X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=src%2Flogin.php;h=a1228d4b6c22d64941ce9175c86cf81669a9a145;hb=84d108855167644226a82106c1d956db12f17e62;hp=a7c22d1f3b53c2679edbbc1aab1ea283d2452f25;hpb=bca2d025d9cd5d79463bc3621fe107d5b9f2518b;p=squirrelmail.git diff --git a/src/login.php b/src/login.php index a7c22d1f..a1228d4b 100644 --- a/src/login.php +++ b/src/login.php @@ -3,31 +3,25 @@ /** * login.php -- simple login screen * - * Copyright (c) 1999-2005 The SquirrelMail Project Team - * Licensed under the GNU GPL. For full terms see the file COPYING. - * * This a simple login screen. Some housekeeping is done to clean * cookies and find language. * + * @copyright © 1999-2006 The SquirrelMail Project Team + * @license http://opensource.org/licenses/gpl-license.php GNU Public License * @version $Id$ * @package squirrelmail */ +// reduces the files included in init.php +$sInitLocation = 'login'; + /** - * Path for SquirrelMail required files. - * @ignore + * Include the SquirrelMail initialization file. */ -define('SM_PATH','../'); +require('../include/init.php'); + /* SquirrelMail required files. */ -require_once(SM_PATH . 'functions/strings.php'); -require_once(SM_PATH . 'config/config.php'); -require_once(SM_PATH . 'functions/i18n.php'); -require_once(SM_PATH . 'functions/plugin.php'); -require_once(SM_PATH . 'functions/constants.php'); -require_once(SM_PATH . 'functions/page_header.php'); -require_once(SM_PATH . 'functions/html.php'); -require_once(SM_PATH . 'functions/global.php'); require_once(SM_PATH . 'functions/imap_general.php'); require_once(SM_PATH . 'functions/forms.php'); @@ -38,21 +32,30 @@ require_once(SM_PATH . 'functions/forms.php'); set_up_language($squirrelmail_language, TRUE, TRUE); /** - * Find out the base URI to set cookies. - */ -if (!function_exists('sqm_baseuri')){ - require_once(SM_PATH . 'functions/display_messages.php'); -} -$base_uri = sqm_baseuri(); - -/* * In case the last session was not terminated properly, make sure - * we get a new one. + * we get a new one, but make sure we preserve session_expired_* */ - -sqsession_destroy(); - -header('Pragma: no-cache'); +/** + * PHP bug. http://bugs.php.net/11643 (warning, spammed bug tracker) and + * http://bugs.php.net/13834 + * SID constant is not destroyed in PHP 4.1.2, 4.2.3 and maybe other + * versions. Produces warning on login page. Bug should be fixed only in 4.3.0 + */ +if ( !empty($_SESSION['session_expired_post']) && !empty($_SESSION['session_expired_location']) ) { + $sep = $_SESSION['session_expired_post']; + $sel = $_SESSION['session_expired_location']; + + sqsession_destroy(); + + sqsession_is_active(); + $_SESSION=array(); + sqsession_register($sep, 'session_expired_post'); + sqsession_register($sel, 'session_expired_location'); +} else { + sqsession_destroy(); + @sqsession_is_active(); + $_SESSION=array(); +} /** * This detects if the IMAP server has logins disabled, and if so, @@ -75,7 +78,9 @@ if($imap_auth_mech == 'login') { $string .= _("Also, the use of TLS may allow SquirrelMail to login.").'
'; } $string .= _("Please contact your system administrator and report this error."); - error_box($string,$color); + error_box($string); + // display footer (closes html tags) and stop script execution + $oTemplate->display('footer.tpl'); exit; } } @@ -86,8 +91,7 @@ do_hook('login_cookie'); $loginname_value = (sqGetGlobalVar('loginname', $loginname) ? htmlspecialchars($loginname) : ''); /* Output the javascript onload function. */ - -$header = "