首页index.php源码 - 放飞心情的日志

<?
include_once("inc/reg_check.php");
if($OA_REG_ON!=2)
  exit;
include_once("inc/conn.php");
include_once("inc/utility.php");
include_once("inc/utility_all.php");
session_start();
ob_start();
$CUR_TIME=date("Y-m-d H:i:s",time());
?>
<html>
<head>
<title>系统登录</title>
<script language="Javascript" src="common/allload.inc"></script>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link rel="stylesheet" type="text/css" href="/theme/1/style.css">
</head>
<body topmargin="5">
<?
if($USERNAME=="")
{
   $LOGIN_ERROR="请输入用户名！";
   Message("警告",$LOGIN_ERROR);

exit;
}
//-------- 取系统设置参数 --------
$query = "SELECT * from SYS_PARA where PARA_NAME='SEC_PASS_FLAG' or PARA_NAME='SEC_PASS_TIME' or PARA_NAME='SEC_PASS_IMG'";
$cursor= exequery($connection,$query);
while($ROW=mysql_fetch_array($cursor))
{
  $PARA_NAME=$ROW["PARA_NAME"];
  $PARA_VALUE=$ROW["PARA_VALUE"];

  if($PARA_NAME=="SEC_PASS_FLAG")
$SEC_PASS_FLAG=$PARA_VALUE;
  else if($PARA_NAME=="SEC_PASS_TIME")
$SEC_PASS_TIME=$PARA_VALUE;
  else if($PARA_NAME=="SEC_PASS_IMG")
$SEC_PASS_IMG=$PARA_VALUE;
}

//-------- 验证用户输入图形验证码 ----------
if($SEC_PASS_IMG=="1")
{
  if(isset($PASSWORD2)&&session_is_registered("PASS_IMG_NUM"))
  {
if(crypt($PASSWORD2,$PASS_IMG_NUM)!=$PASS_IMG_NUM)
{
   $LOGIN_ERROR="图形验证码错误！";
   Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
   exit;
}
  }
  else
  {
$LOGIN_ERROR="图形验证码错误！";
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
  }
}

//-------- IP检验 --------
$USER_IP=$_SERVER["REMOTE_ADDR"];
if(!check_ip($USER_IP,"0"))
{
  add_log(9,"USER_ID=$USERNAME",$USERNAME);
  Message("警告","您无权限从该IP(".$USER_IP.")登录!");
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}

//-------- 升级 --------
$OA_UPDATE_FILE="update/1.php";
if(file_exists($OA_UPDATE_FILE))
{
  include_once($OA_UPDATE_FILE);
  unlink($OA_UPDATE_FILE);
}

//--------- 密码验证 --------
$LOGIN_ERROR="用户名或密码错误（注意大小写），请重新登录!";
$connection=OpenConnection();
$query = "SELECT * from USER where USER_ID='$USERNAME'";
$cursor= exequery($connection,$query);

if(!$ROW=mysql_fetch_array($cursor))
{
add_log(10,"USER_ID=$USERNAME",$USERNAME);
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}

$USER_ID=$ROW["USER_ID"];
if($USERNAME!=$USER_ID)
{
add_log(10,"USER_ID=$USERNAME",$USERNAME);
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}

$PWD=$ROW["PASSWORD"];
$LOGIN_USER_PRIV=$ROW["USER_PRIV"];
$LOGIN_AVATAR=$ROW["AVATAR"];
$LOGIN_DEPT_ID=$ROW["DEPT_ID"];
$MENU_TYPE=$ROW["MENU_TYPE"];
$LAST_PASS_TIME=$ROW["LAST_PASS_TIME"];
$LOGIN_THEME=$ROW["THEME"];
$PAUSE=$ROW["PAUSE"];

$MENU_TYPE=2-$MENU_TYPE;

if(crypt($PASSWORD,$PWD)!= $PWD)
{
$ERROR_PWD=maskstr($PASSWORD,2,1);
add_log(2,$ERROR_PWD,$USERNAME);
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}
if($PAUSE == 1)
{
$LOGIN_ERROR="用户帐户已经被停用";
Message("警告",$LOGIN_ERROR);
?>
<br>
<div align="center">
<input type="button" value="重新登录" /'">
</div>
<?
exit;
}

$LOGIN_USER_ID=$USER_ID;

session_register("LOGIN_USER_ID");
session_register("LOGIN_USER_PRIV");
session_register("LOGIN_DEPT_ID");
session_register("LOGIN_AVATAR");
session_register("LOGIN_THEME");

setcookie ("USER_NAME_COOKIE", $LOGIN_USER_ID,time() + 60*60*24*1000);

//-------- 检查密码是否过期 --------
if($SEC_PASS_FLAG=="1"&&(time()-strtotime($LAST_PASS_TIME) >=$SEC_PASS_TIME*24*3600))
  header("location: general/pass.php");

//-------- 日志 --------
add_log(1,"",$LOGIN_USER_ID);

//-------- 根据日程安排生成短信息 --------
affair_sms();

//-------- 生成通知管理提醒信息 --------
affair_notify_sms();
//--------增加在线人员------------------
//user_add_online();
?>
<script>
var open_flag=window.open("general/index.php",'<?=md5($USERNAME)?>',"toolbar=<?=$MENU_TYPE?>,fullscreen=no, menubar=yes, scrollbars=no, resizable=no, location=no, status=no,width=' + window.screen.width + ',height=' + window.screen.height + ',top=0,left=0");

if(open_flag== null)
  location="general/index.php";
else
{
  focus();
  window.opener =window.self;
  window.close();
}
</script>

</body>
</html>