* Copyright (C) 2003 Xavier Dutoit * Copyright (C) 2004-2007 Laurent Destailleur * Copyright (C) 2004 Sebastien Di Cintio * Copyright (C) 2004 Benoit Mortier * Copyright (C) 2005-2007 Regis Houssin * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. * * $Id$ */ /** \file htdocs/main.inc.php \brief Fichier de formatage generique des ecrans Dolibarr \version $Revision$ */ // Forcage du parametrage PHP magic_quotes_gpc et nettoyage des parametres // (Sinon il faudrait a chaque POST, conditionner // la lecture de variable par stripslashes selon etat de get_magic_quotes). // En mode off (recommande il faut juste faire addslashes au moment d'un insert/update. @set_magic_quotes_runtime(0); function stripslashes_deep($value) { return (is_array($value) ? array_map('stripslashes_deep', $value) : stripslashes($value)); } if (get_magic_quotes_gpc()) { $_GET = array_map('stripslashes_deep', $_GET); $_POST = array_map('stripslashes_deep', $_POST); $_COOKIE = array_map('stripslashes_deep', $_COOKIE); $_REQUEST = array_map('stripslashes_deep', $_REQUEST); } // Filtre les GET et POST pour supprimer les SQL INJECTION function test_sql_inject($val) { $sql_inj = 0; $sql_inj += eregi('delete[[:space:]]+from', $val); $sql_inj += eregi('create[[:space:]]+table', $val); $sql_inj += eregi('update.+set.+=', $val); $sql_inj += eregi('insert[[:space:]]+into', $val); $sql_inj += eregi('select.+from', $val); return $sql_inj; } foreach ($_GET as $key => $val) { if (test_sql_inject($val) > 0) unset($_GET[$key]); } foreach ($_POST as $key => $val) { if (test_sql_inject($val) > 0) unset($_POST[$key]); } // Fin filtre des GET et POST require_once("master.inc.php"); // Chargement des includes complementaire de presentation if ($conf->use_ajax) require_once(DOL_DOCUMENT_ROOT.'/lib/ajax.lib.php'); if (! defined('NOREQUIREMENU')) require_once(DOL_DOCUMENT_ROOT ."/menu.class.php"); if (! defined('NOREQUIREHTML')) require_once(DOL_DOCUMENT_ROOT ."/html.form.class.php"); // Init session $sessionname="DOLSESSID_".$dolibarr_main_db_name; session_name($sessionname); session_start(); dolibarr_syslog("Session name=".$sessionname." Session id()=".session_id().", _SESSION['dol_login']=".$_SESSION["dol_login"]); $bc[0]="class=\"impair\""; $bc[1]="class=\"pair\""; /* * Phase identification */ // $authmode contient la liste des differents modes d'identification a tester // par ordre de preference. Attention, rares sont les combinaisons possibles si // plusieurs modes sont indiques. // Example: array('http','dolibarr'); // Example: array('http','dolibarr_mdb2'); // Example: array('ldap'); // Example: array('forceuser'); $authmode=array(); // Authentication mode: non defini (cas de compatibilite ascendante) if (! $dolibarr_main_authentication) { // Mode par defaut, on test http + dolibarr $authmode=array('http','dolibarr'); } // Authentication mode: http if ($dolibarr_main_authentication == 'http') { $authmode=array('http'); } // Authentication mode: dolibarr if ($dolibarr_main_authentication == 'dolibarr') { $authmode=array('dolibarr'); } // Authentication mode: ldap if ($dolibarr_main_authentication == 'ldap') { $authmode=array('ldap'); } // Authentication mode: forceuser if ($dolibarr_main_authentication == 'forceuser' || isset($dolibarr_auto_user)) { $authmode=array('forceuser'); if (! isset($dolibarr_auto_user)) $dolibarr_auto_user='auto'; } // No authentication mode if (! sizeof($authmode)) { $langs->load('main'); dolibarr_print_error('',$langs->trans("ErrorConfigParameterNotDefined",'dolibarr_main_authentication')); exit; } // Si la demande du login a deja eu lieu, on le recupere depuis la session // sinon appel du module qui realise sa demande. // A l'issu de cette phase, la variable $login sera definie. $login=''; $test=true; if (! isset($_SESSION["dol_login"])) { // On est pas deja authentifie, on demande le login/mot de passe // A l'issu de cette demande, le login doivent avoir ete place dans dol_login // et en session on place dol_login et dol_password // Verification du code securite graphique if ($test && isset($_POST["username"]) && $conf->global->MAIN_SECURITY_ENABLECAPTCHA) { require_once DOL_DOCUMENT_ROOT.'/../external-libs/Artichow/Artichow.cfg.php'; require_once ARTICHOW."/AntiSpam.class.php"; // On cree l'objet anti-spam $object = new AntiSpam(); // Verifie code if (! $object->check('dol_antispam_value',$_POST['code'],true)) { dolibarr_syslog('Bad value for code, connexion refused'); $langs->load('main'); $langs->load('other'); $_SESSION["dol_loginmesg"]=$langs->trans("ErrorBadValueForCode"); $test=false; } } // MODE AUTO if ($test && in_array('forceuser',$authmode) && ! $login) { $login=$dolibarr_auto_user; dolibarr_syslog ("Authentification ok (en mode force, login=".$login.")"); $test=false; } // MODE HTTP (Basic) if ($test && in_array('http',$authmode) && ! $login) { $login=$_SERVER["REMOTE_USER"]; $test=false; } // MODE DOLIBARR if ($test && in_array('dolibarr',$authmode) && ! $login) { $login=''; $usertotest=$_POST["username"]; $passwordtotest=$_POST["password"]; if (! empty($_POST["username"])) { // If test username/password asked, we define $test=false and $login var if ok, set $_SESSION["dol_loginmesg"] if ko $table = MAIN_DB_PREFIX."user"; $usernamecol = 'login'; $sql ='SELECT pass, pass_crypted'; $sql.=' from '.$table; $sql.=' where '.$usernamecol." = '".addslashes($_POST["username"])."'"; dolibarr_syslog("main.inc::get password sql=".$sql); $resql=$db->query($sql); if ($resql) { $obj=$db->fetch_object($resql); if ($obj) { $passclear=$obj->pass; $passcrypted=$obj->pass_crypted; $passtyped=$_POST["password"]; $passok=false; // Check crypted password $cryptType=''; if ($conf->global->DATABASE_PWD_ENCRYPTED) $cryptType='md5'; if ($cryptType == 'md5') { if (md5($passtyped) == $passcrypted) $passok=true; } // For compatibility with old versions if (! $passok) { if ($passtyped == $passclear) $passok=true; } // Password ok ? if ($passok) { dolibarr_syslog("Authentification ok (en mode Base Dolibarr)"); $login=$_POST["username"]; $test=false; } else { dolibarr_syslog("Authentification ko bad password (en mode Base Dolibarr) pour '".$_POST["username"]."'"); sleep(1); $langs->load('main'); $langs->load('other'); $_SESSION["dol_loginmesg"]=$langs->trans("ErrorBadLoginPassword"); } } else { dolibarr_syslog("Authentification ko user not found (en mode Base Dolibarr) pour '".$_POST["username"]."'"); sleep(1); $langs->load('main'); $langs->load('other'); $_SESSION["dol_loginmesg"]=$langs->trans("ErrorBadLoginPassword"); } } else { dolibarr_syslog("Authentification ko db error (en mode Base Dolibarr) pour '".$_POST["username"]."', sql=".$sql); sleep(1); $_SESSION["dol_loginmesg"]=$db->lasterror(); } } } // MODE LDAP if ($test && in_array('ldap',$authmode) && ! $login) { $login=''; $usertotest=$_POST["username"]; $passwordtotest=$_POST["password"]; if (! empty($_POST["username"])) { // If test username/password asked, we define $test=false and $login var if ok, set $_SESSION["dol_loginmesg"] if ko $ldapuserattr=$dolibarr_main_auth_ldap_login_attribute; $ldaphost=$dolibarr_main_auth_ldap_host; $ldapport=$dolibarr_main_auth_ldap_port; $ldapversion=$dolibarr_main_auth_ldap_version; $ldapdn=$dolibarr_main_auth_ldap_dn; $ldapadminlogin=$dolibarr_main_auth_ldap_admin_login; $ldapadminpass=$dolibarr_main_auth_ldap_admin_pass; $ldapservertype=(empty($dolibarr_main_auth_ldap_servertype) ? 'openldap' : $dolibarr_main_auth_ldap_servertype); $ldapdebug=(empty($dolibarr_main_auth_ldap_debug) || $dolibarr_main_auth_ldap_debug=="false" ? false : true); if ($ldapdebug) print "DEBUG: Logging LDAP steps
\n"; // Debut code pour compatibilite (prend info depuis config en base) // Ne plus utiliser. La config LDAP de connexion doit etre dans le // fichier conf.php if (! $ldapuserattr && $conf->ldap->enabled) { if ($conf->global->LDAP_SERVER_TYPE == "activedirectory") { $ldapuserattr = $conf->global->LDAP_FIELD_LOGIN_SAMBA; } else { $ldapuserattr = $conf->global->LDAP_FIELD_LOGIN; } } if (! $ldaphost) $ldaphost=$conf->global->LDAP_SERVER_HOST; if (! $ldapport) $ldapport=$conf->global->LDAP_SERVER_PORT; if (! $ldapservertype) $ldapservertype=$conf->global->LDAP_SERVER_TYPE; if (! $ldapversion) $ldapversion=$conf->global->LDAP_SERVER_PROTOCOLVERSION; if (! $ldapdn) $ldapdn=$conf->global->LDAP_SERVER_DN; if (! $ldapadminlogin) $ldapadminlogin=$conf->global->LDAP_ADMIN_DN; if (! $ldapadminpass) $ldapadminpass=$conf->global->LDAP_ADMIN_PASS; // Fin code pour compatiblite require_once(DOL_DOCUMENT_ROOT."/lib/ldap.class.php"); $ldap=new Ldap(); $ldap->server=array($ldaphost); $ldap->serverPort=$ldapport; $ldap->ldapProtocolVersion=$ldapversion; $ldap->serverType=$ldapservertype; $ldap->searchUser=$usertotest; $ldap->searchPassword=$passwordtotest; if ($ldapdebug) dolibarr_syslog("Authentification LDAP --> Server:".join(',',$ldap->server).", Port:".$ldap->serverPort.", Protocol:".$ldap->ldapProtocolVersion.", Type:".$ldap->serverType.", Admin:".$ldap->searchUser.", Pass:".$ldap->searchPassword); $resultCheckUserDN = $ldap->checkPass($usertotest,$passwordtotest); if ($resultCheckUserDN) $ldap->searchUser = $ldap->ldapUserDN; $result=$ldap->connect_bind(); if ($result > 0) { if ($result == 2) { dolibarr_syslog("Authentification ok (en mode LDAP)"); $login=$_POST["username"]; $test=false; } if ($result == 1) { dolibarr_syslog("Authentification ko bad password (en mode LDAP) pour '".$_POST["username"]."'"); sleep(1); $langs->load('main'); $langs->load('other'); $_SESSION["dol_loginmesg"]=$langs->trans("ErrorBadLoginPassword"); } $ldap->close(); } else { dolibarr_syslog("Authentification ko failed to connect to LDAP (en mode LDAP) pour '".$_POST["username"]."'"); sleep(1); $langs->load('main'); $langs->load('other'); $_SESSION["dol_loginmesg"]=$langs->trans("ErrorBadLoginPassword"); } } } if (! $login) { // We show login page dol_loginfunction($langs,$conf,$mysoc); exit; } // Charge l'objet user depuis son login ou son SID $result=0; if ($login && in_array('ldap',$authmode) && $conf->ldap->enabled && $conf->global->LDAP_SYNCHRO_ACTIVE == 'ldap2dolibarr') { require_once(DOL_DOCUMENT_ROOT."/lib/ldap.class.php"); $ldap=new Ldap(); $ldap->server=array($ldaphost); $ldap->serverPort=$ldapport; $ldap->ldapProtocolVersion=$ldapversion; $ldap->serverType=$ldapservertype; $ldap->searchUser=$usertotest; $ldap->searchPassword=$passwordtotest; $result=$ldap->connect_bind(); if ($result > 0) { // On charge les attributs du user ldap if ($ldapdebug) print "DEBUG: login ldap = ".$login."
\n"; $ldap->fetch($login); if ($ldapdebug) print "DEBUG: UACF = ".join(',',$ldap->uacf)."
\n"; if ($ldapdebug) print "DEBUG: pwdLastSet = ".dolibarr_print_date($ldap->pwdlastset,'day')."
\n"; if ($ldapdebug) print "DEBUG: badPasswordTime = ".dolibarr_print_date($ldap->badpwdtime,'day')."
\n"; /* // On stop si le mot de passe ldap doit etre modifie if ($ldap->pwdlastset == 0) { session_destroy(); dolibarr_syslog('User '.$login.' must change password next logon'); if ($ldapdebug) print "DEBUG: User ".$login." must change password
\n"; $ldap->close(); // On repart sur page accueil session_name($sessionname); session_start(); $langs->load('ldap'); $_SESSION["loginmesg"]=$langs->trans("UserMustChangePassNextLogon"); header('Location: '.DOL_URL_ROOT.'/index.php'); exit; } */ // On recherche le user dolibarr en fonction de son SID ldap $sid = $ldap->getObjectSid($login); if ($ldapdebug) print "DEBUG: sid = ".$sid."
\n"; $result=$user->fetch($login,$sid); if ($result > 0) { //TODO: on verifie si le login a change et on met a jour les attributs dolibarr if ($user->login != $ldap->login && $ldap->login) { $user->login = $ldap->login; $user->update($user); } //$resultUpdate = $user->update_ldap2dolibarr(); } } else { if ($ldapdebug) print "DEBUG: Error connect_bind = ".$ldap->error."
\n"; $ldap->close(); dolibarr_syslog('Synchro LDAP KO'); session_destroy(); session_name($sessionname); session_start(); $langs->load('admin'); $_SESSION["dol_loginmesg"]=$langs->trans("LDAPSynchroKO"); header('Location: '.DOL_URL_ROOT.'/index.php'); exit; } } else { $result=$user->fetch($login); } if ($result <= 0) { dolibarr_syslog('User not found, connexion refused'); session_destroy(); session_name($sessionname); session_start(); $langs->load('main'); if ($result == 0) $_SESSION["dol_loginmesg"]=$langs->trans("ErrorCantLoadUserFromDolibarrDatabase",$login); if ($result < 0) $_SESSION["dol_loginmesg"]=$user->error; header('Location: '.DOL_URL_ROOT.'/index.php'); exit; } } else { // On est deja en session qui a sauvegarde login // Remarks: On ne sauvegarde pas objet user car pose pb dans certains cas mal identifies $login=$_SESSION["dol_login"]; $result=$user->fetch($login); dolibarr_syslog("This is an already user logged session. _SESSION['dol_login']=".$login); if ($result <= 0) { // Account has been removed after login dolibarr_syslog("Can't load user even if session logged. _SESSION['dol_login']=".$login, LOG_WARN); session_destroy(); session_name($sessionname); session_start(); $langs->load('main'); if ($result == 0) $_SESSION["dol_loginmesg"]=$langs->trans("ErrorCantLoadUserFromDolibarrDatabase",$login); if ($result < 0) $_SESSION["dol_loginmesg"]=$user->error; header('Location: '.DOL_URL_ROOT.'/index.php'); exit; } } // Est-ce une nouvelle session if (! isset($_SESSION["dol_login"])) { // Nouvelle session pour ce login $_SESSION["dol_login"]=$user->login; $_SESSION["dol_password"]=$user->pass_crypted; dolibarr_syslog("This is a new started user session. _SESSION['dol_login']=".$_SESSION["dol_login"].' Session id='.session_id()); $user->update_last_login_date(); // Module webcalendar if ($conf->webcal->enabled && $user->webcal_login != "") { $domain=''; // Extract domain from url (Useless because only cookie on same domain are authorized by browser //if (eregi('^(https:[\\\/]+[^\\\/]+)',$conf->global->PHPWEBCALENDAR_URL,$reg)) $domain=$reg[1]; // Creation du cookie permettant de sauver le login $cookiename='webcalendar_login'; if (! isset($HTTP_COOKIE_VARS[$cookiename])) { setcookie($cookiename, $user->webcal_login, 0, "/", $domain, 0); } // Creation du cookie permettant de sauver la session $cookiename='webcalendar_session'; if (! isset($HTTP_COOKIE_VARS[$cookiename])) { setcookie($cookiename, 'TODO', 0, "/", $domain, 0); } } // Module Phenix if ($conf->phenix->enabled && $user->phenix_login != "" && $conf->phenix->cookie) { // Creation du cookie permettant la connexion automatique, valide jusqu'a la fermeture du browser if (!isset($HTTP_COOKIE_VARS[$conf->phenix->cookie])) { setcookie($conf->phenix->cookie, $user->phenix_login.":".$user->phenix_pass_crypted.":1", 0, "/", "", 0); } } } // Si user admin, on force droits sur les modules base if ($user->admin) { $user->rights->user->user->lire=1; $user->rights->user->user->creer=1; $user->rights->user->user->password=1; $user->rights->user->user->supprimer=1; $user->rights->user->self->creer=1; $user->rights->user->self->password=1; } /** * Overwrite configs global par configs perso * ------------------------------------------ */ if (isset($user->conf->MAIN_SIZE_LISTE_LIMIT) && $user->conf->MAIN_SIZE_LISTE_LIMIT > 0) { $conf->liste_limit = $user->conf->MAIN_SIZE_LISTE_LIMIT; } if (isset($user->conf->PRODUIT_LIMIT_SIZE)) { $conf->produit->limit_size = $user->conf->PRODUIT_LIMIT_SIZE; } if (! empty($user->conf->MAIN_LANG_DEFAULT)) { if ($langs->getDefaultLang() != $user->conf->MAIN_LANG_DEFAULT) { // Si on a un langage perso different du langage courant global $langs->setDefaultLang($user->conf->MAIN_LANG_DEFAULT); $langs->setPhpLang($user->conf->MAIN_LANG_DEFAULT); } } // Cas de forcage de la langue if (! empty($_GET["lang"])) { $langs->setDefaultLang($_GET["lang"]); $langs->setPhpLang($_GET["lang"]); } // Remplace conf->css par valeur personnalise if (isset($user->conf->MAIN_THEME) && $user->conf->MAIN_THEME) { $conf->theme=$user->conf->MAIN_THEME; $conf->css = "theme/".$conf->theme."/".$conf->theme.".css"; } // Cas de forcage du style depuis url if (! empty($_GET["theme"])) { $conf->theme=$_GET["theme"]; $conf->css = "theme/".$conf->theme."/".$conf->theme.".css"; } // Si feuille de style en php existe if (file_exists(DOL_DOCUMENT_ROOT.'/'.$conf->css.".php")) $conf->css.=".php"; if (isset($user->conf->MAIN_DISABLE_JAVASCRIPT) && $user->conf->MAIN_DISABLE_JAVASCRIPT) { $conf->use_javascript=! $user->conf->MAIN_DISABLE_JAVASCRIPT; } // Defini gestionnaire de menu a utiliser if (! $user->societe_id) // Si utilisateur interne { $conf->top_menu=$conf->global->MAIN_MENU_BARRETOP; $conf->left_menu=$conf->global->MAIN_MENU_BARRELEFT; // Pour compatibilite if ($conf->left_menu == 'eldy.php') $conf->left_menu='eldy_backoffice.php'; } else // Si utilisateur externe { $conf->top_menu=$conf->global->MAIN_MENUFRONT_BARRETOP; $conf->left_menu=$conf->global->MAIN_MENUFRONT_BARRELEFT; } // Only default and auguria menu manage canvas menu (auguria not correctly yet) if (! eregi('^default',$conf->left_menu) && ! eregi('^auguria',$conf->left_menu)) $conf->global->PRODUCT_CANVAS_ABILITY=0; // Si besoin de smarty if ($conf->global->PRODUCT_CANVAS_ABILITY) { // SMARTY // Definit dans le fichier de conf // $dolibarr_smarty_libs_dir="/home/www/dolibarr/external-libs/smarty/libs/"; // $dolibarr_smarty_compile="/home/www/dolibarr/documents/temp/smarty_templates"; // $dolibarr_smarty_cache="/home/www/dolibarr/documents/temp/smarty_cache"; $smarty_libs = $dolibarr_smarty_libs_dir. "Smarty.class.php"; if (file_exists ($smarty_libs)) { require_once($smarty_libs); $smarty = new Smarty(); $smarty->compile_dir = $dolibarr_smarty_compile; $smarty->cache_dir = $dolibarr_smarty_cache; //$smarty->config_dir = '/web/www.domain.com/smarty/configs'; } else { dolibarr_print_error('',"Library Smarty ".$smarty_libs." not found. Check parameter dolibarr_smarty_libs_dir in conf file."); } } // Si le login n'a pu etre recupere, on est identifie avec un compte qui n'existe pas. // Tentative de hacking ? if (! $user->login) accessforbidden(); // Verifie si user actif if ($user->statut < 1) { // Si non actif, on delogue le user $langs->load("other"); dolibarr_syslog ("Authentification ko (en mode Pear Base Dolibarr) car login desactive"); accessforbidden($langs->trans("ErrorLoginDisabled")); exit; } dolibarr_syslog("Access to ".$_SERVER["PHP_SELF"],LOG_INFO); if (! defined('MAIN_INFO_SOCIETE_PAYS')) { define('MAIN_INFO_SOCIETE_PAYS','1'); } // On charge les fichiers lang principaux $langs->load("main"); $langs->load("dict"); /* * */ if (defined("MAIN_NOT_INSTALLED")) { Header("Location: ".DOL_URL_ROOT."/install/index.php"); exit; } // Constantes utilise pour definir le nombre de lignes des textarea if (! eregi("firefox",$_SERVER["HTTP_USER_AGENT"])) { define('ROWS_1',1); define('ROWS_2',2); define('ROWS_3',3); define('ROWS_4',4); define('ROWS_5',5); define('ROWS_6',6); define('ROWS_7',7); define('ROWS_8',8); define('ROWS_9',9); } else { define('ROWS_1',0); define('ROWS_2',1); define('ROWS_3',2); define('ROWS_4',3); define('ROWS_5',4); define('ROWS_6',5); define('ROWS_7',6); define('ROWS_8',7); define('ROWS_9',8); } /** \brief Affiche formulaire de login \remarks Il faut changer le code html dans cette fonction pour changer le design de la logon */ function dol_loginfunction($langs,$conf,$mysoc) { $langs->load("main"); $langs->load("other"); $conf->css = "theme/".$conf->theme."/".$conf->theme.".css"; // Si feuille de style en php existe if (file_exists(DOL_DOCUMENT_ROOT.'/'.$conf->css.".php")) $conf->css.=".php"; header('Cache-Control: Public, must-revalidate'); // Ce DTD est KO car inhibe document.body.scrollTop //print ''; // Ce DTD est OK print ''."\n"; // En tete html print "\n"; print "\n"; print ''."\n"; // Evite indexation par robots print "Dolibarr login\n"; print ''."\n"; print ''."\n"; print ''."\n"; print ''."\n"; // Body print ''; // Start Form print '
'; // Table 1 print ''; if (file_exists(DOL_DOCUMENT_ROOT.'/logo.png')) { // TODO A virer Cas qui ne devrait pas arriver (pour compatibilité) print ''; } else { print ''; } print '
'; print '
Dolibarr '.DOL_VERSION.'
'; print '
'; // Table 2 print ''; print ''; print ''; print ''; print ''; $title.=$langs->trans("SessionName").': '.session_name(); if ($conf->main_authentication) $title.=", ".$langs->trans("AuthenticationMode").': '.$conf->main_authentication; // Show logo (search in order: small company logo, large company logo, theme logo, common logo) $width=0; $urllogo=DOL_URL_ROOT.'/theme/login_logo.png'; if (! empty($mysoc->logo_small) && is_readable($conf->societe->dir_logos.'/thumbs/'.$mysoc->logo_small)) { $urllogo=DOL_URL_ROOT.'/viewimage.php?modulepart=companylogo&file='.urlencode('/thumbs/'.$mysoc->logo_small); } elseif (! empty($mysoc->logo_small) && is_readable($conf->societe->dir_logos.'/'.$mysoc->logo)) { $urllogo=DOL_URL_ROOT.'/viewimage.php?modulepart=companylogo&file='.urlencode($mysoc->logo); $width=96; } elseif (is_readable(DOL_DOCUMENT_ROOT.'/theme/'.$conf->theme.'/img/login_logo.png')) { $urllogo=DOL_URL_ROOT.'/theme/'.$conf->theme.'/img/login_logo.png'; } print ''; print ''."\n"; print ''; print ''; print ''."\n"; // Code de sécurité $disabled=! $conf->global->MAIN_SECURITY_ENABLECAPTCHA; if (function_exists("imagecreatefrompng") && ! $disabled) { //print "Info session: ".session_name().session_id();print_r($_SESSION); print ''; print ''; print ''; } print ''; if (! $conf->global->MAIN_SECURITY_DISABLEFORGETPASSLINK) { print ''; } print '
 

  '.$langs->trans("Login").'  
  '.$langs->trans("Password").'   '; print '
 
  '.$langs->trans("SecurityCode").''; print ''; print ''; print ''; print ''; print '
'.img_refresh().'
'; print '

'; print ''; print '
('.$langs->trans("PasswordForgotten").')
'; print ''; print '
'; // Message if ($_SESSION["dol_loginmesg"]) { print '
'; print $_SESSION["dol_loginmesg"]; $_SESSION["dol_loginmesg"]=""; print '
'; } if ($conf->global->MAIN_HOME) { print '
'; print nl2br($conf->global->MAIN_HOME); print '

'; } // Fin entete html print "\n\n"; } /** * \brief Affiche en-tete HTML * \param head Lignes d'en-tete head optionnelles * \param title Titre page web * \param disablejs N'affiche pas les liens vers les js (Ex: qd fonction utilisee par sous formulaire Ajax) */ function top_htmlhead($head, $title='', $disablejs=0, $disablehead=0) { global $user, $conf, $langs, $db, $micro_start_time; // Pour le tuning optionnel. Activer si la variable d'environnement DOL_TUNING // est positionne A appeler avant tout. if (isset($_SERVER['DOL_TUNING'])) $micro_start_time=dol_microtime_float(true); if (! $conf->css) $conf->css ='/theme/eldy/eldy.css.php'; //header("Content-type: text/html; charset=UTF-8"); header("Content-type: text/html; charset=".$conf->character_set_client); print ''; //print ''; print "\n"; print "\n"; if ($disablehead == 0) { print "\n"; print $langs->lang_header(); print $head; // Affiche meta print ''."\n"; // Evite indexation par robots print ''."\n"; // Affiche title if ($title) { print 'Dolibarr - '.$title.''; } else { if (defined("MAIN_TITLE")) { print "".MAIN_TITLE.""; } else { print 'Dolibarr'; } } print "\n"; // Affiche style sheets et link print ''."\n"; print ''."\n"; // Style sheets pour la class Window if (! $disablejs && ($conf->use_javascript && $conf->use_ajax && $conf->global->MAIN_CONFIRM_AJAX)) { print ''."\n"; print ''."\n"; print ''."\n"; } // Definition en alternate style sheet des feuilles de styles les plus maintenues // Les navigateurs qui supportent sont rares. Plus aucun connu. /* print ''."\n"; print ''."\n"; print ''."\n"; */ print ''."\n"; print ''."\n"; print ''."\n"; if (! $disablejs && ($conf->use_javascript || $conf->use_ajax)) { print ''."\n"; } if (! $disablejs && $conf->use_ajax) { require_once DOL_DOCUMENT_ROOT.'/lib/ajax.lib.php'; print ''."\n"; print ''."\n"; print ''."\n"; print ''."\n"; print ''."\n"; print ''."\n"; } // Define tradMonths javascript array $tradTemp=Array($langs->trans("January"), $langs->trans("February"), $langs->trans("March"), $langs->trans("April"), $langs->trans("May"), $langs->trans("June"), $langs->trans("July"), $langs->trans("August"), $langs->trans("September"), $langs->trans("October"), $langs->trans("November"), $langs->trans("December") ); print ''."\n"; print "\n"; } } /** * \brief Affiche en-tete HTML + BODY + Barre de menu superieure * \param head lignes d'en-tete head * \param title titre page web * \param target target du menu Accueil */ function top_menu($head, $title="", $target="") { global $user, $conf, $langs, $db, $dolibarr_main_authentication; if (! $conf->top_menu) $conf->top_menu ='eldy_backoffice.php'; if (! $conf->left_menu) $conf->left_menu='eldy_backoffice.php'; top_htmlhead($head, $title); print '
'; /* * Si la constante MAIN_NEED_UPDATE est definie (par le script de migration sql en general), c'est que * les donnees ont besoin d'un remaniement. Il faut passer le update.php */ if (isset($conf->global->MAIN_NEED_UPDATE) && $conf->global->MAIN_NEED_UPDATE) { $langs->load("admin"); print '
'."\n"; print ''; print ''; print "
'; print $langs->trans("UpdateRequired",DOL_URL_ROOT.'/install/index.php'); print '
"; llxFooter(); exit; } /* * Barre de menu superieure */ print "\n".''."\n"; print '
'."\n"; // Charge le gestionnaire des entrees de menu du haut if (! file_exists(DOL_DOCUMENT_ROOT ."/includes/menus/barre_top/".$conf->top_menu)) { $conf->top_menu='eldy_backoffice.php'; } require_once(DOL_DOCUMENT_ROOT ."/includes/menus/barre_top/".$conf->top_menu); $menutop = new MenuTop($db); $menutop->atarget=$target; // Affiche le menu $menutop->showmenu(); // Lien sur fiche du login print ''; // Lien logout if (! isset($_SERVER["REMOTE_USER"]) || ! $_SERVER["REMOTE_USER"]) { $title=$langs->trans("Logout"); $title.='
'.$langs->trans("ConnectedSince").': '.dolibarr_print_date($user->datelastlogin,"dayhour"); if ($dolibarr_main_authentication) $title.='
'.$langs->trans("AuthenticationMode").': '.$dolibarr_main_authentication; $text=''; $text.='atarget?(' target="'.$menutop->atarget.'"'):''; $text.='>'; $text.='textwithtooltip('',$title,2,1,$text); // print ''; } print "\n
\n\n"; } /** * \brief Affiche barre de menu gauche * \param menu_array Tableau des entrees de menu * \param helppagename Url pour le lien aide ('' par defaut) * \param form_search Formulaire de recherche permanant supplementaire */ function left_menu($menu_array, $helppagename='', $form_search='') { global $user, $conf, $langs, $db; print '
'."\n"; print "\n"; // Colonne de gauche print ''."\n"; print '
'."\n"; // Autres entrees du menu par le gestionnaire if (! file_exists(DOL_DOCUMENT_ROOT ."/includes/menus/barre_left/".$conf->left_menu)) { $conf->left_menu='eldy_backoffice.php'; } require_once(DOL_DOCUMENT_ROOT ."/includes/menus/barre_left/".$conf->left_menu); $menu=new MenuLeft($db,$menu_array); $menu->showmenu(); // Affichage des zones de recherche permanantes $addzonerecherche=0; if ($conf->societe->enabled && $conf->global->MAIN_SEARCHFORM_SOCIETE) $addzonerecherche=1; if ($conf->societe->enabled && $conf->global->MAIN_SEARCHFORM_CONTACT) $addzonerecherche=1; if (($conf->produit->enabled || $conf->service->enabled) && $conf->global->MAIN_SEARCHFORM_PRODUITSERVICE) $addzonerecherche=1; if ($addzonerecherche && ($user->rights->societe->lire || $user->rights->produit->lire)) { print '
'; if ($conf->societe->enabled && $conf->global->MAIN_SEARCHFORM_SOCIETE && $user->rights->societe->lire) { $langs->load("companies"); printSearchForm(DOL_URL_ROOT.'/societe.php',DOL_URL_ROOT.'/societe.php', img_object($langs->trans("List"),'company').' '.$langs->trans("Companies"),'soc','socname'); } if ($conf->societe->enabled && $conf->global->MAIN_SEARCHFORM_CONTACT && $user->rights->societe->lire) { $langs->load("companies"); printSearchForm(DOL_URL_ROOT.'/contact/index.php',DOL_URL_ROOT.'/contact/index.php', img_object($langs->trans("List"),'contact').' '.$langs->trans("Contacts"),'contact','contactname','contact'); } if (($conf->produit->enabled || $conf->service->enabled) && $conf->global->MAIN_SEARCHFORM_PRODUITSERVICE && $user->rights->produit->lire) { $langs->load("products"); printSearchForm(DOL_URL_ROOT.'/product/liste.php',DOL_URL_ROOT.'/product/index.php', img_object($langs->trans("List"),'product').' '.$langs->trans("Products")."/".$langs->trans("Services"),'products','sall','product'); } print '
'; } // Zone de recherche supplementaire if ($form_search) { print $form_search; } // Lien vers l'aide en ligne (uniquement si langue fr_FR) if ($helppagename) { $langs->load("help"); $helpbaseurl=''; if ($langs->defaultlang == "fr_FR") $helpbaseurl='http://www.dolibarr.com/wikidev/index.php/%s'; $helppage=$langs->trans($helppagename); if ($helpbaseurl) { print '
'; } } if ($conf->global->MAIN_SHOW_BUGTRACK_LINK == 1) { // Lien vers le bugtrack $bugbaseurl='http://savannah.nongnu.org/bugs/?'; $bugbaseurl.='func=additem&group=dolibarr&privacy=1&'; $bugbaseurl.="&details="; $bugbaseurl.=urlencode("\n\n\n\n\n-------------\n"); $bugbaseurl.=urlencode($langs->trans("Version").": ".DOL_VERSION."\n"); $bugbaseurl.=urlencode($langs->trans("Server").": ".$_SERVER["SERVER_SOFTWARE"]."\n"); $bugbaseurl.=urlencode($langs->trans("Url").": ".$_SERVER["REQUEST_URI"]."\n"); print ''; } print "\n"; print "
\n"; print "\n"; // Cas special pour auguria. // On le met pour tous les autres styles sinon ko avec IE6 et resolution autre que 1024x768 if ($conf->theme != 'auguria') { print "\n"; print '
'."\n"; print ''; print '
'."\n"; print "\n"; } print ''."\n"; print '
'."\n"; } /** * \brief Affiche une zone de recherche * \param urlaction Url du post * \param urlobject Url du lien sur titre de la zone de recherche * \param title Titre de la zone de recherche * \param htmlmodesearch 'search' * \param htmlinputname Nom du champ input du formulaire */ function printSearchForm($urlaction,$urlobject,$title,$htmlmodesearch='search',$htmlinputname) { global $langs; print '
'; print ''; print $title.'
'; print ''; print ''; print ' '; print ''; print "
"; } /** * \brief Impression du pied de page DIV + BODY + HTML * \remarks Ferme 2 div * \param foot Non utilise */ function llxFooter($foot='',$limitIEbug=1) { global $conf, $dolibarr_auto_user, $micro_start_time; print "\n
\n".''."\n"; print "\n
\n".''."\n"; if (isset($_SERVER['DOL_TUNING'])) { $micro_end_time=dol_microtime_float(true); print ''; print "\n"; } if ($conf->use_javascript) { print ''; } // Juste pour eviter bug IE qui reorganise mal div precedents si celui-ci absent if ($limitIEbug && ! $conf->browser->firefox) print "\n".'
 
'."\n"; print "\n"; print "\n"; } ?>