Subversion Repositories ALCASAR

Rev

Rev 912 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
345 richard 1 
<?php
2 
# change user password on Alcasar captive Portal
3 
# Copyright (C) 2003, 2004 Mondru AB.
4 
# Copyright (C) 2008-2009 ANGEL95 & REXY
5 
 
647 richard 6 
 
7 
 
345 richard 8 
require('/etc/freeradius-web/config.php');
9 
 
10 
$current_page = $_SERVER['PHP_SELF'];
11 
 
12 
# Choice of language
912 richard 13 
$Language = 'en';
345 richard 14 
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
15 
  $Langue = explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
16 
  $Language = strtolower(substr(chop($Langue[0]),0,2)); }
17 
if($Language == 'es'){
18 
$R_title = "User password change";
19 
$R_form_l1 = "User";
20 
$R_form_l2 = "Old password";
21 
$R_form_l3 = "New password";
22 
$R_form_l4 = "New password (confirmation)";
647 richard 23 
$R_eval_pass = "Score :";
688 richard 24 
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
647 richard 25 
$R_form_button_valid = "Modify";
26 
$R_form_button_retour = "Cancel";
345 richard 27 
$R_form_result1 = "Your password has been successfuly changed";
28 
$R_form_result2 = "Error when trying to change password";
509 richard 29 
$R_retour = "ALCASAR home page";}
912 richard 30 
else if ($Language == 'pt'){
31 
$R_title = "Alteração de senha do usuário";
32 
$R_form_l1 = "Usuário";
33 
$R_form_l2 = "Senha antiga";
34 
$R_form_l3 = "Nova senha";
35 
$R_form_l4 = "Nova senha (confirmação)";
36 
$R_eval_pass = "Resultado:";
688 richard 37 
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
912 richard 38 
$R_form_button_valid = "Modificar";
39 
$R_form_button_retour = "Cancelar";
40 
$R_form_result1 = "Sua senha foi alterada com sucesso";
41 
$R_form_result2 = "Erro ao tentar alterar a senha";
42 
$R_retour = "Home page Alcasar";}
43 
else if($Language == 'de'){
345 richard 44 
$R_title = "User password change";
45 
$R_form_l1 = "User";
46 
$R_form_l2 = "Old password";
47 
$R_form_l3 = "New password";
48 
$R_form_l4 = "New password (confirmation)";
647 richard 49 
$R_eval_pass = "Score :";
688 richard 50 
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
647 richard 51 
$R_form_button_valid = "Modify";
52 
$R_form_button_retour = "Cancel";
345 richard 53 
$R_form_result1 = "Your password has been successfuly changed";
54 
$R_form_result2 = "Error when trying to change password";
509 richard 55 
$R_retour = "ALCASAR home page";}
912 richard 56 
else if($Language == 'nl'){
345 richard 57 
$R_title = "User password change";
58 
$R_form_l1 = "User";
59 
$R_form_l2 = "Old password";
60 
$R_form_l3 = "New password";
61 
$R_form_l4 = "New password (confirmation)";
647 richard 62 
$R_eval_pass = "Score :";
688 richard 63 
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
647 richard 64 
$R_form_button_valid = "Modify";
65 
$R_form_button_retour = "Cancel";
345 richard 66 
$R_form_result1 = "Your password has been successfuly changed";
67 
$R_form_result2 = "Error when trying to change password";
509 richard 68 
$R_retour = "ALCASAR home page";}
912 richard 69 
else if($Language == 'fr'){
345 richard 70 
$R_title = "Changement de mot de passe utilisateur";
647 richard 71 
$R_form_l1 = "Utilisateur :";
72 
$R_form_l2 = "Ancien mot de passe :";
73 
$R_form_l3 = "Nouveau mot de passe :";
74 
$R_form_l4 = "Nouveau mot de passe (confirmation) :";
75 
$R_eval_pass = "";
688 richard 76 
$R_passwordmeter = "Propulsé par 'Shibbo Password Analyser'</a>";
647 richard 77 
$R_form_button_valid = "Modifier";
78 
$R_form_button_retour = "Annuler";
345 richard 79 
$R_form_result1 = "Votre mot de passe a &eacute;t&eacute; modifi&eacute; avec succ&egrave;s";
80 
$R_form_result2 = "Erreur de changement de mot de passe";
912 richard 81 
$R_retour = "Retour &agrave; la page d'accueil ALCASAR";}
82 
else {
83 
$R_title = "User password change";
84 
$R_form_l1 = "User";
85 
$R_form_l2 = "Old password";
86 
$R_form_l3 = "New password";
87 
$R_form_l4 = "New password (confirmation)";
88 
$R_eval_pass = "Score :";
89 
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
90 
$R_form_button_valid = "Modify";
91 
$R_form_button_retour = "Cancel";
92 
$R_form_result1 = "Your password has been successfuly changed";
93 
$R_form_result2 = "Error when trying to change password";
94 
$R_retour = "ALCASAR home page";
345 richard 95 
}
96 
echo "
97 
<html>
509 richard 98 
	<head>
99 
		<title>$R_title</title>
100 
		<meta http-equiv=\"Cache-control\" content=\"no-cache\">
101 
		<meta http-equiv=\"Pragma\" content=\"no-cache\">
102 
		<link rel=\"stylesheet\" href=\"../css/pass.css\" type=\"text/css\">
2003 raphael.pi 103 
		<link rel=\"stylesheet\" href=\"../css/style_intercept.css\" type=\"text/css\">
647 richard 104 
		<link type=\"text/css\" href=\"../css/pwdmeter.css\" media=\"screen\" rel=\"stylesheet\" />
105 
		<!--[if lt IE 7]>
106 
			<link type=\"text/css\" href=\"../css/ie.css\" media=\"screen\" rel=\"stylesheet\" />
107 
		<![endif]-->
108 
		<script type=\"text/javascript\" src=\"js/pwdmeter.js\" language=\"javascript\"></script>
509 richard 109 
	</head>
2003 raphael.pi 110 
	<script type=\"text/javascript\">
111 
		function valoriserDiv5(param){
112 
			document.getElementById(\"box_info\").innerHTML = param.innerHTML;
113 
		}
114 
	</script>
115 
	<body onload=\"valoriserDiv5(text_conn);\">
116 
 
117 
				<div id=\"cadre_titre\" class=\"titre_controle\">
118 
					<p id=\"acces_controle\" class=\"titre_controle\">$R_title</p>
119 
					<div id=\"boite_logo\">
120 
						<img src=\"/images/organisme.png\">
121 
					</div>
647 richard 122 
				</div>
2003 raphael.pi 123 
				<div id=\"contenu_acces\">
647 richard 124 
					<form name=\"master\" action=\"$current_page\" method=\"post\">
125 
					<input type=hidden name=action value=checkpass>
126 
						<table id=\"champs_pass\">
127 
							<tr>
128 
								<td class=\"first_item\">$R_form_l1</td>
129 
								<td><input type=\"text\" name=\"login\" value=\"\" label=\"test\"></td>
130 
							</tr>
131 
							<tr>
132 
								<td class=\"first_item\">$R_form_l2</td>
133 
								<td><input type=\"password\" name=\"passwd\" value=\"\"></td>
134 
							</tr>
135 
							<tr>
136 
								<td class=\"first_item\">$R_form_l3</td>
137 
								<td>
138 
									<input type=\"password\" name=\"newpasswd\" id=\"passwordPwd\" value=\"\" autocomplete=\"off\" onkeyup=\"chkPass(this.value);\" />
139 
									<input type=\"text\" id=\"passwordTxt\" name=\"passwordTxt\" autocomplete=\"off\" onkeyup=\"chkPass(this.value);\" class=\"hide\" />
140 
								</td>
141 
							</tr>
142 
							<tr>
143 
								<td class=\"first_item\">$R_eval_pass</td>
144 
								<td>
145 
									<div id=\"scorebarBorder\">
146 
										<div id=\"score\">0%</div>
147 
										<div id=\"scorebar\">&nbsp;</div>
148 
									</div>
149 
									<div id=\"complexity\"></div>
150 
								</td>
151 
							</tr>
152 
							<tr>
153 
								<td colspan=\"2\" id=\"lien_pass\">$R_passwordmeter</td>
154 
							</tr>
155 
							<tr>
156 
								<td class=\"first_item\">$R_form_l4</td>
157 
								<td><input type=\"password\" name=\"newpasswd2\" value=\"\"></td>
158 
							</tr>
159 
						</table>
160 
					<input type=\"submit\" class=\"btn_form\" id=\"btn_pass\" value=\"$R_form_button_valid\">
161 
					<input type=\"button\" class=\"btn_form\" id=\"btn_retour\" value=\"$R_form_button_retour\" onclick=\"location.replace('http://alcasar');\">
162 
				</div>
509 richard 163 
			</div>
647 richard 164 
			<div id=\"info_pass\">
165 
						<table id=\"tablePwdStatus\" cellpadding=\"5\" cellspacing=\"1\" border=\"0\">
166 
					<tr>
167 
						<th colspan=\"2\">Additions</th>
168 
						<th class=\"txtCenter\">Type</th>
169 
						<th class=\"txtCenter\">Rate</th>
170 
						<th class=\"txtCenter\">Count</th>
171 
						<th class=\"txtCenter\">Bonus</th>
172 
					</tr>
173 
					<tr>
174 
						<td width=\"1%\"><div id=\"div_nLength\" class=\"fail\">&nbsp;</div></td>
175 
						<td width=\"94%\">Number of Characters</td>
176 
						<td width=\"1%\" class=\"txtCenter\">Flat</td>
177 
						<td width=\"1%\" class=\"txtCenter italic\">+(n*4)</td>
178 
						<td width=\"1%\"><div id=\"nLength\" class=\"box\">&nbsp;</div></td>
179 
						<td width=\"1%\"><div id=\"nLengthBonus\" class=\"boxPlus\">&nbsp;</div></td>
180 
					</tr>
181 
					<tr>
182 
						<td><div id=\"div_nAlphaUC\" class=\"fail\">&nbsp;</div></td>
183 
						<td>Uppercase Letters</td>
184 
						<td class=\"txtCenter\">Cond/Incr</td>
185 
						<td nowrap=\"nowrap\" class=\"txtCenter italic\">+((len-n)*2)</td>
186 
					   <td><div id=\"nAlphaUC\" class=\"box\">&nbsp;</div></td>
187 
						<td><div id=\"nAlphaUCBonus\" class=\"boxPlus\">&nbsp;</div></td>
188 
					</tr>
189 
					<tr>
190 
						<td><div id=\"div_nAlphaLC\" class=\"fail\">&nbsp;</div></td>
191 
						<td>Lowercase Letters</td>
192 
						<td class=\"txtCenter\">Cond/Incr</td>
193 
						<td class=\"txtCenter italic\">+((len-n)*2)</td>
194 
						<td><div id=\"nAlphaLC\" class=\"box\">&nbsp;</div></td>
195 
						<td><div id=\"nAlphaLCBonus\" class=\"boxPlus\">&nbsp;</div></td>
196 
					</tr>
197 
					<tr>
198 
						<td><div id=\"div_nNumber\" class=\"fail\">&nbsp;</div></td>
199 
						<td>Numbers</td>
200 
						<td class=\"txtCenter\">Cond</td>
201 
						<td class=\"txtCenter italic\">+(n*4)</td>
202 
						<td><div id=\"nNumber\" class=\"box\">&nbsp;</div></td>
203 
						<td><div id=\"nNumberBonus\" class=\"boxPlus\">&nbsp;</div></td>
204 
				   </tr>
205 
					<tr>
206 
						<td><div id=\"div_nSymbol\" class=\"fail\">&nbsp;</div></td>
207 
						<td>Symbols</td>
208 
						<td class=\"txtCenter\">Flat</td>
209 
						<td class=\"txtCenter italic\">+(n*6)</td>
210 
						<td><div id=\"nSymbol\" class=\"box\">&nbsp;</div></td>
211 
						<td><div id=\"nSymbolBonus\" class=\"boxPlus\">&nbsp;</div></td>
212 
				   </tr>
213 
					<tr>
214 
						<td><div id=\"div_nMidChar\" class=\"fail\">&nbsp;</div></td>
215 
						<td>Middle Numbers or Symbols</td>
216 
						<td class=\"txtCenter\">Flat</td>
217 
						<td class=\"txtCenter italic\">+(n*2)</td>
218 
						<td><div id=\"nMidChar\" class=\"box\">&nbsp;</div></td>
219 
						<td><div id=\"nMidCharBonus\" class=\"boxPlus\">&nbsp;</div></td>
220 
				   </tr>
221 
					<tr>
222 
						<td><div id=\"div_nRequirements\" class=\"fail\">&nbsp;</div></td>
223 
						<td>Requirements</td>
224 
						<td class=\"txtCenter\">Flat</td>
225 
						<td class=\"txtCenter italic\">+(n*2)</td>
226 
						<td><div id=\"nRequirements\" class=\"box\">&nbsp;</div></td>
227 
						<td><div id=\"nRequirementsBonus\" class=\"boxPlus\">&nbsp;</div></td>
228 
				   </tr>
229 
					<tr>
230 
						<th colspan=\"6\">Deductions</th>
231 
					</tr>
232 
					<tr>
233 
						<td width=\"1%\"><div id=\"div_nAlphasOnly\" class=\"pass\">&nbsp;</div></td>
234 
						<td width=\"94%\">Letters Only</td>
235 
						<td width=\"1%\" class=\"txtCenter\">Flat</td>
236 
						<td width=\"1%\" class=\"txtCenter italic\">-n</td>
237 
						<td width=\"1%\"><div id=\"nAlphasOnly\" class=\"box\">&nbsp;</div></td>
238 
						<td width=\"1%\"><div id=\"nAlphasOnlyBonus\" class=\"boxMinus\">&nbsp;</div></td>
239 
					</tr>
240 
					<tr>
241 
						<td><div id=\"div_nNumbersOnly\" class=\"pass\">&nbsp;</div></td>
242 
						<td>Numbers Only</td>
243 
						<td class=\"txtCenter\">Flat</td>
244 
						<td class=\"txtCenter italic\">-n</td>
245 
						<td><div id=\"nNumbersOnly\" class=\"box\">&nbsp;</div></td>
246 
						<td><div id=\"nNumbersOnlyBonus\" class=\"boxMinus\">&nbsp;</div></td>
247 
					</tr>
248 
					<tr>
249 
						<td><div id=\"div_nRepChar\" class=\"pass\">&nbsp;</div></td>
250 
						<td>Repeat Characters (Case Insensitive)</td>
251 
						<td class=\"txtCenter\">Comp</td>
252 
						<td nowrap=\"nowrap\" class=\"txtCenter italic\"> - </td>
253 
						<td><div id=\"nRepChar\" class=\"box\">&nbsp;</div></td>
254 
						<td><div id=\"nRepCharBonus\" class=\"boxMinus\">&nbsp;</div></td>
255 
					</tr>
256 
					<tr>
257 
						<td><div id=\"div_nConsecAlphaUC\" class=\"pass\">&nbsp;</div></td>
258 
						<td>Consecutive Uppercase Letters</td>
259 
						<td class=\"txtCenter\">Flat</td>
260 
						<td class=\"txtCenter italic\">-(n*2)</td>
261 
						<td><div id=\"nConsecAlphaUC\" class=\"box\">&nbsp;</div></td>
262 
						<td><div id=\"nConsecAlphaUCBonus\" class=\"boxMinus\">&nbsp;</div></td>
263 
					</tr>
264 
					<tr>
265 
						<td><div id=\"div_nConsecAlphaLC\" class=\"pass\">&nbsp;</div></td>
266 
						<td>Consecutive Lowercase Letters</td>
267 
						<td class=\"txtCenter\">Flat</td>
268 
						<td class=\"txtCenter italic\">-(n*2)</td>
269 
						<td><div id=\"nConsecAlphaLC\" class=\"box\">&nbsp;</div></td>
270 
						<td><div id=\"nConsecAlphaLCBonus\" class=\"boxMinus\">&nbsp;</div></td>
271 
					</tr>
272 
					<tr>
273 
						<td><div id=\"div_nConsecNumber\" class=\"pass\">&nbsp;</div></td>
274 
						<td>Consecutive Numbers</td>
275 
						<td class=\"txtCenter\">Flat</td>
276 
						<td class=\"txtCenter italic\">-(n*2)</td>
277 
						<td><div id=\"nConsecNumber\" class=\"box\">&nbsp;</div></td>
278 
						<td><div id=\"nConsecNumberBonus\" class=\"boxMinus\">&nbsp;</div></td>
279 
					</tr>
280 
					<tr>
281 
						<td><div id=\"div_nSeqAlpha\" class=\"pass\">&nbsp;</div></td>
282 
						<td>Sequential Letters (3+)</td>
283 
						<td class=\"txtCenter\">Flat</td>
284 
						<td class=\"txtCenter italic\">-(n*3)</td>
285 
						<td><div id=\"nSeqAlpha\" class=\"box\">&nbsp;</div></td>
286 
						<td><div id=\"nSeqAlphaBonus\" class=\"boxMinus\">&nbsp;</div></td>
287 
					</tr>
288 
					<tr>
289 
						<td><div id=\"div_nSeqNumber\" class=\"pass\">&nbsp;</div></td>
290 
						<td>Sequential Numbers (3+)</td>
291 
						<td class=\"txtCenter\">Flat</td>
292 
						<td class=\"txtCenter italic\">-(n*3)</td>
293 
						<td><div id=\"nSeqNumber\" class=\"box\">&nbsp;</div></td>
294 
						<td><div id=\"nSeqNumberBonus\" class=\"boxMinus\">&nbsp;</div></td>
295 
					</tr>
296 
					<tr>
297 
						<td><div id=\"div_nSeqSymbol\" class=\"pass\">&nbsp;</div></td>
298 
						<td>Sequential Symbols (3+)</td>
299 
						<td class=\"txtCenter\">Flat</td>
300 
						<td class=\"txtCenter italic\">-(n*3)</td>
301 
						<td><div id=\"nSeqSymbol\" class=\"box\">&nbsp;</div></td>
302 
						<td><div id=\"nSeqSymbolBonus\" class=\"boxMinus\">&nbsp;</div></td>
303 
					</tr>
304 
					<tr>
305 
						<th colspan=\"6\">Legend</th>
306 
					</tr>
307 
					<tr>
308 
						<td colspan=\"6\">
309 
							<ul id=\"listLegend\">
310 
								<li><div class=\"exceed imgLegend\">&nbsp;</div> <span class=\"bold\">Exceptional:</span> Exceeds minimum standards. Additional bonuses are applied.</li>
311 
								<li><div class=\"pass imgLegend\">&nbsp;</div> <span class=\"bold\">Sufficient:</span> Meets minimum standards. Additional bonuses are applied.</li>
312 
								<li><div class=\"warn imgLegend\">&nbsp;</div> <span class=\"bold\">Warning:</span> Advisory against employing bad practices. Overall score is reduced.</li>
313 
								<li><div class=\"fail imgLegend\">&nbsp;</div> <span class=\"bold\">Failure:</span> Does not meet the minimum standards. Overall score is reduced.</li>
314 
							</ul>
315 
						</td>
316 
					</tr>
317 
				</table>
318 
			   <table id=\"tablePwdNotes\" cellpadding=\"5\" cellspacing=\"1\" border=\"0\">
319 
					<tr>
320 
						<th>Quick Footnotes</th>
321 
					</tr>
322 
					<tr>
323 
						<td>
324 
							&bull; <strong>Flat:</strong> Rates that add/remove in non-changing increments.<br />
325 
							&bull; <strong>Incr:</strong> Rates that add/remove in adjusting increments.<br />
326 
							&bull; <strong>Cond:</strong> Rates that add/remove depending on additional factors.<br />
327 
							&bull; <strong>Comp:</strong> Rates that are too complex to summarize. See source code for details.<br />
328 
							&bull; <strong>n:</strong> Refers to the total number of occurrences.<br />
329 
							&bull; <strong>len:</strong> Refers to the total password length.<br />
330 
							&bull; Additional bonus scores are given for increased character variety.<br />
331 
							&bull; Final score is a cumulative result of all bonuses minus deductions.<br />
332 
							&bull; Final score is capped with a minimum of 0 and a maximum of 100.<br />
333 
							&bull; Score and Complexity ratings are not conditional on meeting minimum requirements.<br />
334 
						</td>
335 
					</tr>
336 
					<tr>
337 
						<th>DISCLAIMER</th>
338 
					</tr>
339 
					<tr>
340 
						<td>
341 
							<p>This application is designed to assess the strength of password strings.  The instantaneous visual feedback provides the user a means to improve the strength of their passwords, with a hard focus on breaking the typical bad habits of faulty password formulation.  Since no official weighting system exists, we created our own formulas to assess the overall strength of a given password.  Please note, that this application does not utilize the typical \"days-to-crack\" approach for strength determination.  We have found that particular system to be severely lacking and unreliable for real-world scenarios.  This application is neither perfect nor foolproof, and should only be utilized as a loose guide in determining methods for improving the password creation process. </p>
342 
						</td>
343 
					</tr>
344 
				</table>
509 richard 345 
";
345 richard 346 
 
347 
if (is_file("sql/drivers/$config[sql_type]/functions.php"))
348 
	include_once("sql/drivers/$config[sql_type]/functions.php");
349 
else{
350 
	echo "<b>Could not include SQL library</b><br>\n";
351 
	exit();
352 
}
353 
if (isset($action)){
354 
	if ($action == 'checkpass'){
355 
	$link = @da_sql_pconnect($config);
647 richard 356 
		if ($link){
357 
			$res = @da_sql_query($link,$config,
358 
				"SELECT attribute,value FROM $config[sql_check_table] WHERE username = '$login'
359 
				AND attribute = '$config[sql_password_attribute]';");
360 
			if ($res){
361 
				$row = @da_sql_fetch_array($res,$config);
362 
				if (is_file("crypt/$config[general_encryption_method].php")){
363 
					include("crypt/$config[general_encryption_method].php");
364 
					$enc_passwd = $row['value'];
365 
					$passwd = da_encrypt($passwd,$enc_passwd);
366 
					$newpasswd = da_encrypt($newpasswd,$enc_passwd);
367 
					$newpasswd2 = da_encrypt($newpasswd2,$enc_passwd);
368 
					if (($passwd == $enc_passwd) and ($newpasswd == $newpasswd2)){
369 
						$msg = '<font color=blue><b>'.$R_form_result1.'</b></font>';
370 
						$res2 = @da_sql_query($link,$config,
371 
							"UPDATE $config[sql_check_table] set value='$newpasswd' WHERE username = '$login'
372 
							AND attribute = '$config[sql_password_attribute]';");}
373 
					else
374 
						$msg = '<font color=red><b>'.$R_form_result2.'</b></font>';
375 
				}
345 richard 376 
				else
647 richard 377 
					echo "<b>Could not open encryption library file</b><br>\n";
345 richard 378 
			}
379 
		}
647 richard 380 
		echo "<span align=center>$msg</span>\n";
345 richard 381 
	}
382 
}
383 
?>
384 
</body>
385 
</html>
2003 raphael.pi 386