projekt kivitendo

  my $session_root_auth = $self->get_session_value(SESSION_KEY_ROOT_AUTH);

  $self->set_session_value(SESSION_KEY_ROOT_AUTH ,=> $result);

  sleep 5 if $result != OK;

  my $session_auth = $self->get_session_value(SESSION_KEY_USER_AUTH);

  $self->set_session_value(SESSION_KEY_USER_AUTH ,=> $result, login => $login);

  sleep 5 if $result != OK;

  my $action      = delete($params{action})     || 'dispatch';

  $params{action} = "${controller}/${action}";

  return "controller.pl?${query}";

      show_error('login/auth_db_unreachable');

  $::locale                = Locale->new($::lx_office_conf{system}->{language});

  $::form->{error}         = $::locale->text('Incorrect password!.')                   if ($error_type eq 'password');

  $::myconfig{countrycode} = $::lx_office_conf{system}->{language};

    if ($script eq 'login' or $script eq 'admin') {

      $::form->{titlebar} = "Lx-Office " . $::locale->text('Version') . " $::form->{version}";

      show_error('login/password_error', 'session') if SL::Auth::SESSION_EXPIRED == $session_result;

      my $auth_level = $self->{auth_handler}->handle(

      delete @{ $::form }{ grep { m/^\{AUTH\}/ } keys %{ $::form } };

        $::instance_conf->init if $auth_level eq 'user';

  $::form->{title}      = $::locale->text('Old configuration files');

  print $::form->parse_html_template('login/old_configuration_files', { FILES => \@old_files });

  return $auth_level;

  return $auth_level eq 'user' ? 'user' : 'admin';

  SL::Dispatcher::show_error('login/password_error', 'password', is_admin => 1);

  SL::Dispatcher::show_error('login/password_error', 'password') if not defined $login;

  SL::Dispatcher::show_error('login/password_error', 'password') unless $::myconfig{login};

  my $ok   =  $::form->{'{AUTH}login'} && (SL::Auth::OK == $::auth->authenticate($login, $::form->{'{AUTH}password'}));

  $ok    ||= !$::form->{'{AUTH}login'} && (SL::Auth::OK == $::auth->authenticate($login, undef));

  SL::Dispatcher::show_error('login/password_error', 'password') if !$ok;

sub run {

  $::lxdebug->enter_sub;

  my $session_result = shift;

  $form   = $::form;

  $auth   = $::auth;

  $form->{stylesheet} = "lx-office-erp.css";

  $form->{favicon}    = "favicon.ico";

  if (SL::Auth::SESSION_EXPIRED == $session_result) {

    $form->{error_message} = $::locale->text('The session is invalid or has expired.');

    login_screen();

    ::end_of_request();

  }

  my $action = $form->{action};

  if (!$action && $auth->{SESSION}->{login}) {

    $action = 'login';

  }

  if ($action) {

    $form->{login} = $form->{'{AUTH}login'} || $form->{login};

    %::myconfig    = $auth->read_user(login => $form->{login}) if $form->{login};

    $::locale   = Locale->new($::myconfig{countrycode}) if $::myconfig{countrycode};

    if (SL::Auth::OK != $auth->authenticate($::myconfig{login}, $form->{'{AUTH}password'})) {

      $form->{error_message} = $::locale->text('Incorrect username or password!');

      login_screen();

    } else {

      $auth->create_or_refresh_session();

      delete $form->{'{AUTH}password'};

      $form->{titlebar} .= " - $::myconfig{name} - $::myconfig{dbname}";

      call_sub($::locale->findsub($action));

    }

  } else {

    login_screen();

  }

  $::lxdebug->leave_sub;

}

sub login_screen {

  $main::lxdebug->enter_sub();

  my ($msg) = @_;

  if (-f "css/lx-office-erp.css") {

    $form->{stylesheet} = "lx-office-erp.css";

  }

  $form->{msg} = $msg;

  $form->header();

  print $form->parse_html_template('login/login_screen');

  $main::lxdebug->leave_sub();

}

sub login {

  $main::lxdebug->enter_sub();

  unless ($form->{login}) {

    login_screen($::locale->text('You did not enter a name!'));

    ::end_of_request();

  }

  my $user = User->new(login => $form->{login});

  # if we get an error back, bale out

  my $result;

  if (($result = $user->login($form)) <= -1) {

    if ($result == -3) {

      show_error('login/auth_db_needs_update');

      $::auth->destroy_session;

      ::end_of_request();

    }

    ::end_of_request() if $result == -2;

    login_screen($::locale->text('Incorrect username or password!'));

    ::end_of_request();

  }

  my %style_to_script_map = (

    v3  => 'v3',

    neu => 'new',

    v4  => 'v4',

  );

  my $menu_script = $style_to_script_map{$user->{menustyle}} || '';

  # made it this far, execute the menu

  # standard redirect does not seem to work for this invocation, (infinite loops?)

  # do a manual invocation instead

#  $form->{callback} = build_std_url("script=menu${menu_script}.pl", 'action=display', "callback=" . $form->escape($form->{callback}));

  $main::auth->set_cookie_environment_variable();

  $::form->{script}   = "menu${menu_script}.pl";

  $::form->{action}   = 'display';

  $::form->{callback} = $::form->escape($::form->{callback});

  require "bin/mozilla/$::form->{script}";

  display();

#  $form->redirect();

  $main::lxdebug->leave_sub();

}

sub logout {

  $main::lxdebug->enter_sub();

  $main::auth->destroy_session();

  # remove the callback to display the message

  $form->{callback} = "login.pl?action=";

  $form->redirect($::locale->text('You are logged out!'));

  $main::lxdebug->leave_sub();

}

sub show_error {

  my $template           = shift;

  my %myconfig           = %main::myconfig;

  $myconfig{countrycode} = $::lx_office_conf{system}->{language};

  $form->{stylesheet}    = 'css/lx-office-erp.css';

  $form->header();

  print $form->parse_html_template($template);

  # $form->parse_html_template('login/auth_db_unreachable');

  # $form->parse_html_template('login/auth_db_needs_update');

  # $form->parse_html_template('login/authentication_pl_missing');

  ::end_of_request();

}

    . " - <a href=\"login.pl?action=logout\" target=\"_top\">"

  <meta http-equiv="refresh" content="0;URL=login.pl">

  <a href="login.pl">Lx-Office-Login</a>

  'Incorrect password!.'        => 'Ungültiges Passwort!.',

  'Incorrect password!.'        => 'Ungültiges Passwort!.',

module=login.pl

action=logout

  [% IF error_message %]

  <p><span class="message_error_login">[% error_message %]</span></p>

  <p><a href="login.pl" target="_top">[%- LxERP.t8('Back to the login page') %]</a></p>

 <form method="post" action="login.pl">

    <td><input type="submit" name="action" value="[% 'Login' | $T8 %]"></td>

<form name="Form" method="post" action="login.pl">

 <input type="hidden" name="action" value="login">

[%- USE LxERP %]

<body>

 <p><b>[% LxERP.t8('Error!') %]</b></p>

 <p>

  [% LxERP.t8('Kivitendo needs to update the authentication database before you can proceed.') %]

  [% LxERP.t8('Please log in to the administration panel.') %]

  [% LxERP.t8('Kivitendo will then update the database automatically.') %]

 </p>

 <hr>

 <p>

  [% LxERP.t8('For further information read this: ') %] <a href="doc/html/index.html" target="_blank">Kivitendo Installation</a><br>

  [% LxERP.t8('Or download the whole Installation Documentation as PDF (350kB) for off-line study (currently in German Language): ') %] <a href="doc/Kivitendo-Dokumentation.pdf" target="_blank">Kivitendo-Dokumentation.pdf</a>

 </p>

 <hr>

 <p>

  <a href="login.pl" target="_top">[% LxERP.t8('Login') %]</a> |

  <a href="admin.pl" target="_top">[% LxERP.t8('Administration') %]</a>

 </p>

</body>

</html>

[%- USE T8 %]

<body>

 <p><b>[% 'Error!' | $T8 %]</b></p>

 <p>[%- 'The authentication database is not reachable at the moment. Either it hasn\'t been set up yet or the database server might be down. Please contact your administrator.' | $T8 %]</p>

 <p>[% 'If you want to set up the authentication database yourself then log in to the administration panel. kivitendo will then create the database and tables for you.' | $T8 %]</p>

 <hr>

 <p>[% 'For further information read this: ' | $T8 %] <a href="doc/html/index.html" target="_blank">kivitendo Installation</a><br>

 [% 'Or download the whole Installation Documentation as PDF (350kB) for off-line study (currently in German Language): ' | $T8 %] <a href="doc/Kivitendo-Dokumentation.pdf" target="_blank">Kivitendo-Dokumentation.pdf</a></p>

 <hr>

 <p>

  <a href="login.pl" target="_top">[% 'Login' | $T8 %]</a> |

  <a href="admin.pl" target="_top">[% 'Administration' | $T8 %]</a>

 </p>

</body>

</html>

[%- USE T8 %]

<body>

 <p><b>[% 'Error!' | $T8 %]</b></p>

 <p>[% 'The authentication configuration file &quot;config/lx_office.conf&quot; does not exist. This kivitendo installation has probably not been updated correctly yet. Please contact your administrator.' | $T8 %]</p>

 <p>[% 'If you yourself want to upgrade the installation then please read the file &quot;doc/UPGRADE&quot; and follow the steps outlined in this file.' | $T8 %]</p>

 <p>

  <a href="login.pl" target="_top">[% 'Login' | $T8 %]</a> |

  <a href="admin.pl" target="_top">[% 'Administration' | $T8 %]</a>

 </p>

</body>

</html>

[%- USE T8 %]

[% USE HTML %]<body class="login" onLoad="document.loginscreen.login.focus()">

 <center>

  <table class="login" border="3" cellpadding="20">

   <tr>

    <td class="login" align="center">

     <a href="http://www.kivitendo.de" target="_top"><img src="image/kivitendo.png" border="0"></a>

     <h3 class="login" align="center">[% 'kivitendo' | $T8 %] [% version %]</h3>

     [% IF error_message %]

     <p><span class="message_error_login">[% error_message %]</span></p>

     [% END %]

     <p>

      <form method="post" name="loginscreen" action="login.pl" target="_top">

       <input type="hidden" name="show_dbupdate_warning" value="1">

       <table width="100%">

        <tr>

         <td align="center">

          <table>

           <tr>

            <th align="right">[% 'Login Name' | $T8 %]</th>

            <td><input class="login" name="{AUTH}login" size="30" tabindex="1"></td>

           </tr>

           <tr>

            <th align="right">[% 'Password' | $T8 %]</th>

            <td><input class="login" type="password" name="{AUTH}password" size="30" tabindex="2"></td>

           </tr>

          </table>

          <br>

          <input type="hidden" name="action" value="login">

          <input type="submit" value="[% 'Login' | $T8 %]" tabindex="3">

         </td>

        </tr>

       </table>

      </form>

    </td>

   </tr>

  </table>

</body>

</html>

[% USE LxERP %][% USE HTML %]

<body>

 <div class="listtop">[% title %]</div>

 <p>

  [%- LxERP.t8('Starting with version 2.6.3 the configuration files in "config" have been consolidated.') %]

  [%- LxERP.t8('The following old files whose settings have to be merged manually into the new configuration file "config/lx_office.conf" still exist:') %]

 </p>

 <ul>

  [%- FOREACH file = FILES %]

   <li><code>config/[%- HTML.escape(file) %]</code></li>

  [%- END %]

 </ul>

 <p>

  [%- LxERP.t8('Due to security concerns these files have to be deleted or moved after the migration before you can continue using kivitendo.') %]

 </p>

 <p>

  [%- LxERP.t8('You can find information on the migration in the upgrade chapter of the documentation.') %]

 </p>

  <p>

  [%- LxERP.t8('Which is located at doc/Kivitendo-Dokumentation.pdf. Click here: ') %] <a href ="doc/Kivitendo-Dokumentation.pdf">doc/Kivitendo-Dokumentation.pdf</a>

</p>

 <p>

  <a href="login.pl">[%- LxERP.t8('Back to login') %]</a>

 </p>

</body>

</html>

[%- USE T8 %]

<body>

 <p><b>[% 'Error!' | $T8 %]</b></p>

 <p>[% error %]</p>

 <p><a href="[% IF is_admin %]admin.pl[% ELSE %]login.pl[% END %]" target="_top">[% 'Login' | $T8 %]</a></p>

</body>

</html>

    [<a HREF="login.pl" target="_blank" title="[% 'Open a further kivitendo Window or Tab' | $T8 %]">[% 'New Win/Tab' | $T8 %]</a>]

  [<a href="login.pl?action=logout" target="_top" title="[% 'Logout now' | $T8 %]">[% 'Logout' | $T8 %]</a>]

    <a href="login.pl?action=logout" target="_top">[% 'logout' | $T8 %]</a>]

    <a href="login.pl?action=logout" target="_top">[% 'logout' | $T8 %]</a>]

   <a href="login.pl?action=logout" target="_top">[% 'logout' | $T8 %]</a>]