#!/usr/bin/perl
# Copyright 2001-2012 Leslie Richardson
# This file is part of Open Admin for Schools.
# Open Admin for Schools is free software; you can redistribute it
# and/or modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2 of
# the License, or (at your option) any later version.
my %lex = ('User Id' => 'User Id',
'Password' => 'Password',
'Duration' => 'Duration',
'Login' => 'Login',
'Log In' => 'Log In',
'Log Out' => 'Log Out',
'min' => 'min',
'No Userid Found' => 'No Userid Found',
'Incorrect Password' => 'Incorrect Password',
'Logged In' => 'Logged In',
'Error' => 'Error',
'Continue' => 'Continue',
'User' => 'User',
'Teacher' => 'Teacher',
'Announcements' => 'Announcements',
'Hover=Full View' => 'Hover on Title to see Full Text',
'View All' => 'View All',
'Site' => 'Site',
);
my $self = 'tindex.pl';
my $defaultpage = 'teacher.html';
my $defaultpath = './';
my $textlength = 100;
use DBI;
use CGI;
use CGI::Session;
use Time::JulianDay;
my $q = CGI->new;
my %arr = $q->Vars;
eval require "../etc/admin.conf";
if ( $@ ) {
print $lex{Error}. ": $@ \n";
die $lex{Error}. ": $@\n";
}
my $title = "Open Admin $g_OpenadminVersion - $lex{Teacher}";
my $dsn = "DBI:$dbtype:dbname=$dbase";
my $dbh = DBI->connect($dsn,$user,$password);
$dbh->{mysql_enable_utf8} = 1;
# Start Session
my $session = new CGI::Session("driver:$dbtype;serializer:FreezeThaw",
undef,{Handle => $dbh}) or die CGI::Session->errstr;
# print $session->header( -charset, $charset );
# foreach my $key ( sort keys %ENV ) { print "K:$key V:$ENV{$key} \n"; }
my $userid = $session->param('userid');
my $logged_in = $session->param('logged_in');
# if ( $arr{logout} ) { doLogout(); } #later
if ( ( $logged_in and $userid ) or
( not $logged_in and not $userid ) or
( $arr{page} == 1 ) # not logged_in, but has userid
) {
displayPage(); # also had $arr{file} value;
} else { # enter password and duration, session timed out.
print $q->header( -charset, $charset );
showLoginForm(); # the login form.
}
#--------------
sub displayPage {
#--------------
my $file = shift;
if ( not $logged_in and $arr{page} == 1 ) { # use values passed in form
# Check password/userid against database (-1 no user, -2 wrong password );
my $error = checkPassword( $userid, $arr{password} );
if ($error == -1){
print $session->header( -charset, $charset );
print "
\n";
print "\n";
exit;
}
}
my $updateflag;
if ( not $userid ) {
$userid = $ENV{'REMOTE_USER'};
$updateflag = 1;
}
if ( not $duration ) {
$duration = checkCookieTime( $g_SessionDuration );
$updateflag = 1;
}
if ( $updateflag ) {
$session->param('userid', $userid);
$session->param('duration', $duration);
}
$session->param('logged_in', '1');
$session->expire('logged_in', $duration );
$session->flush();
print $session->header( -charset, $charset );
# Session Reset at this point.
# foreach my $key ( sort keys %arr ) { print "K:$key V:$arr{$key} \n"; }
if ( not $file ) {
my $title1 = "Open Administration for Schools $g_OpenadminVersion";
my $title2= "$lex{Teacher} $lex{Site}";
print "\n";
print "$title\n";
print q{}. "\n";
print q{}. "\n";
print qq{\n};
print qq{\n};
print qq{
$userid $duration
\n};
print qq{\n};
print qq{
\n};
print qq{
$title2
\n};
print qq{
$title1
\n};
print qq{
\n};
print qq{
\n};
$file = $defaultpage;
} # end main page header
my $path = "$defaultpath/$file";
open(FH,'<', $path) || die "Cannot open:\n";
my $htmlfile;
{ local $/; $htmlfile = ; close FH; }
print $htmlfile;
print qq{
\n};
viewAnnouncements();
print qq{
\n};
exit;
} # end of displayPage()
#--------------------
sub viewAnnouncements {
#--------------------
print qq{
\n";
exit;
}
#----------------
sub checkPassword {
#----------------
my ($userid, $password) = @_;
if (not $userid){ return -1;}
if (not $password){ return -2;}
# Sanitize
unless ( $password =~ m#^([\w\d.-@_+]+)$# ) {
return -2;
}
$password = $1;
#check for presence of userid
my $sth = $dbh->prepare("select count(userid) from staff
where userid = ?");
$sth->execute($userid);
if ($DBI::errstr){ print $DBI::errstr; die $DBI::errstr; }
my $count = $sth->fetchrow;
if ($count < 1){ return -1;} # no userid
#check for presence of correct password and userid
my $sth = $dbh->prepare("select count(userid) from staff
where userid = ? and password = ?");
$sth->execute($userid, $password);
if ($DBI::errstr){ print $DBI::errstr; die $DBI::errstr; }
my $count = $sth->fetchrow;
if ($count < 1){ return -2;} # not correct password
return 0; # if all ok...
}
#------------------
sub checkCookieTime {
#------------------
# defaults
$minimumtime = 3; # minutes
$maximumtime = 60;
my ($duration) = @_;
if ($duration) {
$cookietime = $duration;
} else {
$cookietime = $g_SessionDuration;
}
$cookietime = $minimumtime if $cookietime < $minimumtime;
$cookietime = $maximumtime if $cookietime > $maximumtime;
$cookietime = "+".$cookietime."m"; # set format
return $cookietime;
}
#----------
sub fmtdate {
#----------
my $date = shift;
my ($yr, $mo, $da) = split(/-/, $date);
my $month = $month[$mo];
my $jd = julian_day( split(/-/,$date) );
my $dayindex = day_of_week( $jd )+ 1;
my $day = $dow[$dayindex];
my $rv = "$day, $month $da, $yr";
return $rv;
}
# NOT used below this point
=head
#-----------
sub doLogout {
#-----------
# $dbtype set in admin.conf
# my $session = new CGI::Session("driver:$dbtype;serializer:FreezeThaw",
# undef,{Handle => $dbh}) or die CGI::Session->errstr;
my $userid = $session->param('userid');
$session->delete;
$session->flush;
print $q->header( -charset, $charset );
printHTMLHeader();
print "
$lex{User} "$userid" Logged Out\n";
print "
\n";
exit;
}
#----------
sub doLogin {
#----------
my $session = new CGI::Session("driver:$dbtype;serializer:FreezeThaw",
undef,{Handle => $dbh}) or die CGI::Session->errstr;
my $userid_env = $ENV{'REMOTE_USER'};
my $userid = $session->param('userid');
if ( not $userid ) { $userid = $userid_env; }
# Set Session Values;
# Check if we already have a userid set or not the same as environment one
if ( $userid ) {
# Check password/userid against database (-1 no user, -2 wrong password );
my $error = checkPassword( $userid, $arr{password} );
if ($error == -1){
print $session->header( -charset, $charset );
print "
\n";
print "\n";
exit;
}
}
my $cookietime = checkCookieTime($arr{duration});
# Set values for userid, logged_in and duration in session
$session->param('logged_in','1');
$session->expire('logged_in',$cookietime);
$session->param('userid',$arr{userid});
$session->param('duration', $cookietime ); # was $arr{duration}
# The duration value in the session has cookie markup: +20m format.
# Now print page header... (now in displaypage function)
# print $session->header( -charset, $charset );
displayPage();
exit;
}
=cut
\n};
print qq{