parent
e4e5aed5fc
commit
62342d3454
|
|
@ -4,60 +4,80 @@ include getenv("DOCUMENT_ROOT")."/include/session_include.php";
|
||||||
|
|
||||||
$confirmID = trim($_POST['confirmID']);
|
$confirmID = trim($_POST['confirmID']);
|
||||||
$confirmPW = $_POST['confirmPW'];
|
$confirmPW = $_POST['confirmPW'];
|
||||||
|
// 추가: $action 변수가 POST로 넘어오지 않을 경우를 대비해 REQUEST로 받습니다.
|
||||||
|
$action = $_REQUEST['action'];
|
||||||
|
|
||||||
if($action == "login") {
|
if($action == "login") {
|
||||||
|
|
||||||
// Google Captcha
|
// Google Captcha
|
||||||
|
|
||||||
function post_captcha($user_response) {
|
function post_captcha($user_response) {
|
||||||
$fields_string = '';
|
$fields_string = '';
|
||||||
$fields = array(
|
$fields = array(
|
||||||
'secret' => '6LcrsY0sAAAAADwNiCoXbFPEDFbf0GssVRXeJi1X',
|
'secret' => '6LelsdAsAAAAALBiK4XNVcAE6sLTNcGPbgvawT8v',
|
||||||
'response' => $user_response
|
'response' => $user_response
|
||||||
);
|
);
|
||||||
foreach($fields as $key=>$value)
|
$fields_string = http_build_query($fields); // 기존 루프 대신 더 안전한 방식
|
||||||
$fields_string .= $key . '=' . $value . '&';
|
|
||||||
$fields_string = rtrim($fields_string, '&');
|
|
||||||
|
|
||||||
$ch = curl_init();
|
$ch = curl_init();
|
||||||
curl_setopt($ch, CURLOPT_URL, 'https://www.google.com/recaptcha/api/siteverify');
|
curl_setopt($ch, CURLOPT_URL, 'https://www.google.com/recaptcha/api/siteverify');
|
||||||
curl_setopt($ch, CURLOPT_POST, count($fields));
|
curl_setopt($ch, CURLOPT_POST, true);
|
||||||
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
|
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
|
||||||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, True);
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, True);
|
||||||
|
|
||||||
$result = curl_exec($ch);
|
$result = curl_exec($ch);
|
||||||
curl_close($ch);
|
curl_close($ch);
|
||||||
|
|
||||||
//echo "[$result]";exit;
|
//echo "[$result]";exit;
|
||||||
|
|
||||||
|
return json_decode($result, true);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
if ($_SERVER["REMOTE_ADDR"] == "127.0.0.1") {
|
||||||
|
$res['success'] = true;
|
||||||
|
$res['score'] = 1.0; // 로컬은 만점 처리
|
||||||
|
} else {
|
||||||
|
$res = post_captcha($_POST['g-recaptcha-response']);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!$res['success'] || (isset($res['score']) && $res['score'] < 0.5)) {
|
||||||
|
addLog(
|
||||||
|
"add",
|
||||||
|
"USER",
|
||||||
|
"LOGIN FAILED - CAPTCHA",
|
||||||
|
$confirmID,
|
||||||
|
"success: " . ($res['success'] ?? 'NULL') .
|
||||||
|
", score: " . ($res['score'] ?? 'NULL') .
|
||||||
|
", action: " . ($res['action'] ?? 'NULL') .
|
||||||
|
", hostname: " . ($res['hostname'] ?? 'NULL') .
|
||||||
|
", errors: " . json_encode($res['error-codes'] ?? []) .
|
||||||
|
", token_empty: " . (empty($token) ? 'YES' : 'NO') ,
|
||||||
|
$lgno
|
||||||
|
);
|
||||||
|
|
||||||
|
$msg = " Verification failed. Please try again shortly.";
|
||||||
|
$func -> modalMsg ($msg, "");
|
||||||
|
exit;
|
||||||
|
// }else{
|
||||||
|
// addLog(
|
||||||
|
// "add",
|
||||||
|
// "USER",
|
||||||
|
// "LOGIN TEST - CAPTCHA",
|
||||||
|
// $confirmID,
|
||||||
|
// "success: " . ($res['success'] ?? 'NULL') .
|
||||||
|
// ", score: " . ($res['score'] ?? 'NULL') .
|
||||||
|
// ", action: " . ($res['action'] ?? 'NULL') .
|
||||||
|
// ", hostname: " . ($res['hostname'] ?? 'NULL') .
|
||||||
|
// ", errors: " . json_encode($res['error-codes'] ?? []) .
|
||||||
|
// ", token_empty: " . (empty($token) ? 'YES' : 'NO') ,
|
||||||
|
// $lgno
|
||||||
|
// );
|
||||||
|
|
||||||
|
}
|
||||||
|
// End of Captcha
|
||||||
|
|
||||||
return json_decode($result, true);
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
if ($_SERVER["REMOTE_ADDR"] == "127.0.0.1") {
|
|
||||||
$res['success'] = 1;
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
// Call the function post_captcha
|
|
||||||
$res = post_captcha($_POST['g-recaptcha-response']);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (!$res['success']) {
|
|
||||||
// What happens when the CAPTCHA wasn't checked
|
|
||||||
// echo '<p>Please go back and make sure you check the security CAPTCHA box.</p><br>';
|
|
||||||
// echo "<SCRIPT LANGUAGE=\"JavaScript\">alert('Please go back and make sure you check the security CAPTCHA box.');history.back(-1);</SCRIPT>";
|
|
||||||
// exit;
|
|
||||||
|
|
||||||
addLog ("add", "USER", "LOGIN FAILED - CAPTCHA", $lguserid, $confirmID, $lgno);
|
|
||||||
|
|
||||||
$msg = "<p>Please go back and make sure you check the security CAPTCHA box.</p>";
|
|
||||||
$func -> modalMsg ($msg, "");
|
|
||||||
exit;
|
|
||||||
|
|
||||||
}
|
|
||||||
// End of Captcha
|
|
||||||
|
|
||||||
|
|
||||||
$query = "select * from tbl_member where m_userid = '$confirmID' ";
|
$query = "select * from tbl_member where m_userid = '$confirmID' ";
|
||||||
$result = $jdb->fQuery($query, "fetch query error");
|
$result = $jdb->fQuery($query, "fetch query error");
|
||||||
|
|
||||||
|
|
@ -68,87 +88,77 @@ if($action == "login") {
|
||||||
if ($_SERVER["REMOTE_ADDR"] == "127.0.0.1") $rtvalue = 1;
|
if ($_SERVER["REMOTE_ADDR"] == "127.0.0.1") $rtvalue = 1;
|
||||||
else $rtvalue = password_verify($confirmPW, $result['m_pwd']);
|
else $rtvalue = password_verify($confirmPW, $result['m_pwd']);
|
||||||
|
|
||||||
//echo "[$rtvalue][$confirmPW][".$result['m_pwd']."]";
|
//echo "[$rtvalue][$confirmPW][".$result['m_pwd']."]";
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
if(!$result) {
|
if(!$result) {
|
||||||
addLog ("add", "USER", "LOGIN FAILED - ID", $lguserid, $confirmID, $lgno);
|
addLog ("add", "USER", "LOGIN FAILED - ID", $lguserid, $confirmID, $lgno);
|
||||||
$msg = "'$confirmID' is not exist. Try again.";
|
$msg = "'$confirmID' is not exist. Try again.";
|
||||||
//$func -> alertBack($msg);
|
//$func -> alertBack($msg);
|
||||||
$func -> modalMsg ($msg, "");
|
$func -> modalMsg ($msg, "");
|
||||||
exit;
|
exit;
|
||||||
|
|
||||||
}else if ($rtvalue != TRUE) {
|
}else if ($rtvalue != TRUE) {
|
||||||
addLog ("add", "USER", "LOGIN FAILED - PASSWORD", $lguserid, $confirmPW, $lgno);
|
addLog ("add", "USER", "LOGIN FAILED - PASSWORD", $lguserid, $confirmPW, $lgno);
|
||||||
$msg = "Password is incorrect.";
|
$msg = "Password is incorrect.";
|
||||||
//$func -> alertBack($msg);
|
//$func -> alertBack($msg);
|
||||||
$func -> modalMsg ($msg, "");
|
$func -> modalMsg ($msg, "");
|
||||||
exit;
|
exit;
|
||||||
|
|
||||||
}else if ($result['m_status'] != "A") {
|
}else if ($result['m_status'] != "A") {
|
||||||
addLog ("add", "USER", "LOGIN FAILED - STATUS", $lguserid, $confirmID, $lgno);
|
addLog ("add", "USER", "LOGIN FAILED - STATUS", $lguserid, $confirmID, $lgno);
|
||||||
$msg = "Please contact Administrator.";
|
$msg = "Please contact Administrator.";
|
||||||
//$func -> alertBack($msg);
|
//$func -> alertBack($msg);
|
||||||
$func -> modalMsg ($msg, "");
|
$func -> modalMsg ($msg, "");
|
||||||
exit;
|
exit;
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
if ($rtvalue) {
|
if ($rtvalue) {
|
||||||
addLog ("add", "USER", "LOGIN SUCCESS", $confirmID, $query, $lgno);
|
addLog ("add", "USER", "LOGIN SUCCESS", $confirmID, $query, $lgno);
|
||||||
|
|
||||||
$_SESSION['ss_LOGIN'] = 1;
|
|
||||||
$_SESSION['ss_UID'] = $result['m_uid']; // 1000000001,1000000002...
|
|
||||||
$_SESSION['ss_ID'] = $result['m_userid']; // dustin@ebizple.com
|
|
||||||
$_SESSION['ss_NAME'] = $result['m_firstname']; // Dustin
|
|
||||||
$_SESSION['ss_DRUID'] = $result['m_currentdriver'];
|
|
||||||
$_SESSION['ss_DRINITIAL'] = $result['m_currentdriverinitial'];
|
|
||||||
|
|
||||||
// Level : m_level : Admin : 1, Manager : 3, Staff : 5, Accounting : 6, Operator : 7, Driver : 9
|
|
||||||
$_SESSION['ss_LEVEL'] = $result['m_level'];
|
|
||||||
$_SESSION['ss_GROUP'] = $result['m_gid'];
|
|
||||||
|
|
||||||
$today = $func -> PgetTime(0,0,4);
|
|
||||||
$loginCnt = $result['m_loginnum']+1;
|
|
||||||
|
|
||||||
$query = " update tbl_member set m_logindate = '$today', m_loginnum = '$loginCnt' where m_userid = '$result[m_userid]' ";
|
|
||||||
//mysql_query($query);
|
|
||||||
$jdb->nQuery($query, "update error");
|
|
||||||
|
|
||||||
//echo "[".$_SESSION[ss_LOGIN]."][".$_SESSION[ss_UID]."][".$_SESSION[ss_ID]."]";exit;
|
$_SESSION['ss_LOGIN'] = 1;
|
||||||
|
$_SESSION['ss_UID'] = $result['m_uid']; // 1000000001,1000000002...
|
||||||
|
$_SESSION['ss_ID'] = $result['m_userid']; // dustin@ebizple.com
|
||||||
|
$_SESSION['ss_NAME'] = $result['m_firstname']; // Dustin
|
||||||
|
$_SESSION['ss_DRUID'] = $result['m_currentdriver'];
|
||||||
|
$_SESSION['ss_DRINITIAL'] = $result['m_currentdriverinitial'];
|
||||||
|
|
||||||
$_SESSION['ss_FLAG'] = 1;
|
// Level : m_level : Admin : 1, Manager : 3, Staff : 5, Accounting : 6, Operator : 7, Driver : 9
|
||||||
|
$_SESSION['ss_LEVEL'] = $result['m_level'];
|
||||||
|
$_SESSION['ss_GROUP'] = $result['m_gid'];
|
||||||
|
|
||||||
if($destination != "") {
|
$today = $func -> PgetTime(0,0,4);
|
||||||
echo"<meta http-equiv='refresh' content='0; url=/index_intranet.php?view=$destination&".$tmpStr."'>";
|
$loginCnt = $result['m_loginnum']+1;
|
||||||
exit;
|
|
||||||
}
|
|
||||||
//echo "LOGIN[$_SESSION[ss_FLAG]]";exit;
|
|
||||||
|
|
||||||
echo"<meta http-equiv='refresh' content='0; url=/index_intranet.php'>";
|
$query = " update tbl_member set m_logindate = '$today', m_loginnum = '$loginCnt' where m_userid = '$result[m_userid]' ";
|
||||||
exit;
|
//mysql_query($query);
|
||||||
/*
|
$jdb->nQuery($query, "update error");
|
||||||
if ($_SESSION['ss_LEVEL'] == 9) {
|
|
||||||
echo"<meta http-equiv='refresh' content='0; url=/index_intranet.php?view=map'>";
|
//echo "[".$_SESSION[ss_LOGIN]."][".$_SESSION[ss_UID]."][".$_SESSION[ss_ID]."]";exit;
|
||||||
exit;
|
|
||||||
}
|
$_SESSION['ss_FLAG'] = 1;
|
||||||
else {
|
|
||||||
echo"<meta http-equiv='refresh' content='0; url=/index_intranet.php'>";
|
if($destination != "") {
|
||||||
exit;
|
echo"<meta http-equiv='refresh' content='0; url=/index_intranet.php?view=$destination&".$tmpStr."'>";
|
||||||
}
|
exit;
|
||||||
*/
|
}
|
||||||
|
//echo "LOGIN[$_SESSION[ss_FLAG]]";exit;
|
||||||
|
|
||||||
|
echo"<meta http-equiv='refresh' content='0; url=/index_intranet.php'>";
|
||||||
|
exit;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
} else if($action == "logout") {
|
} else if($action == "logout") {
|
||||||
addLog ("add", "USER", "LOGOUT", $lguserid, $query, $lgno);
|
addLog ("add", "USER", "LOGOUT", $lguserid, $query, $lgno);
|
||||||
|
|
||||||
session_destroy();
|
|
||||||
|
|
||||||
echo"<meta http-equiv='refresh' content='0; url=/login_intranet.php'>";
|
session_destroy();
|
||||||
exit;
|
|
||||||
|
|
||||||
}
|
echo"<meta http-equiv='refresh' content='0; url=/login_intranet.php'>";
|
||||||
|
exit;
|
||||||
|
|
||||||
?>
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
|
|
@ -17,9 +17,9 @@ $cfg = $jdb->fQuery("SELECT cfg_app_version FROM tbl_config LIMIT 1", "config er
|
||||||
$appVersion = $cfg['cfg_app_version'] ?? '';
|
$appVersion = $cfg['cfg_app_version'] ?? '';
|
||||||
|
|
||||||
if ($_SESSION['ss_LOGIN'] == 1) {
|
if ($_SESSION['ss_LOGIN'] == 1) {
|
||||||
$msg = "You are already logged in. Please proceed to the main page.";
|
$msg = "You are already logged in. Please proceed to the main page.";
|
||||||
$func -> modalMsg ($msg, "/index_intranet.php");
|
$func -> modalMsg ($msg, "/index_intranet.php");
|
||||||
exit;
|
exit;
|
||||||
}
|
}
|
||||||
|
|
||||||
?>
|
?>
|
||||||
|
|
@ -57,14 +57,9 @@ if ($_SESSION['ss_LOGIN'] == 1) {
|
||||||
|
|
||||||
</head>
|
</head>
|
||||||
|
|
||||||
<script src="https://www.google.com/recaptcha/api.js?onload=CaptchaCallback&render=explicit" async defer></script>
|
<script src="https://www.google.com/recaptcha/api.js?render=6LelsdAsAAAAABezjgy67C3dnEAtEX0oojwdZWeh"></script>
|
||||||
|
|
||||||
|
|
||||||
<script type="text/javascript">
|
|
||||||
var CaptchaCallback = function() {
|
|
||||||
grecaptcha.render('RecaptchaField1', {'sitekey' : '6LcrsY0sAAAAAHOpHP2HTaGYkb8szuaSiSX2KgvS'});
|
|
||||||
grecaptcha.render('RecaptchaField2', {'sitekey' : '6LcrsY0sAAAAAHOpHP2HTaGYkb8szuaSiSX2KgvS'});
|
|
||||||
};
|
|
||||||
</script>
|
|
||||||
|
|
||||||
<style>
|
<style>
|
||||||
@media (max-width:575px) {
|
@media (max-width:575px) {
|
||||||
|
|
@ -100,16 +95,19 @@ if ($_SESSION['ss_LOGIN'] == 1) {
|
||||||
|
|
||||||
|
|
||||||
<div class="container">
|
<div class="container">
|
||||||
<form method="post" role="form" class="form-login" action="/lib/login_process.php" data-aos="fade-up" data-aos-delay="100">
|
<form id="login-form" method="post" role="form" class="form-login" action="/lib/login_process.php" data-aos="fade-up" data-aos-delay="100">
|
||||||
<input type=hidden name=action value=login>
|
<input type="hidden" name="action" value="login">
|
||||||
<input type=hidden name=destination value=<?=$destination?>>
|
<input type="hidden" name="destination" value="<?=$destination?>">
|
||||||
<input type=hidden name=mode value=<?=$mode?>>
|
<input type="hidden" name="mode" value="<?=$mode?>">
|
||||||
|
|
||||||
<input type="email" class="form-control" name="confirmID" id="email" required placeholder="Your Email" data-msg="Please enter a valid email">
|
<input type="hidden" id="g-recaptcha-response" name="g-recaptcha-response">
|
||||||
|
|
||||||
<input type="password" class="form-control" name="confirmPW" id="password" required placeholder="Password" data-msg="Please enter a password">
|
<input type="email" class="form-control" name="confirmID" id="email" required placeholder="Your Email">
|
||||||
<label><div class="g-recaptcha" id="RecaptchaField1" required="required" required ></div></label>
|
<input type="password" class="form-control" name="confirmPW" id="password" required placeholder="Password">
|
||||||
<div class="text-center"><button class="btn-primary" type="submit">LOGIN</button></div>
|
|
||||||
|
<div class="text-center">
|
||||||
|
<button class="btn-primary" type="button" onclick="runRecaptcha()">LOGIN</button>
|
||||||
|
</div>
|
||||||
</form>
|
</form>
|
||||||
<div class="text-center mt-3">
|
<div class="text-center mt-3">
|
||||||
<small class="text-muted">
|
<small class="text-muted">
|
||||||
|
|
@ -163,6 +161,30 @@ if ($_SESSION['ss_LOGIN'] == 1) {
|
||||||
<!-- Template Main JS File -->
|
<!-- Template Main JS File -->
|
||||||
<script src="assets/js/main.js"></script>
|
<script src="assets/js/main.js"></script>
|
||||||
|
|
||||||
|
<!-- reChapchat v3. script 새로 추가 -->
|
||||||
|
<script src="https://www.google.com/recaptcha/api.js?render=6LelsdAsAAAAABezjgy67C3dnEAtEX0oojwdZWeh"></script>
|
||||||
|
|
||||||
|
<script type="text/javascript">
|
||||||
|
function runRecaptcha() {
|
||||||
|
// 1. 폼 요소를 가져옵니다.
|
||||||
|
var form = document.getElementById('login-form');
|
||||||
|
|
||||||
|
// 2. [핵심] 브라우저에게 "비어있는 칸이 있으면 말풍선을 띄워줘!"라고 명령합니다.
|
||||||
|
if (!form.checkValidity()) {
|
||||||
|
form.reportValidity(); // 말풍선.
|
||||||
|
return; // 칸이 비어있으면 여기서 중단합니다.
|
||||||
|
}
|
||||||
|
|
||||||
|
// 3. 모든 칸이 채워졌을 때만 캡차 실행
|
||||||
|
grecaptcha.ready(function() {
|
||||||
|
grecaptcha.execute('6LelsdAsAAAAABezjgy67C3dnEAtEX0oojwdZWeh', {action: 'login'}).then(function(token) {
|
||||||
|
document.getElementById('g-recaptcha-response').value = token;
|
||||||
|
form.submit(); // 검증 완료 후 제출
|
||||||
|
});
|
||||||
|
});
|
||||||
|
}
|
||||||
|
</script>
|
||||||
|
|
||||||
</body>
|
</body>
|
||||||
|
|
||||||
</html>
|
</html>
|
||||||
Loading…
Reference in New Issue