<?php
include 'include/ludo/auth.inc.php';
// Code v&eacute;rifiant que la personne qui tente de se connecter est bien r&eacute;f&eacute;renc&eacute;e dans notre base
include 'include/ludo/fonctions.inc.php';
// Connexion &agrave; la base et s&eacute;lection de la database
include 'include/connect.inc.php';

//Fonction d'authentification 
function authentification($loginP,$pass,$verifAuth="")
{
	//~ echo "function authentification($loginP,$pass,$verifAuth='')\n";
	include 'include/ludo/config.inc.php';
	
	// Requete SQL
	$query = "SELECT idP, loginP, nomP, prenomP, methodeAuth FROM AWOR_Personne WHERE loginP='$loginP';";
	if ( ! $result = @mysql_query($query) )
	{
		// Cas d'erreur
		$errmsg =mysql_generate_errmsg();
	}
	else
	{
		// Initialisation par d&eacute;faut
		$methodeAuth='';
		$existLogin=mysql_num_rows($result);
		// Chargement des pr&eacute;f&eacute;rences d'authentification de l'utilisateur
		if ($existLogin  === 1)
		{
			list($idP, $loginP, $nomP, $prenomP, $methodeAuth) = mysql_fetch_row($result);
		}
		
		
		// Si le script est lanc&eacute; en local, on saute l'authentification
		//~ $a = $CONFIG['AUTH']['bypass_if_local'];
		//~ $b = $_SERVER['REMOTE_ADDR'];
		
		//~ echo "if ( ($a === true ) && ( ($b == 'localhost') || ( $b == '127.0.0.1') ) )\n";
		if ( ($CONFIG['AUTH']['bypass_if_local'] === true ) 
			&& ( ($_SERVER['REMOTE_ADDR'] == 'localhost') || ($_SERVER['REMOTE_ADDR'] == '127.0.0.1') ) )
		{
			//~ echo "VRAI";
			$methodeAuth='bypass';
		}
		//~ else echo "FAUX";

		//~ echo "DEBUG1 : \$methodeAuth==$methodeAuth\n";

		$auth_is_ok=false;
		if ($verifAuth != "") {$methodeAuth = $verifAuth;} // Pour la vérification d'authentification (monProfil)
		
		//~ echo "DEBUG2 : \$methodeAuth==$methodeAuth\n";
		switch (  $methodeAuth )
		{
			case 'webetud':
				// include...
				$auth_is_ok=VerifOuvertureSession("quelconque");
				if ( ! $auth_is_ok ) { $errmsg="Authentification WebEtud refus&eacute;e !"; }
			break;
			/***************************************************************
			** Vous pouvez ajouter d'autres mode d'authentification ici ! **
			***************************************************************/
			case 'bypass':
				$auth_is_ok=true;
			break;
			default:
				// Tentative d'authentification POP
				if ( ($errno = pop3_auth_simple($loginP, $pass) ) != 0 )
				{
					// Authentification &eacute;chou&eacute;e
					$errmsg=pop3_generate_errmsg($errno);
					//~ echo "DEBUG : \$errmsg == $errmsg\n";
				}
				else
				{
					$auth_is_ok=true;
				}
			break;
		}
		if ( $auth_is_ok === true )
		{
			// Authentification r&eacute;ussie
			/*Inscription de la personne si elle était inconnue de la base de donnée :*/
			if ($existLogin === 0 && $verifAuth == "")
			{	
				$idP_new =  new_pers ($loginP);
				$query = "SELECT idP, loginP, nomP, prenomP, methodeAuth FROM AWOR_Personne WHERE idP='$idP_new';";
				if ( ! $result = @mysql_query($query) )
				{
					// Cas d'erreur
					$errmsg =mysql_generate_errmsg();
				}
				// Chargement des pr&eacute;f&eacute;rences d'authentification de l'utilisateur
				if (mysql_num_rows($result)  === 1)
				{
					list($idP, $loginP, $nomP, $prenomP, $methodeAuth) = mysql_fetch_row($result);
				}
			}
			
			if ($verifAuth == "")
			{
				session_start();
				$_SESSION['session_loginP']=$loginP;
				$_SESSION['session_nomP']=$nomP;
				$_SESSION['session_prenomP']=$prenomP;
				$_SESSION['session_idP']=$idP;
			}
		}
		return ($auth_is_ok?true:$errmsg);
	}

}

if ( (! isset($_POST['action']) ) || ( $_POST['action'] != "maj_profil") )
{

	// R&eacute;cup&eacute;ration des param&egrave;tres
	if ( isset($_GET['retour']) && $_GET['retour']!='' )
		{ $retour=addslashes( $_GET['retour'] ); } else { $retour='index.php'; }

	// Si le formulaire &agrave; &eacute;t&eacute; envoy&eacute;, on le traite ici
	if ( isset($_POST['envoi']) && $_POST['envoi'] === '1' )
	{
		if ( ! ( isset($_POST['loginP']) && isset($_POST['pass']) )  )
		{
			$errmsg = 'Param&egrave;tres incorrects';
		}
		else
		{
			require ('include/tools.inc.php');
			$ret=authentification(addslashes_if_needed($_POST['loginP']),addslashes_if_needed($_POST['pass']));

			//~ echo "DEBUG : \$ret==$ret\n";

			if ( $ret === true )
			{
				//Authentification réussie
				require('include/ludo/redir.inc.php');
				//~ echo "DEBUG : html_redir($retour);\n";
				html_redir($retour);
			}
			else
			{
				$errmsg = $ret;
			}
		}
	}
require_once('include/ludo/html_elements.inc.php');
generate_html_doctype_and_head("Identification");
?>
<body onload="javascript:document.forms['auth'].elements['loginP'].focus()">
<div id="titre"><h2>AWOR</h2></div>

<?php
generate_html_div_help();
?>
<div id="page_accueil">
	<h1>Application Web d'Organisation de R&eacute;union</h1>
	<h2>Veuillez vous identifier</h2>
	<?php echo '<form id="auth" method="post" action="' . $_SERVER['PHP_SELF'] . '">' . "\n"; ?>
		<input type="hidden" name="envoi" value="1" />
		<?php echo '<input type="hidden" name="retour" value="' .  $retour . '" />' . "\n" ; ?>
		<div class="aligned">
			<div>
				<span class="label">Votre identifiant :</span>
				<span class="field"><input name="loginP" type="text" size="20" tabindex="1" /></span>
			</div>
			<div>
				<span class="label">Votre mot de passe :</span>
				<span class="field"><input name="pass" type="password" size="20" tabindex="2" /></span>
			</div>
			<div>
				<span class="label"><input type="reset" value="Vider" /></span>
				<span class="field"><input type="submit" value="Valider" /></span>
			</div>
		</div>
<?php if ( isset ($debug) ) { echo '			<input type="hidden" name="debug" value="true" />' . "\n"; } ?>
	</form>
</div>
<?php if ( isset ($errmsg) ) { generate_html_div_errmsg($errmsg); }
generate_html_div_footer(); ?>
</body>
</html>
<?php
}
?>