*/
// include our LDAP object
require_once __DIR__.'/LDAP/LDAP.php';
require_once __DIR__.'/LDAP/config_ldap.php';
// Verify all fields have been filled
if (empty($_POST['user']) || empty($_POST['password'])) {
echo 'Please fill in your Username and Password
';
echo 'Click here to come back to login page';
} else {
// Check received data length (to prevent code injection)
if (strlen($_POST['user']) > 15) {
echo 'Username has incorrect format ... Please try again
';
echo 'Click here to come back to login page';
} elseif (strlen($_POST['password']) > 50 || strlen($_POST['password']) <= 7) {
echo 'Password has incorrect format ... Please try again
';
echo 'Click here to come back to login page';
} else {
// Remove every html tag and useless space on username (to prevent XSS)
$user=strtolower(strip_tags(htmlspecialchars(trim($_POST['user']))));
$password=$_POST['password'];
// Open a LDAP connection
$ldap = new LDAP($ldap_host, $ldap_port, $ldap_version);
// Check user credential on LDAP
try {
$authenticated = $ldap->checkLogin($user, $password, $ldap_search_attribute, $ldap_filter, $ldap_base_dn, $ldap_bind_dn, $ldap_bind_pass);
} catch (Exception $e) {
if ($e->getCode() == 404) {
$resp = json_encode(
[
"error" => "User not found",
"message" => "$user is not in the group of authorized users."
]
);
} else {
$resp = json_encode(array("error" => "Impossible to get data", "message" => $e->getMessage()));
}
$authenticated = false;
}
// If user is authenticated
if ($authenticated) {
$_SESSION['uid']=$user;
// If user came here with an autorize request, redirect him to the authorize page. Else prompt a simple message.
if (isset($_SESSION['auth_page'])) {
$auth_page=$_SESSION['auth_page'];
header('Location: ' . $auth_page);
exit();
} else {
echo "Congratulation you are authenticated !
However there is nothing to do here ...";
}
}
// check login on LDAP has failed. Login and password were invalid or LDAP is unreachable
else {
echo "Authentication failed ... Check your username and password.
If error persist contact your administrator.
";
echo 'Click here to come back to login page';
echo '
' . $resp;
}
}
}