<?php

// Pandora FMS - http://pandorafms.com
// ==================================================
// Copyright (c) 2005-2012 Artica Soluciones Tecnologicas
// Please see http://pandorafms.org for full contribution list
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU Lesser General Public License
// as published by the Free Software Foundation; version 2
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
// Enable profiler for testing
if (!defined('__PAN_XHPROF__')) {
    define('__PAN_XHPROF__', 0);
}

if (__PAN_XHPROF__ === 1) {
    if (function_exists('tideways_xhprof_enable')) {
        tideways_xhprof_enable();
    } else {
        error_log('Cannot find tideways_xhprof_enable function');
    }
}

// Set character encoding to UTF-8 - fixes a lot of multibyte character headaches
if (function_exists('mb_internal_encoding')) {
    mb_internal_encoding('UTF-8');
}

// Set to 1 to do not check for installer or config file (for development!).
// Activate gives more error information, not useful for production sites
$develop_bypass = 0;

if ($develop_bypass != 1) {
    // If no config file, automatically try to install
    if (! file_exists('include/config.php')) {
        if (! file_exists('install.php')) {
            $url = explode('/', $_SERVER['REQUEST_URI']);
            $flag_url = 0;
            foreach ($url as $key => $value) {
                if (strpos($value, 'index.php') !== false || $flag_url) {
                    $flag_url = 1;
                    unset($url[$key]);
                } else if (strpos($value, 'enterprise') !== false || $flag_url) {
                    $flag_url = 1;
                    unset($url[$key]);
                }
            }

            $config['homeurl'] = rtrim(join('/', $url), '/');
            $config['homeurl_static'] = $config['homeurl'];
            $login_screen = 'error_noconfig';
            $ownDir = dirname(__FILE__).DIRECTORY_SEPARATOR;
            $config['homedir'] = $ownDir;
            include 'general/error_screen.php';
            exit;
        } else {
            include 'install.php';
            exit;
        }
    }

    if (filesize('include/config.php') == 0) {
        include 'install.php';
        exit;
    }

    if (isset($_POST['rename_file'])) {
        $rename_file_install = (bool) $_POST['rename_file'];
        if ($rename_file_install) {
            $salida_rename = rename('install.php', 'install_old.php');
        }
    }

    // Check for installer presence
    if (file_exists('install.php')) {
        $login_screen = 'error_install';
        include 'general/error_screen.php';
        exit;
    }

    // Check perms for config.php
    if (strtoupper(substr(PHP_OS, 0, 3)) != 'WIN') {
        if ((substr(sprintf('%o', fileperms('include/config.php')), -4) != '0600')
            && (substr(sprintf('%o', fileperms('include/config.php')), -4) != '0660')
            && (substr(sprintf('%o', fileperms('include/config.php')), -4) != '0640')
        ) {
            $url = explode('/', $_SERVER['REQUEST_URI']);
            $flag_url = 0;
            foreach ($url as $key => $value) {
                if (strpos($value, 'index.php') !== false || $flag_url) {
                    $flag_url = 1;
                    unset($url[$key]);
                } else if (strpos($value, 'enterprise') !== false || $flag_url) {
                    $flag_url = 1;
                    unset($url[$key]);
                }
            }

            $config['homeurl'] = rtrim(join('/', $url), '/');
            $config['homeurl_static'] = $config['homeurl'];
            $ownDir = dirname(__FILE__).DIRECTORY_SEPARATOR;
            $config['homedir'] = $ownDir;
            $login_screen = 'error_perms';
            include 'general/error_screen.php';
            exit;
        }
    }
}

if ((! file_exists('include/config.php')) || (! is_readable('include/config.php'))) {
    $login_screen = 'error_noconfig';
    include 'general/error_screen.php';
    exit;
}

//
// PLEASE DO NOT CHANGE ORDER //////
//
require_once 'include/config.php';
require_once 'include/functions_config.php';

if (isset($config['error'])) {
    $login_screen = $config['error'];
    include 'general/error_screen.php';
    exit;
}

// If metaconsole activated, redirect to it
if ($config['metaconsole'] == 1 && $config['enterprise_installed'] == 1) {
    header('Location: '.$config['homeurl'].'enterprise/meta');
    exit;
    // Always exit after sending location headers
}

if (file_exists(ENTERPRISE_DIR.'/include/functions_login.php')) {
    include_once ENTERPRISE_DIR.'/include/functions_login.php';
}

if (!empty($config['https']) && empty($_SERVER['HTTPS'])) {
    $query = '';
    if (sizeof($_REQUEST)) {
        // Some (old) browsers don't like the ?&key=var
        $query .= '?1=1';
    }

    // We don't clean these variables up as they're only being passed along
    foreach ($_GET as $key => $value) {
        if ($key == 1) {
            continue;
        }

        $query .= '&'.$key.'='.$value;
    }

    foreach ($_POST as $key => $value) {
        $query .= '&'.$key.'='.$value;
    }

    $url = ui_get_full_url($query);

    // Prevent HTTP response splitting attacks
    // http://en.wikipedia.org/wiki/HTTP_response_splitting
    $url = str_replace("\n", '', $url);

    header('Location: '.$url);
    exit;
    // Always exit after sending location headers
}

// Pure mode (without menu, header and footer).
$config['pure'] = (bool) get_parameter('pure');

// Auto Refresh page (can now be disabled anywhere in the script)
if (get_parameter('refr')) {
    $config['refr'] = (int) get_parameter('refr');
}

$delete_file = get_parameter('del_file');
if ($delete_file == 'yes_delete') {
    $salida_delete = shell_exec('rm /var/www/html/pandora_console/install.php');
}

ob_start();
echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">'."\n";
echo '<html xmlns="http://www.w3.org/1999/xhtml">'."\n";
echo '<head>'."\n";

// This starts the page head. In the call back function, things from $page['head'] array will be processed into the head
ob_start('ui_process_page_head');

// Enterprise main
enterprise_include('index.php');

echo '<script type="text/javascript">';
    echo 'var dispositivo = navigator.userAgent.toLowerCase();';
    echo 'if( dispositivo.search(/iphone|ipod|ipad|android/) > -1 ){';
        echo 'document.location = "'.$config['homeurl'].'mobile";  }';
echo '</script>';

// This tag is included in the buffer passed to ui_process_page_head so
// technically it can be stripped
echo '</head>'."\n";

require_once 'include/functions_themes.php';
ob_start('ui_process_page_body');

$config['remote_addr'] = $_SERVER['REMOTE_ADDR'];

$sec2 = get_parameter_get('sec2');
$sec2 = safe_url_extraclean($sec2);
$page = $sec2;
// Reference variable for old time sake
$sec = get_parameter_get('sec');
$sec = safe_url_extraclean($sec);

$process_login = false;

// Update user password
$change_pass = get_parameter_post('renew_password', 0);

if ($change_pass == 1) {
    $password_old = (string) get_parameter_post('old_password', '');
    $password_new = (string) get_parameter_post('new_password', '');
    $password_confirm = (string) get_parameter_post('confirm_new_password', '');
    $id = (string) get_parameter_post('login', '');

    $changed_pass = login_update_password_check($password_old, $password_new, $password_confirm, $id);
}

$minor_release_message = false;
$searchPage = false;
$search = get_parameter_get('head_search_keywords');
if (strlen($search) > 0) {
    $config['search_keywords'] = io_safe_input(trim(io_safe_output(get_parameter('keywords'))));
    // If not search category providad, we'll use an agent search
    $config['search_category'] = get_parameter('search_category', 'all');
    if (($config['search_keywords'] != 'Enter keywords to search') && (strlen($config['search_keywords']) > 0)) {
        $searchPage = true;
    }
}

// Login process
if (! isset($config['id_user'])) {
    if (isset($_GET['login'])) {
        include_once 'include/functions_db.php';
        // Include it to use escape_string_sql function
        $config['auth_error'] = '';
        // Set this to the error message from the authorization mechanism
        $nick = get_parameter_post('nick');
        // This is the variable with the login
        $pass = get_parameter_post('pass');
        // This is the variable with the password
        $nick = db_escape_string_sql($nick);
        $pass = db_escape_string_sql($pass);

        // Since now, only the $pass variable are needed
        unset($_GET['pass'], $_POST['pass'], $_REQUEST['pass']);

        // If the auth_code exists, we assume the user has come through the double auth page
        if (isset($_POST['auth_code'])) {
            $double_auth_success = false;

            // The double authentication is activated and the user has surpassed the first step (the login).
            // Now the authentication code provided will be checked.
            if (isset($_SESSION['prepared_login_da'])) {
                if (isset($_SESSION['prepared_login_da']['id_user'])
                    && isset($_SESSION['prepared_login_da']['timestamp'])
                ) {
                    // The user has a maximum of 5 minutes to introduce the double auth code
                    $dauth_period = SECONDS_2MINUTES;
                    $now = time();
                    $dauth_time = $_SESSION['prepared_login_da']['timestamp'];

                    if (($now - $dauth_period) < $dauth_time) {
                        // Nick
                        $nick = $_SESSION['prepared_login_da']['id_user'];
                        // Code
                        $code = (string) get_parameter_post('auth_code');

                        if (!empty($code)) {
                            $result = validate_double_auth_code($nick, $code);

                            if ($result === true) {
                                // Double auth success
                                $double_auth_success = true;
                            } else {
                                // Screen
                                $login_screen = 'double_auth';
                                // Error message
                                $config['auth_error'] = __('Invalid code');

                                if (!isset($_SESSION['prepared_login_da']['attempts'])) {
                                    $_SESSION['prepared_login_da']['attempts'] = 0;
                                }

                                $_SESSION['prepared_login_da']['attempts']++;
                            }
                        } else {
                            // Screen
                            $login_screen = 'double_auth';
                            // Error message
                            $config['auth_error'] = __("The code shouldn't be empty");

                            if (!isset($_SESSION['prepared_login_da']['attempts'])) {
                                $_SESSION['prepared_login_da']['attempts'] = 0;
                            }

                            $_SESSION['prepared_login_da']['attempts']++;
                        }
                    } else {
                        // Expired login
                        unset($_SESSION['prepared_login_da']);

                        // Error message
                        $config['auth_error'] = __('Expired login');
                    }
                } else {
                    // If the code doesn't exist, remove the prepared login
                    unset($_SESSION['prepared_login_da']);

                    // Error message
                    $config['auth_error'] = __('Login error');
                }
            }
            // If $_SESSION['prepared_login_da'] doesn't exist, the user have to do the login again
            else {
                // Error message
                $config['auth_error'] = __('Login error');
            }

            // Remove the authenticator code
            unset($_POST['auth_code'], $code);

            if (!$double_auth_success) {
                $login_failed = true;
                include_once 'general/login_page.php';
                db_pandora_audit(
                    'Logon Failed',
                    'Invalid double auth login: '.$_SERVER['REMOTE_ADDR'],
                    $_SERVER['REMOTE_ADDR']
                );
                while (@ob_end_flush()) {
                }

                exit('</html>');
            }
        }

        $login_button_saml = get_parameter('login_button_saml', false);
        if (isset($double_auth_success) && $double_auth_success) {
            // This values are true cause there are checked before complete the 2nd auth step
            $nick_in_db = $_SESSION['prepared_login_da']['id_user'];
            $expired_pass = false;
        } else if (($config['auth'] == 'saml') && ($login_button_saml)) {
            include_once ENTERPRISE_DIR.'/include/auth/saml.php';

            $saml_user_id = saml_process_user_login();

            $nick_in_db = $saml_user_id;
            if (!$nick_in_db) {
                include_once $config['saml_path'].'simplesamlphp/lib/_autoload.php';
                $as = new SimpleSAML_Auth_Simple('PandoraFMS');
                $as->logout();
            }
        } else {
            // process_user_login is a virtual function which should be defined in each auth file.
            // It accepts username and password. The rest should be internal to the auth file.
            // The auth file can set $config["auth_error"] to an informative error output or reference their internal error messages to it
            // process_user_login should return false in case of errors or invalid login, the nickname if correct
            $nick_in_db = process_user_login($nick, $pass);

            $expired_pass = false;

            if (($nick_in_db != false) && ((!is_user_admin($nick)
                || $config['enable_pass_policy_admin']))
                && (file_exists(ENTERPRISE_DIR.'/load_enterprise.php'))
                && ($config['enable_pass_policy'])
            ) {
                include_once ENTERPRISE_DIR.'/include/auth/mysql.php';

                $blocked = login_check_blocked($nick);

                if ($blocked) {
                    include_once 'general/login_page.php';
                    db_pandora_audit('Password expired', 'Password expired: '.$nick, $nick);
                    while (@ob_end_flush()) {
                    }

                    exit('</html>');
                }

                // Checks if password has expired
                $check_status = check_pass_status($nick, $pass);

                switch ($check_status) {
                    case PASSSWORD_POLICIES_FIRST_CHANGE:
                        // first change
                    case PASSSWORD_POLICIES_EXPIRED:
                        // pass expired
                        $expired_pass = true;
                        login_change_password($nick, '', $check_status);
                    break;
                }
            }
        }

        if (($nick_in_db !== false) && $expired_pass) {
            // login ok and password has expired
            include_once 'general/login_page.php';
            db_pandora_audit(
                'Password expired',
                'Password expired: '.$nick,
                $nick
            );
            while (@ob_end_flush()) {
            }

            exit('</html>');
        } else if (($nick_in_db !== false) && (!$expired_pass)) {
            // login ok and password has not expired
            // Double auth check
            if ((!isset($double_auth_success) || !$double_auth_success) && is_double_auth_enabled($nick_in_db)) {
                // Store this values in the session to know if the user login was correct
                $_SESSION['prepared_login_da'] = [
                    'id_user'   => $nick_in_db,
                    'timestamp' => time(),
                    'attempts'  => 0,
                ];

                // Load the page to introduce the double auth code
                $login_screen = 'double_auth';
                include_once 'general/login_page.php';
                while (@ob_end_flush()) {
                }

                exit('</html>');
            }

            // login ok and password has not expired
            $process_login = true;

            if (is_user_admin($nick)) {
                echo "<script type='text/javascript'>var process_login_ok = 1;</script>";
            } else {
                echo "<script type='text/javascript'>var process_login_ok = 0;</script>";
            }

            if (!isset($_GET['sec2']) && !isset($_GET['sec'])) {
                // Avoid the show homepage when the user go to
                // a specific section of pandora
                // for example when timeout the sesion
                unset($_GET['sec2']);
                $_GET['sec'] = 'general/logon_ok';
                $home_page = '';
                if (isset($nick)) {
                    $user_info = users_get_user_by_id($nick);
                    $home_page = io_safe_output($user_info['section']);
                    $home_url = $user_info['data_section'];
                    if ($home_page != '') {
                        switch ($home_page) {
                            case 'Event list':
                                $_GET['sec'] = 'eventos';
                                $_GET['sec2'] = 'operation/events/events';
                            break;

                            case 'Group view':
                                $_GET['sec'] = 'estado';
                                $_GET['sec2'] = 'operation/agentes/group_view';
                            break;

                            case 'Alert detail':
                                $_GET['sec'] = 'estado';
                                $_GET['sec2'] = 'operation/agentes/alerts_status';
                            break;

                            case 'Tactical view':
                                $_GET['sec'] = 'estado';
                                $_GET['sec2'] = 'operation/agentes/tactical';
                            break;

                            case 'Default':
                                $_GET['sec'] = 'general/logon_ok';
                            break;

                            case 'Dashboard':
                                $_GET['sec'] = 'reporting';
                                $_GET['sec2'] = ENTERPRISE_DIR.'/dashboard/main_dashboard';
                                $id_dashboard_select = db_get_value('id', 'tdashboard', 'name', $home_url);
                                $_GET['id_dashboard_select'] = $id_dashboard_select;
                                $_GET['d_from_main_page'] = 1;
                            break;

                            case 'Visual console':
                                $_GET['sec'] = 'network';
                                $_GET['sec2'] = 'operation/visual_console/index';
                            break;

                            case 'Other':
                                $home_url = io_safe_output($home_url);
                                $url_array = parse_url($home_url);
                                parse_str($url_array['query'], $res);
                                foreach ($res as $key => $param) {
                                    $_GET[$key] = $param;
                                }
                            break;
                        }
                    } else {
                        $_GET['sec'] = 'general/logon_ok';
                    }
                }
            }

            db_logon($nick_in_db, $_SERVER['REMOTE_ADDR']);
            $_SESSION['id_usuario'] = $nick_in_db;
            $config['id_user'] = $nick_in_db;

            // Check if connection goes through F5 balancer. If it does, then don't call config_prepare_session() or user will be back to login all the time
            $prepare_session = true;
            foreach ($_COOKIE as $key => $value) {
                if (preg_match('/BIGipServer*/', $key)) {
                    $prepare_session = false;
                }
            }

            if ($prepare_session) {
                 config_prepare_session();
            }

            if (is_user_admin($config['id_user'])) {
                // PHP configuration values
                $PHPupload_max_filesize = config_return_in_bytes(ini_get('upload_max_filesize'));
                $PHPmemory_limit = config_return_in_bytes(ini_get('memory_limit'));
                $PHPmax_execution_time = ini_get('max_execution_time');

                if ($PHPmax_execution_time !== '0') {
                    set_time_limit(0);
                }

                $PHPupload_max_filesize_min = config_return_in_bytes('800M');

                if ($PHPupload_max_filesize < $PHPupload_max_filesize_min) {
                    ini_set('upload_max_filesize', config_return_in_bytes('800M'));
                }

                $PHPmemory_limit_min = config_return_in_bytes('500M');

                if ($PHPmemory_limit < $PHPmemory_limit_min && $PHPmemory_limit !== '-1') {
                    ini_set('memory_limit', config_return_in_bytes('500M'));
                }

                set_time_limit((int) $PHPmax_execution_time);
                ini_set('upload_max_filesize', $PHPupload_max_filesize);
                ini_set('memory_limit', $PHPmemory_limit);
            }

            // ==========================================================
            // -------- SET THE CUSTOM CONFIGS OF USER ------------------
            config_user_set_custom_config();
            // ==========================================================
            // Remove everything that might have to do with people's passwords or logins
            unset($pass, $login_good);

            $user_language = get_user_language($config['id_user']);

            $l10n = null;
            if (file_exists('./include/languages/'.$user_language.'.mo')) {
                $l10n = new gettext_reader(new CachedFileReader('./include/languages/'.$user_language.'.mo'));
                $l10n->load_tables();
            }
        } else {
            // login wrong
            $blocked = false;

            if ((!is_user_admin($nick) || $config['enable_pass_policy_admin']) && file_exists(ENTERPRISE_DIR.'/load_enterprise.php')) {
                $blocked = login_check_blocked($nick);
            }

            if (!$blocked) {
                if (file_exists(ENTERPRISE_DIR.'/load_enterprise.php')) {
                    login_check_failed($nick);
                    // Checks failed attempts
                }

                $login_failed = true;
                include_once 'general/login_page.php';
                db_pandora_audit('Logon Failed', 'Invalid login: '.$nick, $nick);
                while (@ob_end_flush()) {
                }

                exit('</html>');
            } else {
                include_once 'general/login_page.php';
                db_pandora_audit('Logon Failed', 'Invalid login: '.$nick, $nick);
                while (@ob_end_flush()) {
                }

                exit('</html>');
            }
        }

        // Form the url
        $query_params_redirect = $_GET;
        // Visual console do not want sec2
        if ($home_page == 'Visual console') {
            unset($query_params_redirect['sec2']);
        }

        $redirect_url = '?logged=1';
        foreach ($query_params_redirect as $key => $value) {
            if ($key == 'login') {
                continue;
            }

            $redirect_url .= '&'.safe_url_extraclean($key).'='.safe_url_extraclean($value);
        }

        header('Location: '.$config['homeurl'].'index.php'.$redirect_url);
        exit;
        // Always exit after sending location headers
    }
    // Hash login process
    else if (isset($_GET['loginhash'])) {
        $loginhash_data = get_parameter('loginhash_data', '');
        $loginhash_user = str_rot13(get_parameter('loginhash_user', ''));

        if ($config['loginhash_pwd'] != '' && $loginhash_data == md5($loginhash_user.io_output_password($config['loginhash_pwd']))) {
            db_logon($loginhash_user, $_SERVER['REMOTE_ADDR']);
            $_SESSION['id_usuario'] = $loginhash_user;
            $config['id_user'] = $loginhash_user;
        } else {
            include_once 'general/login_page.php';
            db_pandora_audit('Logon Failed (loginhash', '', 'system');
            while (@ob_end_flush()) {
            }

            exit('</html>');
        }
    }
    // There is no user connected
    else {
        if ($config['enterprise_installed']) {
            enterprise_include_once('include/functions_reset_pass.php');
        }

        $correct_pass_change = (boolean) get_parameter('correct_pass_change', 0);
        $reset = (boolean) get_parameter('reset', 0);
        $first = (boolean) get_parameter('first', 0);
        $reset_hash = get_parameter('reset_hash', '');

        if ($correct_pass_change) {
            $correct_reset_pass_process = '';
            $process_error_message = '';
            $pass1 = get_parameter('pass1');
            $pass2 = get_parameter('pass2');
            $id_user = get_parameter('id_user');

            if ($pass1 == $pass2) {
                $res = update_user_password($id_user, $pass1);
                if ($res) {
                    db_process_sql_insert(
                        'tsesion',
                        [
                            'id_sesion'   => '',
                            'id_usuario'  => $id_user,
                            'ip_origen'   => $_SERVER['REMOTE_ADDR'],
                            'accion'      => 'Reset&#x20;change',
                            'descripcion' => 'Successful reset password process ',
                            'fecha'       => date('Y-m-d H:i:s'),
                            'utimestamp'  => time(),
                        ]
                    );

                    $correct_reset_pass_process = __('Password changed successfully');

                    register_pass_change_try($id_user, 1);
                } else {
                    register_pass_change_try($id_user, 0);

                    $process_error_message = __('Failed to change password');
                }
            } else {
                register_pass_change_try($id_user, 0);

                $process_error_message = __('Passwords must be the same');
            }

            include_once 'general/login_page.php';
        } else {
            if ($reset_hash != '') {
                $hash_data = explode(':::', $reset_hash);
                $id_user = $hash_data[0];
                $codified_hash = $hash_data[1];

                $db_reset_pass_entry = db_get_value_filter('reset_time', 'treset_pass', ['id_user' => $id_user, 'cod_hash' => $id_user.':::'.$codified_hash]);
                $process_error_message = '';

                if ($db_reset_pass_entry) {
                    if (($db_reset_pass_entry + SECONDS_2HOUR) < time()) {
                        register_pass_change_try($id_user, 0);
                        $process_error_message = __('Too much time since password change request');
                        delete_reset_pass_entry($id_user);
                        include_once 'general/login_page.php';
                    } else {
                        delete_reset_pass_entry($id_user);
                        include_once 'enterprise/include/process_reset_pass.php';
                    }
                } else {
                    register_pass_change_try($id_user, 0);
                    $process_error_message = __('This user has not requested a password change');
                    include_once 'general/login_page.php';
                }
            } else {
                if (!$reset) {
                    include_once 'general/login_page.php';
                } else {
                    $user_reset_pass = get_parameter('user_reset_pass', '');
                    $error = '';
                    $mail = '';
                    $show_error = false;

                    if (!$first) {
                        if ($reset) {
                            if ($user_reset_pass == '') {
                                $reset = false;
                                $error = __('Id user cannot be empty');
                                $show_error = true;
                            } else {
                                $check_user = check_user_id($user_reset_pass);

                                if (!$check_user) {
                                    $reset = false;
                                    register_pass_change_try($user_reset_pass, 0);
                                    $error = __('Error in reset password request');
                                    $show_error = true;
                                } else {
                                    $check_mail = check_user_have_mail($user_reset_pass);

                                    if (!$check_mail) {
                                        $reset = false;
                                        register_pass_change_try($user_reset_pass, 0);
                                        $error = __('This user doesn\'t have a valid email address');
                                        $show_error = true;
                                    } else {
                                        $mail = $check_mail;
                                    }
                                }
                            }
                        }

                        if (!$reset) {
                            if ($config['enterprise_installed']) {
                                include_once 'enterprise/include/reset_pass.php';
                            }
                        } else {
                            $cod_hash = $user_reset_pass.'::::'.md5(rand(10, 1000000).rand(10, 1000000).rand(10, 1000000));

                            $subject = '['.get_product_name().'] '.__('Reset password');
                            $body = __('This is an automatically sent message for user ');
                            $body .= ' "<strong>'.$user_reset_pass.'"</strong>';
                            $body .= '<p />';
                            $body .= __('Please click the link below to reset your password');
                            $body .= '<p />';
                            $body .= '<a href="'.$config['homeurl'].'index.php?reset_hash='.$cod_hash.'">'.__('Reset your password').'</a>';
                            $body .= '<p />';
                            $body .= get_product_name();
                            $body .= '<p />';
                            $body .= '<em>'.__('Please do not reply to this email.').'</em>';

                            $result = send_email_to_user($mail, $body, $subject);

                            $process_error_message = '';
                            if (!$result) {
                                $process_error_message = __('Error at sending the email');
                            } else {
                                send_token_to_db($user_reset_pass, $cod_hash);
                            }

                            include_once 'general/login_page.php';
                        }
                    } else {
                        include_once 'enterprise/include/reset_pass.php';
                    }
                }
            }
        }

        while (@ob_end_flush()) {
        }

        exit('</html>');
    }
} else {
    if (isset($_GET['loginhash_data'])) {
        $loginhash_data = get_parameter('loginhash_data', '');
        $loginhash_user = str_rot13(get_parameter('loginhash_user', ''));
        $iduser = $_SESSION['id_usuario'];
        // logoff_db ($iduser, $_SERVER["REMOTE_ADDR"]); check why is not available
        unset($_SESSION['id_usuario']);
        unset($iduser);

        if ($config['loginhash_pwd'] != '' && $loginhash_data == md5($loginhash_user.io_output_password($config['loginhash_pwd']))) {
            db_logon($loginhash_user, $_SERVER['REMOTE_ADDR']);
            $_SESSION['id_usuario'] = $loginhash_user;
            $config['id_user'] = $loginhash_user;
        } else {
            include_once 'general/login_page.php';
            db_pandora_audit('Logon Failed (loginhash', '', 'system');
            while (@ob_end_flush()) {
            }

            exit('</html>');
        }
    }

    $user_in_db = db_get_row_filter(
        'tusuario',
        ['id_user' => $config['id_user']],
        '*'
    );
    if ($user_in_db == false) {
        // logout
        $_REQUEST = [];
        $_GET = [];
        $_POST = [];
        $config['auth_error'] = __("User doesn\'t exist.");
        $iduser = $_SESSION['id_usuario'];
        logoff_db($iduser, $_SERVER['REMOTE_ADDR']);
        unset($_SESSION['id_usuario']);
        unset($iduser);
        include_once 'general/login_page.php';
        while (@ob_end_flush()) {
        }

        exit('</html>');
    } else {
        if (((bool) $user_in_db['is_admin'] === false)
            && ((bool) $user_in_db['not_login'] === true)
        ) {
            // logout
            $_REQUEST = [];
            $_GET = [];
            $_POST = [];
            $config['auth_error'] = __('User only can use the API.');
            $iduser = $_SESSION['id_usuario'];
            logoff_db($iduser, $_SERVER['REMOTE_ADDR']);
            unset($_SESSION['id_usuario']);
            unset($iduser);
            include_once 'general/login_page.php';
            while (@ob_end_flush()) {
            }

            exit('</html>');
        }
    }
}

// Enterprise support
if (file_exists(ENTERPRISE_DIR.'/load_enterprise.php')) {
    include_once ENTERPRISE_DIR.'/load_enterprise.php';
}

// Log off
if (isset($_GET['bye'])) {
    include 'general/logoff.php';
    $iduser = $_SESSION['id_usuario'];
    db_logoff($iduser, $_SERVER['REMOTE_ADDR']);

    $_SESSION = [];
    session_destroy();
    header_remove('Set-Cookie');
    setcookie(session_name(), $_COOKIE[session_name()], (time() - 4800), '/');

    if ($config['auth'] == 'saml') {
        include_once $config['saml_path'].'simplesamlphp/lib/_autoload.php';
        $as = new SimpleSAML_Auth_Simple('PandoraFMS');
        $as->logout();
    }

    while (@ob_end_flush()) {
    }

    exit('</html>');
}

clear_pandora_error_for_header();

// ----------------------------------------------------------------------
// EXTENSIONS
// ----------------------------------------------------------------------
/*
 * Load the basic configurations of extension and add extensions into menu.
 * Load here, because if not, some extensions not load well, I don't why.
 */

$config['logged'] = false;
extensions_load_extensions($process_login);

// Check for update manager messages
if (license_free() && is_user_admin($config['id_user'])
    && (($config['last_um_check'] < time())
    || (!isset($config['last_um_check'])))
) {
    include_once 'include/functions_update_manager.php';
    update_manager_download_messages();
}

if ($process_login) {
     // Call all extensions login function
    extensions_call_login_function();

    unset($_SESSION['new_update']);

    include_once 'include/functions_update_manager.php';
    enterprise_include_once('include/functions_update_manager.php');

    if ($config['autoupdate'] == 1) {
        if (enterprise_installed()) {
            $result = update_manager_check_online_enterprise_packages_available();
        } else {
            $result = update_manager_check_online_free_packages_available();
        }

        if ($result) {
            $_SESSION['new_update'] = 'new';
        }
    }

    // Set the initial global counter for chat.
    users_get_last_global_counter('session');

    $config['logged'] = true;
}

// ----------------------------------------------------------------------
// Get old parameters before navigation.
$old_sec = '';
$old_sec2 = '';
$old_page = '';
if (isset($_SERVER['HTTP_REFERER'])) {
    $old_page = $_SERVER['HTTP_REFERER'];
}

$chunks = explode('?', $old_page);
if (count($chunks) == 2) {
    $chunks = explode('&', $chunks[1]);

    foreach ($chunks as $chunk) {
        if (strstr($chunk, 'sec=') !== false) {
            $old_sec = str_replace('sec=', '', $chunk);
        }

        if (strstr($chunk, 'sec2=') !== false) {
            $old_sec = str_replace('sec2=', '', $chunk);
        }
    }
}

$_SESSION['new_chat'] = false;
if ($old_sec2 == 'operation/users/webchat') {
    users_get_last_global_counter('session');
}

if ($page == 'operation/users/webchat') {
    // Reload the global counter.
    users_get_last_global_counter('session');
}

if (isset($_SESSION['global_counter_chat'])) {
    $old_global_counter_chat = $_SESSION['global_counter_chat'];
} else {
    $old_global_counter_chat = users_get_last_global_counter('return');
}

$now_global_counter_chat = users_get_last_global_counter('return');

if ($old_global_counter_chat != $now_global_counter_chat) {
    if (!users_is_last_system_message()) {
        $_SESSION['new_chat'] = true;
    }
}

// Pop-ups display order:
// 1) login_required (timezone and email)
// 2) identification (newsletter and register)
// 3) last_message   (update manager message popup
// 4) login_help     (online help, enterpirse version, forums, documentation)
if (is_user_admin($config['id_user'])
    && (!isset($config['initial_wizard']) || $config['initial_wizard'] != 1)
) {
    include_once 'general/login_required.php';
}

if (get_parameter('login', 0) !== 0) {
    // Display news dialog
    include_once 'general/news_dialog.php';

    // Display login help info dialog
    // If it's configured to not skip this
    $display_previous_popup = false;
    if (license_free() && is_user_admin($config['id_user']) && $config['initial_wizard'] == 1) {
        $display_previous_popup = include_once 'general/login_identification_wizard.php';
        if ($display_previous_popup === false) {
            $display_previous_popup = include_once 'general/last_message.php';
        }
    }

    if ((!isset($config['skip_login_help_dialog']) || $config['skip_login_help_dialog'] == 0)
        && $display_previous_popup === false
        && $config['initial_wizard'] == 1
    ) {
        include_once 'general/login_help_dialog.php';
    }

    $php_version = phpversion();
    $php_version_array = explode('.', $php_version);
    if ($php_version_array[0] < 7) {
        include_once 'general/php7_message.php';
    }
}

// Header
if ($config['pure'] == 0) {
    if ($config['classic_menu']) {
        echo '<div id="container"><div id="head">';
        include 'general/header.php';
        echo '</div><div id="menu">';
        include 'general/main_menu.php';
        echo '</div>';
        echo '<div style="padding-left:100px;" id="page">';
    } else {
        echo '<div id="container"><div id="head">';
        include 'general/header.php';
        echo '</div><div id="page" style="margin-top:20px;"><div id="menu">';
        include 'general/main_menu.php';
        echo '</div>';
    }
} else {
    echo '<div id="main_pure">';
    // Require menu only to build structure to use it in ACLs
    include 'operation/menu.php';
    include 'godmode/menu.php';
}

// http://es2.php.net/manual/en/ref.session.php#64525
// Session locking concurrency speedup!
session_write_close();


// Main block of content
if ($config['pure'] == 0) {
    echo '<div id="main">';
}


// Page loader / selector
if ($searchPage) {
    include 'operation/search_results.php';
} else {
    if ($page != '') {
        $main_sec = get_sec($sec);
        if ($main_sec == false) {
            if ($sec == 'extensions') {
                $main_sec = get_parameter('extension_in_menu');
            } else if ($sec == 'gextensions') {
                    $main_sec = get_parameter('extension_in_menu');
            } else {
                $main_sec = $sec;
            }

            $sec = $sec2;
            $sec2 = '';
        }

        $page .= '.php';

        // Enterprise ACL check
        if (enterprise_hook(
            'enterprise_acl',
            [
                $config['id_user'],
                $main_sec,
                $sec,
                true,
                $sec2,
            ]
        ) == false
        ) {
            include 'general/noaccess.php';
        } else {
            $sec = $main_sec;
            if (file_exists($page)) {
                if (! extensions_is_extension($page)) {
                    include_once $page;
                } else {
                    if ($sec[0] == 'g') {
                        extensions_call_godmode_function(basename($page));
                    } else {
                        extensions_call_main_function(basename($page));
                    }
                }
            } else {
                ui_print_error_message(__('Sorry! I can\'t find the page!'));
            }
        }
    } else {
        // home screen chosen by the user
        $home_page = '';
        if (isset($config['id_user'])) {
            $user_info = users_get_user_by_id($config['id_user']);
            $home_page = io_safe_output($user_info['section']);
            $home_url = $user_info['data_section'];
        }

        if ($home_page != '') {
            switch ($home_page) {
                case 'Event list':
                    $_GET['sec'] = 'eventos';
                    $_GET['sec2'] = 'operation/events/events';
                break;

                case 'Group view':
                    $_GET['sec'] = 'view';
                    $_GET['sec2'] = 'operation/agentes/group_view';
                break;

                case 'Alert detail':
                    $_GET['sec'] = 'view';
                    $_GET['sec2'] = 'operation/agentes/alerts_status';
                break;

                case 'Tactical view':
                    $_GET['sec'] = 'view';
                    $_GET['sec2'] = 'operation/agentes/tactical';
                break;

                case 'Default':
                    $_GET['sec2'] = 'general/logon_ok';
                break;

                case 'Dashboard':
                    $id_dashboard = db_get_value('id', 'tdashboard', 'name', $home_url);
                    $str = 'sec=reporting&sec2='.ENTERPRISE_DIR.'/dashboard/main_dashboard&id='.$id_dashboard.'&d_from_main_page=1';
                    parse_str($str, $res);
                    foreach ($res as $key => $param) {
                        $_GET[$key] = $param;
                    }
                break;

                case 'Visual console':
                    $id_visualc = db_get_value('id', 'tlayout', 'name', $home_url);
                    if (($home_url == '') || ($id_visualc == false)) {
                        $str = 'sec=network&sec2=operation/visual_console/index&refr=60';
                    } else {
                        $str = 'sec=network&sec2=operation/visual_console/render_view&id='.$id_visualc.'&refr=60';
                    }

                    parse_str($str, $res);
                    foreach ($res as $key => $param) {
                        $_GET[$key] = $param;
                    }
                break;

                case 'Other':
                    $home_url = io_safe_output($home_url);
                    $url_array = parse_url($home_url);
                    parse_str($url_array['query'], $res);
                    foreach ($res as $key => $param) {
                        $_GET[$key] = $param;
                    }
                break;
            }

            if (isset($_GET['sec2'])) {
                $file = $_GET['sec2'].'.php';
                // Translate some secs
                $main_sec = get_sec($_GET['sec']);
                $_GET['sec'] = $main_sec == false ? $_GET['sec'] : $main_sec;
                if (!file_exists($file)
                    || (                        $_GET['sec2'] != 'general/logon_ok'
                    && enterprise_hook(
                        'enterprise_acl',
                        [
                            $config['id_user'],
                            $_GET['sec'],
                            $_GET['sec2'],
                            true,
                            isset($_GET['sec3']) ? $_GET['sec3'] : '',
                        ]
                    ) == false                    )
                ) {
                    unset($_GET['sec2']);
                    include 'general/noaccess.php';
                } else {
                    include $file;
                }
            } else {
                include 'general/noaccess.php';
            }
        } else {
            include 'general/logon_ok.php';
        }
    }
}

if ($config['pure'] == 0) {
    echo '<div style="clear:both"></div>';
    echo '</div>';
    // main
    echo '<div style="clear:both">&nbsp;</div>';
    echo '</div>';
    // page (id = page)
} else {
    echo '</div>';
    // main_pure
}


if ($config['pure'] == 0) {
    echo '</div>';
    // container div
    echo '<div style="clear:both"></div>';
    echo '<div id="foot">';
    include 'general/footer.php';
    echo '</div>';
}

// Clippy function
require_once 'include/functions_clippy.php';
clippy_start($sec2);

while (@ob_end_flush()) {
}

db_print_database_debug();
echo '</html>';

$run_time = format_numeric((microtime(true) - $config['start_time']), 3);
echo "\n<!-- Page generated in $run_time seconds -->\n";

// Values from PHP to be recovered from JAVASCRIPT
require 'include/php_to_js_values.php';


?>

<script type="text/javascript" language="javascript">
    //Initial load of page
    $(document).ready(adjustFooter);
    
    //Every resize of window
    $(window).resize(adjustFooter);
    
    //Every show/hide call may need footer re-layout
    (function() {
        var oShow = jQuery.fn.show;
        var oHide = jQuery.fn.hide;
        
        jQuery.fn.show = function () {
            var rv = oShow.apply(this, arguments);
            adjustFooter();
            return rv;
        };
        jQuery.fn.hide = function () {
            var rv = oHide.apply(this, arguments);
            adjustFooter();
            return rv;
        };
    })();
    
    function force_run_register () {
        run_identification_wizard (1, 0, 0);
    }
    function force_run_newsletter () {
        run_identification_wizard (0, 1, 0);
    }
    function first_time_identification () {
        run_identification_wizard (-1, -1, 1);
    }

    var times_fired_register_wizard = 0;

    function run_identification_wizard (register, newsletter , return_button) {
        if (times_fired_register_wizard) {
            $(".ui-dialog-titlebar-close").show();
            
            //Reset some values                
            $("#label-email-newsletter").hide();
            $("#text-email-newsletter").hide();
            $("#required-email-newsletter").hide();
            $("#checkbox-register").removeAttr('checked');
            $("#checkbox-newsletter").removeAttr('checked');
            
            // Hide or show parts
            if (register == 1) {
                $("#checkbox-register").show();
                $("#label-register").show ();
            }
            if (register == 0) {
                $("#checkbox-register").attr ('style', 'display: none !important');
                $("#label-register").hide ();
            }
            if (newsletter == 1) {
                $("#checkbox-newsletter").show();
                $("#label-newsletter").show ();
            }
            if (newsletter == 0) {
                $("#checkbox-newsletter").attr ('style', 'display: none !important');
                $("#label-newsletter").hide ();
            }
            $("#login_accept_register").dialog('open');
        }
        else {
            $(".ui-dialog-titlebar-close").show();
            $("#container").append('<div class="id_wizard"></div>');
            jQuery.post ("ajax.php",
                {"page": "general/login_identification_wizard",
                 "not_return": 1,
                 "force_register": register,
                 "force_newsletter": newsletter,
                 "return_button": return_button},
                function (data) {
                    $(".id_wizard").hide ()
                        .empty ()
                        .append (data);
                },
                "html"
            );
        }
        times_fired_register_wizard++;
        return false;
    }

    //Dynamically assign footer position and width.
    function adjustFooter() {
        /*
        if (document.readyState !== 'complete' || $('#container').position() == undefined) {
            return;
        }
        // minimum top value (upper limit) for div#foot
        var ulim = $('#container').position().top + $('#container').outerHeight(true);
        // window height. $(window).height() returns wrong value on Opera and Google Chrome.
        var wh = document.documentElement.clientHeight;
        // save div#foot's height for latter use
        var h = $('#foot').height();
        // new top value for div#foot
        var t = (ulim + $('#foot').outerHeight() > wh) ? ulim : wh - $('#foot').outerHeight();
        /*
        if ($('#foot').position().top != t) {
            $('#foot').css({ position: "absolute", top: t, left: $('#foot').offset().left});
            $('#foot').height(h);
        }
        if ($('#foot').width() !=  $(window).width()) {
            $('#foot').width($(window).width());
        }
        */
    }
</script>
<?php
if (__PAN_XHPROF__ === 1) {
    pandora_xhprof_display_result('node_index');
}