/usr/share/zabbix/index.php is in zabbix-frontend-php 1:2.2.7+dfsg-2+deb8u3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 | <?php
/*
** Zabbix
** Copyright (C) 2001-2014 Zabbix SIA
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
**/
define('ZBX_PAGE_NO_AUTHORIZATION', true);
define('ZBX_NOT_ALLOW_ALL_NODES', true);
define('ZBX_HIDE_NODE_SELECTION', true);
require_once dirname(__FILE__).'/include/config.inc.php';
require_once dirname(__FILE__).'/include/forms.inc.php';
$page['title'] = _('ZABBIX');
$page['file'] = 'index.php';
// VAR TYPE OPTIONAL FLAGS VALIDATION EXCEPTION
$fields = array(
'name' => array(T_ZBX_STR, O_NO, null, NOT_EMPTY, 'isset({enter})', _('Username')),
'password' => array(T_ZBX_STR, O_OPT, null, null, 'isset({enter})'),
'sessionid' => array(T_ZBX_STR, O_OPT, null, null, null),
'reconnect' => array(T_ZBX_INT, O_OPT, P_SYS|P_ACT, BETWEEN(0, 65535), null),
'enter' => array(T_ZBX_STR, O_OPT, P_SYS, null, null),
'autologin' => array(T_ZBX_INT, O_OPT, null, null, null),
'request' => array(T_ZBX_STR, O_OPT, null, null, null)
);
check_fields($fields);
// logout
if (isset($_REQUEST['reconnect'])) {
add_audit(AUDIT_ACTION_LOGOUT, AUDIT_RESOURCE_USER, _('Manual Logout'));
CWebUser::logout();
redirect('index.php');
}
$config = select_config();
if ($config['authentication_type'] == ZBX_AUTH_HTTP) {
if (!empty($_SERVER['PHP_AUTH_USER'])) {
$_REQUEST['enter'] = _('Sign in');
$_REQUEST['name'] = $_SERVER['PHP_AUTH_USER'];
}
else {
access_deny(ACCESS_DENY_PAGE);
}
}
// login via form
if (isset($_REQUEST['enter']) && $_REQUEST['enter'] == _('Sign in')) {
// try to login
if (CWebUser::login(get_request('name', ''), get_request('password', ''))) {
// save remember login preference
$user = array('autologin' => get_request('autologin', 0));
if (CWebUser::$data['autologin'] != $user['autologin']) {
$result = API::User()->updateProfile($user);
}
add_audit_ext(AUDIT_ACTION_LOGIN, AUDIT_RESOURCE_USER, CWebUser::$data['userid'], '', null, null, null);
$request = get_request('request');
$url = zbx_empty($request) ? CWebUser::$data['url'] : $request;
if (zbx_empty($url) || $url == $page['file']) {
$url = 'dashboard.php';
}
redirect($url);
exit();
}
// login failed, fall back to a guest account
else {
CWebUser::checkAuthentication(null);
}
}
else {
// login the user from the session, if the session id is empty - login as a guest
CWebUser::checkAuthentication(get_cookie('zbx_sessionid'));
}
// the user is not logged in, display the login form
if (!CWebUser::$data['alias'] || CWebUser::$data['alias'] == ZBX_GUEST_USER) {
switch ($config['authentication_type']) {
case ZBX_AUTH_HTTP:
echo _('User name does not match with DB');
break;
case ZBX_AUTH_LDAP:
case ZBX_AUTH_INTERNAL:
if (isset($_REQUEST['enter'])) {
$_REQUEST['autologin'] = get_request('autologin', 0);
}
if ($messages = clear_messages()) {
$messages = array_pop($messages);
$_REQUEST['message'] = $messages['message'];
}
$loginForm = new CView('general.login');
$loginForm->render();
}
}
else {
redirect(zbx_empty(CWebUser::$data['url']) ? 'dashboard.php' : CWebUser::$data['url']);
}
|