29cf4f50f1
on web.pm update.php updateprocess.php for update page to remember user's last choice git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@6685 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
33 lines
1.0 KiB
PHP
33 lines
1.0 KiB
PHP
<?php
|
|
|
|
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
|
|
header("Cache-Control: no-store, no-cache, must-revalidate");
|
|
header("Cache-Control: post-check=0, pre-check=0", false);
|
|
header("Pragma: no-cache");
|
|
require_once "lib/functions.php";
|
|
require_once "lib/security.php";
|
|
require_once "security/jsonwrapper.php";
|
|
|
|
if(isset($_GET["logout"]) or isset($_POST["logout"])){
|
|
logout();
|
|
//insertLogin();
|
|
}
|
|
if (isset($_REQUEST["password"])) {
|
|
$_SESSION=array(); #Clear data from session. prevent session data from migrating in a hijacking?
|
|
session_regenerate_id(true);#Zap existing session entirely..
|
|
setpassword($_REQUEST["password"]);
|
|
$_SESSION["xcatpassvalid"]=-1; #unproven password
|
|
}
|
|
if (isset($_REQUEST["username"])) {
|
|
$_SESSION["username"]=$_REQUEST["username"];
|
|
$_SESSION["xcatpassvalid"]=-1; #unproven password
|
|
}
|
|
|
|
$jdata=array();
|
|
if (isAuthenticated()) { $jdata["authenticated"]="yes"; }
|
|
else { $jdata["authenticated"]="no"; }
|
|
|
|
echo json_encode($jdata);
|
|
?>
|
|
|