Archived CMSimple Support Forum

<IfModule mod_rewrite.c>
RewriteEngine on
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
</IfModule>

<?php
/*
CMSimple version 2.6 - July 6. 2006
Small - simple - smart
© 1999-2006 Peter Andreas Harteg - peter@harteg.dk

This file is part of CMSimple.
For licence see notice in /cmsimple/cms.php and http://www.cmsimple.dk/?Licence
*/

/*
MODIFIED BY JAT TO SUPPORT WWWAUT when CGI is enabled
See remarks in the content of this file
*/

if (eregi('login.php',sv('PHP_SELF')))die('Access Denied');

// functions used for login

function gc($s)
{
  if(!isset($_COOKIE))
  {
    global $_COOKIE;
    $_COOKIE=$GLOBALS['HTTP_COOKIE_VARS'];
  }
  if(isset($_COOKIE[$s]))return $_COOKIE[$s];
}


function logincheck(){global $cf;if($cf['security']['wwwaut']=='true')return (sv('PHP_AUTH_USER')==$cf['security']['username']&&sv('PHP_AUTH_PW')==$cf['security']['password']);else return (gc('passwd')==$cf['security']['password']);}

function writelog($m){global $pth,$e;if($fh=@fopen($pth['file']['log'],"a")){fwrite($fh,$m);fclose($fh);}else {e('cntwriteto','log',$pth['file']['log']);chkfile('log',true);}}

// if(gc('status')!=''||$login){header('Cache-Control: no-cache');header('Pragma: no-cache');}

// ADDED BY JAT
if(preg_match('/Basic+(.*)$/i', $_SERVER['REDIRECT_HTTP_AUTHORIZATION'], $matches))
{
  list($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) = explode(':' , base64_decode(substr($_SERVER['REDIRECT_HTTP_AUTHORIZATION'], 6)));
}
// END ADDED BY JAT

$adm=(gc('status')=='adm'&&logincheck());
if($login&&!$adm)
{
  if($cf['security']['wwwaut']!='true')
  {
    if($passwd==$cf['security']['password'])
    {
      setcookie('status','adm');
      setcookie('passwd',$passwd);
      $adm=true;
      $edit=true;
      writelog(date("Y-m-d H:i:s")." from ".sv('REMOTE_ADDR')." logged_in\n");
    }
    else
    {
      // ADDED BY JAT
      header("Refresh: 5;URL=./index.php");
      // END ADDED BY JAT
      shead('401');
    }
  }
  else
  {
    if(sv('PHP_AUTH_USER')==''||sv('PHP_AUTH_PW')==''||gc('status')=='')
    {
      // In a future version of CMSimple this new Server API check will replace the setting of a variable
// <-- REMOVED BY JAT -->
//      if($cf['security']['wwwaut']=='true'&&(php_sapi_name()=='cgi'||php_sapi_name()=='cgi-fcgi'))
//      {
//        $e.='<li>security_wwwaut should only be set true, when Server API is apache - your is '.php_sapi_name().' - please see <a href="http://www.cmsimple.dk/?Requirements">http://www.cmsimple.dk/?Requirements</a>';
//      }
//      else
//      {
// <-- END REMOVED BY JAT -->
        setcookie('status','login');
        header('WWW-Authenticate: Basic realm="'.$tx['login']['warning'].'"');
        shead('401');
// <-- REMOVED BY JAT -->
//      }
// <-- END REMOVED BY JAT -->
    }
    else
    {
      if(logincheck())
      {
        setcookie('status','adm');
        $adm=true;
        $edit=true;
        writelog(date($tx['log']['dateformat']).' '.sv('REMOTE_ADDR').' '.$tx['log']['loggedin']."\n");
      }
      else
      {
// <-- ADDED BY JAT -->
        header("Refresh: 5;URL=./index.php");
        unset($_SERVER['REDIRECT_HTTP_AUTHORIZATION']);
        unset($_SERVER['PHP_AUTH_PW']);
        unset($_SERVER['PHP_AUTH_USER']);
// <-- END ADDED BY JAT -->
        shead('401');
      }
    }
  }
}
else if($logout&&$adm)
{
  $fn=date("YmdHis").'.htm';
  if(@copy($pth['file']['content'],$pth['folder']['content'].$fn))
  {
    $o.='<p>'.ucfirst($tx['filetype']['backup']).' '.$fn.' '.$tx['result']['created'].'</p>';
    $fl=array();
    $fd=@opendir($pth['folder']['content']);
    while(($p=@readdir($fd))==true)
    {
      if(preg_match("/\d{3}\.htm/",$p))$fl[]=$p;
    }
    if($fd==true)closedir($fd);
    @sort($fl,SORT_STRING);
    $v=count($fl)-$cf['backup']['numberoffiles'];
    for($i=0;$i<$v;$i++)
    {
      if(@unlink($pth['folder']['content'].'/'.$fl[$i]))$o.='<p>'.ucfirst($tx['filetype']['backup']).' '.$fl[$i].' '.$tx['result']['deleted'].'</p>';
      else e('cntdelete','backup',$fl[$i]);
    }
  }
  else e('cntsave','backup',$fn);
  $adm=false;
// <-- ADDED BY JAT -->
  header("Refresh: 5;URL=./index.php");
// <-- END ADDED BY JAT -->
  setcookie('status','');
  setcookie('passwd','');
  $o.='<p><font color="red">'.$tx['login']['loggedout'].'</font></p>';

}

// SETTING FUNCTIONS AS PERMITTED

if($adm)
{
  if($edit)
  {
    setcookie('mode','edit');
  }
  if($normal)
  {
    setcookie('mode','');
  }
  if(gc('mode')=='edit'&&!$normal)
  {
    $edit=true;
  }
}
else
{
  if(gc('status')!='')
  {
    setcookie('status','');
  }
  if(gc('mode')=='edit')
  {
    setcookie('mode','');
  }
}
?>

wwwaut = true

if((!$_SERVER['PHP_AUTH_USER']||!$_SERVER['PHP_AUTH_USER'])&&preg_match('/^Basic.*/i', $_SERVER['REMOTE_USER']))list($_SERVER['PHP_AUTH_USER'],$_SERVER['PHP_AUTH_PW'])=explode(':',base64_decode(substr($_SERVER['REMOTE_USER'],6)));

RewriteEngine onRewriteRule .* - [E=REMOTE_USER:%{HTTP:Authorization},L]

if((!$_SERVER['PHP_AUTH_USER']||!$_SERVER['PHP_AUTH_USER'])&&preg_match('/^Basic.*/i', $_SERVER['REDIRECT_REMOTE_USER']))
{
   list($_SERVER['PHP_AUTH_USER'],$_SERVER['PHP_AUTH_PW'])=explode(':',base64_decode(substr($_SERVER['REDIRECT_REMOTE_USER'],6)));
}