Subversion Repositories ALCASAR

Rev

Rev 2163 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
345 richard 1
<?php
2111 richard 2
# change user password on ALACASAR NAC
345 richard 3
# Copyright (C) 2003, 2004 Mondru AB.
2111 richard 4
# Copyright (C) 2008-20017 ANGEL95 & REXY
345 richard 5
 
6
require('/etc/freeradius-web/config.php');
7
 
2163 tom.houday 8
$current_page = htmlspecialchars($_SERVER['PHP_SELF']);
345 richard 9
 
10
# Choice of language
912 richard 11
$Language = 'en';
345 richard 12
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
13
  $Langue = explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
14
  $Language = strtolower(substr(chop($Langue[0]),0,2)); }
15
if($Language == 'es'){
16
$R_title = "User password change";
17
$R_form_l1 = "User";
18
$R_form_l2 = "Old password";
19
$R_form_l3 = "New password";
20
$R_form_l4 = "New password (confirmation)";
647 richard 21
$R_eval_pass = "Score :";
688 richard 22
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
647 richard 23
$R_form_button_valid = "Modify";
24
$R_form_button_retour = "Cancel";
345 richard 25
$R_form_result1 = "Your password has been successfuly changed";
26
$R_form_result2 = "Error when trying to change password";
509 richard 27
$R_retour = "ALCASAR home page";}
912 richard 28
else if ($Language == 'pt'){
29
$R_title = "Alteração de senha do usuário";
30
$R_form_l1 = "Usuário";
31
$R_form_l2 = "Senha antiga";
32
$R_form_l3 = "Nova senha";
33
$R_form_l4 = "Nova senha (confirmação)";
34
$R_eval_pass = "Resultado:";
688 richard 35
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
912 richard 36
$R_form_button_valid = "Modificar";
37
$R_form_button_retour = "Cancelar";
38
$R_form_result1 = "Sua senha foi alterada com sucesso";
39
$R_form_result2 = "Erro ao tentar alterar a senha";
40
$R_retour = "Home page Alcasar";}
41
else if($Language == 'de'){
345 richard 42
$R_title = "User password change";
43
$R_form_l1 = "User";
44
$R_form_l2 = "Old password";
45
$R_form_l3 = "New password";
46
$R_form_l4 = "New password (confirmation)";
647 richard 47
$R_eval_pass = "Score :";
688 richard 48
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
647 richard 49
$R_form_button_valid = "Modify";
50
$R_form_button_retour = "Cancel";
345 richard 51
$R_form_result1 = "Your password has been successfuly changed";
52
$R_form_result2 = "Error when trying to change password";
509 richard 53
$R_retour = "ALCASAR home page";}
912 richard 54
else if($Language == 'nl'){
345 richard 55
$R_title = "User password change";
56
$R_form_l1 = "User";
57
$R_form_l2 = "Old password";
58
$R_form_l3 = "New password";
59
$R_form_l4 = "New password (confirmation)";
647 richard 60
$R_eval_pass = "Score :";
688 richard 61
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
647 richard 62
$R_form_button_valid = "Modify";
63
$R_form_button_retour = "Cancel";
345 richard 64
$R_form_result1 = "Your password has been successfuly changed";
65
$R_form_result2 = "Error when trying to change password";
509 richard 66
$R_retour = "ALCASAR home page";}
2083 richard 67
else if($Language == 'zh'){
68
$R_title = "修改用户密码";
69
$R_form_l1 = "用户";
70
$R_form_l2 = "旧密码";
71
$R_form_l3 = "新密码";
72
$R_form_l4 = "新密码(确认)";
73
$R_eval_pass = "";
74
$R_passwordmeter = "技术支持 'Shibbo Password Analyser'</a>";
75
$R_form_button_valid = "修改";
76
$R_form_button_retour = "取消";
77
$R_form_result1 = "您的密码已成功修改";
78
$R_form_result2 = "修改密码出错";
79
$R_retour = "返回首页";}
2111 richard 80
else if ($Language == 'ar'){
81
$R_title = "تغيير كلمة المرور للمستخدم";
82
$R_form_l1 = "المستعمل";
83
$R_form_l2 = "كلمه السر القديمة";
84
$R_form_l3 = "كلمة السر الجديدة";
85
$R_form_l4 = "كلمة السر الجديدة (أكد)";
86
$R_eval_pass = "";
87
$R_passwordmeter = "مشغل بواسطة 'Shibbo Password Analyser'" . "</a>";
88
$R_form_button_valid = "تغيير";
89
$R_form_button_retour = "إلغاء";
90
$R_form_result1 = "تم تغيير الرقم السري بنجاح";
91
$R_form_result2 = "خطأ عند محاولة تغيير كلمة المرور";
92
$R_retour = "رجوع إلى الصفحة الرئيسية ALCASAR";	
93
}
912 richard 94
else if($Language == 'fr'){
345 richard 95
$R_title = "Changement de mot de passe utilisateur";
647 richard 96
$R_form_l1 = "Utilisateur :";
97
$R_form_l2 = "Ancien mot de passe :";
98
$R_form_l3 = "Nouveau mot de passe :";
99
$R_form_l4 = "Nouveau mot de passe (confirmation) :";
100
$R_eval_pass = "";
688 richard 101
$R_passwordmeter = "Propulsé par 'Shibbo Password Analyser'</a>";
647 richard 102
$R_form_button_valid = "Modifier";
103
$R_form_button_retour = "Annuler";
345 richard 104
$R_form_result1 = "Votre mot de passe a &eacute;t&eacute; modifi&eacute; avec succ&egrave;s";
105
$R_form_result2 = "Erreur de changement de mot de passe";
912 richard 106
$R_retour = "Retour &agrave; la page d'accueil ALCASAR";}
107
else {
108
$R_title = "User password change";
109
$R_form_l1 = "User";
110
$R_form_l2 = "Old password";
111
$R_form_l3 = "New password";
112
$R_form_l4 = "New password (confirmation)";
113
$R_eval_pass = "Score :";
114
$R_passwordmeter = "Powered by 'Shibbo Password Analyser'</a>";
115
$R_form_button_valid = "Modify";
116
$R_form_button_retour = "Cancel";
117
$R_form_result1 = "Your password has been successfuly changed";
118
$R_form_result2 = "Error when trying to change password";
119
$R_retour = "ALCASAR home page";
345 richard 120
}
121
echo "
2158 richard 122
<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\">
345 richard 123
<html>
509 richard 124
	<head>
125
		<title>$R_title</title>
126
		<meta http-equiv=\"Cache-control\" content=\"no-cache\">
127
		<meta http-equiv=\"Pragma\" content=\"no-cache\">
128
		<link rel=\"stylesheet\" href=\"../css/pass.css\" type=\"text/css\">
2003 raphael.pi 129
		<link rel=\"stylesheet\" href=\"../css/style_intercept.css\" type=\"text/css\">
647 richard 130
		<link type=\"text/css\" href=\"../css/pwdmeter.css\" media=\"screen\" rel=\"stylesheet\" />
131
		<!--[if lt IE 7]>
132
			<link type=\"text/css\" href=\"../css/ie.css\" media=\"screen\" rel=\"stylesheet\" />
133
		<![endif]-->
134
		<script type=\"text/javascript\" src=\"js/pwdmeter.js\" language=\"javascript\"></script>	
2158 richard 135
		<script type=\"text/javascript\">
136
			function valoriserDiv5(param){
137
			document.getElementById(\"box_info\").innerHTML = param.innerHTML;
138
			}
139
		</script>
509 richard 140
	</head>
2003 raphael.pi 141
	<body onload=\"valoriserDiv5(text_conn);\">
142
				<div id=\"cadre_titre\" class=\"titre_controle\">
143
					<p id=\"acces_controle\" class=\"titre_controle\">$R_title</p>			
144
					<div id=\"boite_logo\">
145
						<img src=\"/images/organisme.png\">
146
					</div>
647 richard 147
				</div>
2003 raphael.pi 148
				<div id=\"contenu_acces\">
647 richard 149
					<form name=\"master\" action=\"$current_page\" method=\"post\">
150
					<input type=hidden name=action value=checkpass>
2164 richard 151
						<table id=\"champs_pass\" border=\"0\">
647 richard 152
							<tr>
153
								<td class=\"first_item\">$R_form_l1</td>
154
								<td><input type=\"text\" name=\"login\" value=\"\" label=\"test\"></td>
155
							</tr>	
156
							<tr>
157
								<td class=\"first_item\">$R_form_l2</td>
158
								<td><input type=\"password\" name=\"passwd\" value=\"\"></td>
159
							</tr>
160
							<tr>
161
								<td class=\"first_item\">$R_form_l3</td>
162
								<td>
163
									<input type=\"password\" name=\"newpasswd\" id=\"passwordPwd\" value=\"\" autocomplete=\"off\" onkeyup=\"chkPass(this.value);\" />
164
									<input type=\"text\" id=\"passwordTxt\" name=\"passwordTxt\" autocomplete=\"off\" onkeyup=\"chkPass(this.value);\" class=\"hide\" />
165
								</td>
166
							</tr>
167
							<tr>
168
								<td class=\"first_item\">$R_eval_pass</td>
169
								<td>
170
									<div id=\"scorebarBorder\">
171
										<div id=\"score\">0%</div>
172
										<div id=\"scorebar\">&nbsp;</div>
173
									</div>
174
									<div id=\"complexity\"></div>
175
								</td>
176
							</tr>
177
							<tr>
178
								<td colspan=\"2\" id=\"lien_pass\">$R_passwordmeter</td>
179
							</tr>
180
							<tr>
181
								<td class=\"first_item\">$R_form_l4</td>
182
								<td><input type=\"password\" name=\"newpasswd2\" value=\"\"></td>
183
							</tr>
2158 richard 184
							<tr>
185
								<td colspan=\"2\" id=\"lien_pass\">
186
								<input type=\"submit\" class=\"btn_form\" id=\"btn_pass\" value=\"$R_form_button_valid\">
187
								<input type=\"button\" class=\"btn_form\" id=\"btn_retour\" value=\"$R_form_button_retour\" onclick=\"location.replace('http://alcasar');\">
188
								</td>
189
							</tr>
647 richard 190
						</table>
191
				</div>
509 richard 192
			</div>
647 richard 193
			<div id=\"info_pass\">
2158 richard 194
				<table id=\"tablePwdStatus\" cellpadding=\"5\" cellspacing=\"1\" border=\"0\">
647 richard 195
					<tr>
196
						<th colspan=\"2\">Additions</th>
197
						<th class=\"txtCenter\">Type</th>
198
						<th class=\"txtCenter\">Rate</th>
199
						<th class=\"txtCenter\">Count</th>
200
						<th class=\"txtCenter\">Bonus</th>
201
					</tr>
202
					<tr>
203
						<td width=\"1%\"><div id=\"div_nLength\" class=\"fail\">&nbsp;</div></td>
204
						<td width=\"94%\">Number of Characters</td>
205
						<td width=\"1%\" class=\"txtCenter\">Flat</td>
206
						<td width=\"1%\" class=\"txtCenter italic\">+(n*4)</td>
207
						<td width=\"1%\"><div id=\"nLength\" class=\"box\">&nbsp;</div></td>
208
						<td width=\"1%\"><div id=\"nLengthBonus\" class=\"boxPlus\">&nbsp;</div></td>
209
					</tr>	
210
					<tr>
211
						<td><div id=\"div_nAlphaUC\" class=\"fail\">&nbsp;</div></td>
212
						<td>Uppercase Letters</td>
213
						<td class=\"txtCenter\">Cond/Incr</td>
214
						<td nowrap=\"nowrap\" class=\"txtCenter italic\">+((len-n)*2)</td>
215
					   <td><div id=\"nAlphaUC\" class=\"box\">&nbsp;</div></td>
216
						<td><div id=\"nAlphaUCBonus\" class=\"boxPlus\">&nbsp;</div></td>
217
					</tr>	
218
					<tr>
219
						<td><div id=\"div_nAlphaLC\" class=\"fail\">&nbsp;</div></td>
220
						<td>Lowercase Letters</td>
221
						<td class=\"txtCenter\">Cond/Incr</td>
222
						<td class=\"txtCenter italic\">+((len-n)*2)</td>
223
						<td><div id=\"nAlphaLC\" class=\"box\">&nbsp;</div></td>
224
						<td><div id=\"nAlphaLCBonus\" class=\"boxPlus\">&nbsp;</div></td>
225
					</tr>
226
					<tr>
227
						<td><div id=\"div_nNumber\" class=\"fail\">&nbsp;</div></td>
228
						<td>Numbers</td>
229
						<td class=\"txtCenter\">Cond</td>
230
						<td class=\"txtCenter italic\">+(n*4)</td>
231
						<td><div id=\"nNumber\" class=\"box\">&nbsp;</div></td>
232
						<td><div id=\"nNumberBonus\" class=\"boxPlus\">&nbsp;</div></td>
233
				   </tr>
234
					<tr>
235
						<td><div id=\"div_nSymbol\" class=\"fail\">&nbsp;</div></td>
236
						<td>Symbols</td>
237
						<td class=\"txtCenter\">Flat</td>
238
						<td class=\"txtCenter italic\">+(n*6)</td>
239
						<td><div id=\"nSymbol\" class=\"box\">&nbsp;</div></td>
240
						<td><div id=\"nSymbolBonus\" class=\"boxPlus\">&nbsp;</div></td>
241
				   </tr>
242
					<tr>
243
						<td><div id=\"div_nMidChar\" class=\"fail\">&nbsp;</div></td>
244
						<td>Middle Numbers or Symbols</td>
245
						<td class=\"txtCenter\">Flat</td>
246
						<td class=\"txtCenter italic\">+(n*2)</td>
247
						<td><div id=\"nMidChar\" class=\"box\">&nbsp;</div></td>
248
						<td><div id=\"nMidCharBonus\" class=\"boxPlus\">&nbsp;</div></td>
249
				   </tr>
250
					<tr>
251
						<td><div id=\"div_nRequirements\" class=\"fail\">&nbsp;</div></td>
252
						<td>Requirements</td>
253
						<td class=\"txtCenter\">Flat</td>
254
						<td class=\"txtCenter italic\">+(n*2)</td>
255
						<td><div id=\"nRequirements\" class=\"box\">&nbsp;</div></td>
256
						<td><div id=\"nRequirementsBonus\" class=\"boxPlus\">&nbsp;</div></td>
257
				   </tr>
258
					<tr>
259
						<th colspan=\"6\">Deductions</th>
260
					</tr>
261
					<tr>
262
						<td width=\"1%\"><div id=\"div_nAlphasOnly\" class=\"pass\">&nbsp;</div></td>
263
						<td width=\"94%\">Letters Only</td>
264
						<td width=\"1%\" class=\"txtCenter\">Flat</td>
265
						<td width=\"1%\" class=\"txtCenter italic\">-n</td>
266
						<td width=\"1%\"><div id=\"nAlphasOnly\" class=\"box\">&nbsp;</div></td>
267
						<td width=\"1%\"><div id=\"nAlphasOnlyBonus\" class=\"boxMinus\">&nbsp;</div></td>
268
					</tr>	
269
					<tr>
270
						<td><div id=\"div_nNumbersOnly\" class=\"pass\">&nbsp;</div></td>
271
						<td>Numbers Only</td>
272
						<td class=\"txtCenter\">Flat</td>
273
						<td class=\"txtCenter italic\">-n</td>
274
						<td><div id=\"nNumbersOnly\" class=\"box\">&nbsp;</div></td>
275
						<td><div id=\"nNumbersOnlyBonus\" class=\"boxMinus\">&nbsp;</div></td>
276
					</tr>	
277
					<tr>
278
						<td><div id=\"div_nRepChar\" class=\"pass\">&nbsp;</div></td>
279
						<td>Repeat Characters (Case Insensitive)</td>
280
						<td class=\"txtCenter\">Comp</td>
281
						<td nowrap=\"nowrap\" class=\"txtCenter italic\"> - </td>
282
						<td><div id=\"nRepChar\" class=\"box\">&nbsp;</div></td>
283
						<td><div id=\"nRepCharBonus\" class=\"boxMinus\">&nbsp;</div></td>
284
					</tr>	
285
					<tr>
286
						<td><div id=\"div_nConsecAlphaUC\" class=\"pass\">&nbsp;</div></td>
287
						<td>Consecutive Uppercase Letters</td>
288
						<td class=\"txtCenter\">Flat</td>
289
						<td class=\"txtCenter italic\">-(n*2)</td>
290
						<td><div id=\"nConsecAlphaUC\" class=\"box\">&nbsp;</div></td>
291
						<td><div id=\"nConsecAlphaUCBonus\" class=\"boxMinus\">&nbsp;</div></td>
292
					</tr>	
293
					<tr>
294
						<td><div id=\"div_nConsecAlphaLC\" class=\"pass\">&nbsp;</div></td>
295
						<td>Consecutive Lowercase Letters</td>
296
						<td class=\"txtCenter\">Flat</td>
297
						<td class=\"txtCenter italic\">-(n*2)</td>
298
						<td><div id=\"nConsecAlphaLC\" class=\"box\">&nbsp;</div></td>
299
						<td><div id=\"nConsecAlphaLCBonus\" class=\"boxMinus\">&nbsp;</div></td>
300
					</tr>	
301
					<tr>
302
						<td><div id=\"div_nConsecNumber\" class=\"pass\">&nbsp;</div></td>
303
						<td>Consecutive Numbers</td>
304
						<td class=\"txtCenter\">Flat</td>
305
						<td class=\"txtCenter italic\">-(n*2)</td>
306
						<td><div id=\"nConsecNumber\" class=\"box\">&nbsp;</div></td>
307
						<td><div id=\"nConsecNumberBonus\" class=\"boxMinus\">&nbsp;</div></td>
308
					</tr>	
309
					<tr>
310
						<td><div id=\"div_nSeqAlpha\" class=\"pass\">&nbsp;</div></td>
311
						<td>Sequential Letters (3+)</td>
312
						<td class=\"txtCenter\">Flat</td>
313
						<td class=\"txtCenter italic\">-(n*3)</td>
314
						<td><div id=\"nSeqAlpha\" class=\"box\">&nbsp;</div></td>
315
						<td><div id=\"nSeqAlphaBonus\" class=\"boxMinus\">&nbsp;</div></td>
316
					</tr>	
317
					<tr>
318
						<td><div id=\"div_nSeqNumber\" class=\"pass\">&nbsp;</div></td>
319
						<td>Sequential Numbers (3+)</td>
320
						<td class=\"txtCenter\">Flat</td>
321
						<td class=\"txtCenter italic\">-(n*3)</td>
322
						<td><div id=\"nSeqNumber\" class=\"box\">&nbsp;</div></td>
323
						<td><div id=\"nSeqNumberBonus\" class=\"boxMinus\">&nbsp;</div></td>
324
					</tr>	
325
					<tr>
326
						<td><div id=\"div_nSeqSymbol\" class=\"pass\">&nbsp;</div></td>
327
						<td>Sequential Symbols (3+)</td>
328
						<td class=\"txtCenter\">Flat</td>
329
						<td class=\"txtCenter italic\">-(n*3)</td>
330
						<td><div id=\"nSeqSymbol\" class=\"box\">&nbsp;</div></td>
331
						<td><div id=\"nSeqSymbolBonus\" class=\"boxMinus\">&nbsp;</div></td>
332
					</tr>	
333
					<tr>
334
						<th colspan=\"6\">Legend</th>
335
					</tr>
336
					<tr>
337
						<td colspan=\"6\">
338
							<ul id=\"listLegend\">
339
								<li><div class=\"exceed imgLegend\">&nbsp;</div> <span class=\"bold\">Exceptional:</span> Exceeds minimum standards. Additional bonuses are applied.</li>
340
								<li><div class=\"pass imgLegend\">&nbsp;</div> <span class=\"bold\">Sufficient:</span> Meets minimum standards. Additional bonuses are applied.</li>
341
								<li><div class=\"warn imgLegend\">&nbsp;</div> <span class=\"bold\">Warning:</span> Advisory against employing bad practices. Overall score is reduced.</li>
342
								<li><div class=\"fail imgLegend\">&nbsp;</div> <span class=\"bold\">Failure:</span> Does not meet the minimum standards. Overall score is reduced.</li>
343
							</ul>
344
						</td>
345
					</tr>
346
				</table>
347
			   <table id=\"tablePwdNotes\" cellpadding=\"5\" cellspacing=\"1\" border=\"0\">
348
					<tr>
349
						<th>Quick Footnotes</th>
350
					</tr>
351
					<tr>
352
						<td>
353
							&bull; <strong>Flat:</strong> Rates that add/remove in non-changing increments.<br />
354
							&bull; <strong>Incr:</strong> Rates that add/remove in adjusting increments.<br />
355
							&bull; <strong>Cond:</strong> Rates that add/remove depending on additional factors.<br />
356
							&bull; <strong>Comp:</strong> Rates that are too complex to summarize. See source code for details.<br />
357
							&bull; <strong>n:</strong> Refers to the total number of occurrences.<br />
358
							&bull; <strong>len:</strong> Refers to the total password length.<br />
359
							&bull; Additional bonus scores are given for increased character variety.<br />
360
							&bull; Final score is a cumulative result of all bonuses minus deductions.<br />
361
							&bull; Final score is capped with a minimum of 0 and a maximum of 100.<br />
362
							&bull; Score and Complexity ratings are not conditional on meeting minimum requirements.<br />
363
						</td>
364
					</tr>
365
				</table>
2158 richard 366
			</div>
509 richard 367
";
345 richard 368
if (isset($action)){
369
	if ($action == 'checkpass'){
2164 richard 370
		if (is_file("../acc/manager/lib/sql/drivers/$config[sql_type]/functions.php"))
371
			include_once("../acc/manager/lib/sql/drivers/$config[sql_type]/functions.php");
2160 tom.houday 372
		else{
373
			echo "<b>Could not include SQL library</b><br>\n";
374
			exit();
375
		}
345 richard 376
	$link = @da_sql_pconnect($config);
647 richard 377
		if ($link){
378
			$res = @da_sql_query($link,$config,
379
				"SELECT attribute,value FROM $config[sql_check_table] WHERE username = '$login'
380
				AND attribute = '$config[sql_password_attribute]';");
381
			if ($res){
382
				$row = @da_sql_fetch_array($res,$config);
383
				if (is_file("crypt/$config[general_encryption_method].php")){
384
					include("crypt/$config[general_encryption_method].php");
385
					$enc_passwd = $row['value'];
386
					$passwd = da_encrypt($passwd,$enc_passwd);
387
					$newpasswd = da_encrypt($newpasswd,$enc_passwd);
388
					$newpasswd2 = da_encrypt($newpasswd2,$enc_passwd);
389
					if (($passwd == $enc_passwd) and ($newpasswd == $newpasswd2)){
390
						$msg = '<font color=blue><b>'.$R_form_result1.'</b></font>';
391
						$res2 = @da_sql_query($link,$config,
392
							"UPDATE $config[sql_check_table] set value='$newpasswd' WHERE username = '$login'
393
							AND attribute = '$config[sql_password_attribute]';");}
394
					else
395
						$msg = '<font color=red><b>'.$R_form_result2.'</b></font>';
396
				}
345 richard 397
				else
647 richard 398
					echo "<b>Could not open encryption library file</b><br>\n";
345 richard 399
			}
400
		}
647 richard 401
		echo "<span align=center>$msg</span>\n";
345 richard 402
	}
403
}
404
?>
405
</body>
406
</html>
2003 raphael.pi 407