X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;ds=sidebyside;f=html%2Fmain.php;h=3e1363f1a42bbc0f170eae3e8c8bcab118b6f2f4;hb=4e396e5ebea84318bb94446081cd0e7a081d8f3f;hp=d0d182243bdac9a02fd5641f15a3b524fe5149df;hpb=739909e8d6028cf20004eecd8c143f3417005663;p=gosa.git diff --git a/html/main.php b/html/main.php index d0d182243..3e1363f1a 100644 --- a/html/main.php +++ b/html/main.php @@ -19,15 +19,12 @@ */ /* Basic setup, remove eventually registered sessions */ +$start = microtime(); $timing= array(); require_once ("../include/php_setup.inc"); require_once ("functions.inc"); header("Content-type: text/html; charset=UTF-8"); -/* Reset error handler */ -$error_collector= ""; -set_error_handler('gosaRaiseError'); - /* Find all class files and include them */ get_dir_list("$BASE_DIR/plugins"); @@ -36,8 +33,22 @@ $domain = 'messages'; bindtextdomain($domain, "$BASE_DIR/locale"); textdomain($domain); +/* Set cookie lifetime to one day (The parameter is in seconds ) */ +session_set_cookie_params(24*60*60); + +/* Set cache limter to one day (parameter is minutes !!)*/ +session_cache_expire(60*24); // default is 180 + +/* Set session max lifetime, to prevent the garbage collector to delete session before timeout. + !! The garbage collector is a cron job on debian systems, the cronjob will fetch the timeout from + the php.ini, so if you use debian, you must hardcode session.gc_maxlifetime in your php.ini */ +ini_set("session.gc_maxlifetime",24*60*60); + /* Remember everything we did after the last click */ session_start (); + +$_SESSION['limit_exceeded'] =FALSE; + if ($_SERVER["REQUEST_METHOD"] == "POST"){ @DEBUG (DEBUG_POST, __LINE__, __FUNCTION__, __FILE__, $_POST, "_POST"); } @@ -45,13 +56,15 @@ if ($_SERVER["REQUEST_METHOD"] == "POST"){ /* Logged in? Simple security check */ if (!isset($_SESSION['config'])){ - gosa_log ("main.php called without session"); - header ("Location: index.php"); + gosa_log ("main.php called without session - logging out"); + header ("Location: logout.php"); exit; } /* Reset errors */ -$_SESSION['errors']= ""; +$_SESSION['errors'] = ""; +$_SESSION['errorsAlreadyPosted']= array(); +$_SESSION['LastError'] = ""; /* Check for uniqe ip address */ $ui= $_SESSION["ui"]; @@ -61,6 +74,36 @@ if ($_SERVER['REMOTE_ADDR'] != $ui->ip){ exit; } $config= $_SESSION['config']; + + +/* Check for invalid sessions */ +if(empty($_SESSION['_LAST_PAGE_REQUEST'])){ + $_SESSION['_LAST_PAGE_REQUEST']= time(); +}else{ + + /* check GOsa.conf for defined session lifetime */ + if(isset($config->data['MAIN']['SESSION_LIFETIME'])){ + $max_life = $config->data['MAIN']['SESSION_LIFETIME']; + }else{ + $max_life = 60*60*2; + } + + /* get time difference between last page reload */ + $request_time = (time()-$_SESSION['_LAST_PAGE_REQUEST']); + + /* If page wasn't reloaded for more than max_life seconds + * kill session + */ + if($request_time > $max_life){ + session_unset(); + gosa_log ("main.php called without session - logging out"); + header ("Location: logout.php"); + exit; + } + $_SESSION['_LAST_PAGE_REQUEST'] = time(); +} + + @DEBUG (DEBUG_CONFIG, __LINE__, __FUNCTION__, __FILE__, $config->data, "config"); /* Set template compile directory */ @@ -70,12 +113,33 @@ if (isset ($config->data['MAIN']['COMPILE'])){ $smarty->compile_dir= '/var/spool/gosa/'; } +/* Set default */ +$reload_navigation = false; + +/* Set last initialised language to current, browser settings */ +if((!isset($_SESSION['Last_init_lang']))){ + $reload_navigation = true; + $_SESSION['Last_init_lang'] = get_browser_language(); +} + /* Language setup */ if ($config->data['MAIN']['LANG'] == ""){ + + /* If last language != current force navi reload */ + if($_SESSION['Last_init_lang'] != get_browser_language()){ + $reload_navigation = true; + } $lang= get_browser_language(); + $_SESSION['Last_init_lang'] = $lang; } else { $lang= $config->data['MAIN']['LANG']; } + +/* Preset current main base */ +if(!isset($_SESSION['CurrentMainBase'])){ + $_SESSION['CurrentMainBase']= get_base_from_people($ui->dn); +} + $lang.=".UTF-8"; putenv("LANGUAGE="); putenv("LANG=$lang"); @@ -97,8 +161,7 @@ $plist= $_SESSION['plist']; /* Check for register globals */ if (isset($global_check) && $config->data['MAIN']['FORCEGLOBALS'] == 'true'){ - print_red (_("Register globals is on. GOsa will refuse to login unless this is fixed by an administrator.")); - echo $_SESSION['errors']; + echo _("FATAL: Register globals is on. GOsa will refuse to login unless this is fixed by an administrator."); gosa_log ("Register globals is on. For security reasons, this should be turned off."); session_destroy (); exit (); @@ -180,8 +243,6 @@ if ($_SERVER["REQUEST_METHOD"] == "POST"){ /* Load department list when plugin has changed. That is some kind of compromise between speed and beeing up to date */ if (isset($_GET['reset'])){ - $config->departments= get_departments(); - $config->make_idepartments (); if (isset($_SESSION['objectinfo'])){ unset ($_SESSION['objectinfo']); } @@ -202,11 +263,19 @@ if(isset($_SESSION['POST'])){ /* show web frontend */ $smarty->assign ("date", date("l, dS F Y H:i:s O")); $smarty->assign ("must", "*"); +if (isset($plug)){ + $plug= "?plug=$plug"; +} else { + $plug= ""; +} if ($_SESSION['js']==FALSE){ $smarty->assign("javascript", "false"); + $smarty->assign("help_method", "href='helpviewer.php$plug' target='_blank'"); } else { $smarty->assign("javascript", "true"); + $smarty->assign("help_method"," onclick=\"return popup('helpviewer.php$plug','GOsa help');\""); } + $smarty->assign ("username", $ui->username); $smarty->assign ("go_logo", get_template_path('images/go_logo.png')); $smarty->assign ("go_base", get_template_path('images/dtree.png')); @@ -216,15 +285,17 @@ $smarty->assign ("go_top", get_template_path('images/go_top.png')); $smarty->assign ("go_corner", get_template_path('images/go_corner.png')); $smarty->assign ("go_left", get_template_path('images/go_left.png')); $smarty->assign ("go_help", get_template_path('images/help.png')); + +/* reload navigation if language changed*/ +if($reload_navigation){ + $plist->menu="";; +} +$plist->gen_headlines(); $plist->gen_menu(); $smarty->assign ("menu", $plist->menu); -if (isset($plug)){ - $smarty->assign ("plug", "?plug=$plug"); -} else { - $smarty->assign ("plug", ""); -} -$mtmp="".$smarty->fetch(get_template_path('headers.tpl')); +$smarty->assign ("plug", "$plug"); +$header= "".$smarty->fetch(get_template_path('headers.tpl')); /* React on clicks */ if ($_SERVER["REQUEST_METHOD"] == "POST"){ @@ -233,6 +304,14 @@ if ($_SERVER["REQUEST_METHOD"] == "POST"){ lock at this point globally. Plugins do not need to remove it. */ if (isset($_POST['delete_lock']) && isset($_SESSION['dn'])){ del_lock ($_SESSION['dn']); + + /* Set old Post data */ + if(isset($_SESSION['LOCK_VARS_USED'])){ + foreach($_SESSION['LOCK_VARS_USED'] as $name => $value){ + $_GET[$name] = $value; + $_POST[$name] = $value; + } + } sess_del ('dn'); } @@ -258,16 +337,31 @@ if (isset ($_SESSION['post_cnt'])){ /* Load plugin */ if (is_file("$plugin_dir/main.inc")){ require_once ("$plugin_dir/main.inc"); -if(file_exists("dow3ccheck.chk")) - print $plugin_dir."/main.inc"; } else { - print_red(sprintf(_("Can't find any plugin definitions for plugin '%s'!"), $plug)); - echo $_SESSION['errors']; + echo sprintf(_("FATAL: Can't find any plugin definitions for plugin '%s'!"), $plug); exit(); } /* Close div/tables */ + + /* check if we are using account expiration */ + + if((isset($config->data['MAIN']['ACCOUNT_EXPIRATION'])) && + preg_match('/true/i', $config->data['MAIN']['ACCOUNT_EXPIRATION'])){ + + $expired= ldap_expired_account($config, $ui->dn, $ui->username); + + if ($expired == 2){ + gosa_log ("password for user \"$ui->username\" is about to expire"); + print_red(_("Your password is about to expire, please change your password")); + } + } + +/* Print_out last ErrorMessage repeated string. */ +print_red(NULL); + $smarty->assign("contents", $display); + if (isset($_SESSION['errors'])){ $smarty->assign("errors", $_SESSION['errors']); } @@ -276,19 +370,44 @@ if ($error_collector != ""){ } else { $smarty->assign("php_errors", ""); } -$display = $mtmp.$smarty->fetch(get_template_path('framework.tpl')); -print $display; - -if(file_exists("dow3ccheck.chk")) - { - $fp = fopen("/tmp/current.html","w+"); - fwrite($fp,$display,strlen($display)); - $str = shell_exec( "curl -F uploaded_file=@/tmp/current.html http://127.0.0.1/w3c-markup-validator/check "); - if(!preg_match("/This Page Is Valid/",$str )) - print $str; +$display= $header.$smarty->fetch(get_template_path('framework.tpl')); + +if ((isset($config->data['MAIN']['W3CTEST']) && preg_match('/true/i', $config->data['MAIN']['W3CTEST']))&&(!empty($display))&&(is_callable("tidy_parse_string"))) { + tidy_parse_string(utf8_decode($display)); + $err = nl2br(htmlentities(tidy_get_error_buffer())); + + if($err){ + echo "
![]() |