69 lines
2.5 KiB
PHP
69 lines
2.5 KiB
PHP
<?php
|
|
|
|
/**
|
|
* PHP Mikrotik Billing (https://github.com/hotspotbilling/phpnuxbill/)
|
|
* by https://t.me/ibnux
|
|
**/
|
|
|
|
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
|
|
header("Expires: Tue, 01 Jan 2000 00:00:00 GMT");
|
|
header("Pragma: no-cache");
|
|
|
|
if (Admin::getID()) {
|
|
r2(getUrl('dashboard'), "s", Lang::T("You are already logged in"));
|
|
}
|
|
|
|
if (isset($routes['1'])) {
|
|
$do = $routes['1'];
|
|
} else {
|
|
$do = 'login-display';
|
|
}
|
|
|
|
switch ($do) {
|
|
case 'post':
|
|
$username = _post('username');
|
|
$password = _post('password');
|
|
//csrf token
|
|
$csrf_token = _post('csrf_token');
|
|
if (!Csrf::check($csrf_token)) {
|
|
_alert(Lang::T('Invalid or Expired CSRF Token') . ".", 'danger', "admin");
|
|
}
|
|
run_hook('admin_login'); #HOOK
|
|
if ($username != '' and $password != '') {
|
|
$d = ORM::for_table('tbl_users')->where('username', $username)->find_one();
|
|
if ($d) {
|
|
$d_pass = $d['password'];
|
|
if (Password::_verify($password, $d_pass) == true) {
|
|
$_SESSION['aid'] = $d['id'];
|
|
$token = Admin::setCookie($d['id']);
|
|
$d->last_login = date('Y-m-d H:i:s');
|
|
$d->save();
|
|
_log($username . ' ' . Lang::T('Login Successful'), $d['user_type'], $d['id']);
|
|
if ($isApi) {
|
|
if ($token) {
|
|
showResult(true, Lang::T('Login Successful'), ['token' => "a." . $token]);
|
|
} else {
|
|
showResult(false, Lang::T('Invalid Username or Password'));
|
|
}
|
|
}
|
|
_alert(Lang::T('Login Successful'), 'success', "dashboard");
|
|
} else {
|
|
_log($username . ' ' . Lang::T('Failed Login'), $d['user_type']);
|
|
_alert(Lang::T('Invalid Username or Password') . ".", 'danger', "admin");
|
|
}
|
|
} else {
|
|
_alert(Lang::T('Invalid Username or Password') . "..", 'danger', "admin");
|
|
}
|
|
} else {
|
|
_alert(Lang::T('Invalid Username or Password') . "...", 'danger', "admin");
|
|
}
|
|
|
|
break;
|
|
default:
|
|
run_hook('view_login'); #HOOK
|
|
$csrf_token = Csrf::generateAndStoreToken();
|
|
$ui->assign('csrf_token', $csrf_token);
|
|
$ui->display('admin-login.tpl');
|
|
break;
|
|
}
|