Changeset 8173 for extensions

Timestamp:

Dec 17, 2010, 3:46:17 PM (13 years ago)

Author:

Eric

Message:

• Case sensitivity check at identification (testing in progress but does not work at this time)

Location:

extensions/LCAS/trunk

Files:

• include/functions.inc.php (modified) (2 diffs)
• main.inc.php (modified) (1 diff)

extensions/LCAS/trunk/include/functions.inc.php

@@ -853 +853 @@
 
 
-/**
-* Function called from main.inc.php
-* Checks if username already exists in database according of case sensitivity
-* 
-* @param : Username
-* 
-* @return : Bool
-*/
-function CaseSensitiveUsername($username)
-{
-  global $conf;
-  
-  if (isset($username))
-  {
-    $query = "
-SELECT ".$conf['user_fields']['username']."
-FROM ".USERS_TABLE."
-WHERE LOWER(".stripslashes($conf['user_fields']['username']).") = '".strtolower($username)."'
-;";
-    $users = mysql_num_rows(pwg_query($query));
-    if ($users > 0)
-    {
-      return true;
-    }
-    else
-    {
-      return false;
-    }
-  }
-}
-
-
 // DebugLog function
-function DebugLog($var1, $var2, $var3, $var4)
+function DebugLog($var1, $var2, $var3, $var4, $var5)
 {
    $fo=fopen (LCAS_PATH.'admin/debuglog.txt','a') ;
@@ -895 +863 @@
    fwrite($fo, "\n" . $var3 . "\r\n") ;
    fwrite($fo, "\n" . $var4 . "\r\n") ;
+   fwrite($fo, "\n" . $var5 . "\r\n") ;
    fclose($fo) ;
 }

extensions/LCAS/trunk/main.inc.php

@@ -55 +55 @@
   
   /* Username non case sensitive */
-  if (isset($conf_LCAS[1]) and $conf_LCAS[1] == 'true' and CaseSensitiveUsername($_POST['username']))
-  {
-
-/* ********************** */
-DebugLog($var1,$var2,$var3,$var4);
-/* ********************** */
-// pending code for test
-    /*add_event_handler('login_failure', 'LCAS_action');
+  //if (isset($conf_LCAS[1]) and $conf_LCAS[1] == 'false')
+  //{
+    // This does not work - Unable to invalidate try_log_user() function
+    add_event_handler('login_success', 'LCAS_action');
+    add_event_handler('login_failure', 'LCAS_action');
     
     function LCAS_action()
     {
-      return($lang['login_error'] = l10n('login_error'));
-    }*/
+  global $conf;
+  // retrieving the encrypted password of the login submitted
+  $query = '
+SELECT '.$conf['user_fields']['id'].' AS id,
+       '.$conf['user_fields']['password'].' AS password
+  FROM '.USERS_TABLE.'
+  WHERE LOWER('.$conf['user_fields']['username'].') = \''.pwg_db_real_escape_string(strtolower($_POST['username'])).'\'
+;';
+  $row = pwg_db_fetch_assoc(pwg_query($query));
+  if ($row['password'] == $conf['pass_convert']($_POST['password']))
+  {
+    //log_user($row['id'], $remember_me);
+    //trigger_action('login_success', stripslashes($_POST['username']));
+    //return true;
+$var1 = 'Typed login : '.$_POST['username'];
+$var2 = 'Typed login lowercase : '.strtolower($_POST['username']);
+$var3 = 'Typed pwd hash : '.$conf['pass_convert'] ($_POST['password']);
+$var4 = 'Pwd hash in DB : '.$row['password'];
+$var5 = 'User ID in DB : '.$row['id'];
+/* ********************** */
+DebugLog($var1,$var2,$var3,$var4,$var5);
+/* ********************** */
+
   }
+  //trigger_action('login_failure', stripslashes($_POST['username']));
+  return false;
+    }
+  //}
 }
 ?>