Zabbix

<?php

/*

** Zabbix

** Copyright (C) 2001-2022 Zabbix SIA

**

** This program is free software; you can redistribute it and/or modify

** it under the terms of the GNU General Public License as published by

** the Free Software Foundation; either version 2 of the License, or

** (at your option) any later version.

**

** This program is distributed in the hope that it will be useful,

** but WITHOUT ANY WARRANTY; without even the implied warranty of

** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

** GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License

** along with this program; if not, write to the Free Software

** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

**/

​

​

require_once dirname(__FILE__).'/include/classes/user/CWebUser.php';

​

require_once dirname(__FILE__).'/include/config.inc.php';

require_once dirname(__FILE__).'/include/forms.inc.php';

​

$page['title'] = _('ZABBIX');

$page['file'] = 'index.php';

​

// VAR  TYPE    OPTIONAL    FLAGS   VALIDATION  EXCEPTION

$fields = [

    'name' =>       [T_ZBX_STR, O_NO,   null,   null,   'isset({enter}) && {enter} != "'.ZBX_GUEST_USER.'"', _('Username')],

    'password' =>   [T_ZBX_STR, O_OPT, null,    null,   'isset({enter}) && {enter} != "'.ZBX_GUEST_USER.'"'],

    'sessionid' =>  [T_ZBX_STR, O_OPT, null,    null,   null],

    'reconnect' =>  [T_ZBX_INT, O_OPT, P_SYS,   null,   null],

    'enter' =>      [T_ZBX_STR, O_OPT, P_SYS,   null,   null],

    'autologin' =>  [T_ZBX_INT, O_OPT, null,    null,   null],

    'request' =>    [T_ZBX_STR, O_OPT, null,    null,   null],

    'form' =>       [T_ZBX_STR, O_OPT, null,    null,   null]

];

check_fields($fields);

​

if (hasRequest('reconnect') && CWebUser::isLoggedIn()) {

    if (CAuthenticationHelper::get(CAuthenticationHelper::SAML_AUTH_ENABLED) == ZBX_AUTH_SAML_ENABLED

            && CAuthenticationHelper::get(CAuthenticationHelper::SAML_SLO_URL) !== ''

            && CSessionHelper::has('saml_data')) {

        redirect('index_sso.php?slo');

    }

​

    CWebUser::logout();

    redirect('index.php');

}

​

$autologin = hasRequest('enter') ? getRequest('autologin', 0) : getRequest('autologin', 1);

$request = getRequest('request', '');

​

if ($request) {

    $test_request = [];

    preg_match('/^\/?(?<filename>[a-z0-9\_\.]+\.php)(?<request>\?.*)?$/i', $request, $test_request);

​

    $request = (array_key_exists('filename', $test_request) && file_exists('./'.$test_request['filename']))

        ? $test_request['filename'].(array_key_exists('request', $test_request) ? $test_request['request'] : '')

        : '';