|
|
@@ -0,0 +1,395 @@
|
|
|
+<?php
|
|
|
+
|
|
|
+/**
|
|
|
+ * plugin_email
|
|
|
+ *
|
|
|
+ * @method email time based one time password authenticate the user
|
|
|
+ */
|
|
|
+class plugin_email {
|
|
|
+
|
|
|
+ /**
|
|
|
+ * Define variables and their scope
|
|
|
+ */
|
|
|
+ public $domain_name;
|
|
|
+ public $domain_uuid;
|
|
|
+ public $username;
|
|
|
+ public $password;
|
|
|
+ public $user_uuid;
|
|
|
+ public $user_email;
|
|
|
+ public $contact_uuid;
|
|
|
+
|
|
|
+ /**
|
|
|
+ * time based one time password with email
|
|
|
+ * @return array [authorized] => true or false
|
|
|
+ */
|
|
|
+ function email() {
|
|
|
+
|
|
|
+ //set a default template
|
|
|
+ $_SESSION['domain']['template']['name'] = 'default';
|
|
|
+ $_SESSION['theme']['menu_brand_image']['text'] = PROJECT_PATH.'/themes/default/images/logo.png';
|
|
|
+ $_SESSION['theme']['menu_brand_type']['text'] = 'image';
|
|
|
+
|
|
|
+ //login logo source
|
|
|
+ if (isset($_SESSION['theme']['logo_login']['text']) && $_SESSION['theme']['logo_login']['text'] != '') {
|
|
|
+ $login_logo_source = $_SESSION['theme']['logo_login']['text'];
|
|
|
+ }
|
|
|
+ else if (isset($_SESSION['theme']['logo']['text']) && $_SESSION['theme']['logo']['text'] != '') {
|
|
|
+ $login_logo_source = $_SESSION['theme']['logo']['text'];
|
|
|
+ }
|
|
|
+ else {
|
|
|
+ $login_logo_source = PROJECT_PATH.'/themes/default/images/logo_login.png';
|
|
|
+ }
|
|
|
+
|
|
|
+ //login logo dimensions
|
|
|
+ if (isset($_SESSION['theme']['login_logo_width']['text']) && $_SESSION['theme']['login_logo_width']['text'] != '') {
|
|
|
+ $login_logo_width = $_SESSION['theme']['login_logo_width']['text'];
|
|
|
+ }
|
|
|
+ else {
|
|
|
+ $login_logo_width = 'auto; max-width: 300px';
|
|
|
+ }
|
|
|
+ if (isset($_SESSION['theme']['login_logo_height']['text']) && $_SESSION['theme']['login_logo_height']['text'] != '') {
|
|
|
+ $login_logo_height = $_SESSION['theme']['login_logo_height']['text'];
|
|
|
+ }
|
|
|
+ else {
|
|
|
+ $login_logo_height = 'auto; max-height: 300px';
|
|
|
+ }
|
|
|
+
|
|
|
+ //login destination url
|
|
|
+ $login_destination_url = $_SESSION['login']['destination']['url'];
|
|
|
+
|
|
|
+ //get the domain
|
|
|
+ $domain_array = explode(":", $_SERVER["HTTP_HOST"]);
|
|
|
+ $domain_name = $domain_array[0];
|
|
|
+
|
|
|
+ //temp directory
|
|
|
+ $_SESSION['server']['temp']['dir'] = '/tmp';
|
|
|
+
|
|
|
+ //request the username
|
|
|
+ if (!isset($_POST['username']) && !isset($_POST['authentication_code'])) {
|
|
|
+
|
|
|
+ //add multi-lingual support
|
|
|
+ $language = new text;
|
|
|
+ $text = $language->get(null, '/core/authentication');
|
|
|
+
|
|
|
+ //initialize a template object
|
|
|
+ $view = new template();
|
|
|
+ $view->engine = 'smarty';
|
|
|
+ $view->template_dir = $_SERVER["DOCUMENT_ROOT"].PROJECT_PATH.'/core/authentication/resources/views/';
|
|
|
+ $view->cache_dir = $_SESSION['server']['temp']['dir'];
|
|
|
+ $view->init();
|
|
|
+
|
|
|
+ //assign default values to the template
|
|
|
+ $view->assign("login_title", $text['label-username']);
|
|
|
+ $view->assign("login_username", $text['label-username']);
|
|
|
+ $view->assign("login_logo_width", $login_logo_width);
|
|
|
+ $view->assign("login_logo_height", $login_logo_height);
|
|
|
+ $view->assign("login_logo_source", $login_logo_source);
|
|
|
+ $view->assign("button_login", $text['button-login']);
|
|
|
+
|
|
|
+ //show the views
|
|
|
+ $content = $view->render('username.htm');
|
|
|
+ echo $content;
|
|
|
+ exit;
|
|
|
+
|
|
|
+ }
|
|
|
+
|
|
|
+ //show the authentication code view
|
|
|
+ if (!isset($_POST['authentication_code'])) {
|
|
|
+
|
|
|
+ //get the username
|
|
|
+ //if (!isset($this->username) && isset($_REQUEST['username'])) {
|
|
|
+ // $this->username = $_REQUEST['username'];
|
|
|
+ //}
|
|
|
+
|
|
|
+ //get the user details
|
|
|
+ $sql = "select user_uuid, username, user_email, contact_uuid \n";
|
|
|
+ $sql .= "from v_users\n";
|
|
|
+ $sql .= "where username = :username\n";
|
|
|
+ if ($_SESSION["users"]["unique"]["text"] != "global") {
|
|
|
+ //unique username per domain (not globally unique across system - example: email address)
|
|
|
+ $sql .= "and domain_uuid = :domain_uuid ";
|
|
|
+ $parameters['domain_uuid'] = $_SESSION["domain_uuid"];
|
|
|
+ }
|
|
|
+ $parameters['username'] = $_REQUEST['username'];
|
|
|
+ $database = new database;
|
|
|
+ $row = $database->select($sql, $parameters, 'row');
|
|
|
+ unset($parameters);
|
|
|
+
|
|
|
+ //set class variables
|
|
|
+ //if (strlen($row["user_email"]) > 0) {
|
|
|
+ // $this->user_uuid = $row['user_uuid'];
|
|
|
+ // $this->user_email = $row['user_email'];
|
|
|
+ // $this->contact_uuid = $row['contact_uuid'];
|
|
|
+ //}
|
|
|
+
|
|
|
+ //set a few session variables
|
|
|
+ $_SESSION["user_uuid"] = $row['user_uuid'];
|
|
|
+ $_SESSION["username"] = $row['username'];
|
|
|
+ $_SESSION["user_email"] = $row['user_email'];
|
|
|
+ $_SESSION["contact_uuid"] = $row["contact_uuid"];
|
|
|
+
|
|
|
+ //user email not found
|
|
|
+ if (strlen($row["user_email"]) == 0) {
|
|
|
+ //build the result array
|
|
|
+ $result["plugin"] = "email";
|
|
|
+ $result["domain_name"] = $_SESSION["domain_name"];
|
|
|
+ $result["username"] = $_REQUEST['username'];
|
|
|
+ $result["user_uuid"] = $_SESSION["user_uuid"];
|
|
|
+ $result["domain_uuid"] = $_SESSION["domain_uuid"];
|
|
|
+ $result["contact_uuid"] = $_SESSION["contact_uuid"];
|
|
|
+ $result["authorized"] = false;
|
|
|
+
|
|
|
+ //add the failed login to user logs
|
|
|
+ user_logs::add($result);
|
|
|
+
|
|
|
+ //return the array
|
|
|
+ return $result;
|
|
|
+ }
|
|
|
+
|
|
|
+ //authentication code
|
|
|
+ $_SESSION["user"]["authentication"]["email"]["code"] = generate_password(6, 1);
|
|
|
+ $_SESSION["user"]["authentication"]["email"]["epoch"] = time();
|
|
|
+
|
|
|
+ ////$_SESSION["authentication_address"] = $_SERVER['REMOTE_ADDR'];
|
|
|
+ ////$_SESSION["authentication_date"] = 'now()';
|
|
|
+
|
|
|
+ //set the authentication code
|
|
|
+ //$sql = "update v_users \n";
|
|
|
+ //$sql .= "set auth_code = :auth_code \n";
|
|
|
+ //$sql .= "where user_uuid = :user_uuid;";
|
|
|
+ //$parameters['auth_code'] = $auth_code_hash;
|
|
|
+ //$parameters['user_uuid'] = $this->user_uuid;
|
|
|
+ //$database->execute($sql, $parameters);
|
|
|
+ //unset($sql);
|
|
|
+
|
|
|
+ //email settings
|
|
|
+ //$email_address = $this->user_email;
|
|
|
+ //$email_subject = 'Validation Code';
|
|
|
+ //$email_body = 'Validation Code: '.$authentication_code;
|
|
|
+
|
|
|
+ //send email with the authentication_code
|
|
|
+ //ob_start();
|
|
|
+ //$sent = !send_email($email_address, $email_subject, $email_body, $email_error, null, null, 3, 3) ? false : true;
|
|
|
+ //$response = ob_get_clean();
|
|
|
+
|
|
|
+ //get the language code
|
|
|
+ $language_code = $_SESSION['domain']['language']['code'];
|
|
|
+
|
|
|
+ //get the email template from the database
|
|
|
+ $sql = "select template_subject, template_body ";
|
|
|
+ $sql .= "from v_email_templates ";
|
|
|
+ $sql .= "where (domain_uuid = :domain_uuid or domain_uuid is null) ";
|
|
|
+ $sql .= "and template_language = :template_language ";
|
|
|
+ $sql .= "and template_category = :template_category ";
|
|
|
+ $sql .= "and template_subcategory = :template_subcategory ";
|
|
|
+ $sql .= "and template_type = :template_type ";
|
|
|
+ $sql .= "and template_enabled = 'true' ";
|
|
|
+ $parameters['domain_uuid'] = $_SESSION["domain_uuid"];
|
|
|
+ $parameters['template_language'] = $language_code;
|
|
|
+ $parameters['template_category'] = 'authentication';
|
|
|
+ $parameters['template_subcategory'] = 'email';
|
|
|
+ $parameters['template_type'] = 'html';
|
|
|
+ $database = new database;
|
|
|
+ $row = $database->select($sql, $parameters, 'row');
|
|
|
+ $email_subject = $row['template_subject'];
|
|
|
+ $email_body = $row['template_body'];
|
|
|
+ unset($sql, $parameters, $row);
|
|
|
+
|
|
|
+ //replace variables in email subject
|
|
|
+ $email_subject = str_replace('${domain_name}', $_SESSION["domain_name"], $email_subject);
|
|
|
+
|
|
|
+ //replace variables in email body
|
|
|
+ $email_body = str_replace('${domain_name}', $_SESSION["domain_name"], $email_body);
|
|
|
+ $email_body = str_replace('${auth_code}', $_SESSION["user"]["authentication"]["email"]["code"], $email_body);
|
|
|
+
|
|
|
+ //get the email from name and address
|
|
|
+ $email_from_address = $_SESSION['email']['smtp_from']['text'];
|
|
|
+ $email_from_name = $_SESSION['email']['smtp_from_name']['text'];
|
|
|
+
|
|
|
+ //send email - direct
|
|
|
+ $email = new email;
|
|
|
+ $email->recipients = $_SESSION["user_email"];
|
|
|
+ $email->subject = $email_subject;
|
|
|
+ $email->body = $email_body;
|
|
|
+ $email->from_address = $email_from_address;
|
|
|
+ $email->from_name = $email_from_name;
|
|
|
+ //$email->attachments = $email_attachments;
|
|
|
+ $email->debug_level = 0;
|
|
|
+ $email->method = 'direct';
|
|
|
+ $sent = $email->send();
|
|
|
+
|
|
|
+ //debug informations
|
|
|
+ //$email_response = $email->response;
|
|
|
+ //$email_error = $email->email_error;
|
|
|
+ //echo $email_response."<br />\n";
|
|
|
+ //echo $email_error."<br />\n";
|
|
|
+
|
|
|
+ //set a default template
|
|
|
+ $_SESSION['domain']['template']['name'] = 'default';
|
|
|
+ $_SESSION['theme']['menu_brand_image']['text'] = PROJECT_PATH.'/themes/default/images/logo.png';
|
|
|
+ $_SESSION['theme']['menu_brand_type']['text'] = 'image';
|
|
|
+
|
|
|
+ //get the domain
|
|
|
+ $domain_array = explode(":", $_SERVER["HTTP_HOST"]);
|
|
|
+ $domain_name = $domain_array[0];
|
|
|
+
|
|
|
+ //temp directory
|
|
|
+ $_SESSION['server']['temp']['dir'] = '/tmp';
|
|
|
+
|
|
|
+ //create token
|
|
|
+ //$object = new token;
|
|
|
+ //$token = $object->create('login');
|
|
|
+
|
|
|
+ //add multi-lingual support
|
|
|
+ $language = new text;
|
|
|
+ $text = $language->get(null, '/core/authentication');
|
|
|
+
|
|
|
+ //initialize a template object
|
|
|
+ $view = new template();
|
|
|
+ $view->engine = 'smarty';
|
|
|
+ $view->template_dir = $_SERVER["DOCUMENT_ROOT"].PROJECT_PATH.'/core/authentication/resources/views/';
|
|
|
+ $view->cache_dir = $_SESSION['server']['temp']['dir'];
|
|
|
+ $view->init();
|
|
|
+
|
|
|
+ //assign default values to the template
|
|
|
+ $view->assign("login_title", $text['label-verify']);
|
|
|
+ $view->assign("login_email_description", $text['label-email_description']);
|
|
|
+ $view->assign("login_authentication_code", $text['label-authentication_code']);
|
|
|
+ $view->assign("login_logo_width", $login_logo_width);
|
|
|
+ $view->assign("login_logo_height", $login_logo_height);
|
|
|
+ $view->assign("login_logo_source", $login_logo_source);
|
|
|
+ $view->assign("button_verify", $text['label-verify']);
|
|
|
+
|
|
|
+ //debug information
|
|
|
+ //echo "<pre>\n";
|
|
|
+ //print_r($text);
|
|
|
+ //echo "</pre>\n";
|
|
|
+
|
|
|
+ //show the views
|
|
|
+ $content = $view->render('email.htm');
|
|
|
+ echo $content;
|
|
|
+ exit;
|
|
|
+ }
|
|
|
+
|
|
|
+ //if authorized then verify
|
|
|
+ if (isset($_POST['authentication_code'])) {
|
|
|
+
|
|
|
+ //check if the authentication code has expired. if expired return false
|
|
|
+ if ($_SESSION["user"]["authentication"]["email"]["epoch"] + 3 > time()) {
|
|
|
+ //authentication code expired
|
|
|
+ $result["plugin"] = "email";
|
|
|
+ $result["domain_name"] = $_SESSION["domain_name"];
|
|
|
+ $result["username"] = $_SESSION["username"];
|
|
|
+ $result["error_message"] = 'code expired';
|
|
|
+ $result["authorized"] = false;
|
|
|
+ print_r($result);
|
|
|
+ return $result;
|
|
|
+ exit;
|
|
|
+ }
|
|
|
+
|
|
|
+ //get the user details
|
|
|
+ $sql = "select user_uuid, user_email, contact_uuid, user_email_secret\n";
|
|
|
+ $sql .= "from v_users\n";
|
|
|
+ $sql .= "where username = :username\n";
|
|
|
+ if ($_SESSION["users"]["unique"]["text"] != "global") {
|
|
|
+ //unique username per domain (not globally unique across system - example: email address)
|
|
|
+ $sql .= "and domain_uuid = :domain_uuid ";
|
|
|
+ $parameters['domain_uuid'] = $_SESSION["domain_uuid"];
|
|
|
+ }
|
|
|
+ $parameters['username'] = $_SESSION["username"];
|
|
|
+ $database = new database;
|
|
|
+ $row = $database->select($sql, $parameters, 'row');
|
|
|
+ $this->user_uuid = $row['user_uuid'];
|
|
|
+ $this->user_email = $row['user_email'];
|
|
|
+ $this->contact_uuid = $row['contact_uuid'];
|
|
|
+ $this->user_email_secret = $row['user_email_secret'];
|
|
|
+ unset($parameters);
|
|
|
+
|
|
|
+ //validate the code
|
|
|
+ if ($_SESSION["user"]["authentication"]["email"]["code"] === $_POST['authentication_code']) {
|
|
|
+ $auth_valid = true;
|
|
|
+ }
|
|
|
+ else {
|
|
|
+ $auth_valid = false;
|
|
|
+ }
|
|
|
+
|
|
|
+ //get the user details
|
|
|
+ if ($auth_valid) {
|
|
|
+ //get user data from the database
|
|
|
+ $sql = "select user_uuid, username, user_email, contact_uuid from v_users ";
|
|
|
+ $sql .= "where user_uuid = :user_uuid ";
|
|
|
+ if ($_SESSION["users"]["unique"]["text"] != "global") {
|
|
|
+ //unique username per domain (not globally unique across system - example: email address)
|
|
|
+ $sql .= "and domain_uuid = :domain_uuid ";
|
|
|
+ $parameters['domain_uuid'] = $_SESSION["domain_uuid"];
|
|
|
+ }
|
|
|
+ $parameters['user_uuid'] = $_SESSION["user_uuid"];
|
|
|
+ $database = new database;
|
|
|
+ $row = $database->select($sql, $parameters, 'row');
|
|
|
+ //view_array($row);
|
|
|
+ unset($parameters);
|
|
|
+
|
|
|
+ //set a few session variables
|
|
|
+ //$_SESSION["username"] = $row['username']; //setting the username makes it skip the rest of the authentication
|
|
|
+ //$_SESSION["user_email"] = $row['user_email'];
|
|
|
+ //$_SESSION["contact_uuid"] = $row["contact_uuid"];
|
|
|
+ }
|
|
|
+ else {
|
|
|
+ //destroy session
|
|
|
+ session_unset();
|
|
|
+ session_destroy();
|
|
|
+ //$_SESSION['authentication']['plugin']
|
|
|
+ //send http 403
|
|
|
+ header('HTTP/1.0 403 Forbidden', true, 403);
|
|
|
+
|
|
|
+ //redirect to the root of the website
|
|
|
+ header("Location: ".PROJECT_PATH."/");
|
|
|
+
|
|
|
+ //exit the code
|
|
|
+ exit();
|
|
|
+ }
|
|
|
+
|
|
|
+ /*
|
|
|
+ //check if user successfully logged in during the interval
|
|
|
+ //$sql = "select user_log_uuid, timestamp, user_name, user_agent, remote_address ";
|
|
|
+ $sql = "select count(*) as count ";
|
|
|
+ $sql .= "from v_user_logs ";
|
|
|
+ $sql .= "where domain_uuid = :domain_uuid ";
|
|
|
+ $sql .= "and user_uuid = :user_uuid ";
|
|
|
+ $sql .= "and user_agent = :user_agent ";
|
|
|
+ $sql .= "and type = 'login' ";
|
|
|
+ $sql .= "and result = 'success' ";
|
|
|
+ $sql .= "and floor(extract(epoch from now()) - extract(epoch from timestamp)) > 3 ";
|
|
|
+ $sql .= "and floor(extract(epoch from now()) - extract(epoch from timestamp)) < 300 ";
|
|
|
+ $parameters['domain_uuid'] = $this->domain_uuid;
|
|
|
+ $parameters['user_uuid'] = $this->user_uuid;
|
|
|
+ $parameters['user_agent'] = $_SERVER['HTTP_USER_AGENT'];
|
|
|
+ $database = new database;
|
|
|
+ $user_log_count = $database->select($sql, $parameters, 'all');
|
|
|
+ //view_array($user_log_count);
|
|
|
+ unset($sql, $parameters);
|
|
|
+ */
|
|
|
+
|
|
|
+ //result array
|
|
|
+ $result["plugin"] = "email";
|
|
|
+ $result["domain_name"] = $_SESSION["domain_name"];
|
|
|
+ $result["username"] = $_SESSION["username"];
|
|
|
+ $result["user_uuid"] = $_SESSION["user_uuid"];
|
|
|
+ $result["domain_uuid"] = $_SESSION["domain_uuid"];
|
|
|
+ $result["contact_uuid"] = $_SESSION["contact_uuid"];
|
|
|
+ $result["authorized"] = $auth_valid ? true : false;
|
|
|
+ return $result;
|
|
|
+
|
|
|
+ //$_SESSION['authentication']['plugin']['email']['plugin'] = "email";
|
|
|
+ //$_SESSION['authentication']['plugin']['email']['domain_name'] = $_SESSION["domain_name"];
|
|
|
+ //$_SESSION['authentication']['plugin']['email']['username'] = $row['username'];
|
|
|
+ //$_SESSION['authentication']['plugin']['email']['user_uuid'] = $_SESSION["user_uuid"];
|
|
|
+ //$_SESSION['authentication']['plugin']['email']['contact_uuid'] = $_SESSION["contact_uuid"];
|
|
|
+ //$_SESSION['authentication']['plugin']['email']['domain_uuid'] = $_SESSION["domain_uuid"];
|
|
|
+ //$_SESSION['authentication']['plugin']['email']['authorized'] = $auth_valid ? true : false;
|
|
|
+ }
|
|
|
+
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+?>
|
markjcrane