adm_passpolicy.php

Go to the documentation of this file.

<?php
/*
 ----------------------------------------------------------------------
 LICENSE
 
 This program is free software; you can redistribute it and/or
 modify it under the terms of the GNU General Public License (GPL)
 as published by the Free Software Foundation; either version 2
 of the License, or (at your option) any later version.
 
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
 
 To read the license please visit http://www.gnu.org/copyleft/gpl.html
 ----------------------------------------------------------------------
*/
 
/**
 * Manages password policy for misc. services on AlternC (ftp, mail etc.)
 * 
 * @copyright AlternC-Team 2000-2017 https://alternc.com/ 
 */
 
require_once("../class/config.php");
 
if (!$admin->enabled) {
   $msg->raise("ERROR", "admin", _("This page is restricted to authorized staff"));
   echo $msg->msg_html_all();
   exit();
}
 
$fields = array (
   "edit"   => array ("request", "string", ""),
   "doedit"   => array ("post", "string", ""),
   "minsize"    => array ("post", "integer", "0"),
   "maxsize" => array ("post", "integer", "64"),
   "classcount" => array ("post", "integer", "0"),
   "allowlogin" => array ("post", "integer", "0"),
);
 
getFields($fields);
 
 
include_once("head.php");
 
?>
<h3><?php __("Manage Password Policy"); ?></h3>
<hr id="topbar"/>
<br />
<?php
$c=$admin->listPasswordPolicies();
 
if (isset($doedit) && $doedit) {
  if (!$c[$doedit]) {
    $msg->raise("ERROR", "admin", _("Policy not found"));
  } else {
    // Change it ;) 
    if ($admin->editPolicy($doedit,$minsize,$maxsize,$classcount,$allowlogin)) {
      $msg->raise("INFO", "admin", _("Policy changed"));
      unset($edit);
      $c=$admin->listPasswordPolicies();
    } else {
      $msg->raise("ERROR", "admin", _("Cannot edit the policy, an error occurred"));
    }
  }
}
echo $msg->msg_html_all(true, true);
 
if (!empty($edit)) {
  if (!$c[$edit]) {
    $msg->raise("ERROR", "admin", _("Policy not found"));
    echo $msg->msg_html_all();
  } else {
?>
 
<p><?php __("Please choose which policy you want to apply to this password kind:"); ?></p>
 
<p><b><?php echo $c[$edit]["description"]; ?></b></p>
 
<form method="post" action="adm_passpolicy.php">
 <?php csrf_get(); ?>
<input type="hidden" name="doedit" value="<?php ehe($edit); ?>"/> 
<table class="tlist">
<tr>
  <th><?php __("Minimum Password Size:"); ?></th>
                  <td><select class="inl" name="minsize" id="minsize"><?php for($i=0;$i<=64;$i++) {
                    echo "<option";
                    if ($c[$edit]["minsize"]==$i) echo " selected=\"selected\"";
                    echo ">$i</option>";
                  }
?></td></tr>
  <tr><th><?php __("Maximum Password Size:"); ?></th>
                  <td><select class="inl" name="maxsize" id="maxsize"><?php for($i=0;$i<=64;$i++) {
                    echo "<option";
                    if ($c[$edit]["maxsize"]==$i) echo " selected=\"selected\"";
                    echo ">$i</option>";
                  }
?></td></tr>
  <tr>  <th><?php __("In how many classes of characters must be the password (at least):"); ?></th>
                  <td><select class="inl" name="classcount" id="classcount"><?php for($i=0;$i<=4;$i++) {
                    echo "<option";
                    if ($c[$edit]["classcount"]==$i) echo " selected=\"selected\"";
                    echo ">$i</option>";
                  }
?></td></tr>
  <tr>  <th><?php __("Do we allow the password to be like the login?"); ?></th>
                  <td>
      <input type="radio" name="allowlogin" id="allowlogin0" value="0" <?php cbox(!$c[$edit]["allowlogin"]); ?> />&nbsp;<?php __("No"); ?>
      <input type="radio" name="allowlogin" id="allowlogin1" value="1" <?php cbox($c[$edit]["allowlogin"]); ?> />&nbsp;<?php __("Yes"); ?>
</td></tr>
</table>
<p><input type="submit" class="inb ok" name="go" value="<?php __("Apply this password policy"); ?>" /> &nbsp; 
<input type="button" class="inb cancel" name="cancel" value="<?php __("Cancel and go back to the policy list"); ?>" onclick="document.location='adm_passpolicy.php'" /></p>
</form>
 
      <p><?php __("The classes of characters are : <br />1. Low-case letters (a-z)<br />2. Upper-case letters (A-Z)<br />3. Figures (0-9)<br />4. Ascii symbols (!\"#$%&'()*+,-./:;<=>?@[\\]^_`)<br />5. Non-Ascii symbols (accents...)"); ?></p>
</p>
 
<?php
    require_once("foot.php");
    exit();
  }
}
    
if (is_array($c)) {
 
?>
<p>
<?php __("Here is the list of the password policies for each place a password may be needed in AlternC's services. For each of those password kind, you can choose which policy will be applied to passwords. A policy is a minimum and maximum password size, and how many classes of characters must appear in the password. You can also forbid (or not) to use the login or part of it as a password."); ?>
</p>
 
<table class="tlist">
    <tr><th rowspan="2"> </th><th rowspan="2"><?php __("Password Kind"); ?></th><th colspan="4"><?php __("Password Policy"); ?></th></tr>
<tr>
  <th><?php __("Min Size"); ?></th>
  <th><?php __("Max Size"); ?></th>
  <th><?php __("Complexity"); ?></th>
  <th><?php __("Allow Password=Login?"); ?></th>
</tr>
<?php
foreach($c as $v) {
?>
 
<tr class="lst">
<td class="center">
   <div class="ina edit"><a href="adm_passpolicy.php?edit=<?php echo urlencode($v["name"]); ?>"><?php __("Edit"); ?></a></div>
</td>
 <td><?php echo $v["description"]; ?></td>
 <td class="center"><?php echo $v["minsize"]; ?></td>
 <td class="center"><?php echo $v["maxsize"]; ?></td>
 <td class="center"><?php echo $v["classcount"]; ?></td>
 <td class="center"><?php if ($v["allowlogin"]) __("Yes"); else __("No"); ?></td>
</tr>
<?php
}
?>
</table>
 
    <?php } ?>
 
<?php include_once("foot.php"); ?>