document.location.replace("install/install.php");';
} else {
header('Location: install/install.php');
}
// Now either way, we should stop processing further
exit();
}
// initialise CSRFGuard library
require_once './includes/libraries/csrfp/libs/csrf/csrfprotector.php';
csrfProtector::init();
session_id();
// Load config
if (file_exists('../includes/config/tp.config.php') === true) {
include_once '../includes/config/tp.config.php';
} elseif (file_exists('./includes/config/tp.config.php') === true) {
include_once './includes/config/tp.config.php';
} else {
throw new Exception('Error file "/includes/config/tp.config.php" not exists', 1);
}
// initialize session
if (isset($SETTINGS['cpassman_dir']) === false || $SETTINGS['cpassman_dir'] === '') {
$SETTINGS['cpassman_dir'] = '.';
}
// Include files
require_once $SETTINGS['cpassman_dir'] . '/includes/config/settings.php';
require_once $SETTINGS['cpassman_dir'] . '/includes/config/include.php';
// Quick major version check -> upgrade needed?
if (isset($SETTINGS['cpassman_version']) === true && version_compare(TP_VERSION, $SETTINGS['cpassman_version']) > 0) {
// Perform redirection
if (headers_sent()) {
echo '';
} else {
header('Location: install/upgrade.php');
}
// Now either way, we should stop processing further
exit();
}
require_once $SETTINGS['cpassman_dir'] . '/includes/libraries/protect/SuperGlobal/SuperGlobal.php';
$superGlobal = new protect\SuperGlobal\SuperGlobal();
require_once $SETTINGS['cpassman_dir'] . '/includes/libraries/voku/helper/AntiXSS.php';
$antiXss = new voku\helper\AntiXSS();
if (isset($SETTINGS['cpassman_url']) === false || $SETTINGS['cpassman_url'] === '') {
$SETTINGS['cpassman_url'] = $superGlobal->get('REQUEST_URI', 'SERVER');
}
// Include files
require_once $SETTINGS['cpassman_dir'] . '/sources/SplClassLoader.php';
require_once $SETTINGS['cpassman_dir'] . '/sources/main.functions.php';
// Open MYSQL database connection
require_once './includes/libraries/Database/Meekrodb/db.class.php';
if (defined('DB_PASSWD_CLEAR') === false) {
define('DB_PASSWD_CLEAR', defuseReturnDecrypted(DB_PASSWD, $SETTINGS));
}
DB::$host = DB_HOST;
DB::$user = DB_USER;
DB::$password = DB_PASSWD_CLEAR;
DB::$dbName = DB_NAME;
DB::$port = DB_PORT;
DB::$encoding = DB_ENCODING;
// Load Core library
require_once $SETTINGS['cpassman_dir'] . '/sources/core.php';
// Prepare POST variables
$post_language = filter_input(INPUT_POST, 'language', FILTER_SANITIZE_STRING);
$post_sig_response = filter_input(INPUT_POST, 'sig_response', FILTER_SANITIZE_STRING);
$post_duo_login = filter_input(INPUT_POST, 'duo_login', FILTER_SANITIZE_STRING);
$post_duo_pwd = filter_input(INPUT_POST, 'duo_pwd', FILTER_SANITIZE_STRING);
$post_duo_data = filter_input(INPUT_POST, 'duo_data', FILTER_SANITIZE_STRING);
$post_login = filter_input(INPUT_POST, 'login', FILTER_SANITIZE_STRING);
$post_pw = filter_input(INPUT_POST, 'pw', FILTER_SANITIZE_STRING);
// Prepare superGlobal variables
$session_user_language = $superGlobal->get('user_language', 'SESSION');
$session_user_id = $superGlobal->get('user_id', 'SESSION');
$session_user_flag = $superGlobal->get('user_language_flag', 'SESSION');
$session_user_admin = (int) $superGlobal->get('user_admin', 'SESSION');
$session_user_human_resources = (int) $superGlobal->get('user_can_manage_all_users', 'SESSION');
$session_user_avatar_thumb = $superGlobal->get('user_avatar_thumb', 'SESSION');
$session_name = $superGlobal->get('name', 'SESSION');
$session_lastname = $superGlobal->get('lastname', 'SESSION');
$session_user_manager = (int) $superGlobal->get('user_manager', 'SESSION');
$session_user_read_only = $superGlobal->get('user_read_only', 'SESSION');
$session_is_admin = $superGlobal->get('is_admin', 'SESSION');
$session_login = $superGlobal->get('login', 'SESSION');
$session_validite_pw = $superGlobal->get('validite_pw', 'SESSION');
$session_nb_folders = $superGlobal->get('nb_folders', 'SESSION');
$session_nb_roles = $superGlobal->get('nb_roles', 'SESSION');
//$session_autoriser = $superGlobal->get('autoriser', 'SESSION');
//$session_hide_maintenance = $superGlobal->get('hide_maintenance', 'SESSION');
$session_initial_url = $superGlobal->get('initial_url', 'SESSION');
$server_request_uri = $superGlobal->get('REQUEST_URI', 'SERVER');
$session_nb_users_online = $superGlobal->get('nb_users_online', 'SESSION');
$session_auth_type = $superGlobal->get('auth_type', 'SESSION', 'user');
$pageSel = $superGlobal->get('page', 'GET');
/* DEFINE WHAT LANGUAGE TO USE */
if (
isset($_GET['language']) === true
&& empty($_) === false
&& filter_var(trim($_GET['language']), FILTER_SANITIZE_STRING) !== false
) {
// case of user has change language in the login page
$dataLanguage = DB::queryFirstRow(
'SELECT flag, name
FROM ' . prefixTable('languages') . '
WHERE name = %s',
$_GET['language']
);
$superGlobal->put('user_language', $dataLanguage['name'], 'SESSION');
$superGlobal->put('user_language_flag', $dataLanguage['flag'], 'SESSION');
} elseif ($session_user_id === null && null === $post_language && $session_user_language === null) {
//get default language
$dataLanguage = DB::queryFirstRow(
'SELECT m.valeur AS valeur, l.flag AS flag
FROM ' . prefixTable('misc') . ' AS m
INNER JOIN ' . prefixTable('languages') . ' AS l ON (m.valeur = l.name)
WHERE m.type=%s_type AND m.intitule=%s_intitule',
[
'type' => 'admin',
'intitule' => 'default_language',
]
);
if (empty($dataLanguage['valeur'])) {
$superGlobal->put('user_language', 'english', 'SESSION');
$superGlobal->put('user_language_flag', 'us.png', 'SESSION');
$session_user_language = 'english';
} else {
$superGlobal->put('user_language', $dataLanguage['valeur'], 'SESSION');
$superGlobal->put('user_language_flag', $dataLanguage['flag'], 'SESSION');
$session_user_language = $dataLanguage['valeur'];
}
} elseif (isset($SETTINGS['default_language']) === true && $session_user_language === null) {
$superGlobal->put('user_language', $SETTINGS['default_language'], 'SESSION');
$session_user_language = $SETTINGS['default_language'];
} elseif (null !== $post_language) {
$superGlobal->put('user_language', $post_language, 'SESSION');
$session_user_language = $post_language;
} elseif ($session_user_language === null || empty($session_user_language) === true) {
if (null !== $post_language) {
$superGlobal->put('user_language', $post_language, 'SESSION');
$session_user_language = $post_language;
} elseif ($session_user_language !== null) {
$superGlobal->put('user_language', $SETTINGS['default_language'], 'SESSION');
$session_user_language = $SETTINGS['default_language'];
}
} elseif ($session_user_language === '0') {
$superGlobal->put('user_language', $SETTINGS['default_lang uage'], 'SESSION');
$session_user_language = $SETTINGS['default_language'];
}
if (isset($SETTINGS['cpassman_dir']) === false || $SETTINGS['cpassman_dir'] === '') {
$SETTINGS['cpassman_dir'] = '.';
$SETTINGS['cpassman_url'] = (string) $server_request_uri;
}
// Load user languages files
if (in_array($session_user_language, $languagesList) === true) {
if (file_exists($SETTINGS['cpassman_dir'] . '/includes/language/' . $session_user_language . '.php') === true) {
$_SESSION['teampass']['lang'] = include $SETTINGS['cpassman_dir'] . '/includes/language/' . $session_user_language . '.php';
}
} else {
$_SESSION['error']['code'] = ERR_NOT_ALLOWED; //not allowed page
include $SETTINGS['cpassman_dir'] . '/error.php';
}
// load 2FA Google
if (isset($SETTINGS['google_authentication']) === true && $SETTINGS['google_authentication'] === '1') {
include_once $SETTINGS['cpassman_dir'] . '/includes/libraries/Authentication/TwoFactorAuth/TwoFactorAuth.php';
}
// load 2FA Yubico
if (isset($SETTINGS['yubico_authentication']) === true && $SETTINGS['yubico_authentication'] === '1') {
include_once $SETTINGS['cpassman_dir'] . '/includes/libraries/Authentication/Yubico/Yubico.php';
}
// Some template adjust
if (array_key_exists($pageSel, $mngPages) === true) {
$menuAdmin = true;
} else {
$menuAdmin = false;
}
// Some template adjust
if (array_key_exists($pageSel, $utilitiesPages) === true) {
$menuUtilities = true;
} else {
$menuUtilities = false;
}
?>
Teampass
>".$session_user_id.
"
>".$session_validite_pw.
"
>".filter_var($_GET['page'], FILTER_SANITIZE_STRING)."-- ";echo "JE SUIS ICI";
*/
// display an item in the context of OTV link
if (($session_validite_pw === null
|| empty($session_validite_pw) === true
|| empty($session_user_id) === true)
&& isset($_GET['otv']) === true
&& empty($_GET['otv']) === false
&& filter_var(trim($_GET['otv']), FILTER_SANITIZE_STRING) !== false
) {
// case where one-shot viewer
if (
isset($_GET['code']) === true && empty($_GET['code']) === false
&& isset($_GET['stamp']) === true && empty($_GET['stamp']) === false
) {
include './includes/core/otv.php';
} else {
$_SESSION['error']['code'] = ERR_VALID_SESSION;
$superGlobal->put(
'initial_url',
filter_var(
substr(
$server_request_uri,
strpos($server_request_uri, 'index.php?')
),
FILTER_SANITIZE_URL
),
'SESSION'
);
include $SETTINGS['cpassman_dir'] . '/error.php';
}
} elseif (
$session_validite_pw !== null
&& $session_validite_pw === true
&& isset($_GET['page']) === true
&& empty($_GET['page']) === false
&& filter_var($_GET['page'], FILTER_SANITIZE_STRING) !== false
&& empty($session_user_id) === false
) {
// Do some template preparation
// Avatar
if ($session_user_avatar_thumb !== null && empty($session_user_avatar_thumb) === false) {
if (file_exists('includes/avatars/' . $session_user_avatar_thumb)) {
$avatar = $SETTINGS['cpassman_url'] . '/includes/avatars/' . $session_user_avatar_thumb;
} else {
$avatar = $SETTINGS['cpassman_url'] . '/includes/images/photo.jpg';
}
} else {
$avatar = $SETTINGS['cpassman_url'] . '/includes/images/photo.jpg';
}
?>
';
} else {
echo '
';
}
*/
/* MAIN PAGE */
echo '
';
} elseif ((empty($session_user_id) === false
&& $session_user_id !== null)
|| empty($session_user_id) === true
|| $session_user_id === null
) {
// case where user not logged and can't access a direct link
if (
isset($_GET['page']) === true
&& empty($_GET['page']) === false
&& filter_var($_GET['page'], FILTER_SANITIZE_STRING) === false
) {
$superGlobal->put(
'initialUrl',
filter_var(
substr($server_request_uri, strpos($server_request_uri, 'index.php?')),
FILTER_SANITIZE_URL
),
'SESSION'
);
// REDIRECTION PAGE ERREUR
echo '
';
exit;
} else {
$superGlobal->put('initialUrl', '', 'SESSION');
}
// LOGIN form
include $SETTINGS['cpassman_dir'] . '/includes/core/login.php';
}
?>