mirror of
https://gitlab.archlinux.org/archlinux/aurweb.git
synced 2025-02-03 10:43:03 +01:00
e2fa5ea6fa
Replace special characters in the referer GET parameter using htmlspecialchars() before inserting it into the login form fields to prevent from XSS attacks. Fixes FS#55286. Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
59 lines
2.4 KiB
PHP
59 lines
2.4 KiB
PHP
<?php
|
|
set_include_path(get_include_path() . PATH_SEPARATOR . '../lib');
|
|
|
|
include_once("aur.inc.php");
|
|
|
|
$disable_http_login = config_get_bool('options', 'disable_http_login');
|
|
if (!$disable_http_login || (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'])) {
|
|
$login = try_login();
|
|
$login_error = $login['error'];
|
|
}
|
|
|
|
html_header('AUR ' . __("Login"));
|
|
?>
|
|
<div id="dev-login" class="box">
|
|
<h2>AUR <?= __('Login') ?></h2>
|
|
<?php if (isset($_COOKIE["AURSID"])): ?>
|
|
<p>
|
|
<?= __("Logged-in as: %s", '<strong>' . username_from_sid($_COOKIE["AURSID"]) . '</strong>'); ?>
|
|
<a href="<?= get_uri('/logout/'); ?>">[<?= __("Logout"); ?>]</a>
|
|
</p>
|
|
<?php elseif (!$disable_http_login || (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'])): ?>
|
|
<form method="post" action="<?= get_uri('/login') ?>">
|
|
<fieldset>
|
|
<legend><?= __('Enter login credentials') ?></legend>
|
|
<?php if (!empty($login_error)): ?>
|
|
<ul class="errorlist"><li><?= $login_error ?></li></ul>
|
|
<?php endif; ?>
|
|
<p>
|
|
<label for="id_username"><?= __('User name or email address') . ':'; ?></label>
|
|
<input id="id_username" type="text" name="user" size="30" maxlength="<?= max(config_get_int('options', 'username_max_len'), 254); ?>" value="<?php if (isset($_POST['user'])) { print htmlspecialchars($_POST['user'], ENT_QUOTES); } ?>" autofocus="autofocus" />
|
|
</p>
|
|
<p>
|
|
<label for="id_password"><?= __('Password') . ':'; ?></label>
|
|
<input id="id_password" type="password" name="passwd" size="30" />
|
|
</p>
|
|
<p>
|
|
<input type="checkbox" name="remember_me" id="id_remember_me" />
|
|
<label for="id_remember_me"><?= __("Remember me"); ?></label>
|
|
</p>
|
|
<p>
|
|
<input type="submit" class="button" value="<?php print __("Login"); ?>" />
|
|
<a href="<?= get_uri('/passreset/') ?>">[<?= __('Forgot Password') ?>]</a>
|
|
<?php if (in_request('referer') !== ""): ?>
|
|
<input id="id_referer" type="hidden" name="referer" value="<?= htmlspecialchars(in_request('referer'), ENT_QUOTES) ?>" />
|
|
<?php elseif (isset($_SERVER['HTTP_REFERER'])): ?>
|
|
<input id="id_referer" type="hidden" name="referer" value="<?= htmlspecialchars($_SERVER['HTTP_REFERER'], ENT_QUOTES) ?>" />
|
|
<?php endif; ?>
|
|
</p>
|
|
</fieldset>
|
|
</form>
|
|
<?php else: ?>
|
|
<p>
|
|
<?php printf(__("HTTP login is disabled. Please %sswitch to HTTPs%s if you want to login."),
|
|
'<a href="' . get_uri('/login', true) . '">', '</a>'); ?>
|
|
</p>
|
|
<?php endif; ?>
|
|
</div>
|
|
<?php
|
|
html_footer(AURWEB_VERSION);
|