';
print_r ($_SESSION['sysinfo']);
echo '';
}
error_reporting ($_SESSION['sysinfo']['errors']);
$_SESSION['lang'] = empty ($_REQUEST['newlang']) ? $_SESSION['sysinfo']['lang'] : $_REQUEST['newlang'];
include SYSDIR.LANGFILE;
include CONFIG;
$usr = cls (@$_REQUEST['usr']);
if (!empty ($usr) && !empty ($_REQUEST['pwd'])) {
// SECURITY check: $usr is used as a directory name
if ((false !== ($_SESSION['usrinfo'] = parse_info (USRDIR."$usr/".USRINFO)))
&& (@$_SESSION['usrinfo']['pwd'] == md5 ($_REQUEST['pwd']))) {
$_SESSION['usr'] = $usr;
}
if (empty ($_SESSION['usr']))
$logon_error = _L ("Your username/password cannot be found");
else
$_SESSION['apps'] = array ();
}
else if (empty ($_REQUEST['usr']) && empty ($_REQUEST['pwd'])) {
if (!isset ($_REQUEST['exit']))
foreach (explode (',', @$_SESSION['sysinfo']['autologon']) as $autolog) {
$autolog = explode (':', $autolog);
$usr = trim ($autolog[0]);
if (($_SERVER['REMOTE_ADDR'] == trim ($autolog[1])) && (false !== ($_SESSION['usrinfo'] = parse_info (USRDIR."$usr/".USRINFO)))) {
$_SESSION['usr'] = $usr;
break;
}
}
} else
$logon_error = _L("Please specify a username and password");
}
if (!empty ($_SESSION['usr'])) {
$usr = $_SESSION['usr'];
$a = @$_SESSION['usrinfo']['autorun'] .';'. @$_SESSION['sysinfo']['autorun'] . ';' . @$_SESSION['usrinfo']['run_once'];
if (!empty ($_SESSION['usrinfo']['run_once']))
parse_update (USRDIR."$usr/".USRINFO, 'run_once', null);
if (empty ($_REQUEST['newlang']) && !empty ($_SESSION['usrinfo']['lang'])) {
$_SESSION['lang'] = $_SESSION['usrinfo']['lang'];
include SYSDIR.LANGFILE;
}
if (!empty ($_SESSION['usrinfo']['wllp']) && file_exists($_SESSION['usrinfo']['wllp']))
$_SESSION['fondoescollit'] = $_SESSION['usrinfo']['wllp'];
if (false !== strpos (strtolower ($_SERVER['HTTP_USER_AGENT']), 'msie'))
$_SESSION['browser_ie'] = 1;
include 'desktop.php';
exit;
}
session_destroy ();
if (empty ($logon_error))
$logon_error = '';
/* No usr : pwd or authentication has failed, construct the login screen */
if (!empty ($_SESSION['sysinfo']['hostname']) && (strtolower ($_SESSION['sysinfo']['hostname']) != 'eyeos'))
$welcome = '