nextcloud/index.php

<?php

/**
* ownCloud
*
* @author Frank Karlitschek
* @copyright 2010 Frank Karlitschek karlitschek@kde.org
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
* License as published by the Free Software Foundation; either
* version 3 of the License, or any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
*
* You should have received a copy of the GNU Affero General Public
* License along with this library.  If not, see <http://www.gnu.org/licenses/>.
*
*/

$RUNTIME_NOAPPS = TRUE; //no apps, yet

require_once('lib/base.php');

OC_Util::addScript('setup');

$not_installed = !OC_Config::getValue('installed', false);
$install_called = (isset($_POST['install']) AND $_POST['install']=='true');
// First step : check if the server is correctly configured for ownCloud :
$errors = OC_Util::checkServer();
if(count($errors) > 0) {
	OC_Template::printGuestPage("", "error", array("errors" => $errors));
}

// Setup required :
elseif($not_installed OR $install_called) {
	require_once('setup.php');
	exit();
}

if($_SERVER['REQUEST_METHOD']=='PROPFIND'){//handle webdav
	header('location: '.OC_Helper::linkTo('files','webdav.php'));
	exit();
}

// Someone is logged in :
elseif(OC_User::isLoggedIn()) {
	if(isset($_GET["logout"]) and ($_GET["logout"])) {
		OC_User::logout();
		header("Location: ".$WEBROOT.'/');
		exit();
	}
	else {
		header("Location: ".$WEBROOT.'/'.OC_Appconfig::getValue("core", "defaultpage", "files/index.php"));
		exit();
	}
}

// remember was checked after last login
elseif(isset($_COOKIE["oc_remember_login"]) && $_COOKIE["oc_remember_login"]) {
	OC_App::loadApps();
	error_log("Trying to login from cookie");
	// confirm credentials in cookie
	if(OC_User::userExists($_COOKIE['oc_username']) &&
	   OC_Preferences::getValue($_COOKIE['oc_username'], "login", "token") == $_COOKIE['oc_token']) {
		OC_User::setUserId($_COOKIE['oc_username']);
		header("Location: ". $WEBROOT.'/'.OC_Appconfig::getValue("core", "defaultpage", "files/index.php"));
	}
	else {
		OC_Template::printGuestPage("", "login", array("error" => true));
	}
}

// Someone wants to log in :
elseif(isset($_POST["user"]) && isset($_POST['password'])) {
	OC_App::loadApps();
	if(OC_User::login($_POST["user"], $_POST["password"])) {
		header("Location: ".$WEBROOT.'/'.OC_Appconfig::getValue("core", "defaultpage", "files/index.php"));
		if(!empty($_POST["remember_login"])){
			error_log("Setting remember login to cookie");
			$token = md5($_POST["user"].time());
			OC_Preferences::setValue($_POST['user'], 'login', 'token', $token);
			OC_User::setMagicInCookie($_POST["user"], $token);
		}
		else {
			OC_User::unsetMagicInCookie();
		}
		exit();
	}
	else {
		if(isset($_COOKIE["oc_username"])){
			OC_Template::printGuestPage("", "login", array("error" => true, "username" => $_COOKIE["oc_username"]));
		}else{
			OC_Template::printGuestPage("", "login", array("error" => true));
		}
	}
}

// Someone lost their password:
elseif(isset($_GET['lostpassword'])) {
	OC_App::loadApps();
	if (isset($_POST['user'])) {
		if (OC_User::userExists($_POST['user'])) {
			$token = sha1($_POST['user']+uniqId());
			OC_Preferences::setValue($_POST['user'], "owncloud", "lostpassword", $token);
			// TODO send email with link+token
			OC_Template::printGuestPage("", "lostpassword", array("error" => false, "requested" => true));
		} else {
			OC_Template::printGuestPage("", "lostpassword", array("error" => true, "requested" => false));
		}
	} else {
		OC_Template::printGuestPage("", "lostpassword", array("error" => false, "requested" => false));
	}
}

// Someone wants to reset their password:
elseif(isset($_GET['resetpassword']) && isset($_GET['token']) && isset($_GET['user']) && OC_Preferences::getValue($_GET['user'], "owncloud", "lostpassword") === $_GET['token']) {
	OC_App::loadApps();
	if (isset($_POST['password'])) {
		if (OC_User::setPassword($_GET['user'], $_POST['password'])) {
			OC_Preferences::deleteKey($_GET['user'], "owncloud", "lostpassword");
			OC_Template::printGuestPage("", "resetpassword", array("success" => true));
		} else {
			OC_Template::printGuestPage("", "resetpassword", array("success" => false));
		}
	} else {
		OC_Template::printGuestPage("", "resetpassword", array("success" => false));
	}
}

// For all others cases, we display the guest page :
else {
	OC_App::loadApps();
	if(isset($_COOKIE["username"])){
		OC_Template::printGuestPage("", "login", array("error" => false, "username" => $_COOKIE["username"]));
	}else{
		OC_Template::printGuestPage("", "login", array("error" => false));
	}
}

?>