($_GET["logout"])) ? 1 : 0;
$slogin_explicitauth = (!empty ($_POST["slogin_POST_explicitauth"])) ? 1 : 0;
$slogin_loginname = (!empty ($_POST["slogin_POST_username"])) ? fslogin_filter_string ($_POST["slogin_POST_username"], SLOGIN_CHARS_USERNAME, SLOGIN_MAXLEN_USERNAME) : "";
$slogin_loginpass = (!empty ($_POST["slogin_POST_password"])) ? fslogin_filter_string ($_POST["slogin_POST_password"], SLOGIN_CHARS_PASSWORD, SLOGIN_MAXLEN_PASSWORD) : "";
$slogin_Username = (!empty ($_SESSION["Username"])) ? fslogin_filter_string ($_SESSION["Username"], SLOGIN_CHARS_USERNAME, SLOGIN_MAXLEN_USERNAME) : "";
// Authenticate.
// If we are login out, destroy the session data.
// If logout redirection is enable, redirect after logout.
// If not, check if authentication is needed.
// If needed, show the login form.
// If we are receiving the login form data, check the users file.
// If redirection is enabled, redirect after first authentication.
// If the per-user redirection is enabled, append the username to the redirect URL.
if ($slogin_logout) {
fslogin_log_user ("{$slogin_text[$slogin_lang]["UserLoggedOut"]} $slogin_loginname");
@session_unset ();
@session_destroy ();
if ($slogin_logoutredirect) {
if (strtoupper ($slogin_loginname) != SLOGIN_ADMIN_USERNAME) {
header ("Location: " . $slogin_logoutredirect, true, 302);
exit;
}
}
include_once ("header.inc.php");
include_once ("slogin.inc.php");
include_once ("footer.inc.php");
exit;
}
else {
if (($slogin_noauthpage != 1) || ($slogin_explicitauth)) {
if ((!$slogin_Username) && (!$slogin_Password)) {
if ((!$slogin_loginname) && (!$slogin_loginpass)) {
include_once ("header.inc.php");
include_once ("slogin.inc.php");
include_once ("footer.inc.php");
exit;
}
else {
if (fslogin_check_user ($slogin_loginname, $slogin_loginpass)) {
fslogin_log_user ("{$slogin_text[$slogin_lang]["UserLoggedIn"]} $slogin_loginname");
$slogin_Username = $slogin_loginname;
$slogin_Password = $slogin_loginpass;
$_SESSION["Username"] = $slogin_loginname;
if ($slogin_redirect) {
if (strtoupper ($slogin_loginname) != SLOGIN_ADMIN_USERNAME) {
if ($slogin_allowuser_redirect) {
header ("Location: " . $slogin_redirect . $slogin_Username, true, 302);
}
else {
header ("Location: " . $slogin_redirect, true, 302);
}
exit;
}
}
}
else {
fslogin_log_user ("{$slogin_text[$slogin_lang]["LoginFailed"]} $slogin_loginname");
@session_unset ();
@session_destroy ();
include_once ("header.inc.php");
echo "{$slogin_text[$slogin_lang]["WrongLogin"]}
";
include_once ("slogin.inc.php");
include_once ("footer.inc.php");
exit;
}
}
}
}
}
// Filter the string removing all characters not in the validchar list
// and truncating the string up to maxlen characters.
function fslogin_filter_string ($string, $validchar, $maxlen = 0) {
$pattern = "/[^" . preg_quote ($validchar, "/") . "]/u";
$string = (substr (preg_replace ($pattern, "", $string), 0, $maxlen));
return ($string);
}
// Given an username and password, find a match in the users file.
// We support both the plain text file and a PHP include file.
// And we support both clear text passwords and MD5-hashed ones.
// At the end, return the username and password.
function fslogin_check_user ($username, $password) {
global $slogin_canusefopen, $slogin_user, $slogin_pass, $slogin_text, $slogin_lang, $slogin_usehashes;
if (SLOGIN_USERS_FILE) {
if ($slogin_canusefopen) {
if (file_exists (SLOGIN_USERS_FILE) && is_readable (SLOGIN_USERS_FILE)) {
$slogin_ufilef = @fopen (SLOGIN_USERS_FILE, "rb");
if ($slogin_ufilef) {
while ($slogin_content = fgetcsv ($slogin_ufilef, 100, ",")) {
if (strtoupper (trim ($slogin_content[0])) == strtoupper (trim ($username))) {
if ($slogin_usehashes) {
if (trim ($slogin_content[1]) == md5 (trim ($password))) {
fclose ($slogin_ufilef);
return ($slogin_content);
}
}
else {
if (strtoupper (trim ($slogin_content[1])) == strtoupper (trim ($password))) {
fclose ($slogin_ufilef);
return ($slogin_content);
}
}
}
}
fclose ($slogin_ufilef);
}
else {
echo "{$slogin_text[$slogin_lang]["CantRead"]}
";
}
}
}
else {
foreach ($slogin_user as $key => $user) {
if (strtoupper (trim ($user)) == strtoupper (trim ($username))) {
if ($slogin_usehashes) {
if (trim ($slogin_pass[$key]) == md5 (trim ($password))) {
$slogin_content[0] = $username;
$slogin_content[1] = $password;
return ($slogin_content);
}
}
else {
if (strtoupper (trim ($slogin_pass[$key])) == strtoupper (trim ($password))) {
$slogin_content[0] = $username;
$slogin_content[1] = $password;
return ($slogin_content);
}
}
}
}
}
}
else {
$slogin_content[0] = "user";
$slogin_content[1] = "user";
return ($slogin_content);
}
}
// Write a given text line to the log file as fast as possible.
function fslogin_log_user ($loguserline) {
if (SLOGIN_LOG_FILE) {
if (!(file_exists (SLOGIN_LOG_FILE) && !is_writable (SLOGIN_LOG_FILE))) {
$slogin_lfilef = @fopen (SLOGIN_LOG_FILE, 'a');
if ($slogin_lfilef) {
fwrite ($slogin_lfilef, fslogin_curdate_string() . ": " . $loguserline . "\n");
fclose ($slogin_lfilef);
}
}
}
}
// Return the current date in ISO format (YYYY-MM-DD HH:MM:SS), applying a time shift (if needed).
function fslogin_curdate_string () {
return (date("Y-m-d H:i:s", mktime(date("H")+SLOGIN_TIMEZONE_SHIFT,date("i"),date("s"),date("m"),date("d"),date("Y"))));
}
// Return the prefix of the log file according to the current year and month (YYYYMM).
function fslogin_logprefix () {
return (date("Ym", mktime(date("H")+SLOGIN_TIMEZONE_SHIFT,date("i"),date("s"),date("m"),date("d"),date("Y"))));
}
// Display the available logs...
function fslogin_show_logs () {
global $slogin_php_self;
$logs_dirhandle = opendir (".");
$logs_sorteddir = array ();
$logs_count = 0;
while (false !== ($logs_file = readdir ($logs_dirhandle))) {
$logs_sorteddir[count ($logs_sorteddir)] = $logs_file;
}
closedir ($logs_dirhandle);
rsort ($logs_sorteddir);
echo "\n";
foreach ($logs_sorteddir as $logs_file) {
if (($logs_file != ".") && ($logs_file != "..") &&
(substr (strtolower ($logs_file), 0, strlen (SLOGIN_LOG_PREFIX)) == SLOGIN_LOG_PREFIX) &&
(substr (strtolower ($logs_file), (strlen (SLOGIN_LOG_SUFFIX) * -1)) == (SLOGIN_LOG_SUFFIX))) {
$logsize = ceil (filesize ($logs_file) / 1024);
$logs_file = strtolower ($logs_file);
$logs_file = substr ($logs_file, strlen (SLOGIN_LOG_PREFIX), strlen ($logs_file));
$logs_file = substr ($logs_file, 0, strlen (fslogin_logprefix ()));
echo "- ";
echo "$logs_file ($logsize k)";
echo "
\n";
$logs_count++;
}
}
echo "
\n";
return ($logs_count);
}
// Display the available backups...
function fslogin_show_baks () {
global $slogin_php_self, $slogin_lang, $slogin_text;
$baks_dirhandle = opendir (".");
$baks_sorteddir = array ();
$baks_count = 0;
while (($baks_file = readdir ($baks_dirhandle)) != false)
$baks_sorteddir[count ($baks_sorteddir)] = $baks_file;
closedir ($baks_dirhandle);
rsort ($baks_sorteddir);
echo "\n";
foreach ($baks_sorteddir as $baks_file) {
if (($baks_file != ".") && ($baks_file != "..") &&
(substr (strtolower ($baks_file), (strlen (SLOGIN_BACKUP_SUFFIX) * -1)) == (SLOGIN_BACKUP_SUFFIX))) {
$baksize = ceil (filesize ($baks_file) / 1024);
echo "
\n";
$baks_count++;
}
}
echo "\n";
return ($baks_count);
}
// Compress a file with the gzip algorithm.
function fslogin_gzip_file ($slogin_gzsource, $slogin_gztarget) {
if (function_exists ("gzwrite") && file_exists ($slogin_gzsource)) {
$slogin_ungzfp = @fopen ($slogin_gzsource, "rb");
$slogin_gzfp = @gzopen ($slogin_gztarget, "wb9");
if ($slogin_gzfp && $slogin_ungzfp) {
while (!feof ($slogin_ungzfp)) {
@set_time_limit (60);
gzwrite ($slogin_gzfp, fread ($slogin_ungzfp, 65535));
}
@fclose ($slogin_ungzfp);
@gzclose ($slogin_gzfp);
return (true);
}
else {
@fclose ($slogin_ungzfp);
@gzclose ($slogin_gzfp);
return (false);
}
}
else {
return (false);
}
return (false);
}
function fslogin_del_file ($filename){
if ($filename) {
return (@unlink ($filename));
}
else {
return (true);
}
}