mirror of
https://github.com/nuxsmin/sysPass.git
synced 2026-03-22 00:06:53 +01:00
a3b2731fec
* New layout for account searches. Now accounts are showed in a card fashion style, no more rows ;) and colorized customer name for better visualization. * Some UI improvements for better fit on small screens
201 lines
7.9 KiB
PHP
201 lines
7.9 KiB
PHP
<?php
|
|
|
|
/**
|
|
* sysPass
|
|
*
|
|
* @author nuxsmin
|
|
* @link http://syspass.org
|
|
* @copyright 2012 Rubén Domínguez nuxsmin@syspass.org
|
|
*
|
|
* This file is part of sysPass.
|
|
*
|
|
* sysPass is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* sysPass is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with sysPass. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
define('APP_ROOT', '..');
|
|
include_once (APP_ROOT . "/inc/init.php");
|
|
|
|
SP_Util::checkReferer('POST');
|
|
|
|
if (!SP_Init::isLoggedIn()) {
|
|
SP_Common::printJSON(_('La sesión no se ha iniciado o ha caducado'), 10);
|
|
}
|
|
|
|
$sk = SP_Common::parseParams('p', 'sk', FALSE);
|
|
|
|
if (!$sk || !SP_Common::checkSessionKey($sk)) {
|
|
SP_Common::printJSON(_('CONSULTA INVÁLIDA'));
|
|
}
|
|
|
|
$frmAction = SP_Common::parseParams('p', 'action');
|
|
|
|
if ($frmAction == "config") {
|
|
$frmSiteLang = SP_Common::parseParams('p', 'sitelang');
|
|
$frmSessionTimeout = SP_Common::parseParams('p', 'session_timeout', 300);
|
|
$frmLog = SP_Common::parseParams('p', 'logenabled', 0, FALSE, 1);
|
|
$frmDebug = SP_Common::parseParams('p', 'debug', 0, FALSE, 1);
|
|
$frmMaintenance = SP_Common::parseParams('p', 'maintenance', 0, FALSE, 1);
|
|
$frmCheckUpdates = SP_Common::parseParams('p', 'updates', 0, FALSE, 1);
|
|
$frmFiles = SP_Common::parseParams('p', 'filesenabled', 0, FALSE, 1);
|
|
$frmGlobalSearch = SP_Common::parseParams('p', 'globalsearch', 0, FALSE, 1);
|
|
$frmAccountLink = SP_Common::parseParams('p', 'account_link', 0, FALSE, 1);
|
|
$frmAccountCount = SP_Common::parseParams('p', 'account_count', 10);
|
|
$frmAllowedSize = SP_Common::parseParams('p', 'allowed_size', 1024);
|
|
$frmAllowedExts = SP_Common::parseParams('p', 'allowed_exts');
|
|
|
|
$frmWiki = SP_Common::parseParams('p', 'wikienabled', 0, FALSE, 1);
|
|
$frmWikiSearchUrl = SP_Common::parseParams('p', 'wikisearchurl');
|
|
$frmWikiPageUrl = SP_Common::parseParams('p', 'wikipageurl');
|
|
$frmWikiFilter = SP_Common::parseParams('p', 'wikifilter');
|
|
|
|
$frmLdap = SP_Common::parseParams('p', 'ldapenabled', 0, FALSE, 1);
|
|
$frmLdapServer = SP_Common::parseParams('p', 'ldapserver');
|
|
$frmLdapBase = SP_Common::parseParams('p', 'ldapbase');
|
|
$frmLdapGroup = SP_Common::parseParams('p', 'ldapgroup');
|
|
$frmLdapBindUser = SP_Common::parseParams('p', 'ldapbinduser');
|
|
$frmLdapBindPass = SP_Common::parseParams('p', 'ldapbindpass');
|
|
|
|
$frmMail = SP_Common::parseParams('p', 'mailenabled', 0, FALSE, 1);
|
|
$frmMailServer = SP_Common::parseParams('p', 'mailserver');
|
|
$frmMailFrom = SP_Common::parseParams('p', 'mailfrom');
|
|
$frmMailRequests = SP_Common::parseParams('p', 'mailrequestsenabled', 0, FALSE, 1);
|
|
|
|
if ($frmAccountCount == "all") {
|
|
$intAccountCount = 99;
|
|
} else {
|
|
$intAccountCount = $frmAccountCount;
|
|
}
|
|
|
|
if ($frmWiki && (!$frmWikiSearchUrl || !$frmWikiPageUrl || !$frmWikiFilter )) {
|
|
SP_Common::printJSON(_('Faltan parámetros de Wiki'));
|
|
} elseif ($frmWiki) {
|
|
SP_Config::setValue("wikienabled", 1);
|
|
SP_Config::setValue("wikisearchurl", $frmWikiSearchUrl);
|
|
SP_Config::setValue("wikipageurl", $frmWikiPageUrl);
|
|
SP_Config::setValue("wikifilter", $frmWikiFilter);
|
|
} else {
|
|
SP_Config::setValue("wikienabled", 0);
|
|
}
|
|
|
|
if ($frmLdap && (!$frmLdapServer || !$frmLdapBase || !$frmLdapGroup || !$frmLdapBindUser )) {
|
|
SP_Common::printJSON(_('Faltan parámetros de LDAP'));
|
|
} elseif ($frmLdap) {
|
|
SP_Config::setValue("ldapenabled", 1);
|
|
SP_Config::setValue("ldapserver", $frmLdapServer);
|
|
SP_Config::setValue("ldapbase", $frmLdapBase);
|
|
SP_Config::setValue("ldapgroup", $frmLdapGroup);
|
|
SP_Config::setValue("ldapbinduser", $frmLdapBindUser);
|
|
SP_Config::setValue("ldapbindpass", $frmLdapBindPass);
|
|
} else {
|
|
SP_Config::setValue("ldapenabled", 0);
|
|
}
|
|
|
|
if ($frmMail && (!$frmMailServer || !$frmMailFrom )) {
|
|
SP_Common::printJSON(_('Faltan parámetros de Correo'));
|
|
} elseif ($frmMail) {
|
|
SP_Config::setValue("mailenabled", 1);
|
|
SP_Config::setValue("mailrequestsenabled", $frmMailRequests);
|
|
SP_Config::setValue("mailserver", $frmMailServer);
|
|
SP_Config::setValue("mailfrom", $frmMailFrom);
|
|
} else {
|
|
SP_Config::setValue("mailenabled", 0);
|
|
SP_Config::setValue("mailrequestsenabled", 0);
|
|
}
|
|
|
|
if ($frmAllowedSize > 16384) {
|
|
SP_Common::printJSON(_('El tamaño máximo de archivo es de 16MB'));
|
|
}
|
|
|
|
SP_Config::setValue("allowed_exts", $frmAllowedExts);
|
|
SP_Config::setValue("account_link", $frmAccountLink);
|
|
SP_Config::setValue("account_count", $frmAccountCount);
|
|
SP_Config::setValue("sitelang", $frmSiteLang);
|
|
SP_Config::setValue("session_timeout", $frmSessionTimeout);
|
|
SP_Config::setValue("logenabled", $frmLog);
|
|
SP_Config::setValue("debug", $frmDebug);
|
|
SP_Config::setValue("maintenance", $frmMaintenance);
|
|
SP_Config::setValue("checkupdates", $frmCheckUpdates);
|
|
SP_Config::setValue("filesenabled", $frmFiles);
|
|
SP_Config::setValue("globalsearch", $frmGlobalSearch);
|
|
SP_Config::setValue("allowed_size", $frmAllowedSize);
|
|
|
|
$message['action'] = _('Modificar Configuración');
|
|
$message['text'][] = '';
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
SP_Common::sendEmail($message);
|
|
|
|
SP_Common::printJSON(_('Configuración actualizada'), 0);
|
|
} elseif ($frmAction == "crypt") {
|
|
$currentMasterPass = SP_Common::parseParams('p', 'curMasterPwd');
|
|
$newMasterPass = SP_Common::parseParams('p', 'newMasterPwd');
|
|
$newMasterPassR = SP_Common::parseParams('p', 'newMasterPwdR');
|
|
$confirmPassChange = SP_Common::parseParams('p', 'confirmPassChange', 0, FALSE, 1);
|
|
$noAccountPassChange = SP_Common::parseParams('p', 'chkNoAccountChange', 0, FALSE, 1);
|
|
|
|
if (!SP_Users::checkUserUpdateMPass()) {
|
|
SP_Common::printJSON(_('Clave maestra actualizada') . '<br>' . _('Reinicie la sesión para cambiarla'));
|
|
}
|
|
|
|
if ($newMasterPass == "" && $currentMasterPass == "") {
|
|
SP_Common::printJSON(_('Clave maestra no indicada'));
|
|
}
|
|
|
|
if ($confirmPassChange == 0) {
|
|
SP_Common::printJSON(_('Se ha de confirmar el cambio de clave'));
|
|
}
|
|
|
|
if ($newMasterPass == $currentMasterPass) {
|
|
SP_Common::printJSON(_('Las claves son idénticas'));
|
|
}
|
|
|
|
if ($newMasterPass != $newMasterPassR) {
|
|
SP_Common::printJSON(_('Las claves maestras no coinciden'));
|
|
}
|
|
|
|
if (!SP_Crypt::checkHashPass($currentMasterPass, SP_Config::getConfigValue("masterPwd"))) {
|
|
SP_Common::printJSON(_('La clave maestra actual no coincide'));
|
|
}
|
|
|
|
$hashMPass = SP_Crypt::mkHashPassword($newMasterPass);
|
|
|
|
if (!$noAccountPassChange) {
|
|
$objAccount = new SP_Account;
|
|
|
|
if (!$objAccount->updateAllAccountsMPass($currentMasterPass, $newMasterPass)) {
|
|
SP_Common::printJSON(_('Errores al actualizar las claves de las cuentas'));
|
|
}
|
|
|
|
$objAccount->updateAllAccountsHistoryMPass($currentMasterPass, $newMasterPass, $hashMPass);
|
|
}
|
|
|
|
if (SP_Config::getValue('demoenabled', 0)) {
|
|
SP_Common::printJSON(_('DEMO'));
|
|
}
|
|
|
|
SP_Config::$arrConfigValue["masterPwd"] = $hashMPass;
|
|
SP_Config::$arrConfigValue["lastupdatempass"] = time();
|
|
|
|
if (SP_Config::writeConfig()) {
|
|
$message['action'] = _('Actualizar Clave Maestra');
|
|
$message['text'] = '';
|
|
|
|
SP_Common::sendEmail($message);
|
|
SP_Common::printJSON(_('Clave maestra cambiada'), 0);
|
|
}
|
|
|
|
SP_Common::printJSON(_('Error al guardar el hash de la clave maestra'));
|
|
} else {
|
|
SP_Common::printJSON(_('Acción Inválida'));
|
|
} |