} ?> if ($error && $failed=="1") { ?> echo $error; ?>
} ?>
// ini_set('display_errors',1);
// error_reporting(2039);
require_once('inc.config.php');
require_once('inc.formfunctions.php');
include_once('inc.status.php');
function writeMailtoLink($address='', $linkText='', $attrs='')
{
// Make replacements for @ and . in address string.
$address = str_replace('@', '@', $address);
$address = str_replace('.', '.', $address);
$address = str_replace('e', 'e', $address);
$address = str_replace('u', 'u', $address);
$address = str_replace('y', 'y', $address);
// Print the email address.
// extra hack added by mrg to obscure "mailto"
$emailString = '';
if (!empty($linkText)) {
$emailString = $emailString . $linkText;
} else {
$emailString = $emailString . $address;
}
$emailString = $emailString . '';
return $emailString;
}
######### GETTING LIST OF VALID IP ADDRESSES #########
$cookiefor=$_SERVER['HTTP_HOST'];
$cookiedir="/";
$cookiedirold="/";
######################################################
#echo "POST =
"; print_r($_POST);
#echo "YOU ARE IN THE NETWORK: ".$in_the_network;
if($_POST["login"] || $_POST["login_x"] || $_POST["reset"] || $_GET['logoff']=="now" || ($_COOKIE['member_username'] && !$_SESSION['member_valid_id'] && ($_GET['logoff']!="done" ))) {
// remember to add other _COOKIES
if($_POST["login"] || $_POST["reset"] || $_GET['logoff']=="now") {
session_set_cookie_params(time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
session_name("member"); session_start();
session_unset();
session_destroy();
setcookie("member_username",FALSE, time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_password",FALSE, time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_remember",FALSE, time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_logged_in",FALSE, time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_username",FALSE, time()-((3600 * 24) * 7),$cookiedirold,$cookiefor);
setcookie("member_password",FALSE, time()-((3600 * 24) * 7),$cookiedirold,$cookiefor);
setcookie("member_remember",FALSE, time()-((3600 * 24) * 7),$cookiedirold,$cookiefor);
setcookie("member_logged_in",FALSE, time()-((3600 * 24) * 7),$cookiedirold,$cookiefor);
session_name("member"); session_start();
session_unset();
session_destroy();
if($_GET['logoff']=="now") {
header("Location: http://environment.yale.edu".$siteDir);
//Header("Location: member_profile.html?id=".$_SESSION['member_valid_id']);
}
}
session_name("member"); session_start();
#require_once('inc/db.html');
if($_GET['logoff']=="denied") { $failed="1"; $error="Access denied; must login again"; }
// PASSWORD RESET
if($_POST["reset"] == "1") {
// EMAIL CHECKS
$resultemail="SELECT username,email FROM users WHERE email='".$_POST["resetemail"]."'";
$runemail = mysql_query($resultemail) or die("Email error: ".mysql_error());
$emailexists = mysql_num_rows($runemail);
if(!$_POST["resetemail"]) {
$failed="2";
$error="Email address required"; }
elseif($_POST["resetemail"] && !ereg("^[a-zA-Z0-9_\.-]+@[a-zA-Z0-9_\.-]+\.[a-zA-Z]{2,4}$", $_POST["resetemail"])) {
$failed="2";
$error="Invalid email address format"; }
elseif($emailexists<="0" || $emailexists=="") {
$failed="2";
$error="No account exists with this email address"; }
else {
function makeRandomPassword() {
$salt = "ABCDEFghijklmopQSTUVWXYZabcdefGHIJKLOPqrtuvwxyz0123456789";
srand((double)microtime()*1000000);
$i = 0;
while ($i <= 7) {
$num = rand() % 59;
$tmp = substr($salt, $num, 1);
$pass = $pass . $tmp;
$i++;
}
return $pass;
}
$newpassword = makeRandomPassword();
$resultnewpass="UPDATE users SET password='".md5($newpassword)."' WHERE email='".$_POST["resetemail"]."'";
mysql_query($resultnewpass) or die("Email error: ".mysql_error());
while($objemail=mysql_fetch_object($runemail)) {
$numUsers++;
$newUsers.="Username: ".$objemail->username."
Password: ".$newpassword."\r\n";
}
$emailmsg="A new password for the ".$sitename." member area has been
generated for the following members:
".$newUsers."Please login at the ".$sitename." website now and update
your Member Profile with a password that's easier to remember:
".$publicurl."\r\n\r\n";
mail($_POST["resetemail"],"Login Information",$emailmsg,"From: ".$sitename." <".$webmaster.">\r\n");
if(strstr($_SERVER['REQUEST_URI'],"?")) { $doQS="&"; } else { $doQS="?";}
header("Location: ".str_replace("msg=login","",str_replace("#member-login-ahref","",$_REQUEST_URI)).$doQS."msg=login#member-login-ahref");
echo "";
}
}
// BART
// echo $_POST["login"]."/".$_COOKIE["username"]."/".$_COOKIE["password"]."/".$logoff."]";
if ((($_POST["login"] || $_POST["login_x"]) || ($_COOKIE["member_username"] && $_COOKIE["member_password"])) && $_GET['logoff']!="now") {
if (!$_POST["username"] || !$_POST["password"]) {
$failed="1";
$error="You need to supply a username and password.";
}
if($_COOKIE["member_remember"] && $_COOKIE["member_username"] && $_COOKIE["member_password"]) {
//GONZO
$loguser=$_COOKIE["member_username"];
$logpass=$_COOKIE["member_password"];
} else {
$loguser=$_POST["username"];
$logpass=md5($_POST["password"]);
}
$loginresult = "SELECT * FROM users WHERE username='".$loguser."' AND password='".$logpass."' AND del!='1' AND status='1' LIMIT 1";
$runlogin = mysql_query($loginresult);
if ( $obj = mysql_fetch_object($runlogin) )
{
if($_POST["remember"]) {
// REMEMBER LOGIN
setcookie("member_username", $_POST["username"], time()+((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_password", md5($_POST["password"]), time()+((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_remember", $_POST["remember"], time()+((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_logged_in", $_POST["username"], time()+((3600 * 24) * 7),$cookiedir,$cookiefor);
}
setcookie("member_logged_in", $_POST["username"], time()+((3600 * 24) * 7),$cookiedir,$cookiefor);
if($obj->id && $obj->id!="0") {
session_name("member"); session_start();
$_SESSION["member_valid_id"] = $obj->id;
$_SESSION["member_valid_user"] = $loguser;
$_SESSION["member_valid_logged_in"] = $loguser;
$_SESSION["member_valid_time"] = time();
$_SESSION["member_handle"] = strtolower($obj->firstname);
// if($obj->lastname) { $_SESSION["member_handle"].=" ".strtolower($obj->lastname); }
mysql_query("UPDATE users SET lastlogin=NOW() WHERE id='".$obj->id."'");
// require("inc/defaultstart.html");
if(ereg("www",$_SERVER['HTTP_HOST'])) { $www="www."; } else { $www=""; }
//*** REDIRECT AFTER SUBMIT FIXED BY GONZO@FLAT.COM ***//
//echo "redirect url: ".$_SERVER['REDIRECT_URL'];
if(isset($_SERVER['REDIRECT_URL'])){
header("Location: ".$_SERVER['REDIRECT_URL']);
} else {
//echo "no redirect available";
header("Location: http://environment.yale.edu".$siteDir);
}
// END FIX //
echo "";
} else {
$failed="3"; }
} else {
$failed="1";
$error="Invalid login name or password";
session_name("member"); session_start();
session_unset();
session_destroy();
setcookie("member_username",FALSE, time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_password",FALSE, time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_remember",FALSE, time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
setcookie("member_logged_in",FALSE, time()-((3600 * 24) * 7),$cookiedir,$cookiefor);
session_name("member"); session_start();
session_unset();
session_destroy();
}
}
}
?>
// BEGIN TOP layout
srand ((double) microtime( )*1000000);
$random_number = rand(0,3);
$imgArray = array('clouds.jpg', 'home.jpg', 'fla.jpg', 'HullsBay.jpg');
?>
Login via CAS (current students, faculty and staff)
/* echo '$statusFesSessionUsername : '.$statusFesSessionUsername; echo var_dump($_SESSION); echo $_COOKIE['member'] . 'Login with your F&ES username and password (alumni/æ).
if($showContent = 1 || $_SESSION["member_valid_user"] != '') { ?>