login.php 3.83 KB
Newer Older
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
<?php
	/**
	 * Elgg UNL CAS authentication login action
	 * 
	 * @package cas_auth_unl
	 * @license BSD http://www1.unl.edu/wdn/wiki/Software_License
	 * @author University of Nebraska-Lincoln
	 * @copyright 2010 Regents of the University of Nebraska 
	 * @link http://www.unl.edu/
	 * 
	 * Builds upon the original login action at elgg/actions/login.php by Curverider Ltd
	 * 
	 */
	 
	// Safety first
		action_gatekeeper();

    // Get $_GET inputs
       
        $username = get_input('username');
        $password = get_input("password");
        $persistent = get_input("persistent", false);
        $usecas = get_input('usecas'); 
        
    // 1. Do the regular elgg login if username and password are set 
    	$result = false;          
        if (!empty($username) && !empty($password)) {
        	if ($user = authenticate($username,$password)) {
        		$result = login($user, $persistent);
        	}
        }
        
    // 2. Otherwise try CAS if that button was clicked
        if ($usecas == 'yes') {
			$casObject = new elggSimpleCas();
			if (!$casObject->checkCas()) {
				$ts = time();
				$token = generate_action_token($ts); 
		        SimpleCAS::setURL('http://ucommrasmussen.unl.edu/workspace/UNL_Elgg/elgg/action/login?usecas=yes&__elgg_ts='.$ts.'&__elgg_token='.$token);
        		$casObject->forceCas();
41
42
43
44
45
46
47
			} else {
				$cas_user = $casObject->getUserCas();
				if ($user = $casObject->casAuthenticate($cas_user)) {
					$result = login($user);
					if ($result)
						$_SESSION['loggedInWithCas'] = true;
				} 
48
49
			}
        	
50
			
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
    	} 
        
    // Set the system_message as appropriate
        
        if ($result) {
            system_message(elgg_echo('loginok'));
            if ($_SESSION['last_forward_from'])
            {
            	$forward_url = $_SESSION['last_forward_from'];
            	$_SESSION['last_forward_from'] = "";
            	forward($forward_url);
            }
            else
            {
            	if (
            		(isadminloggedin()) &&
            		(!datalist_get('first_admin_login'))
            	) 
            	{
            		system_message(elgg_echo('firstadminlogininstructions'));
            		
            		datalist_set('first_admin_login', time());
            		
            		forward('pg/admin/plugins');
            	} else	{
            	/* here's the modifications we're making
            		forward("pg/dashboard/"); */
            	
            		$lastlogin_date = $_SESSION['user']->last_login;
            		if (!$lastlogin_date){
            			forward("mod/profile/edit.php?firstlogin=yes&username=$username");
            		}
            		//forward("pg/profile/$username");
            		forward("pg/dashboard/");
            	}
            }
        } else {
        	$error_msg = elgg_echo('loginerror');
        	// figure out why the login failed
        	if (!empty($username) && !empty($password)) {
        		// See if it exists and is disabled
				$access_status = access_get_show_hidden_status();
				access_show_hidden_entities(true);
        		if (($user = get_user_by_username($username)) && !$user->validated) {
        			// give plugins a chance to respond
        			if (!trigger_plugin_hook('unvalidated_login_attempt','user',array('entity'=>$user))) {
        				// if plugins have not registered an action, the default action is to
        				// trigger the validation event again and assume that the validation
        				// event will display an appropriate message
						trigger_elgg_event('validate', 'user', $user);
        			}
        		} else {
        			 register_error(elgg_echo('loginerror'));
        		}
        		access_show_hidden_entities($access_status);
        	} else {
            	register_error(elgg_echo('loginerror'));
        	}
        }
      
?>