aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/auth
diff options
context:
space:
mode:
Diffstat (limited to 'phpBB/includes/auth')
-rw-r--r--phpBB/includes/auth/auth_apache.php27
-rw-r--r--phpBB/includes/auth/auth_db.php29
-rw-r--r--phpBB/includes/auth/auth_ldap.php44
-rw-r--r--phpBB/includes/auth/index.htm10
4 files changed, 110 insertions, 0 deletions
diff --git a/phpBB/includes/auth/auth_apache.php b/phpBB/includes/auth/auth_apache.php
new file mode 100644
index 0000000000..e5059724b9
--- /dev/null
+++ b/phpBB/includes/auth/auth_apache.php
@@ -0,0 +1,27 @@
+<?php
+
+//
+// Authentication plug-ins is largely down to
+// Sergey Kanareykin, our thanks to him.
+//
+function login_apache(&$username, &$password)
+{
+ global $HTTP_SERVER_VARS, $HTTP_ENV_VARS;
+
+ $php_auth_user = ( !empty($HTTP_SERVER_VARS['PHP_AUTH_USER']) ) ? $HTTP_SERVER_VARS['PHP_AUTH_USER'] : $HTTP_GET_VARS['PHP_AUTH_USER']
+ $php_auth_pw = ( !empty($HTTP_SERVER_VARS['PHP_AUTH_PW']) ) ? $HTTP_SERVER_VARS['PHP_AUTH_PW'] : $HTTP_GET_VARS['PHP_AUTH_PW']
+
+ if ( $php_auth_user && $php_auth_pw )
+ {
+ $sql = "SELECT user_id, username, user_password, user_email, user_active
+ FROM " . USERS_TABLE . "
+ WHERE username = '" . str_replace("\'", "''", $username) . "'";
+ $result = $db->sql_query($sql);
+
+ return ( $row = $db->sql_fetchrow($result) ? $row : false;
+ }
+
+ return false;
+}
+
+?> \ No newline at end of file
diff --git a/phpBB/includes/auth/auth_db.php b/phpBB/includes/auth/auth_db.php
new file mode 100644
index 0000000000..0c9d0adf3e
--- /dev/null
+++ b/phpBB/includes/auth/auth_db.php
@@ -0,0 +1,29 @@
+<?php
+
+//
+// Authentication plug-ins is largely down to
+// Sergey Kanareykin, our thanks to him.
+//
+function login_db(&$username, &$password)
+{
+ global $db, $board_config;
+
+ $sql = "SELECT user_id, username, user_password, user_email, user_active
+ FROM " . USERS_TABLE . "
+ WHERE username = '" . str_replace("\'", "''", $username) . "'";
+ $result = $db->sql_query($sql);
+
+ if ( $row = $db->sql_fetchrow($result) )
+ {
+ $db->sql_freeresult($result);
+
+ if ( md5($password) == $row['user_password'] && $row['user_active'] )
+ {
+ return $row;
+ }
+ }
+
+ return false;
+}
+
+?> \ No newline at end of file
diff --git a/phpBB/includes/auth/auth_ldap.php b/phpBB/includes/auth/auth_ldap.php
new file mode 100644
index 0000000000..0957b56949
--- /dev/null
+++ b/phpBB/includes/auth/auth_ldap.php
@@ -0,0 +1,44 @@
+<?php
+
+//
+// Authentication plug-ins is largely down to
+// Sergey Kanareykin, our thanks to him.
+//
+function login_ldap(&$username, &$password)
+{
+ global $board_config;
+
+ if ( !extension_loaded('ldap') )
+ {
+ return 'LDAP extension not available';
+ }
+
+ if ( !($ldap = @ldap_connect($board_config['ldap_server'])) )
+ {
+ return 'Could not connect to LDAP server';
+ }
+
+ $search = @ldap_search($ldap, $board_config['ldap_base_dn'], $board_config['ldap_uid'] . '=' . $username, array($board_config['ldap_uid']));
+ $result = @ldap_get_entries($ldap, $search);
+
+ if ( is_array($result) && count($result) > 1 )
+ {
+ if ( @ldap_bind($ldap, $result[0]['dn'], $password) )
+ {
+ @ldap_close($ldap);
+
+ $sql = "SELECT user_id, username, user_password, user_email, user_active
+ FROM " . USERS_TABLE . "
+ WHERE username = '" . str_replace("\'", "''", $username) . "'";
+ $result = $db->sql_query($sql);
+
+ return ( $row = $db->sql_fetchrow($result) ? $row : false;
+ }
+ }
+
+ @ldap_close($ldap);
+
+ return false;
+}
+
+?> \ No newline at end of file
diff --git a/phpBB/includes/auth/index.htm b/phpBB/includes/auth/index.htm
new file mode 100644
index 0000000000..ee1f723a7d
--- /dev/null
+++ b/phpBB/includes/auth/index.htm
@@ -0,0 +1,10 @@
+<html>
+<head>
+<title></title>
+<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
+</head>
+
+<body bgcolor="#FFFFFF" text="#000000">
+
+</body>
+</html>