Subversion Repositories ALCASAR

Rev

Rev 3288 | Details | Compare with Previous | Last modification | View Log

Rev Author Line No. Line
1300 richard 1 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
3288 rexy 2 
<html><!-- Written by Rexy, Romero P. & 3abTux -->
3 
<head>
4 
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
5 
	<title>Users import</title>
6 
	<link rel="stylesheet" href="/css/acc.css" type="text/css">
7 
</head>
1300 richard 8 
<body>
3028 rexy 9 
<div id="ldoverlay" class="overlay">
10 
	<div class="lds-spinner" id="spinner"><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div></div></div>
11 
</div>
1300 richard 12 
<?php
1508 richard 13 
// Choice of language
1300 richard 14 
$Language = 'en';
15 
if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])){
16 
  $Langue = explode(",",$_SERVER['HTTP_ACCEPT_LANGUAGE']);
17 
  $Language = strtolower(substr(chop($Langue[0]),0,2)); }
18 
if($Language == 'fr'){
3285 rexy 19 
  $l_title = "Importer et vider la base des utilisateurs";
20 
  $l_database_state = "État actuel de la base : nombre de groupes = ";
3289 rexy 21 
  $l_number_of_concerned_users = "Nombre d'utilisateurs concernés : ";
3285 rexy 22 
  $l_number_of_users = "Nombre d'utilisateurs";
1583 richard 23 
  $l_text_import = "Importer à partir d'un fichier texte";
3285 rexy 24 
  $l_text_import_help = "Ce fichier ne doit contenir que des noms d'utilisateurs écrits les uns sous les autres.";
1300 richard 25 
  $l_file = "Fichier";
1583 richard 26 
  $l_users_group = "Définissez leur groupe (conseillé)";
27 
  $l_send = "Importer";
28 
  $l_empty = "Vider";
1835 raphael.pi 29 
  $l_empty_warn = "Vous êtes sur le point de vider entièrement la base de donnée des utilisateurs... Souhaitez vous continuer?";
1300 richard 30 
  $l_imported_files = "Fichiers des identifiants/mot_de_passe import&eacute;s durant les derni&egrave;res 24h :";
3285 rexy 31 
  $l_db_import = "Importer à partir d'une sauvegarde de la base d'utilisateurs";
1583 richard 32 
  $l_db_import_help = "Afin de pouvoir imputer les dernières traces de connexion, une sauvegarde de la base actuelle sera automatiquement réalisée.";
3285 rexy 33 
  $l_db_reset = "Vider la base des utilisateurs";
34 
  $l_remove_old_users = "Supprimer les utilisateurs inactifs depuis plus d'un an";
3288 rexy 35 
  $l_remove_old_users_warn = "Étes-vous sûr de vouloir supprimer ces utilisateurs ?";
1583 richard 36 
  $l_error_ext_txt = "Erreur! Veuillez sélectionner un fichier avec l'extension '.csv' ou '.txt'";
37 
  $l_error_ext_sql = "Erreur! Veuillez sélectionner un fichier avec l'extension '.sql' ou '.sql.gz'";
1300 richard 38 
  $l_group_empty = "La liste des groupes est vide";
39 
  $l_out_title = "   ---  Accès à Internet via ALCASAR  ---  ";
40 
  $l_out_login = "Nom de connexion :";
41 
  $l_out_passwd = "Mot de passe :";
42 
  $l_out_mind = "Pensez à changer votre mot de passe (lien sur la page d'authentification)";
2853 rexy 43 
} else if($Language === 'es') {
44 
  $l_title = "Importar y vaciar la base de datos de usuarios.";
45 
  $l_database_state ="Estado de la base de datos: cantidad de grupos = ";
3289 rexy 46 
  $l_number_of_concerned_users = "Número de usuarios afectados :";
2853 rexy 47 
  $l_number_of_users = "Cantidad de usuarios";
48 
  $l_text_import = "Importar desde un archivo de texto";
49 
  $l_text_import_help = "En este archivo, debe escribir solo el \"nombre de usuario\" uno debajo del otro.";
50 
  $l_file = "Archivo";
51 
  $l_users_group = "Definir el grupo (aconsejable)";
52 
  $l_send = "Importar";
53 
  $l_empty = "Vaciar";
54 
  $l_empty_warn = "Está a punto de vaciar toda la base de datos de usuarios ... ¿Desea continuar?";
55 
  $l_imported_files = "Archivos de nombres de usuarios / contraseñas importados durante las últimas 24hs: ";
56 
  $l_db_import = "Importar desde un archivo de base de datos de usuarios guardado";
57 
  $l_db_import_help = "Para atribuir las últimas conexiones, la base de datos de usuarios reales se guardará automáticamente.";
58 
  $l_db_reset = "Vaciar la base de datos de usuarios";
3285 rexy 59 
  $l_remove_old_users = "Eliminar usuarios inactivos desde hace más de un año";
3288 rexy 60 
  $l_remove_old_users_warn = "¿Estás seguro de que quieres eliminar a estos usuarios?";
2853 rexy 61 
  $l_error_ext_txt = "¡Error! Seleccione un archivo con la extensión '.txt' o '.csv'";
62 
  $l_error_ext_sql = "¡Error! Seleccione un archivo con la extensión '.sql' o '.sql.gz'";
63 
  $l_group_empty = "La lista de grupos está vacía.";
64 
  $l_out_title = "   ---  Accesos a Internet mediante ALCASAR  ---  ";
65 
  $l_out_login = "Nombre de usuario:";
66 
  $l_out_passwd = "Contraseña:";
67 
  $l_out_mind = "No olvide cambiar su contraseña (hay un enlace en la ventana de autenticación)";
68 
} else {
1583 richard 69 
  $l_title = "Import and empty the users database";
2853 rexy 70 
  $l_database_state ="State of the database : number of groups = ";
3289 rexy 71 
  $l_number_of_concerned_users = "Number of users concerned :";
1300 richard 72 
  $l_number_of_users = "Number of users";
1583 richard 73 
  $l_text_import = "Import from a text file";
1300 richard 74 
  $l_text_import_help = "In this file, you must write only the user login one below the other.";
75 
  $l_file = "File";
76 
  $l_users_group = "Define their group (advisable)";
1583 richard 77 
  $l_send = "Import";
78 
  $l_empty = "Empty";
1835 raphael.pi 79 
  $l_empty_warn = "You are close to empty the whole user database... Would you like to proceed?";
1300 richard 80 
  $l_imported_files = "Logins/passwords file imported during the last 24h :";
1583 richard 81 
  $l_db_import = "Import from a saved users database file";
1300 richard 82 
  $l_db_import_help = "In order to impute the last connections, the actual users database will be automaticly saved.";
1583 richard 83 
  $l_db_reset = "Empty the users database";
3285 rexy 84 
  $l_remove_old_users = "Delete users who have been inactive for more than a year";
3288 rexy 85 
  $l_remove_old_users_warn = "Are you sure you want to delete these users?";
1300 richard 86 
  $l_error_ext_txt = "Error! Please select a file with '.txt' or '.csv' extension";
1583 richard 87 
  $l_error_ext_sql = "Error! Please select a file with '.sql' or '.sql.gz' extension";
1300 richard 88 
  $l_group_empty = "The group list is empty";
89 
  $l_out_title = "   ---  Internet access via ALCASAR  ---  ";
90 
  $l_out_login = "Login :";
91 
  $l_out_passwd = "Password :";
92 
  $l_out_mind = "Don't forget to change your password (a link is on the authentication window)";
93 
}
2414 tom.houday 94 
 
95 
require('/etc/freeradius-web/config.php');
96 
 
1300 richard 97 
function getImportFileList(){
98 
	$importFile = array();
99 
	if ($handle = opendir('/tmp')) {
100 
		while (false !== ($file = readdir($handle))) {
101 
			if ($file != "." && $file != "..") {
102 
				$ext = pathinfo($file ,PATHINFO_EXTENSION);
3285 rexy 103 
				$name = substr($file, 0, -(strlen($ext)+1)); // remove extension file and dot
1300 richard 104 
				if ($ext=="pwd"){
105 
				$importFile[] = $name;
106 
				}
107 
			}
108 
		}
109 
		closedir($handle);
110 
	}
111 
	return $importFile;
112 
}
2414 tom.houday 113 
 
1300 richard 114 
function GenPassword($nb_car="8")
2414 tom.houday 115 
{
1508 richard 116 
// Random password
1300 richard 117 
	$password = "";
118 
	$chaine  = "aAzZeErRtTyYuUIopP152346897mMLkK";
119 
	$chaine .= "jJhHgGfFdDsSqQwWxXcCvVbBnN152346897";
2414 tom.houday 120 
	while($nb_car != 0) {
1300 richard 121 
		$i = rand(0,71);
122 
		$password .= $chaine[$i];
2414 tom.houday 123 
		$nb_car--;
1300 richard 124 
	}
2414 tom.houday 125 
	return $password;
126 
}
127 
 
128 
function freeradiusweb_removeDisallowedChars($login)
129 
{
2415 tom.houday 130 
	global $config;
131 
 
2414 tom.houday 132 
	if ($login != '')
133 
	{
134 
		$accent = "âêôûéàèùîáâãäçèéêëìíîïñòóôõöùúûü";
135 
		$login = preg_replace("/[^\w$accent\.\/\@\:\-]/",'',$login);
136 
	}
137 
	if ($login != '' && $config['general_strip_realms'] == 'yes'){
138 
		$realm_del = ($config['general_realm_delimiter'] != '') ? $config['general_realm_delimiter'] : '@';
139 
		$realm_for = ($config['general_realm_format'] != '') ? $config['general_realm_format'] : 'suffix';
140 
		$new = explode($realm_del,$login,2);
141 
		if (count($new) == 2)
142 
			$login = ($realm_for == 'suffix') ? $new[0] : $new[1];
143 
	}
144 
 
145 
	return $login;
146 
}
147 
 
1300 richard 148 
?>
3288 rexy 149 
<table width="100%" border="0" cellspacing="0" cellpadding="0">
150 
	<tr><th><? echo "$l_title"; ?></th></tr>
151 
	<tr bgcolor="#FFCC66"><td><img src="/images/pix.gif" width="1" height="2"></td></tr>
152 
</table>
153 
<table width="100%" border=1 cellspacing=0 cellpadding=1>
154 
	<tr><td valign="middle" align="center"><H3><?= $l_database_state ?>
1300 richard 155 
<?php
3288 rexy 156 
 
1300 richard 157 
$LIBpath = "../lib/";
158 
if (is_file($LIBpath."sql/drivers/$config[sql_type]/functions.php"))
159 
	{
160 
	include_once($LIBpath."sql/drivers/$config[sql_type]/functions.php");
161 
	}
162 
else
163 
	{
164 
	echo "<b>Could not include SQL library</b><br>\n";
165 
	exit();
166 
	}
167 
include_once($LIBpath.'functions.php');
168 
if ($config['sql_use_operators'] == 'true')
169 
	{
170 
	include($LIBpath."operators.php");
171 
	$text = ',op';
172 
	$passwd_op = ",':='";
173 
	}
174 
$link = @da_sql_pconnect($config);
175 
if (isset ($_POST ['choix'])) {	$choix = $_POST ['choix']; }
176 
	else { $choix = ''; }
177 
if ($choix == "raz")
178 
	{
1827 raphael.pi 179 
	exec ("sudo /usr/local/bin/alcasar-logout.sh all");
3269 rexy 180 
	exec ("sudo /usr/local/bin/alcasar-mariadb.sh --raz");
1300 richard 181 
	}
3289 rexy 182 
if ($choix == "remove_old_users")
183 
	{
184 
	exec ("sudo /usr/local/bin/alcasar-mariadb.sh --old_users");
185 
	}
1508 richard 186 
// a file is downloaded
1502 richard 187 
if(isset($_FILES['import-users']) && ($_FILES['import-users']['name'] !=""))
1300 richard 188 
	{
189 
	unset($result);
190 
	if (isset ($_POST['groupe'])) $group = $_POST ['groupe'];
1583 richard 191 
	list($file_name , $extension) = explode("." , $_FILES['import-users']['name'] , 2);
1508 richard 192 
	if ($choix == "csv") // import of a txt file
1300 richard 193 
		{
1508 richard 194 
		if (($extension != 'csv') && ($extension != 'txt')) $result = $l_error_ext_txt;
1300 richard 195 
		else
196 
			{
1583 richard 197 
			$destination = '/tmp/import_file.txt';
3269 rexy 198 
			exec ("sudo /usr/local/bin/alcasar-mariadb.sh --dump");
1300 richard 199 
			move_uploaded_file($_FILES['import-users']['tmp_name'], $destination);
200 
			$RS_in   = file ($destination);
201 
			$da_abort=0;
202 
			if ($link)
203 
				{
204 
				if (is_file($LIBpath."crypt/$config[general_encryption_method].php"))
205 
					{
206 
					include($LIBpath."crypt/$config[general_encryption_method].php");
207 
					$tmpdate = date("Ymd-his");
1502 richard 208 
					$file_out = "/tmp/$tmpdate-$file_name.pwd" ;
1300 richard 209 
					$RS_out = fopen ("$file_out", "wb");
210 
					foreach ($RS_in as $no => $ligne)
211 
						{
212 
						if (substr($ligne,0,3) == pack('CCC',239,187,191)) # remove UTF8-BOM
213 
							{
214 
								$ligne = substr ($ligne,3);
215 
							}
2415 tom.houday 216 
						$tligne = explode(" ",$ligne);
1300 richard 217 
						$login = trim ($tligne[0]);
218 
						$password = trim ($tligne[1]);
219 
						if ($login != '')
220 
							{
221 
							if ($password == "")
222 
								{
223 
								$password = GenPassword();
2414 tom.houday 224 
								}
225 
							$login = freeradiusweb_removeDisallowedChars($login);
1831 raphael.pi 226 
							$login = da_sql_escape_string($link,$login);
2415 tom.houday 227 
							$passwd = da_encrypt($password);
1831 raphael.pi 228 
							$passwd = da_sql_escape_string($link,$passwd);
3285 rexy 229 
// insert (login + password) in "radcheck" (if user exists --> change password)
1300 richard 230 
							$res = @da_sql_query($link,$config,"INSERT INTO $config[sql_check_table] (attribute,value,username $text) VALUES ('$config[sql_password_attribute]','$passwd','$login' $passwd_op);");
231 
							if (!$res || !@da_sql_affected_rows($link,$res,$config))
232 
								{
233 
								echo "<b>Unable to add user $login: " . da_sql_error($link,$config) . "</b><br>\n";
234 
								$da_abort=1;
235 
								}
236 
							else
237 
								{
1508 richard 238 
// create the user informations file
1300 richard 239 
								fputs($RS_out,"$l_out_title\r\n\r\n");
240 
								fputs($RS_out,"$l_out_login $login   |   $l_out_passwd $password\r\n\r\n");
241 
								fputs($RS_out,"$l_out_mind\r\n\r\n");
242 
								fputs($RS_out,"--------------------------------------------------------------------------------\r\n\r\n");
243 
								}
3285 rexy 244 
// insert user in "userinfo"
2415 tom.houday 245 
							if ($config['sql_use_user_info_table'] == 'true' && !$da_abort)
1300 richard 246 
								{
247 
							$res = @da_sql_query($link,$config, "SELECT username FROM $config[sql_user_info_table] WHERE username = '$login';");
248 
							if ($res)
249 
								{
250 
								if (!@da_sql_num_rows($res,$config))
251 
									{
1561 richard 252 
									$res = @da_sql_query($link,$config,"INSERT INTO $config[sql_user_info_table] (username) VALUES ('$login');");
1300 richard 253 
									if (!$res || !@da_sql_affected_rows($link,$res,$config))
254 
										echo "<b>Could not add user information in user info table: " . da_sql_error($link,$config) . "</b><br>\n";
255 
									}
256 
								else
257 
									echo "<b>User already exists in user info table.</b><br>\n";
258 
								}
259 
							else
260 
								echo "<b>Could not add user information in user info table: " . da_sql_error($link,$config) . "</b><br>\n";
2415 tom.houday 261 
								if ((isset($group)) && (!empty($group)))
1300 richard 262 
									{
1831 raphael.pi 263 
									$group = da_sql_escape_string($link,$group);
1300 richard 264 
									$res = @da_sql_query($link,$config,"SELECT username FROM $config[sql_usergroup_table] WHERE username = '$login' AND groupname = '$group';");
265 
									if ($res)
266 
										{
267 
										if (!@da_sql_num_rows($res,$config))
268 
											{
269 
											$res = @da_sql_query($link,$config,"INSERT INTO $config[sql_usergroup_table] (username,groupname) VALUES ('$login','$group');");
270 
											if (!$res || !@da_sql_affected_rows($link,$res,$config))
271 
												echo "<b>Could not add user to group $group. SQL Error</b><br>\n";
272 
											} # end if
273 
										else
274 
											echo "<b>User already is a member of group $group</b><br>\n";
275 
										} # end if
276 
									else
277 
										echo "<b>Could not add user to group $group: " . da_sql_error($link,$config) . "</b><br>\n";
1508 richard 278 
									} // end if ($group)
279 
						 		} // end if ($config)
280 
							} // end if ($login !='')
281 
						} // end foreach
1300 richard 282 
					fclose($RS_out);
1508 richard 283 
					} // end if (is file)
284 
				} // end if (link)
1583 richard 285 
			unlink ($destination);
286 
			} // end if (extension = (txt or cvs))
1300 richard 287 
		}
1508 richard 288 
	else if ($choix == "bdd") // database import
1300 richard 289 
		{
1583 richard 290 
		if (($extension == 'sql') || ($extension == 'sql.gz'))
1300 richard 291 
			{
1583 richard 292 
			$destination = '/tmp/import_file.'.$extension;
3269 rexy 293 
			exec ("sudo /usr/local/bin/alcasar-mariadb.sh --dump");
1300 richard 294 
			move_uploaded_file($_FILES['import-users']['tmp_name'], $destination);
3269 rexy 295 
			exec ("sudo /usr/local/bin/alcasar-mariadb.sh --import $destination");
1583 richard 296 
			//echo "OK : $destination";
297 
			unlink ($destination);
1300 richard 298 
			}
1583 richard 299 
		else $result = $l_error_ext_sql;
1300 richard 300 
		}
301 
	}
302 
if ($link)
303 
	{
304 
	$res = @da_sql_query($link,$config,"SELECT GroupName FROM radusergroup GROUP BY GroupName");
305 
	if ($res)
306 
		{
307 
		$nb_group = @da_sql_num_rows($res,$config);
308 
		echo $nb_group;
309 
		}
310 
	}
311 
echo ", $l_number_of_users = ";
312 
if ($link)
313 
	{
314 
	$res = @da_sql_query($link,$config,"SELECT UserName FROM userinfo");
315 
	if ($res)
316 
		{
317 
		$nb_user = @da_sql_num_rows($res,$config);
318 
		echo "$nb_user";
319 
		}
320 
	}
3288 rexy 321 
?>
322 
	</H3></td></tr>
323 
	<tr><td>
324 
		<table width="100%" border=0 cellspacing=0 cellpadding=1>
325 
			<tr><td valign="middle" align="center" colspan="2"><H3><?= $l_text_import ?></H3></td></tr>
326 
			<tr><td valign="middle" align="left"><?= $l_text_import_help ?><br>
327 
			<tr><td valign="middle" align="left"><br>
328 
				<form action="<?= htmlspecialchars($_SERVER['PHP_SELF']) ?>" method="POST" ENCTYPE="multipart/form-data">
329 
				<?= $l_file ?> (.txt or .csv) : <input type="file" name="import-users"><br>
330 
				<?= $l_users_group ?> :
331 
<?PHP
1300 richard 332 
require("../lib/defaults.php");
333 
include_once("../lib/$config[general_lib_type]/group_info.php");
334 
if (isset($existing_groups)){
335 
	echo "<select name=\"groupe\">";
336 
	echo "<option value=\"\" selected>";
337 
	foreach ($member_groups as $group)
338 
		echo "<option value=\"$group\">$group\n";
339 
	echo " </select>";
340 
	}
341 
else echo "$l_group_empty";
3288 rexy 342 
?>
343 
				<br>
344 
				<input type="hidden" name="choix" value="csv">
345 
				<?PHP if (($choix == "csv") && isset($result)) echo "<b>".$result."</b><BR>"; ?>
346 
				<input type="submit" onClick="this.disabled=true; document.getElementById('ldoverlay').style.display='block';" value="<?= $l_send ?>">
347 
				</form></td>
348 
			<td>
349 
<?PHP
1300 richard 350 
$ImportFileList = getImportFileList();
351 
if (count($ImportFileList) > 0){
352 
	echo "$l_imported_files";
353 
	echo "<ul>";
3285 rexy 354 
	foreach ( $ImportFileList as $ImportFile )
1300 richard 355 
	{
356 
	echo "<li>".$ImportFile." ( <a href=\"import_file.php?file=$ImportFile\">txt</a> - <a href=\"import_file.php?file=$ImportFile&format=pdf\">pdf</a> )</li>";
357 
	}
358 
	echo "</ul>";
359 
} else {
360 
	echo "<br>";
361 
}
362 
?>
3288 rexy 363 
</td></tr></table>
364 
<tr><td valign="middle" align="left">
365 
	<H3><center><?= $l_db_import ?> </center></H3>
366 
	<?= $l_db_import_help ?><br><br>
367 
		<form action="<?= htmlspecialchars($_SERVER['PHP_SELF']) ?>" method="POST" ENCTYPE="multipart/form-data">
368 
			<?= $l_file ?>(.sql or .sql.gz) : <input type="file" name="import-users"><br>
369 
			<input type="hidden" name="choix" value="bdd">
370 
			<?if (($choix == "bdd") && isset($result)) echo "<b>".$result."</b><BR>";?>
371 
			<input type="submit" onClick="document.getElementById('ldoverlay').style.display='block';" class="button" value="<?= $l_send ?>">
372 
		</form></td></tr>
373 
	<tr><td valign="middle" align="left">
374 
		<h3><center><?= $l_remove_old_users ?></center></h3>
3289 rexy 375 
		<?= $l_number_of_concerned_users ?>
376 
<?php
377 
if ($link)
378 
	{
379 
	$res = @da_sql_query($link,$config,"SELECT username FROM userinfo WHERE username NOT IN (SELECT DISTINCT username FROM radacct WHERE acctstarttime >= NOW() - INTERVAL 1 YEAR)");
380 
	if ($res)
381 
		{
382 
		$nb_user = @da_sql_num_rows($res,$config);
383 
		echo "$nb_user";
384 
		if ($nb_user > 0 ){
385 
			echo " (";
386 
			while ($row = da_sql_fetch_array($res,$config)) {
387 
				$old_user = $row['username'];
388 
				echo "$old_user, ";
389 
				}
390 
			echo ").";
391 
			}
392 
		}
393 
	}
394 
?>
3288 rexy 395 
		<form name="remove_old_users" action="<?= htmlspecialchars($_SERVER['PHP_SELF']) ?>" method="POST" onSubmit="document.getElementById('ldoverlay').style.display='block';">
3289 rexy 396 
			<input type="hidden" name="choix" value="remove_old_users">
3288 rexy 397 
			<input type="submit" onClick="return confirm('<?= $l_remove_old_users_warn ?>')" class="button" value="<?= $l_empty ?>">
398 
	</form></td></tr>
399 
	<tr><td valign="middle" align="left">
400 
		<h3><center><?= $l_db_reset ?></center></h3>
401 
		<?= $l_db_import_help ?><br><br>
402 
		<form name="db_reset" action="<?= htmlspecialchars($_SERVER['PHP_SELF']) ?>" method="POST" onSubmit="document.getElementById('ldoverlay').style.display='block';">
403 
			<input type="hidden" name="choix" value="raz">
404 
			<input type="submit" onClick="return confirm('<?= $l_empty_warn ?>')" class="button" value="<?= $l_empty ?>">
405 
	</form></td></tr>
406 
</table>
407 
</body>
408 
</html>