sysadmin.prg

<?php

    $monLibrary= dirname(__FILE__) . "/../library";
    $monIncludes= dirname(__FILE__) . "/../includes";
    $sharedLibrary= dirname(__FILE__) . "/../../shared/library";
    require_once("$monLibrary/cu_top.i");
    require_once("$monLibrary/ck_hticket.i");
    require_once("$monIncludes/cu_remote_top.prg");
    require_once("$sharedLibrary/errormail.i");
    require_once("$sharedLibrary/cu_sms.i");
    // ** Make sure there is active cookie with a current user

    // ** DEFINE GLOBAL VALUES
    $HCUSMSFROM = "sa@homecu.net";
    $HCUSTALETIME = 15;
    $HCULONGCODE = '12082972108';

    $dms_ok=array('frmsubmit'=>'string','entertext'=>'string');

    dms_import($dms_ok);

    // ** New Requirement

    // ** IF THE FORM IS BEING POSTED -- VERIFY THE PIN



    // ?? Where to send a successful entry.. back to mindex.html ??




//
//  if (!CheckPerm($link, $Hu, basename($_SERVER['SCRIPT_NAME']), $_SERVER['REMOTE_ADDR'])) {
//      // ** Permissions failed
//      // ** redirect to new page
//      // header("Location: /hcuadm/hcu_noperm.prg");
//      // exit;
//      $Full_Access = false;
//      $act = 1;           // *** ONLY ALLOWED TO VIEW
//  }


    if (!$Hu) {
        // ** Not sure, but the user fields appears wrong.. send back to the previous screen
        header("Location: /hcuadm/hcu_noperm.prg");
        exit;
    }

    $fail_msg = "";
    if ($frmsubmit) {
        // ** FORM WAS POSTED --

        $allow_update = true;           // true until proven false


        // * SO NEXT IS
        // FETCH THE PIN / TIMESTAMP / TEMP IP for the suer
        // ** If we are to load this, then let's load it from the Database
        $sql = "SELECT userconfirm
                        FROM dmsmonitorusers
                        WHERE user_name = '" . trim(prep_save($Hu, 12)) . "' ";

        $load_rs = db_query($sql, $link);
        if ($load_row = db_fetch_array($load_rs)) {

            $db_userconfirm = trim($load_row['userconfirm']);

            $disp_sms = dms_disphtml($load_row['usersms']);

            list ($save_tmppin, $save_altip, $save_timestamp) = explode(":", $db_userconfirm);

            // First Verify the IP is correct -- what was I checking here??
            if (trim($save_altip) == "") {
                // make sure an ip was in db??
                $allow_update = false;
                $fail_msg = "Unknown address";
            } elseif ($entertext != $save_tmppin) {

            // Second Verify the PIN is correct
                $allow_update = false;
                $fail_msg = "Failed";
            } elseif (($save_timestamp + (60 * $HCUSTALETIME)) < date("U")) {

            // Verify the time has not gotten stale
                // ** DO NOT ALLOW UPDATED
                $allow_update = false;
                $fail_msg = "Time Expired";
            }

            // Third -  update the database
            if ($allow_update) {
                        // - clear the userconfirm field
                        // - put the saved IP address in altipaddress field
                        // - FOR KNOWN SERVERS...
                $save_sql = "UPDATE dmsmonitorusers
                                                set userconfirm = '',
                                                altipaddress = '" . prep_save($save_altip) . "'
                                            WHERE user_name = '$Hu' ";

            $save_rs = db_query($save_sql, $link);

                // ** REMOTE SERVER SAVING
                if ($save_rs) {

                    //$Remote_Results = "";
                    // User Confirm only needs to be updated on local server
                    // Update altipaddress on other servers.
                    Remote_Field_Add("dmsusers", "user_name", prep_save($Hu, 12));  // ** USERNAME
                    Remote_Field_Add("dmsusers", "altipaddress", $save_altip);      // ** Alternate IP Address
                    $Remote_Results = Remote_Update_All("U", "dmsusers");


                    // ** Redirect back to main screen
                    header("Location: /hcuadm/cuilist.prg");
                    exit;
                }
            } else {

            }
        }

    }




    switch ($formact) {


        case "POSTED":
            break;

        default:
            // default action to  take whne the other items don't load...
            // ** FORM IS NOT BEING POSTED -- SO.. I want to send email --

            // Get the 'to address' from the database
            $sql = "SELECT usersms
                            FROM dmsmonitorusers
                            WHERE user_name = '" . trim(prep_save($Hu, 12)) . "' ";
            $load_rs = db_query($sql, $link);
            if ($load_row = db_fetch_array($load_rs)) {

                $db_usersms = trim($load_row['usersms']);
            }

            if ($frmsubmit == "") {
                if (trim($db_usersms) != "") {
                    // Send SMS Messsage when they come into the screen
                    SendSMS($db_usersms, $HCULONGCODE);
                } else {
                    $fail_msg = "Account Not Set";
                }
            }

            cu_header("HomeCU");

            $print_fail_msg = "";
            if ($fail_msg != "") {
                $print_fail_msg = "<tr><td colspan='2' class='err' align='center' class='dtl'>$fail_msg</td></tr>";
            }
            print <<< print_html
                <form action="sysadmin.prg" method="post">
                <p>
                <center>

                <table cellpadding="3" cellspacing="0" border="0" class='dmsbg' width="500"><tr><td>
                <table cellpadding="2" cellspacing="0" border="0" bgcolor=white width="100%">
                    <tr>
                        <td colspan="2" class="bar" align="center">
                            HOME CU SYSTEM ADMISTRATOR
                        </td>
                    </tr>$print_fail_msg
                    <tr>
                        <td nowrap align="right" class="hdr">
                            IC Code:&nbsp;
                        </td>
                        <td nowrap  class='dtl'>
                            <input type="text" name="entertext" maxlength="8" value="">
                        </td>
                    </tr>
                    <tr>
                        <td nowrap align="right" class="hdr">
                            &nbsp;
                        </td>
                        <td nowrap  class='dtl'>
                            <input type="submit" value="Submit" name="frmsubmit">
                        </td>
                    </tr>
                </table>
                </td></tr>
                </table>
            </form></body></html>
print_html;


    }


    // ** Function for sending email
function SendSMS ($retSendTo, $retSendFrm) {

    global $link, $Hu;


    $MsgSubj = "Identity Confirmation";

    // * GEt the temp PIN  - Create a 4 digit pin
    $dms_tmppin = rand(1000, 9999);
    $dms_altip = $_SERVER['REMOTE_ADDR'];
    $dms_timestamp = date('U');

    $dms_save_userconfirm = $dms_tmppin . ":" . $dms_altip . ":" . $dms_timestamp;


    // ** Think I want this function be canned.. and do the following
    // * accepts a user_name, SendFrom Address.

    // Then it will create a NEW PIN, retrieve the SendTo Address

    // Save information to the database
    $save_sql = "UPDATE dmsmonitorusers
                                SET userconfirm = '" . prep_save($dms_save_userconfirm, 50) . "'
                            WHERE user_name = '$Hu'";

    $save_results = db_query($save_sql, $link);


    $SMS_Msg = "Code: $dms_tmppin ";


  // ** Be sure to strip out just the number from the retSendto
  // Just to be certain strip out the potential + from prepended number
  $retSendTo = preg_replace('/^([\+]{0,1})(\d+)(\@.*)/', '$2', $retSendTo);

  $sms_response = SendLongCodeSMS($GLOBALS['HOMECU_LONGCODE_API_KEY'], $GLOBALS['HOMECU_LONGCODE_URL'], $retSendFrm, $retSendTo, $SMS_Msg);

/*
    $notify = new ErrorMail;
    $notify->mailto = "$retSendTo";
    $notify->replyto = $retSendFrm;
    $notify->mailfrom = $retSendFrm;
    // $notify->logmode = 1;

    $notify->subject = $MsgSubj;

    $notify->msgbody = $SMS_Msg;

    $notify->SendMail();
*/
}
?>