security_captcha.php

Go to the documentation of this file.

<?php
/* Copyright (C) 2004-2013 Laurent Destailleur  <eldy@users.sourceforge.net>
 * Copyright (C) 2005-2012 Regis Houssin        <regis.houssin@inodbox.com>
 * Copyright (C) 2013      Juanjo Menent    <jmenent@2byte.es>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */
 
// Load Dolibarr environment
require '../main.inc.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/admin.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/class/html.formfile.class.php';
 
// Load translation files required by the page
$langs->loadLangs(array("users", "admin", "other"));
 
if (!$user->admin) {
  accessforbidden();
}
 
$action = GETPOST('action', 'aZ09');
 
 
 
/*
 * Actions
 */
 
if (preg_match('/set_([a-z0-9_\-]+)/i', $action, $reg)) {
  $code = $reg[1];
  $value = (GETPOST($code, 'alpha') ? GETPOST($code, 'alpha') : 1);
  if (dolibarr_set_const($db, $code, $value, 'chaine', 0, '', $conf->entity) > 0) {
    header("Location: ".$_SERVER["PHP_SELF"]);
    exit;
  } else {
    dol_print_error($db);
  }
} elseif (preg_match('/del_([a-z0-9_\-]+)/i', $action, $reg)) {
  $code = $reg[1];
  if (dolibarr_del_const($db, $code, $conf->entity) > 0) {
    header("Location: ".$_SERVER["PHP_SELF"]);
    exit;
  } else {
    dol_print_error($db);
  }
} elseif ($action == 'updateform') {
  $res1 = 1;
  $res2 = 1;
  $res3 = 1;
  $res4 = 1;
  $res5 = 1;
  if (GETPOSTISSET('MAIN_APPLICATION_TITLE')) {
    $res1 = dolibarr_set_const($db, "MAIN_APPLICATION_TITLE", GETPOST("MAIN_APPLICATION_TITLE", 'alphanohtml'), 'chaine', 0, '', $conf->entity);
  }
  if (GETPOSTISSET('MAIN_SESSION_TIMEOUT')) {
    $res2 = dolibarr_set_const($db, "MAIN_SESSION_TIMEOUT", GETPOST("MAIN_SESSION_TIMEOUT", 'alphanohtml'), 'chaine', 0, '', $conf->entity);
  }
  if (GETPOSTISSET('MAIN_SECURITY_MAX_IMG_IN_HTML_CONTENT')) {
    $res3 = dolibarr_set_const($db, "MAIN_SECURITY_MAX_IMG_IN_HTML_CONTENT", GETPOST("MAIN_SECURITY_MAX_IMG_IN_HTML_CONTENT", 'alphanohtml'), 'int', 0, '', $conf->entity);
  }
  if (GETPOSTISSET('MAIN_SECURITY_MAX_POST_ON_PUBLIC_PAGES_BY_IP_ADDRESS')) {
    $res4 = dolibarr_set_const($db, "MAIN_SECURITY_MAX_POST_ON_PUBLIC_PAGES_BY_IP_ADDRESS", GETPOST("MAIN_SECURITY_MAX_POST_ON_PUBLIC_PAGES_BY_IP_ADDRESS", 'alphanohtml'), 'int', 0, '', $conf->entity);
  }
  if (GETPOSTISSET('MAIN_SECURITY_MAX_ATTACHMENT_ON_FORMS')) {
    $res5 = dolibarr_set_const($db, "MAIN_SECURITY_MAX_ATTACHMENT_ON_FORMS", GETPOST("MAIN_SECURITY_MAX_ATTACHMENT_ON_FORMS", 'alphanohtml'), 'int', 0, '', $conf->entity);
  }
  if ($res1 && $res2 && $res3 && $res4 && $res5) {
    setEventMessages($langs->trans("RecordModifiedSuccessfully"), null, 'mesgs');
  }
}
 
 
 
/*
 * View
 */
 
$form = new Form($db);
 
$wikihelp = 'EN:Setup_Security|FR:Paramétrage_Sécurité|ES:Configuración_Seguridad';
llxHeader('', $langs->trans("Miscellaneous"), $wikihelp, '', 0, 0, '', '', '', 'mod-admin page-security_other');
 
print load_fiche_titre($langs->trans("SecuritySetup"), '', 'title_setup');
 
print '<span class="opacitymedium">'.$langs->trans("CaptchaDesc")."</span><br>\n";
print "<br>\n";
 
 
// Load array with all captcha generation modules
$dir = DOL_DOCUMENT_ROOT."/core/modules/security/captcha";
clearstatcache();
$handle = opendir($dir);
$i = 1;
$arrayhandler = array();
if (is_resource($handle)) {
  while (($file = readdir($handle)) !== false) {
    $reg = array();
    if (preg_match('/(modCaptcha[a-z]+)\.class\.php$/i', $file, $reg)) {
      // Charging the numbering class
      $classname = $reg[1];
      require_once $dir.'/'.$file;
 
      $obj = new $classname($db, $conf, $langs, $user);
      '@phan-var-force ModeleCaptcha $obj';
      $arrayhandler[$obj->id] = $obj;
      $i++;
    }
  }
  closedir($handle);
}
asort($arrayhandler);
 
 
 
print '<form action="'.$_SERVER["PHP_SELF"].'" method="POST">';
print '<input type="hidden" name="token" value="'.newToken().'">';
print '<input type="hidden" name="action" value="updateform">';
 
$head = security_prepare_head();
 
print dol_get_fiche_head($head, 'captcha', '', -1);
 
print '<br>';
 
 
print $langs->trans("UseCaptchaCode");
if (!empty($conf->use_javascript_ajax)) {
  print ajax_constantonoff('MAIN_SECURITY_ENABLECAPTCHA', array(), null, 0, 0, 1);
} else {
  if (!getDolGlobalString('MAIN_SECURITY_ENABLECAPTCHA')) {
    print '<a href="'.$_SERVER['PHP_SELF'].'?action=set_MAIN_SECURITY_ENABLECAPTCHA&token='.newToken().'">'.img_picto($langs->trans("Disabled"), 'off').'</a>';
  } else {
    print '<a href="'.$_SERVER['PHP_SELF'].'?action=del_MAIN_SECURITY_ENABLECAPTCHA&token='.newToken().'">'.img_picto($langs->trans("Enabled"), 'on').'</a>';
  }
}
 
if (isModEnabled('ticket')) {
  print '<br>';
  print $langs->trans("TicketUseCaptchaCodeHelp");
  if (!empty($conf->use_javascript_ajax)) {
    print ajax_constantonoff('MAIN_SECURITY_ENABLECAPTCHA_TICKET', array(), null, 0, 0, 1);
  } else {
    if (!getDolGlobalString('MAIN_SECURITY_ENABLECAPTCHA_TICKET')) {
      print '<a href="'.$_SERVER['PHP_SELF'].'?action=set_MAIN_SECURITY_ENABLECAPTCHA_TICKET&token='.newToken().'">'.img_picto($langs->trans("Disabled"), 'off').'</a>';
    } else {
      print '<a href="'.$_SERVER['PHP_SELF'].'?action=del_MAIN_SECURITY_ENABLECAPTCHA_TICKET&token='.newToken().'">'.img_picto($langs->trans("Enabled"), 'on').'</a>';
    }
  }
}
 
$showavailablecaptcha = 0;
if (getDolGlobalString('MAIN_SECURITY_ENABLECAPTCHA')) {
  $showavailablecaptcha = 1;
}
if (isModEnabled('ticket') && getDolGlobalString('MAIN_SECURITY_ENABLECAPTCHA_TICKET')) {
  $showavailablecaptcha = 1;
}
 
$selectedcaptcha = getDolGlobalString('MAIN_SECURITY_ENABLECAPTCHA_HANDLER', 'standard');
 
if ($showavailablecaptcha) {
  print '<br>';
  print '<br>';
  print '<br>';
 
  // List of all available captcha
  print '<table class="noborder centpercent">';
  print '<tr class="liste_titre">';
  print '<td colspan="2">'.$langs->trans("Captcha").'</td>';
  print '<td>'.$langs->trans("Example").'</td>';
  print '<td class="right" width="100">'.$langs->trans("Status").'</td>';
  print '</tr>';
 
  // Loop on each available captcha
  foreach ($arrayhandler as $key => $module) {
    print '<tr class="oddeven">';
    print '<td>';
    print img_picto('', $module->picto, 'class="width25 size15x marginrightonly"').' ';
    print ucfirst($key);
    print '</td>';
    print '<td>';
    print $module->getDescription().'<br>';
    print '</td>';
    print '<td>';
    print $module->getExample().'<br>';
    print '</td>';
    print '<td class="right" width="100">';
 
    if (function_exists("imagecreatefrompng")) {
      if ($key != $selectedcaptcha) {
        print '<a href="'.$_SERVER['PHP_SELF'].'?action=enabledcaptchahandler&token='.newToken().'&handler=standard"><input type="checkbox"></a>';
      } else {
        print '<a href="'.$_SERVER['PHP_SELF'].'?action=disablecaptchahandler&token='.newToken().'&handler=standard"><input type="checkbox" checked="checked"';
        if (count($arrayhandler) <= 1) {
          print 'disabled="disabled"';
        }
        print '></a>';
      }
    } else {
      $desc = $form->textwithpicto('', $langs->transnoentities("EnableGDLibraryDesc"), 1, 'warning');
      print $desc;
    }
 
    print '</td>';
    print '</tr>';
  }
 
  print '</table>';
 
  //print $form->buttonsSaveCancel("Modify", '');
}
 
print dol_get_fiche_end();
 
print '</form>';
 
// End of page
llxFooter();
$db->close();