<?
php
# File: hotspotlogin.php
# working with chillispot_0.97
# last change 2004-10-01
# this is forked from original chillispot.org's hotspotlogin.cgi by Kanne
# uamsecret enabled by Cedric
# logoff when closing logoff window added by Lorenzo Allori <lallori_A.T_medici.
org>
# Shared secret used to encrypt challenge with. Prevents dictionary attacks.
# You should change this to your own shared secret.
$uamsecret = "theuamsecret";
# Uncomment the following line if you want to use ordinary user-password
# for radius authentication. Must be used together with $uamsecret.
$userpassword=1;
$loginpath = "/hotspotlogin.php";
# possible Cases:
# attempt to login
# 1: Login successful
# 2: Login failed
# 3: Logged out
# 4: Tried to login while already logged in
# 5: Not logged in yet
#11: Popup
#12: Popup
#13: Popup
# 0: It was not a form request
#Read query parameters which we care about
# $_GET['res'];
# $_GET['challenge'];
# $_GET['uamip'];
# $_GET['uamport'];
# $_GET['reply'];
# $_GET['userurl'];
# $_GET['timeleft'];
# $_GET['redirurl'];
#Read form parameters which we care about
# $_GET['username'];
# $_GET['password'];
# $_GET['chal'];
# $_GET['login'];
# $_GET['logout'];
# $_GET['prelogin'];
# $_GET['res'];
# $_GET['uamip'];
# $_GET['uamport'];
# $_GET['userurl'];
# $_GET['timeleft'];
# $_GET['redirurl'];
$titel = '';
$headline = '';
$bodytext = '';
$body_onload = '';
$footer_text = '<center>
<a href="#">[HELP]</a>
login=login
res=success
res=failed
res=logoff
res=already
res=notyet
res=popup1
res=popup2
res=popup3
res=""
<a href="#">[terms and conditions]</a>
</center>';
$footer_textz = '';
# attempt to login
if ($_GET['login'] == login) {
$hexchal = pack ("H32", $_GET['chal']);
if (isset ($uamsecret)) {
$newchal = pack ("H*", md5($hexchal . $uamsecret));
} else {
$newchal = $hexchal;
}
$response = md5("\0" . $_GET['Password'] . $newchal);
$newpwd = pack("a32", $_GET['Password']);
$pappassword = implode ("", unpack("H32", ($newpwd ^ $newchal)));
$titel = 'Logging in to HotSpot';
$headline = 'Logging in to HotSpot';
$bodytext = '';
print_header();
if ((isset ($uamsecret)) && isset($userpassword)) {
print '<meta http-equiv="refresh" content="0;url=http://' . $_GET['uamip'] .
':' . $_GET['uamport'] . '/logon?username=' . $_GET['UserName'] . '&password='
. $pappassword . '">';
} else {
print '<meta http-equiv="refresh" content="0;url=http://' . $_GET['uamip'] .
':' . $_GET['uamport'] . '/logon?username=' . $_GET['UserName'] . '&response='
. $response . '&userurl=' . $_GET['userurl'] . '">';
}
print_body();
print_footer();
}
# 1: Login successful
if ($_GET['res'] == success) {
$result = 1;
$titel = 'Logged in to HotSpot';
$headline = 'Logged in to HotSpot';
$bodytext = 'Welcome';
$body_onload = 'onLoad="javascript:popUp(' . $loginpath . '?res=popup&uamip='
. $_GET['uamip'] . '&uamport=' . $_GET['uamport'] . '&timeleft=' . $_GET['timel
eft'] . ')"';
print_header();
print_body();
if ($reply) {
print '<center>' . $reply . '</BR></BR></center>';
}
print '<center><a href="http://' . $_GET['uamip'] . ':' . $_GET['uamport'] . '
/logoff">Logout</a></center>';
print_footer();
}
# 2: Login failed
if ($_GET['res'] == failed) {
$result = 2;
$titel = 'HotSpot Login Failed';
$headline = 'HotSpot Login Failed';
$bodytext = 'Sorry, try again<br>';
print_header();
print_body();
if ($_GET['reply']) {
print '<center>' . $_GET['reply'] . '</center>';
}
print_login_form();
print_footer();
}
# 3: Logged out
if ($_GET['res'] == logoff) {
$result = 3;
$titel = 'Logged out from HotSpot';
$headline = 'Logged out from HotSpot';
$bodytext = '<a href="http://' . $_GET['uamip'] . ':' . $_GET['uamport'] . '/p
relogin">Login</a>';
print_header();
print_body();
print_footer();
}
# 4: Tried to login while already logged in
if ($_GET['res'] == already) {
$result = 4;
$titel = 'Already logged in to HotSpot';
$headline = 'Already logged in to HotSpot';
$bodytext = '<a href="http://' . $_GET['uamip'] . ':' . $_GET['uamport'] . '/l
ogoff">Logout</a>';
print_header();
print_body();
print_footer();
}
# 5: Not logged in yet
if ($_GET['res'] == notyet) {
$result = 5;
$titel = 'Logged out from HotSpot';
$headline = 'Logged out from HotSpot';
$bodytext = 'please log in<br>';
print_header();
print_body();
print_login_form();
print_footer();
}
#11: Popup1
if ($_GET['res'] == popup1) {
$result = 11;
$titel = 'Logging into HotSpot';
$headline = 'Logged in to HotSpot';
$bodytext = 'please wait...';
print_header();
print_body();
print_footer();
}
#12: Popup2
if ($_GET['res'] == popup2) {
$result = 12;
$titel = 'Do not close this Window!';
$headline = 'Logged in to HotSpot';
$bodytext = '<a href="http://' . $_GET['uamip'] . ':' . $_GET['uamport'] . '/l
ogoff">Logout</a>';
print_header();
print_bodyz();
print_footer();
}
#13: Popup3
if ($_GET['res'] == popup3) {
$result = 13;
$titel = 'Logged out from HotSpot';
$headline = 'Logged out from HotSpot';
$bodytext = '<a href="http://' . $_GET['uamip'] . ':' . $_GET['uamport'] . '/p
relogin">Login</a>';
print_header();
print_body();
print_footer();
}
# 0: It was not a form request
# Send out an error message
if ($_GET['res'] == "") {
$result = 0;
$titel = 'What do you want here?';
$headline = 'HotSpot Login Failed';
$bodytext = 'Login must be performed through ChilliSpot daemon!';
print_header();
print_body();
print_footer();
}
# functions
function print_header(){
global $titel, $loginpath;
$uamip = $_GET['uamip'];
$uamport = $_GET['uamport'];
print "
<html>
<head>
<title>$titel</title>
<meta http-equiv=\"Cache-control\" content=\"no-cache\">
<meta http-equiv=\"Pragma\" content=\"no-cache\">
<meta http-equiv=\"Content-Type\" content=\"text/html; charset=ISO-88591\">
<SCRIPT LANGUAGE=\"JavaScript\">
var blur = 0;
var starttime = new Date();
var startclock = starttime.getTime();
var mytimeleft = 0;
function doTime() {
window.setTimeout( \"doTime()\", 1000 );
t = new Date();
time = Math.round((t.getTime() - starttime.getTime())/1000);
if (mytimeleft) {
time = mytimeleft - time;
if (time <= 0) {
window.location = \"$loginpath?res=popup3&uamip=$uamip&uamport=$uampor
t\";
}
}
if (time < 0) time = 0;
hours = (time - (time % 3600)) / 3600;
time = time - (hours * 3600);
mins = (time - (time % 60)) / 60;
secs = time - (mins * 60);
if (hours < 10) hours = \"0\" + hours;
if (mins < 10) mins = \"0\" + mins;
if (secs < 10) secs = \"0\" + secs;
title = \"Online time: \" + hours + \":\" + mins + \":\" + secs;
if (mytimeleft) {
title = \"Remaining time: \" + hours + \":\" + mins + \":\" + secs;
}
if(document.all || document.getElementById){
document.title = title;
}
else {
self.status = title;
}
}
function popUp(URL) {
if (self.name != \"chillispot_popup\") {
chillispot_popup = window.open(URL, 'chillispot_popup', 'toolbar=0,scrol
lbars=0,location=0,statusbar=0,menubar=0,resizable=1,width=350,height=300');
}
}
function doOnLoad(result, URL, userurl, redirurl, timeleft) {
if (timeleft) {
mytimeleft = timeleft;
}
if ((result == 1) && (self.name == \"chillispot_popup\")) {
doTime();
}
if ((result == 1) && (self.name != \"chillispot_popup\")) {
chillispot_popup = window.open(URL, 'chillispot_popup', 'toolbar=0,scrol
lbars=0,location=0,statusbar=0,menubar=0,resizable=1,width=350,height=300');
}
if ((result == 2) || result == 5) {
document.form1.UserName.focus()
}
if ((result == 2) && (self.name != \"chillispot_popup\")) {
chillispot_popup = window.open('', 'chillispot_popup', 'toolbar=0,scroll
bars=0,location=0,statusbar=0,menubar=0,resizable=1,width=400,height=200');
chillispot_popup.close();
}
if ((result == 12) && (self.name == \"chillispot_popup\")) {
doTime();
if (redirurl) {
opener.location = redirurl;
}
else if (opener.home) {
opener.home();
}
else {
opener.location = \"about:home\";
}
self.focus();
blur = 0;
}
if ((result == 13) && (self.name == \"chillispot_popup\")) {
self.focus();
blur = 1;
}
}
function doOnBlur(result) {
if ((result == 12) && (self.name == \"chillispot_popup\")) {
if (blur == 0) {
blur = 1;
self.focus();
}
}
}
function popup_logoff(url, name)
{
MyNewWindow=window.open(\"http://\"+url,name);
}
</script>";
}
function print_body(){
global $headline, $bodytext, $body_onload,$result, $loginpath;
$uamip = $_GET['uamip'];
$uamport = $_GET['uamport'];
$userurl = $_GET['userurl'];
$redirurl = $_GET['redirurl'];
$userurldecode = $_GET['userurl'];
$redirurldecode = $_GET['redirurl'];
$timeleft = $_GET['timeleft'];
print "
</head>
<body onLoad=\"javascript:doOnLoad($result, '$loginpath?res=popup2&uamip=$ua
mip&uamport=$uamport&userurl=$userurl&redirurl=$redirurl&timeleft=$timeleft','$u
serurldecode', '$redirurldecode', '$timeleft')\" onBlur = \"javascript:doOnBlur(
$result)\" bgColor = '#c0d8f4'>
<h1 style=\"text-align: center;\">$headline</h1>
<center>$bodytext</center><br>";
# begin debugging
# print '<center>THE INPUT (for debugging):<br>';
#
foreach ($_GET as $key => $value) {
#
print $key . '=' . $value . '<br>';
#
}
# print '<br></center>';
# end debugging
}
function print_bodyz(){
global $headline, $bodytext, $body_onload, $result, $loginpath;
$uamip = $_GET['uamip'];
$uamport = $_GET['uamport'];
$userurl = $_GET['userurl'];
$redirurl = $_GET['redirurl'];
$userurldecode = $_GET['userurl'];
$redirurldecode = $_GET['redirurl'];
$timeleft = $_GET['timeleft'];
print "
</head>
<body onLoad=\"javascript:doOnLoad($result, '$loginpath?res=popup2&uamip=$ua
mip&uamport=$uamport&userurl=$userurl&redirurl=$redirurl&timeleft=$timeleft','$u
serurldecode', '$redirurldecode', '$timeleft')\" onBlur = \"javascript:doOnBlur(
$result)\" bgColor = '#c0d8f4' onUnLoad = \"javascript:popup_logoff('192.168.182
.1:3990/logoff','Error')\">
<h1 style=\"text-align: center;\">$headline</h1>
<center>$bodytext</center><br><br>
<center>Do not close this window</center>
<center>otherwise you'll be logged out immediately</center>";
# begin debugging
# print '<center>THE INPUT (for debugging):<br>';
#
foreach ($_GET as $key => $value) {
#
print $key . '=' . $value . '<br>';
#
}
# print '<br></center>';
# end debugging
}
function print_login_form(){
global $loginpath;
print '<FORM name="form1" METHOD="get" action="' . $loginpath . '?">
<INPUT TYPE="HIDDEN" NAME="chal" VALUE="' . $_GET['challenge'] . '">
<INPUT TYPE="HIDDEN" NAME="uamip" VALUE="' . $_GET['uamip'] . '">
<INPUT TYPE="HIDDEN" NAME="uamport" VALUE="' . $_GET['uamport'] . '">
<INPUT TYPE="HIDDEN" NAME="userurl" VALUE="' . $_GET['userurl'] . '">
<center>
<table border="0" cellpadding="5" cellspacing="0" style="width: 217px;
">
<tbody>
<tr>
<td align="right">Login:</td>
<td><input type="text" name="UserName" size="20" maxlength="255"><
/td>
</tr>
<tr>
<td align="right">Password:</td>
<td><input type="password" name="Password" size="20" maxlength="25
5"></td>
</tr>
<tr>
<td align="center" colspan="2" height="23"><input type="submit" na
me="login" value="login"></td>
</tr>
</tbody>
</table>
</center>
</form>';
}
function print_footer(){
global $footer_text;
print $footer_text . '</body></html>';
exit(0);
}
function print_footerz(){
global $footer_textz;
print $footer_textz . '</body></html>';
exit(0);
}
exit(0);
?>
