]> git.datanom.net - qtadmin.git/blame - lib/utils.inc.php
Enhance security
[qtadmin.git] / lib / utils.inc.php
CommitLineData
6df4b805 1<?php
6b3d5ba9 2/* vim: set ts=4 tw=0 sw=4 noet: */
6df4b805 3require_once $CFG->root .'config.php';
6ead258e 4require_once $CFG->root . 'lib/session_handler.inc.php';
6df4b805 5
3056d117
MR
6class Utils {
7
2b6294e9 8 private $timeout = false;
3056d117 9 private $settings;
01cc21cf
MR
10 private $log_level;
11 private $log_method;
b95d1cdb 12 private $header = '<!DOCTYPE html>
6df4b805
MR
13<html>
14<head>
b95d1cdb
MR
15 <meta charset="utf-8">
16 <link rel="stylesheet" href="css/styles.css">
17 <script>
18 var timeout = __TIMEOUT__;
19 </script>
20 <script src="__ROOT__js/timer.js"></script>
5c7b972e 21 <script src="__ROOT__js/checkbox.js"></script>
7ef22e21 22 <script src="__ROOT__js/forms.js"></script>
b95d1cdb 23 <title>__TITLE__</title>
6df4b805 24</head>
60aad80e
MR
25<body><div id="container">';
26 private $footer = '</div><div id="footer"><p>Powered by <a href="https://qtadmin.datanom.net"
27 title="Goto QtAdmin homepage">QtAdmin</a>. &copy; 2015 by Michael Rasmussen</p>
3039de29 28 </div></body></html>';
b95d1cdb
MR
29 private $heading = '<p id="time" class="time">Session timeout:
30 <span id="timer"></span></p><h1 class="h1">__TITLE__</h1>';
31
3056d117 32 public function __construct() {
b95d1cdb
MR
33 global $CFG;
34
01cc21cf
MR
35 if (isset($CFG->log_level)) {
36 $this->log_level = $CFG->log_level;
37 } else {
38 $this->log_level = 1;
39 }
40
41 if (isset($CFG->log_method)) {
42 $this->log_method = $CFG->log_method;
43 } else {
44 $this->log_level = 'syslog';
45 }
46
519a15b5
MR
47 $this->log("Init Utils", 4);
48
9da61a01 49 $this->log("__construct[1]: user ".var_export($this->settings['user'], true), 3);
a675b383 50 $this->startSession();
9da61a01 51 $this->log("__construct[2]: user ".var_export($this->settings['user'], true), 3);
a675b383 52
3056d117
MR
53 if (! isset($_SESSION['settings'])) {
54 $this->initSettings();
55 }
9da61a01 56 $this->log("__construct[3]: user ".var_export($this->settings['user'], true), 3);
3056d117 57 $this->settings = $_SESSION['settings'];
9da61a01 58 $this->log("__construct[4]: user ".var_export($this->settings['user'], true), 3);
3056d117
MR
59
60 if ($CFG->auth_method == 'HTTP_AUTH') {
86fb546e
MR
61 if (isset($_SERVER['PHP_AUTH_USER'])) {
62 $this->settings['user'] = $_SERVER['PHP_AUTH_USER'];
3056d117
MR
63 $this->settings['loginStatus'] = 'OK';
64 if ($CFG->admin_user == $this->settings['user'])
65 $this->settings['admin'] = true;
b95d1cdb
MR
66 }
67 }
b95d1cdb
MR
68 }
69
01cc21cf
MR
70 private function log($message, $level = 1) {
71 global $CFG;
72
73 if ($level > $this->log_level)
74 return;
75
76 $time = date('c');
01cc21cf
MR
77
78 $priority = LOG_INFO;
79 switch ($level) {
80 case 1: $priority = LOG_ERR; break;
81 case 2: $priority = LOG_WARNING; break;
82 case 3: $priority = LOG_INFO; break;
83 case 4: $priority = LOG_DEBUG; break;
84 }
85
86 switch ($this->log_method) {
87 case 'file':
7b561609
MR
88 if (isset($CFG->log_file)) {
89 if ($CFG->log_file[0] == '/') {
90 $file = $CFG->log_file;
91 } else {
92 $file = $CFG->root.$CFG->log_file;
93 }
94 } else {
95 $file = $CFG->root.'qtadmin.log';
96 }
815fed0c 97 file_put_contents($file, "[$time]: $message\n", FILE_APPEND | LOCK_EX);
ecc5e773 98 chmod($file, 0600);
7b561609 99 break;
01cc21cf 100 case 'stderr':
815fed0c 101 file_put_contents('php://stderr', "[$time]: $message\n");
7b561609 102 break;
01cc21cf 103 case 'syslog':
2dd58fe8 104 syslog($priority, $message);
01cc21cf 105 break;
d6be2d1a 106 }
01cc21cf
MR
107 }
108
3056d117 109 private function initSettings() {
2dd58fe8
MR
110 $this->log("InitSettings", 4);
111
3056d117
MR
112 if ('' == session_id()) {
113 $this->startSession();
114 }
b95d1cdb 115
2b6294e9
MR
116 if (false !== $this->timeout) {
117 $timeout = $this->timeout;
118 } else {
119 $timeout = 0;
120 }
121
3056d117 122 $this->settings = array(
3056d117
MR
123 'user' => null,
124 'admin' => false,
125 'loginStatus' => 'Not logged in',
2b6294e9 126 'timeout' => $timeout
3056d117 127 );
6072c905 128
3056d117 129 $_SESSION['settings'] = $this->settings;
6072c905
MR
130 }
131
a675b383 132 private function startSession() {
b95d1cdb
MR
133 global $CFG;
134
2dd58fe8
MR
135 $this->log("startSession", 4);
136
b95d1cdb 137 if (isset($CFG->session_timeout)) {
2b6294e9 138 $this->timeout = $CFG->session_timeout * 60;
b95d1cdb 139 } else {
2b6294e9 140 $this->timeout = 20 * 60;
b95d1cdb
MR
141 }
142
2b6294e9
MR
143 if (ini_get('session.gc_maxlifetime') != $this->timeout)
144 ini_set('session.gc_maxlifetime', $this->timeout);
7b561609
MR
145 //if (ini_get('session.cookie_lifetime') != $this->timeout)
146 // ini_set('session.cookie_lifetime', $this->timeout);
147 ini_set('session.cookie_lifetime', 0);
a675b383
MR
148
149 session_start();
7d9c7fe2
MR
150 }
151
3056d117 152 private function checkSession() {
7d9c7fe2
MR
153 global $CFG;
154
2dd58fe8
MR
155 $this->log("checkSession", 4);
156
39023189
MR
157 if ('' == session_id()) {
158 $this->startSession();
159 }
160
b95d1cdb 161 $time = $_SERVER['REQUEST_TIME'];
7d9c7fe2 162 if (isset($_SESSION['LAST_ACTIVITY']) &&
3056d117 163 ($time - $_SESSION['LAST_ACTIVITY']) >= $this->settings['timeout']) {
07124c37
MR
164 $this->log('R_TIME: '.date('c', $time).' L_ACT: '.date('c', $_SESSION['LAST_ACTIVITY'].
165 'Test: '.($time - $_SESSION['LAST_ACTIVITY'])).' >= '.$this->settings['timeout'], 3);
3056d117 166 $this->logout();
a675b383
MR
167 } else {
168 $_SESSION['LAST_ACTIVITY'] = $time;
169 }
b95d1cdb
MR
170 }
171
172 public function logout() {
2dd58fe8
MR
173 $this->log("logout", 4);
174
b95d1cdb
MR
175 if (ini_get('session.use_cookies')) {
176 $params = session_get_cookie_params();
177 setcookie(session_name(), '', time() - 42000,
178 $params['path'], $params['domain'],
179 $params['secure'], $params['httponly']);
180 }
39023189
MR
181
182 if ('' != session_id()) {
183 $_SESSION = array();
184 session_unset();
185 session_destroy();
186 }
3056d117 187 $this->settings = array();
b95d1cdb
MR
188 }
189
190 public function isAdmin() {
3056d117
MR
191 $admin = false;
192
2dd58fe8
MR
193 $this->log("isAdmin", 4);
194
3056d117
MR
195 if (isset($this->settings['admin'])) {
196 $admin = $this->settings['admin'];
197 }
198
199 return $admin;
b95d1cdb
MR
200 }
201
202 public function login($user, $pw) {
203 global $CFG;
204 $result = false;
205
2dd58fe8
MR
206 $this->log("login", 4);
207
3056d117
MR
208 if ('' == session_id()) {
209 $this->startSession();
210 }
211
212 $this->settings['user'] = null;
213 $this->settings['admin'] = false;
b95d1cdb
MR
214
215 $p = explode('@', $user);
216 if (count($p) != 2) {
3056d117
MR
217 $this->settings['loginStatus'] = 'Bad username';
218 } else {
219 $domain = $p[1];
220 $dn = "mail=$user,ou=Users,domainName=$domain,$CFG->ldap_base_dn";
221 $filter = "(&(objectclass=mailUser)(accountStatus=active)(mail=$user))";
222 $ds = @ldap_connect($CFG->ldap_dsn);
223 if ($ds) {
224 @ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3);
225 $r = @ldap_bind($ds, $dn, $pw);
226 if ($r) {
227 $sr = @ldap_search($ds, $CFG->ldap_base_dn, $filter, array('mail','domainglobaladmin'));
228 $info = @ldap_get_entries($ds, $sr); // array
229 if ($info['count'] > 0) {
230 $this->settings['user'] = $user;
231 $result = true;
232 $this->settings['loginStatus'] = 'OK';
233 $admin = 'NO';
234 if (isset($info[0]['domainglobaladmin'])) {
235 $admin = $info[0]['domainglobaladmin'][0];
236 $admin = strtoupper($admin);
237 }
238 $this->settings['admin'] = ($admin == 'YES') ? true : false;
239 } else {
240 $this->settings['loginStatus'] = 'Login failed';
b95d1cdb 241 }
6df4b805 242 } else {
3056d117 243 $this->settings['loginStatus'] = ldap_error($ds);
6df4b805 244 }
3056d117 245 @ldap_close($ds);
6df4b805 246 } else {
3056d117 247 $this->settings['loginStatus'] = 'Connect to LDAP server failed';
6df4b805 248 }
6df4b805
MR
249 }
250
3056d117 251 $_SESSION['settings'] = $this->settings;
6e081c5f 252
b95d1cdb
MR
253 return $result;
254 }
255
256 public function getLoginStatus() {
3056d117
MR
257 $status = 'Not logged in';
258
2dd58fe8
MR
259 $this->log("getLoginStatus", 4);
260
3056d117
MR
261 if (isset($this->settings['loginStatus'])) {
262 $status = $this->settings['loginStatus'];
263 }
264
265 return $status;
b95d1cdb
MR
266 }
267
268 public function isLoggedIn() {
269 global $CFG;
270 $loggedIn = false;
271
65f27692 272 $this->log("isLoggedIn[1]: user ".var_export($this->settings['user'], true), 3);
2dd58fe8 273
3056d117
MR
274 if ('' == session_id()) {
275 $this->startSession();
276 }
277
65f27692 278 $this->log("isLoggedIn[2]: user ".var_export($this->settings['user'], true), 3);
39023189 279 $this->checkSession();
65f27692 280 $this->log("isLoggedIn[3]: user ".var_export($this->settings['user'], true), 3);
39023189 281
3056d117
MR
282 if (isset($this->settings['user'])) {
283 if ($this->settings['user'] != null) {
284 $loggedIn = true;
285 } else {
286 if ($CFG->auth_method == 'HTTP_AUTH') {
86fb546e
MR
287 if (isset($_SERVER['PHP_AUTH_USER'])) {
288 $this->settings['user'] = $_SERVER['PHP_AUTH_USER'];
3056d117
MR
289 $loggedIn = true;
290 }
b95d1cdb
MR
291 }
292 }
293 }
294
85ec6a84 295 if ($loggedIn == false) {
7b561609
MR
296 $this->log('$this->settings: '.var_export($this->settings, true), 3);
297 $this->log('R_TIME: '.date('c', $_SERVER['REQUEST_TIME']).' L_ACT: '.date('c', $_SESSION['LAST_ACTIVITY']), 3);
18d80742 298 }
6e081c5f 299
3056d117 300 $_SESSION['settings'] = $this->settings;
6e081c5f 301
b95d1cdb
MR
302 return $loggedIn;
303 }
304
305 public function getUser() {
3056d117
MR
306 $user = null;
307
2dd58fe8
MR
308 $this->log("getUser", 4);
309
3056d117
MR
310 if ($this->isLoggedIn()) {
311 $user = $this->settings['user'];
312 }
313
314 return $user;
b95d1cdb
MR
315 }
316
3039de29
MR
317 public function authorized($recipient) {
318 $authorized = false;
319
cdd7c88a
MR
320 $this->log("authorized '$recipient'", 3);
321
3039de29
MR
322 if ($this->isAdmin() || $this->getUser() == $recipient) {
323 $authorized = true;
324 }
cdd7c88a 325 $this->log("authorized '".$this->getUser()."'", 3);
3039de29
MR
326
327 return $authorized;
328 }
329
b95d1cdb 330 public function getHeader() {
2dd58fe8
MR
331 $this->log("getHeader", 4);
332
b95d1cdb
MR
333 return $this->header;
334 }
335
336 public function getFooter() {
2dd58fe8
MR
337 $this->log("getFooter", 4);
338
b95d1cdb
MR
339 return $this->footer;
340 }
341
342 public function getHeading() {
2dd58fe8
MR
343 $this->log("getHeading", 4);
344
b95d1cdb
MR
345 return $this->heading;
346 }
347
348 public function setHeading($heading) {
349 global $CFG;
350
2dd58fe8
MR
351 $this->log("setHeading", 4);
352
b95d1cdb
MR
353 $timeout = $CFG->session_timeout * 60 * 1000;
354 $this->heading = str_replace('__TITLE__', $heading, $this->heading);
355 $this->header = str_replace('__TITLE__', $heading, $this->header);
356 $this->header = str_replace('__ROOT__', $CFG->wwwroot, $this->header);
357 $this->header = str_replace('__TIMEOUT__', $timeout, $this->header);
358 }
359
360 public function convertContent($code) {
2dd58fe8
MR
361 $this->log("convertContent", 4);
362
b95d1cdb
MR
363 $table = array(
364 'V' => 'Virus',
365 'B' => 'Banned',
366 'U' => 'Unchecked',
367 'S' => 'Spam',
368 'Y' => 'Spammy',
369 'M' => 'Bad Mime',
370 'H' => 'Bad Header',
371 'O' => 'Over sized',
372 'T' => 'MTA err',
373 'C' => 'Clean'
374 );
375
376 $string = $table[$code];
377 if (empty($string))
378 $string = 'Unknown';
379
380 return $string;
381 }
6df4b805 382
6df4b805 383}
This page took 0.116725 seconds and 5 git commands to generate.