login.php 9.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267
  1. <!DOCTYPE HTML>
  2. <head>
  3. <meta charset="UTF-8">
  4. <meta name="viewport" content="width=device-width, initial-scale=0.7, shrink-to-fit=no">
  5. <title>ArOZ Onlineβ User Authentication</title>
  6. <link rel="stylesheet" href="script/tocas/tocas.css">
  7. <script src="script/paperjs/paper-full.min.js"></script>
  8. <script src="script/tocas/tocas.js"></script>
  9. <script src="script/jquery.min.js"></script>
  10. <?php
  11. //This is a script for checking config files as the standard checking method requires user to be authed first.
  12. if (file_exists("SystemAOB/functions/personalization/sysconf/login.config")){
  13. $settings = json_decode(file_get_contents("SystemAOB/functions/personalization/sysconf/login.config"),true);
  14. $bgi = $settings["background-image"][3];
  15. $ipdebug = $settings["enable-ipdebug"][3] == "true";
  16. $themeColor = $settings["theme-color"][3];
  17. $titleImg = $settings["title-image"][3];
  18. }else{
  19. $bgi = "img/background3.png";
  20. $ipdebug = true;
  21. $themeColor = "#007f78";
  22. $titleImg = "img/auth_icon.png";
  23. }
  24. ?>
  25. <style>
  26. @media only screen and (max-height: 1000px) {
  27. .leftPictureFrame {
  28. height:auto !important;
  29. }
  30. }
  31. .leftPictureFrame{
  32. position:fixed;
  33. top:0px;
  34. left:0px;
  35. min-width:calc(100% - 500px);
  36. min-height:100%;
  37. background-color:#faf7eb;
  38. background-image:url("<?php echo $bgi; ?>");
  39. -webkit-background-size: cover;
  40. -moz-background-size: cover;
  41. -o-background-size: cover;
  42. background-size: cover;
  43. background-repeat: no-repeat, no-repeat;
  44. background-position:bottom left;
  45. }
  46. .rightLoginFrame{
  47. position:fixed;
  48. top:0;
  49. right:0;
  50. height:100%;
  51. width:500px;
  52. background-color:white;
  53. z-index:100%;
  54. padding-left: 50px;
  55. padding-right: 30px;
  56. }
  57. .fullHeightImage{
  58. height:100% !important;
  59. position:relative;
  60. left:-20px;
  61. }
  62. .bottombar{
  63. position:absolute;
  64. bottom:0;
  65. left:0;
  66. padding-left: 20px;
  67. width:100%;
  68. }
  69. #animationFrame{
  70. position:absolute;
  71. bottom:0px;
  72. width:100%;
  73. }
  74. #preload-01 { background: url(http://img/background2.jpg) no-repeat -9999px -9999px; }
  75. </style>
  76. </head>
  77. <body>
  78. <img id="mascot" src="img/login_mascot.png" style="display:none;"></img>
  79. <div class="leftPictureFrame">
  80. </div>
  81. <div id="loginInterface" class="rightLoginFrame">
  82. <br><br><br>
  83. <img class="ts medium image" src="<?php echo $titleImg;?>">
  84. <br><br>
  85. <p><i class="privacy icon"></i>Sign in with your ArOZ Online username and password</p>
  86. <?php //print_r($_COOKIE); //Debug only
  87. $autoLogin = true;
  88. ?>
  89. <br>
  90. <div class="ts fluid input textbox">
  91. <input id="username" type="text" placeholder="Username" style="border-radius: 0px !important;" value="<?php
  92. if (isset($_COOKIE['username']) && $_COOKIE['username'] != ""){
  93. echo $_COOKIE['username'];
  94. }else{
  95. $autoLogin = false;
  96. }
  97. ?>">
  98. </div>
  99. <br><br>
  100. <div class="ts fluid input textbox">
  101. <input id="password" type="password" placeholder="Password" style="border-radius: 0px !important;" value="<?php
  102. if (isset($_COOKIE['password']) && $_COOKIE['password'] != ""){
  103. echo $_COOKIE['password'];
  104. }else{
  105. $autoLogin = false;
  106. }
  107. ?>">
  108. </div>
  109. <br><br>
  110. <div class="ts checkbox">
  111. <?php
  112. //echo ($autoLogin ? "true" : "false");
  113. if ($autoLogin){
  114. echo '<input id="rmbme" name="rememberMe" type="checkbox" checked>';
  115. }else{
  116. echo '<input id="rmbme" name="rememberMe" type="checkbox">';
  117. }
  118. ?>
  119. <label for="rmbme">Keep Me logged In</label>
  120. </div><br><br>
  121. <div id="errmsg" style="color:<?php echo $themeColor; ?>;"></div>
  122. <br>
  123. <button class="ts primary button" style="background-color:<?php echo $themeColor; ?>;border-width: 0px;" onClick="postLogin();">Sign In</button>
  124. <br><br>
  125. <a class="ts primary button" style="background-color:<?php echo $themeColor; ?>;border-width: 0px;" href="https://adfs.alanyeung.co/adfs/oauth2/authorize?client_id=c5c68c24-153c-4bf5-90e7-7552baea7f39&redirect_uri=https%3A%2F%2Faroz.alanyeung.co%2FAOB%2Foauth.php&scope=openid&response_type=code&response_mode=form_post&nonce=tacv8wxjk5">Sign in via ADFS</a>
  126. <a class="ts primary button" style="background-color:<?php echo $themeColor; ?>;border-width: 0px;" href="https://github.com/login/oauth/authorize?client_id=8757b82f0e4c52d34ec8&redirect_uri=https://aroz.alanyeung.co/AOB/oauthgithub.php">Sign in via GitHub</a>
  127. <?php
  128. $template = '<div class="ts outlined message">
  129. <div id="logoutmsg" style="color:#3fb7e2;"><i class="log out icon"></i>You have been logged out.</div>
  130. </div>';
  131. if (isset($_GET['logout'])){
  132. echo $template;
  133. }
  134. ?>
  135. <div class="bottombar">
  136. © ArOZ Online Project 2019 feat. <a href="http://imuslab.com/" target="_blacnk">IMUS Laboratory</a><br>
  137. <div style="display:inline;font-size:80%;"><?php
  138. if ($ipdebug){
  139. echo "<i class='disk outline icon'></i> " . $_SERVER['SERVER_NAME'] . ' ⇄ <i class="laptop icon"></i>' . $_SERVER['REMOTE_ADDR'];
  140. }
  141. ?></div>
  142. <br><br>
  143. </div>
  144. </div>
  145. <script>
  146. var session_login = <?php echo ($autoLogin)? "true" : "false"; ?>;
  147. window.mobilecheck = function() {
  148. var check = false;
  149. (function(a){if(/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows ce|xda|xiino/i.test(a)||/1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i.test(a.substr(0,4))) check = true;})(navigator.userAgent||navigator.vendor||window.opera);
  150. return check;
  151. };
  152. if (window.mobilecheck() == true){
  153. $("#loginInterface").css("width","100%");
  154. }
  155. $(document).ready(function(){
  156. if (session_login){
  157. postLogin();
  158. }
  159. });
  160. function postLogin(){
  161. $.ajax({
  162. type: "POST",
  163. url: "auth.php",
  164. data: {username:$("#username").val(),apwd:$("#password").val(),rmbm:$("#rmbme").val()}
  165. }).done(function( data ){
  166. console.log(data);
  167. if (data.includes("ERROR")){
  168. if (data.includes("Username not find")){
  169. $("#username").parent().addClass("error");
  170. $("#password").parent().removeClass("error");
  171. showErrorMsg("<i class='close icon'></i> Username not found.");
  172. }else if (data.includes("Password incorrect")){
  173. $("#password").parent().addClass("error");
  174. $("#username").parent().removeClass("error");
  175. showErrorMsg("<i class='close icon'></i> Password incorrect.");
  176. }
  177. }
  178. if (data.includes("DONE")){
  179. //Data contain DONE. Try to perform redirection
  180. localStorage.setItem("ArOZusername", $("#username").val());
  181. //Prase the URL in which it might contains multiple &
  182. var actualRedirectURL = window.location.href;
  183. actualRedirectURL = actualRedirectURL.split("=");
  184. actualRedirectURL.shift();
  185. actualRedirectURL = actualRedirectURL.join("=");
  186. if (actualRedirectURL.substring(actualRedirectURL.length - 1, actualRedirectURL.length) == "?"){
  187. actualRedirectURL = actualRedirectURL.substring(0,actualRedirectURL.length - 1);
  188. }
  189. if (actualRedirectURL == ""){
  190. window.location.href="index.php";
  191. }else{
  192. //Redirect check
  193. try{
  194. window.location.href=actualRedirectURL;
  195. return
  196. }catch(err){
  197. window.location.href="index.php";
  198. }
  199. }
  200. }
  201. });
  202. }
  203. $('#password').keyup(function(e){
  204. if(e.keyCode == 13)
  205. {
  206. postLogin();
  207. }
  208. });
  209. $('#username').keyup(function(e){
  210. if(e.keyCode == 13){
  211. $('#password').focus();
  212. }else if (e.keyCode == 9){
  213. $('#password').focus();
  214. }
  215. });
  216. $.urlParam = function(name){
  217. var results = new RegExp('[\?&#]' + name + '=([^&]*)').exec(window.location.href);
  218. if (results == null || results == undefined){
  219. return "index.php";
  220. }
  221. return results[1] || 0;
  222. }
  223. function showErrorMsg(text){
  224. $("#errmsg").html(text);
  225. }
  226. var selectedCircle = "\u26AA";
  227. var emptyCircle = "\u25EF";
  228. $("#btn1").click(function(){
  229. $("#btn1").text(selectedCircle);
  230. $("#btn2").text(emptyCircle);
  231. $("#bgimage").fadeOut('fast',function(){
  232. $("#bgimage").attr("src","img/background.jpg").delay(500).fadeIn('slow');
  233. })
  234. });
  235. $("#btn2").click(function(){
  236. $("#btn1").text(emptyCircle);
  237. $("#btn2").text(selectedCircle);
  238. $("#bgimage").fadeOut('fast',function(){
  239. $("#bgimage").attr("src","img/background2.jpg").delay(500).fadeIn('slow');
  240. })
  241. });
  242. //Left pictureframe animation
  243. </script>
  244. </body>
  245. </html>