pandorafms/pandora_console/ajax.php

<?php

// Pandora FMS - http://pandorafms.com
// ==================================================
// Copyright (c) 2005-2011 Artica Soluciones Tecnologicas
// Please see http://pandorafms.org for full contribution list

// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU Lesser General Public License
// as published by the Free Software Foundation; version 2

// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.

if ((! file_exists("include/config.php")) || (! is_readable("include/config.php"))) {
	exit;
}

// Don't start a session before this import.
// The session is configured and started inside the config process.
require_once ('include/config.php');
require_once ('include/functions.php');
require_once ('include/functions_db.php');
require_once ('include/auth/mysql.php');

// Hash login process
if (isset ($_GET["loginhash"])) {
	
	$loginhash_data = get_parameter("loginhash_data", "");
	$loginhash_user = str_rot13(get_parameter("loginhash_user", ""));
	
	if ($config["loginhash_pwd"] != ""
		&& $loginhash_data == md5($loginhash_user.io_output_password($config["loginhash_pwd"]))) {
		db_logon ($loginhash_user, $_SERVER['REMOTE_ADDR']);
		$_SESSION['id_usuario'] = $loginhash_user;
		$config["id_user"] = $loginhash_user;
	}
	else {
		require_once ('general/login_page.php');
		db_pandora_audit("Logon Failed (loginhash", "", "system");
		while (@ob_end_flush ());
		exit ("</html>");
	}
}

$public_hash = get_parameter('hash', false);

// Check user
if ($public_hash == false) {
	check_login();
} else {
	enterprise_include_once('include/functions_dashboard.php');
	if (dashboard_check_public_hash($public_hash) === false) {
		db_pandora_audit("Invalid public hash",	"Trying to access public dashboard");
		require ("general/noaccess.php");
		exit;
	}
}

define ('AJAX', true);

/* Enterprise support */
if (file_exists (ENTERPRISE_DIR."/load_enterprise.php")) {
	include_once (ENTERPRISE_DIR."/load_enterprise.php");
}

$config["remote_addr"] = $_SERVER['REMOTE_ADDR'];

$page = (string) get_parameter ('page');
$page = safe_url_extraclean ($page);
$page .= '.php';
$config["id_user"] = $_SESSION["id_usuario"];
$isFunctionSkins = enterprise_include_once ('include/functions_skins.php');
if ($isFunctionSkins !== ENTERPRISE_NOT_HOOK)
	$config["relative_path"] = enterprise_hook('skins_set_image_skin_path',array($config['id_user']));

if (isset($config['metaconsole'])) {
	// Not cool way of know if we are executing from metaconsole or normal console
	if ($config['metaconsole'])
		define ('METACONSOLE', true);
}

if (file_exists ($page)) {
	require_once ($page);
}
else {
	echo '<br /><b class="error">Sorry! I can\'t find the page '.$page.'!</b>';
}
?>