Automatically generated installer lang files
[moodle.git] / login / index.php
CommitLineData
8570cff0 1<?php
2
3// This file is part of Moodle - http://moodle.org/
4//
5// Moodle is free software: you can redistribute it and/or modify
6// it under the terms of the GNU General Public License as published by
7// the Free Software Foundation, either version 3 of the License, or
8// (at your option) any later version.
9//
10// Moodle is distributed in the hope that it will be useful,
11// but WITHOUT ANY WARRANTY; without even the implied warranty of
12// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13// GNU General Public License for more details.
14//
15// You should have received a copy of the GNU General Public License
16// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
17
18/**
c30949a9 19 * Main login page.
8570cff0 20 *
c30949a9
PS
21 * @package core
22 * @subpackage auth
23 * @copyright 1999 onwards Martin Dougiamas http://dougiamas.com
24 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
8570cff0 25 */
26
c30949a9 27require('../config.php');
8570cff0 28
29redirect_if_major_upgrade_required();
30
8a8f1c7c 31$testsession = optional_param('testsession', 0, PARAM_INT); // test session works properly
3354eb8c
PS
32$cancel = optional_param('cancel', 0, PARAM_BOOL); // redirect to frontpage, needed for loginhttps
33
34if ($cancel) {
35 redirect(new moodle_url('/'));
36}
8570cff0 37
17c70aa0
PS
38//HTTPS is required in this page when $CFG->loginhttps enabled
39$PAGE->https_required();
c30949a9 40
8570cff0 41$context = get_context_instance(CONTEXT_SYSTEM);
c30949a9
PS
42$PAGE->set_url("$CFG->httpswwwroot/login/index.php");
43$PAGE->set_context($context);
191b267b 44$PAGE->set_pagelayout('login');
d529807a 45
f716d0dd 46/// Initialize variables
8570cff0 47$errormsg = '';
48$errorcode = 0;
3e5c8474 49
8a8f1c7c
PS
50// login page requested session test
51if ($testsession) {
52 if ($testsession == $USER->id) {
53 if (isset($SESSION->wantsurl)) {
54 $urltogo = $SESSION->wantsurl;
55 } else {
56 $urltogo = $CFG->wwwroot.'/';
57 }
58 unset($SESSION->wantsurl);
59 redirect($urltogo);
60 } else {
61 // TODO: try to find out what is the exact reason why sessions do not work
62 $errormsg = get_string("cookiesnotenabled");
63 $errorcode = 1;
64 }
65}
66
1c6932d8 67/// Check for timed out sessions
8570cff0 68if (!empty($SESSION->has_timed_out)) {
69 $session_has_timed_out = true;
70 unset($SESSION->has_timed_out);
71} else {
72 $session_has_timed_out = false;
73}
1c6932d8 74
099f393f 75/// auth plugins may override these - SSO anyone?
8570cff0 76$frm = false;
77$user = false;
6bc1e5d5 78
8570cff0 79$authsequence = get_enabled_auth_plugins(true); // auths, in sequence
80foreach($authsequence as $authname) {
81 $authplugin = get_auth_plugin($authname);
82 $authplugin->loginpage_hook();
83}
6bc1e5d5 84
244a32c6 85
a718d872 86/// Define variables used in page
3f77c158 87$site = get_site();
8570cff0 88
8570cff0 89$loginsite = get_string("loginsite");
90$PAGE->navbar->add($loginsite);
91
f23a1761
PS
92if ($user !== false or $frm !== false or $errormsg !== '') {
93 // some auth plugin already supplied full user, fake form data or prevented user login with error message
8570cff0 94
8570cff0 95} else if (!empty($SESSION->wantsurl) && file_exists($CFG->dirroot.'/login/weblinkauth.php')) {
96 // Handles the case of another Moodle site linking into a page on this site
97 //TODO: move weblink into own auth plugin
98 include($CFG->dirroot.'/login/weblinkauth.php');
99 if (function_exists('weblink_auth')) {
100 $user = weblink_auth($SESSION->wantsurl);
089b19f6 101 }
8570cff0 102 if ($user) {
103 $frm->username = $user->username;
d00377f5 104 } else {
294ce987 105 $frm = data_submitted();
d00377f5 106 }
a9b07c52 107
8570cff0 108} else {
109 $frm = data_submitted();
110}
111
a718d872 112/// Check if the user has actually submitted login data to us
113
8a8f1c7c 114if ($frm and isset($frm->username)) { // Login WITH cookies
792197b0 115
6f3451e5 116 $frm->username = trim(textlib::strtolower($frm->username));
cf5560fb 117
79604225 118 if (is_enabled_auth('none') ) {
6b8ad965 119 if ($frm->username !== clean_param($frm->username, PARAM_USERNAME)) {
50256f9c 120 $errormsg = get_string('username').': '.get_string("invalidusername");
8570cff0 121 $errorcode = 2;
8570cff0 122 $user = null;
05b18caf 123 }
8570cff0 124 }
05b18caf 125
8570cff0 126 if ($user) {
127 //user already supplied by aut plugin prelogin hook
128 } else if (($frm->username == 'guest') and empty($CFG->guestloginbutton)) {
129 $user = false; /// Can't log in as guest if guest button is disabled
130 $frm = false;
131 } else {
132 if (empty($errormsg)) {
133 $user = authenticate_user_login($frm->username, $frm->password);
cf5560fb 134 }
8570cff0 135 }
e58269e4
EL
136
137 // Intercept 'restored' users to provide them with info & reset password
138 if (!$user and $frm and is_restored_user($frm->username)) {
139 $PAGE->set_title(get_string('restoredaccount'));
140 $PAGE->set_heading($site->fullname);
141 echo $OUTPUT->header();
142 echo $OUTPUT->heading(get_string('restoredaccount'));
143 echo $OUTPUT->box(get_string('restoredaccountinfo'), 'generalbox boxaligncenter');
144 require_once('restored_password_form.php'); // Use our "supplanter" login_forgot_password_form. MDL-20846
145 $form = new login_forgot_password_form('forgot_password.php', array('username' => $frm->username));
146 $form->display();
147 echo $OUTPUT->footer();
148 die;
149 }
150
8570cff0 151 update_login_count();
f9903ed0 152
8570cff0 153 if ($user) {
a718d872 154
8570cff0 155 // language setup
b3df1764 156 if (isguestuser($user)) {
8570cff0 157 // no predefined language for guests - use existing session or default site lang
158 unset($user->lang);
18ceee5c 159
8570cff0 160 } else if (!empty($user->lang)) {
161 // unset previous session language - use user preference instead
162 unset($SESSION->lang);
163 }
18ceee5c 164
8570cff0 165 if (empty($user->confirmed)) { // This account was never confirmed
166 $PAGE->set_title(get_string("mustconfirm"));
e58269e4 167 $PAGE->set_heading($site->fullname);
8570cff0 168 echo $OUTPUT->header();
169 echo $OUTPUT->heading(get_string("mustconfirm"));
170 echo $OUTPUT->box(get_string("emailconfirmsent", "", $user->email), "generalbox boxaligncenter");
171 echo $OUTPUT->footer();
172 die;
173 }
c21c671d 174
8570cff0 175 /// Let's get them all set up.
176 add_to_log(SITEID, 'user', 'login', "view.php?id=$USER->id&course=".SITEID,
177 $user->id, 0, $user->id);
0342fc36
PS
178 complete_user_login($user);
179
180 // sets the username cookie
181 if (!empty($CFG->nolastloggedin)) {
182 // do not store last logged in user in cookie
183 // auth plugins can temporarily override this from loginpage_hook()
184 // do not save $CFG->nolastloggedin in database!
185
186 } else if (empty($CFG->rememberusername) or ($CFG->rememberusername == 2 and empty($frm->rememberusername))) {
187 // no permanent cookies, delete old one if exists
188 set_moodle_cookie('');
189
190 } else {
191 set_moodle_cookie($USER->username);
192 }
e06f15ae 193
8570cff0 194 /// Prepare redirection
195 if (user_not_fully_set_up($USER)) {
196 $urltogo = $CFG->wwwroot.'/user/edit.php';
197 // We don't delete $SESSION->wantsurl yet, so we get there later
808a3baa 198
b792a64a 199 } else if (isset($SESSION->wantsurl) and (strpos($SESSION->wantsurl, $CFG->wwwroot) === 0 or strpos($SESSION->wantsurl, str_replace('http://', 'https://', $CFG->wwwroot)) === 0)) {
8570cff0 200 $urltogo = $SESSION->wantsurl; /// Because it's an address in this site
201 unset($SESSION->wantsurl);
808a3baa 202
8570cff0 203 } else {
204 // no wantsurl stored or external - go to homepage
205 $urltogo = $CFG->wwwroot.'/';
206 unset($SESSION->wantsurl);
156b8e3c 207 }
1f48cd28 208
156b8e3c
AG
209 // If the url to go to is the same as the site page, check for default homepage.
210 if ($urltogo == ($CFG->wwwroot . '/')) {
edd2686c
AG
211 $home_page = get_home_page();
212 // Go to my-moodle page instead of site homepage if defaulthomepage set to homepage_my
213 if ($home_page == HOMEPAGE_MY && !is_siteadmin() && !isguestuser()) {
214 if ($urltogo == $CFG->wwwroot or $urltogo == $CFG->wwwroot.'/' or $urltogo == $CFG->wwwroot.'/index.php') {
215 $urltogo = $CFG->wwwroot.'/my/';
216 }
bee00f48 217 }
8570cff0 218 }
089b19f6 219
8570cff0 220 /// check if user password has expired
221 /// Currently supported only for ldap-authentication module
222 $userauth = get_auth_plugin($USER->auth);
223 if (!empty($userauth->config->expiration) and $userauth->config->expiration == 1) {
224 if ($userauth->can_change_password()) {
225 $passwordchangeurl = $userauth->change_password_url();
99f9f85f 226 if (!$passwordchangeurl) {
e6d4c2f8 227 $passwordchangeurl = $CFG->httpswwwroot.'/login/change_password.php';
228 }
8570cff0 229 } else {
230 $passwordchangeurl = $CFG->httpswwwroot.'/login/change_password.php';
231 }
232 $days2expire = $userauth->password_expire($USER->username);
233 $PAGE->set_title("$site->fullname: $loginsite");
234 $PAGE->set_heading("$site->fullname");
8570cff0 235 if (intval($days2expire) > 0 && intval($days2expire) < intval($userauth->config->expiration_warning)) {
236 echo $OUTPUT->header();
237 echo $OUTPUT->confirm(get_string('auth_passwordwillexpire', 'auth', $days2expire), $passwordchangeurl, $urltogo);
238 echo $OUTPUT->footer();
239 exit;
240 } elseif (intval($days2expire) < 0 ) {
241 echo $OUTPUT->header();
242 echo $OUTPUT->confirm(get_string('auth_passwordisexpired', 'auth'), $passwordchangeurl, $urltogo);
243 echo $OUTPUT->footer();
244 exit;
089b19f6 245 }
8570cff0 246 }
089b19f6 247
8570cff0 248 reset_login_count();
2f1a4248 249
8a8f1c7c
PS
250 // test the session actually works by redirecting to self
251 $SESSION->wantsurl = $urltogo;
252 redirect(new moodle_url(get_login_url(), array('testsession'=>$USER->id)));
f3d3f3e8 253
8570cff0 254 } else {
255 if (empty($errormsg)) {
256 $errormsg = get_string("invalidlogin");
257 $errorcode = 3;
258 }
f9903ed0 259 }
8570cff0 260}
8223d271 261
4acffa49 262/// Detect problems with timedout sessions
8570cff0 263if ($session_has_timed_out and !data_submitted()) {
264 $errormsg = get_string('sessionerroruser', 'error');
265 $errorcode = 4;
266}
d9969553 267
268/// First, let's remember where the user was trying to get to before they got here
9c9f7d77 269
8570cff0 270if (empty($SESSION->wantsurl)) {
271 $SESSION->wantsurl = (array_key_exists('HTTP_REFERER',$_SERVER) &&
272 $_SERVER["HTTP_REFERER"] != $CFG->wwwroot &&
273 $_SERVER["HTTP_REFERER"] != $CFG->wwwroot.'/' &&
274 $_SERVER["HTTP_REFERER"] != $CFG->httpswwwroot.'/login/' &&
275 $_SERVER["HTTP_REFERER"] != $CFG->httpswwwroot.'/login/index.php')
276 ? $_SERVER["HTTP_REFERER"] : NULL;
277}
792197b0 278
4acffa49 279/// Redirect to alternative login URL if needed
8570cff0 280if (!empty($CFG->alternateloginurl)) {
281 $loginurl = $CFG->alternateloginurl;
4acffa49 282
8570cff0 283 if (strpos($SESSION->wantsurl, $loginurl) === 0) {
284 //we do not want to return to alternate url
285 $SESSION->wantsurl = NULL;
792197b0 286 }
f3d3f3e8 287
8570cff0 288 if ($errorcode) {
289 if (strpos($loginurl, '?') === false) {
290 $loginurl .= '?';
450dcc60 291 } else {
8570cff0 292 $loginurl .= '&';
450dcc60 293 }
8570cff0 294 $loginurl .= 'errorcode='.$errorcode;
9c9f7d77 295 }
f3d3f3e8 296
8570cff0 297 redirect($loginurl);
298}
3fe6b721 299
17c70aa0
PS
300// make sure we really are on the https page when https login required
301$PAGE->verify_https_required();
5b2ae584 302
8570cff0 303/// Generate the login page with forms
d9969553 304
b85b25eb
PS
305if (!isset($frm) or !is_object($frm)) {
306 $frm = new stdClass();
307}
308
8570cff0 309if (empty($frm->username) && $authsequence[0] != 'shibboleth') { // See bug 5184
310 if (!empty($_GET["username"])) {
78fcdb5f 311 $frm->username = clean_param($_GET["username"], PARAM_RAW); // we do not want data from _POST here
8570cff0 312 } else {
0342fc36 313 $frm->username = get_moodle_cookie();
8570cff0 314 }
f9903ed0 315
8570cff0 316 $frm->password = "";
317}
318
319if (!empty($frm->username)) {
320 $focus = "password";
321} else {
322 $focus = "username";
323}
324
325if (!empty($CFG->registerauth) or is_enabled_auth('none') or !empty($CFG->auth_instructions)) {
326 $show_instructions = true;
327} else {
328 $show_instructions = false;
329}
330
b257d7c4
PL
331$potentialidps = array();
332foreach($authsequence as $authname) {
333 $authplugin = get_auth_plugin($authname);
334 $potentialidps = array_merge($potentialidps, $authplugin->loginpage_idp_list($SESSION->wantsurl));
335}
336
8570cff0 337$PAGE->set_title("$site->fullname: $loginsite");
338$PAGE->set_heading("$site->fullname");
8570cff0 339
340echo $OUTPUT->header();
e81fb5ef
PS
341
342if (isloggedin() and !isguestuser()) {
343 // prevent logging when already logged in, we do not want them to relogin by accident because sesskey would be changed
344 echo $OUTPUT->box_start();
3354eb8c
PS
345 $logout = new single_button(new moodle_url($CFG->httpswwwroot.'/login/logout.php', array('sesskey'=>sesskey(),'loginpage'=>1)), get_string('logout'), 'post');
346 $continue = new single_button(new moodle_url($CFG->httpswwwroot.'/login/index.php', array('cancel'=>1)), get_string('cancel'), 'get');
e81fb5ef
PS
347 echo $OUTPUT->confirm(get_string('alreadyloggedin', 'error', fullname($USER)), $logout, $continue);
348 echo $OUTPUT->box_end();
349} else {
350 include("index_form.html");
a59dc25d
RW
351 if ($errormsg) {
352 $PAGE->requires->js_init_call('M.util.focus_login_error', null, true);
353 } else if (!empty($CFG->loginpageautofocus)) {
2d16dad0
PS
354 //focus username or password
355 $PAGE->requires->js_init_call('M.util.focus_login_form', null, true);
356 }
e81fb5ef
PS
357}
358
6c3ef410 359echo $OUTPUT->footer();