Passmntc.prg

<?php
  $monLibrary= dirname(__FILE__) . "/../library";
  $sharedLibrary= dirname(__FILE__) . "/../../shared/library";
  require_once("$monLibrary/cu_top.i");
  require_once("$monLibrary/ck_hticket.i");

$self = $_SERVER['PHP_SELF'];

  if (!CheckPerm($link, $Hu, basename($_SERVER['SCRIPT_NAME']), $_SERVER['REMOTE_ADDR'])) {
    // ** Permissions failed
    // ** redirect to new page
    header("Location: /hcuadm/hcu_noperm.prg");
    exit;
  }

$dms_ok=array('action'=>'string','cuname'=>'string','dav1'=>'string','dav2'=>'string');

dms_import($dms_ok);

if (isset($action)) {
$Htdavpath = "/home/httpd/etc/davpasswd";
$Htcommand = "/usr/bin/htpasswd -b";
$davmsg="";
$davok="";
$d_ret=0;

if ($dav1 > '') {
    if ($dav1 != $dav2) {
        $davmsg .= "New WebDav Passwords Don't Match.<br>";
    }
    if (preg_match("/['\"]/",$dav1)){
        $davmsg .= "Invalid Characters in WebDav Password.<br>";
    }
  if (strlen($dav1) < 4) {
        $davmsg .= "WebDav Password must be at least 4 characters.<br>";
    }
  if (strlen($dav1) > 0 && !(preg_match("/\d/",$dav1)
                && preg_match("/\D/",$dav1))) {
     $davmsg .= "WebDav Password must contain both number and letter characters!<br>\n";}
    if (empty($davmsg)){
        system("$Htcommand $Htdavpath $cuname $dav1", $d_ret);
        switch($d_ret) {
            case 0:
                $davok = "WebDav password saved successfully.<br>";
                break;
            case 1:
                $davmsg .= "File Access error saving WebDav password.<br>";
                break;
            default:
                $davmsg .= "Return code $d_ret saving WebDav password.<br>";
                break;
        }
    }
}

    if (empty($davmsg)) {
        $action = "OK";
    }
}
if ("$action" != "OK"){
cu_header("Password Change");
print <<<EOF
<script>
function validate()
{
    var strDav1 = document.forms[0].dav1.value;
    var strDav2 = document.forms[0].dav2.value;
    var strMessage = "";

    // validate user entries

    if (strDav1.length > 0 || strDav2.length > 0) {
      if (strDav1.length < 4 || strDav1.length > 8)
            { strMessage += 'WebDav password must be from 4 to 8 characters long.\\n';}
      if (strDav1 != strDav2)
            { strMessage += "WebDav passwords do not match.\\n";}
      if (strDav1.indexOf("'") != -1  || strDav1.indexOf('"') != -1)
            { strMessage += "Invalid Characters in WebDav password.\\n";}
      var boolHasDigit = false;
      var boolHasChar = false;
     for (i=0; i < strDav1.length; i++)
            {
             ch = strDav1.charAt(i);
             if (ch >= '0' && ch <= '9')
                { boolHasDigit = true; }
             if ((ch >= 'A' && ch <= 'Z') || (ch >= 'a' && ch <='z'))
                { boolHasChar = true; }
            }
      if ((boolHasDigit == false) || (boolHasChar == false))
        { strMessage += "WebDav Password must contain both number and letter characters.\\n";}
    }

  if (strMessage.length > 0)
    {
        alert(strMessage);
        return false;
    }


    document.forms[0].submit();
    return true;

}
</script>
EOF;
print <<<EOF
      <CENTER>
      <FONT SIZE=+1 COLOR="#FF0000">$davok $davmsg<br></FONT>
      <FORM ACTION="${self}?cuname=$cuname" METHOD=post>
      <TABLE BORDER=0 width="90%" cellpadding=3 cellspacing=1 class='dmsbg'><tr><td>
      <TABLE BORDER=0 width="100%" cellpadding=2 cellspacing=0 bgcolor=white>
      <TR><TD CLASS="bar" align="center" colspan=3>WebDav Password Change</TD></TR>
      <TR><TD CLASS="hdr" colspan="3"><hr></TD></TR>
      <TR>
      <TD CLASS="hdr" align="right">WebDav Password:</TD>
      <TD CLASS="dtl"><INPUT NAME="dav1" TYPE="password" SIZE="10" MAXLENGTH="8"></TD>
      <TD CLASS="dtl">Password must be from 4 to 8 characters long and contain a combination of numbers and letters</TD>
      </TR>
      <TR>
      <TD CLASS="hdr" align="right">Confirm WebDav Password:</TD>
      <TD CLASS="dtl"><INPUT NAME="dav2" TYPE="password" SIZE="10" MAXLENGTH="8"></TD>
      <TD CLASS="dtl">Enter WebDav password again to confirm</TD>
      </TR>
      <TR>
      <TD CLASS="dtl" align="right">&nbsp;</TD>
      <TD CLASS="dtl" colspan="2">
                <input type=hidden name="action" value="Change Password">
                <INPUT TYPE="button" NAME="BtnSubmit" VALUE=" Change Password " onClick="validate()">
            </TD>
      </TR>
      </TABLE>
            </td></tr></table>
      </FORM>
      </BODY></HTML>

EOF;
} else {
    cu_header("Passwords Changed");
    cu_message("Succeeded<br>Passwords Updated");
    cu_footer();
}
?>