modules/Users/Login.php

   1 <?php
   2 if(!defined('sugarEntry') || !sugarEntry) die('Not A Valid Entry Point');
   3 /*********************************************************************************
   4  * SugarCRM Community Edition is a customer relationship management program developed by
   5  * SugarCRM, Inc. Copyright (C) 2004-2011 SugarCRM Inc.
   6  *
   7  * This program is free software; you can redistribute it and/or modify it under
   8  * the terms of the GNU Affero General Public License version 3 as published by the
   9  * Free Software Foundation with the addition of the following permission added
  10  * to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK
  11  * IN WHICH THE COPYRIGHT IS OWNED BY SUGARCRM, SUGARCRM DISCLAIMS THE WARRANTY
  12  * OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
  13  *
  14  * This program is distributed in the hope that it will be useful, but WITHOUT
  15  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
  16  * FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
  17  * details.
  18  *
  19  * You should have received a copy of the GNU Affero General Public License along with
  20  * this program; if not, see http://www.gnu.org/licenses or write to the Free
  21  * Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
  22  * 02110-1301 USA.
  23  *
  24  * You can contact SugarCRM, Inc. headquarters at 10050 North Wolfe Road,
  25  * SW2-130, Cupertino, CA 95014, USA. or at email address contact@sugarcrm.com.
  26  *
  27  * The interactive user interfaces in modified source and object code versions
  28  * of this program must display Appropriate Legal Notices, as required under
  29  * Section 5 of the GNU Affero General Public License version 3.
  30  *
  31  * In accordance with Section 7(b) of the GNU Affero General Public License version 3,
  32  * these Appropriate Legal Notices must retain the display of the "Powered by
  33  * SugarCRM" logo. If the display of the logo is not reasonably feasible for
  34  * technical reasons, the Appropriate Legal Notices must display the words
  35  * "Powered by SugarCRM".
  36  ********************************************************************************/
  37
  38 /*********************************************************************************
  39
  40  * Description: TODO:  To be written.
  41  * Portions created by SugarCRM are Copyright (C) SugarCRM, Inc.
  42  * All Rights Reserved.
  43  * Contributor(s): ______________________________________..
  44  ********************************************************************************/
  45 if (isset($_SESSION['authenticated_user_id']))
  46 {
  47     ob_clean();
  48     // fixing bug #46837: Previosly links/URLs to records in Sugar from MSO Excel/Word were referred to the home screen and not the record
  49     // It used to appear when default browser was not MS IE
  50     $nav = '';
  51     $nav .= (isset($_GET['login_module'])) ? '&module='.$_GET['login_module'] : '';
  52     $nav .= (isset($_GET['login_action'])) ? '&action='.$_GET['login_action'] : '';
  53     $nav .= (isset($_GET['login_record'])) ? '&record='.$_GET['login_record'] : '';
  54
  55     ($nav == '')
  56         ? header("Location: index.php?module=Home&action=index")
  57         : header("Location: index.php?".substr($nav, 1));
  58
  59     sugar_cleanup(true);
  60     return;
  61 }
  62 global $current_language, $mod_strings, $app_strings;
  63 if(isset($_REQUEST['login_language'])){
  64     $lang = $_REQUEST['login_language'];
  65     $_REQUEST['ck_login_language_20'] = $lang;
  66         $current_language = $lang;
  67     $_SESSION['authenticated_user_language'] = $lang;
  68     $mod_strings = return_module_language($lang, "Users");
  69     $app_strings = return_application_language($lang);
  70 }
  71 $sugar_smarty = new Sugar_Smarty();
  72 echo '<link rel="stylesheet" type="text/css" media="all" href="'.getJSPath('modules/Users/login.css').'">';
  73 echo '<script type="text/javascript" src="'.getJSPath('modules/Users/login.js').'"></script>';
  74 global $app_language, $sugar_config;
  75 //we don't want the parent module's string file, but rather the string file specifc to this subpanel
  76 global $current_language;
  77
  78 // Get the login page image
  79 if ( sugar_is_file('custom/include/images/sugar_md.png') ) {
  80     $login_image = '<IMG src="custom/include/images/sugar_md.png" alt="Sugar" width="340" height="25">';
  81 }
  82 else {
  83     $login_image = '<IMG src="include/images/sugar_md_open.png" alt="Sugar" width="340" height="25" style="margin: 5px 0;">';
  84 }
  85 $sugar_smarty->assign('LOGIN_IMAGE',$login_image);
  86
  87 // See if any messages were passed along to display to the user.
  88 if(isset($_COOKIE['loginErrorMessage'])) {
  89     if ( !isset($_REQUEST['loginErrorMessage']) ) {
  90         $_REQUEST['loginErrorMessage'] = $_COOKIE['loginErrorMessage'];
  91     }
  92     SugarApplication::setCookie('loginErrorMessage', '', time()-42000, '/');
  93 }
  94 if(isset($_REQUEST['loginErrorMessage'])) {
  95     if (isset($mod_strings[$_REQUEST['loginErrorMessage']])) {
  96         echo "<p align='center' class='error' > ". $mod_strings[$_REQUEST['loginErrorMessage']]. "</p>";
  97     } else if (isset($app_strings[$_REQUEST['loginErrorMessage']])) {
  98         echo "<p align='center' class='error' > ". $app_strings[$_REQUEST['loginErrorMessage']]. "</p>";
  99     }
 100 }
 101
 102
 103 if (isset($_GET['login_module']))
 104         $sugar_smarty->assign('LOGIN_MODULE', $_GET['login_module']);
 105 if (isset($_GET['login_action']))
 106         $sugar_smarty->assign('LOGIN_ACTION', $_GET['login_action']);
 107 if (isset($_GET['login_record']))
 108         $sugar_smarty->assign('LOGIN_RECORD', $_GET['login_record']);
 109
 110 // Retrieve username from the session if possible.
 111 if(isset($_SESSION["login_user_name"])) {
 112         if (isset($_REQUEST['default_user_name']))
 113                 $login_user_name = $_REQUEST['default_user_name'];
 114         else
 115                 $login_user_name = $_SESSION['login_user_name'];
 116 } else {
 117         if(isset($_REQUEST['default_user_name'])) {
 118                 $login_user_name = $_REQUEST['default_user_name'];
 119         } elseif(isset($_REQUEST['ck_login_id_20'])) {
 120                 $login_user_name = get_user_name($_REQUEST['ck_login_id_20']);
 121         } else {
 122                 $login_user_name = $sugar_config['default_user_name'];
 123         }
 124         $_SESSION['login_user_name'] = $login_user_name;
 125 }
 126 $sugar_smarty->assign('LOGIN_USER_NAME', $login_user_name);
 127
 128 $mod_strings['VLD_ERROR'] = $GLOBALS['app_strings']["\x4c\x4f\x47\x49\x4e\x5f\x4c\x4f\x47\x4f\x5f\x45\x52\x52\x4f\x52"];
 129
 130 // Retrieve password from the session if possible.
 131 if(isset($_SESSION["login_password"])) {
 132         $login_password = $_SESSION['login_password'];
 133 } else {
 134         $login_password = $sugar_config['default_password'];
 135         $_SESSION['login_password'] = $login_password;
 136 }
 137 $sugar_smarty->assign('LOGIN_PASSWORD', $login_password);
 138
 139 if(isset($_SESSION["login_error"])) {
 140         $sugar_smarty->assign('LOGIN_ERROR', $_SESSION['login_error']);
 141 }
 142 if(isset($_SESSION["waiting_error"])) {
 143     $sugar_smarty->assign('WAITING_ERROR', $_SESSION['waiting_error']);
 144 }
 145
 146 if (isset($_REQUEST['ck_login_language_20'])) {
 147         $display_language = $_REQUEST['ck_login_language_20'];
 148 } else {
 149         $display_language = $sugar_config['default_language'];
 150 }
 151
 152 if (empty($GLOBALS['sugar_config']['passwordsetting']['forgotpasswordON']))
 153         $sugar_smarty->assign('DISPLAY_FORGOT_PASSWORD_FEATURE','none');
 154
 155 $the_languages = get_languages();
 156 if ( count($the_languages) > 1 )
 157     $sugar_smarty->assign('SELECT_LANGUAGE', get_select_options_with_id($the_languages, $display_language));
 158 $the_themes = SugarThemeRegistry::availableThemes();
 159 if ( !empty($logindisplay) )
 160         $sugar_smarty->assign('LOGIN_DISPLAY', $logindisplay);;
 161
 162 // RECAPTCHA
 163
 164         $admin = new Administration();
 165         $admin->retrieveSettings('captcha');
 166         $captcha_privatekey = "";
 167         $captcha_publickey="";
 168         $captcha_js = "";
 169         $Captcha='';
 170
 171         // if the admin set the captcha stuff, assign javascript and div
 172         if(isset($admin->settings['captcha_on'])&& $admin->settings['captcha_on']=='1' && !empty($admin->settings['captcha_private_key']) && !empty($admin->settings['captcha_public_key'])){
 173
 174                         $captcha_privatekey = $admin->settings['captcha_private_key'];
 175                         $captcha_publickey = $admin->settings['captcha_public_key'];
 176                         $captcha_js .="<script type='text/javascript' src='" . getJSPath('cache/include/javascript/sugar_grp1_yui.js') . "'></script><script type='text/javascript' src='" . getJSPath('cache/include/javascript/sugar_grp_yui2.js') . "'></script>
 177                         <script type='text/javascript' src='http://api.recaptcha.net/js/recaptcha_ajax.js'></script>
 178                         <script>
 179                         function initCaptcha(){
 180                         Recaptcha.create('$captcha_publickey' ,'captchaImage',{theme:'custom'});
 181                         }
 182                         window.onload=initCaptcha;
 183
 184                         var handleFailure=handleSuccess;
 185                         var handleSuccess = function(o){
 186                                 if(o.responseText!==undefined && o.responseText =='Success'){
 187                                         generatepwd();
 188                                         Recaptcha.reload();
 189                                 }
 190                                 else{
 191                                         if(o.responseText!='')
 192                                                 document.getElementById('generate_success').innerHTML =o.responseText;
 193                                         Recaptcha.reload();
 194                                 }
 195                         }
 196                         var callback2 ={ success:handleSuccess, failure: handleFailure };
 197
 198                         function validateAndSubmit(){
 199                                         var form = document.getElementById('form');
 200                                         var url = '&to_pdf=1&module=Home&action=index&entryPoint=Changenewpassword&recaptcha_challenge_field='+Recaptcha.get_challenge()+'&recaptcha_response_field='+ Recaptcha.get_response();
 201                                         YAHOO.util.Connect.asyncRequest('POST','index.php',callback2,url);
 202                         }</script>";
 203                 $Captcha.="<tr>
 204                         <td scope='row' width='20%'>".$mod_strings['LBL_RECAPTCHA_INSTRUCTION'].":</td>
 205                     <td width='70%'><input type='text' size='26' id='recaptcha_response_field' value=''></td>
 206
 207                 </tr>
 208                 <tr>
 209
 210                         <td colspan='2'><div style='margin-left:2px'class='x-sqs-list' id='recaptcha_image'></div></td>
 211                 </tr>
 212                 <tr>
 213                         <td colspan='2' align='right'><a href='javascript:Recaptcha.reload()'>".$mod_strings['LBL_RECAPTCHA_NEW_CAPTCHA']."</a>&nbsp;&nbsp;
 214                                         <a class='recaptcha_only_if_image' href='javascript:Recaptcha.switch_type(\"audio\")'>".$mod_strings['LBL_RECAPTCHA_SOUND']."</a>
 215                                         <a class='recaptcha_only_if_audio' href='javascript:Recaptcha.switch_type(\"image\")'> ".$mod_strings['LBL_RECAPTCHA_IMAGE']."</a>
 216                         </td>
 217                 </tr>";
 218                 $sugar_smarty->assign('CAPTCHA', $Captcha);
 219                 echo $captcha_js;
 220
 221         }else{
 222                 echo "<script>
 223                 function validateAndSubmit(){generatepwd();}
 224                 </script>";
 225         }
 226
 227 $sugar_smarty->display('modules/Users/login.tpl'); ?>