admStaticForms.i

<?php
/**
 * Replaces formSu.prg
 */

function getStaticForm($SYSENV, $dbh, $name, $self, $Cn, $Cu)
{
    switch($name)
    {
        case "formSu":
            $parameters= array();
            dms_import_v2($parameters, "BOTTOM", array("masterPassword" => "string", "authretry" => "string", "authact" => "string", "ft" => "string", "authval" => "string"));
            extract($parameters["BOTTOM"]);
            $authretry= isset($authretry) ? $authretry : 3;
            $authact == "check" ? printMasterAccessCheck($SYSENV, $dbh, $self, $ft, $authretry, $authact, $Cn, $Cu, $masterPassword) : printMasterAccess($SYSENV, $self, $authretry, $authact);
            break;
        case "permErr":
            printSimpleMessage("You do not have access to the feature you selected.");
            break;
        case "homecuDown":
            printSimpleMessage("Digital Banking is temporarily unavailable because we are working on the system.<br>We expect to be finished in about an hour.<br><br>Please try again later.");
            break;
        case "serverBusy":
            printSimpleMessage("Because of heavy volume Digital Banking is temporarily unavailable.  <br>Please allow some time before trying again.");
            break;
        case "webOnly":
            printSimpleMessage("The feature you requested is available as part of HomeCU, our complete digital banking software just for credit unions.  <br><br>
                <a href='http://www.homecu.net' class='link2'>Check out our web site</a> for more information, or click a link on the left to continue.");
            break;
        case "batMsg":
            printSimpleMessage("The feature you requested is not needed for the HomeCU live interface.");
            break;
        case "notFound":
            printSimpleMessage("The page you have requested was not found.  Please use one of the links on the left.");
            break;
        default: ?>
            Should not get here!
            <?php break;
    }
}

function printMasterAccess($SYSENV, $self, $authretry, $authact, $msg="")
{
    $authretry--; ?>
  <script type="text/javascript">
    function init()
    {
        $.homecuValidator.setup({formValidate:'form', formStatusField: 'formValidateDiv'});
        <?php printCaptureEnter(); ?>
        $("#okayBtn").click(function() {
            if ($.homecuValidator.validate())
                $(this).closest("#form").submit();

            return false;
        });

        <?php if ($msg != "") { ?>
            $("#formValidateDiv").text("<?php echo $msg; ?>");
            $("#formValidateDiv").show();
        <?php } ?>
    }
    $(document).ready(function() {
        init();
    });
  </script>
  <div class="container-fluid"><div class="row-fluid">
  <form id="form" method="post" action="<?php echo $self; ?>">
    <input type='hidden' name='authretry' value='<?php echo $authretry; ?>'>
    <input type='hidden' name='authact' value='check'>
    <div id="formValidateDiv" class="homecu-formStatus k-block k-error-colored" style="display:none;"></div>
        <div class="well well-sm ">
          <div class="form-horizontal form-widgets">
            <?php printHeader("Requested Feature requires Master Privileges.");
                  loginPrintInputLine("Master Password", "", "masterPassword", 255, true, true, "password", "Password is required.");
                  printButtons(array(array("primary" => true, "id" => "okayBtn", "text" => "Continue")));
            ?>
          </div>
        </div>
      </form>
   </div></div>
<?php }

function printMasterAccessCheck($SYSENV, $dbh, $self, $ft, $authretry, $authact, $Cn, $Cu, $masterPassword)
{
    try
    {
        $sth = db_query("select trim(passwd) from cuadminusers where user_name='" . strtolower($Cu) . "'",$dbh);
        if (!$sth)
            throw new exception("Query failed!", 1);
        if (db_num_rows($sth) == 0)
            throw new exception("Query has zero records!", 2);
        list($mastpwd) = db_fetch_array($sth,0);
        if (!password_verify($masterPassword, $mastpwd))
            throw new exception("Crypt failed!", 3);
        $authval = md5($Cn . 'HomeCU4U' . $ft);
    }
    catch(exception $e)
    {
        $SYSENV["logger"]->error("Master Access check failed!");
        printMasterAccess($SYSENV, $self, $authretry, $authact, "Invalid Password");
        return;
    } ?>
  <script type="text/javascript">
    $(document).ready(function() {
        $("#form").submit();
    });
  </script>
  <div class="container-fluid"><div class="row-fluid">
  <form id="form" method="post" action="<?php echo $self; ?>" role="form" data-role="validator" novalidate="novalidate">
    <input type='hidden' name='authval' value='<?php echo $authval; ?>'>
        <div class="well well-sm ">
          <div class="form-horizontal form-widgets">
            <div class="form-group">
                <div class="col-xs-12">Thank you!</div>
            </div>
          </div>
        </div>
      </form>
   </div></div>
<?php }

function printSimpleMessage($msg)
{ ?>
  <div class="container-fluid"><div class="row-fluid">
  <form id="form">
        <div class="well well-sm ">
          <div class="form-horizontal form-widgets">
            <div class="form-group">
                <div class="col-xs-12"><?php echo $msg; ?></div>
            </div>
          </div>
        </div>
      </form>
   </div></div>
<?php }