triggers.inc.php 5.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164
  1. <?php
  2. if (isset($_POST["verify_tfa_login"])) {
  3. if (verify_tfa_login($_SESSION['pending_mailcow_cc_username'], $_POST["token"])) {
  4. $_SESSION['mailcow_cc_username'] = $_SESSION['pending_mailcow_cc_username'];
  5. $_SESSION['mailcow_cc_role'] = $_SESSION['pending_mailcow_cc_role'];
  6. unset($_SESSION['pending_mailcow_cc_username']);
  7. unset($_SESSION['pending_mailcow_cc_role']);
  8. unset($_SESSION['pending_tfa_method']);
  9. header("Location: /user.php");
  10. }
  11. }
  12. if (isset($_POST["login_user"]) && isset($_POST["pass_user"])) {
  13. $login_user = strtolower(trim($_POST["login_user"]));
  14. $as = check_login($login_user, $_POST["pass_user"]);
  15. if ($as == "admin") {
  16. $_SESSION['mailcow_cc_username'] = $login_user;
  17. $_SESSION['mailcow_cc_role'] = "admin";
  18. header("Location: /admin.php");
  19. }
  20. elseif ($as == "domainadmin") {
  21. $_SESSION['mailcow_cc_username'] = $login_user;
  22. $_SESSION['mailcow_cc_role'] = "domainadmin";
  23. header("Location: /mailbox.php");
  24. }
  25. elseif ($as == "user") {
  26. $_SESSION['mailcow_cc_username'] = $login_user;
  27. $_SESSION['mailcow_cc_role'] = "user";
  28. header("Location: /user.php");
  29. }
  30. elseif ($as != "pending") {
  31. unset($_SESSION['pending_mailcow_cc_username']);
  32. unset($_SESSION['pending_mailcow_cc_role']);
  33. unset($_SESSION['pending_tfa_method']);
  34. unset($_SESSION['mailcow_cc_username']);
  35. unset($_SESSION['mailcow_cc_role']);
  36. $_SESSION['return'] = array(
  37. 'type' => 'danger',
  38. 'msg' => $lang['danger']['login_failed']
  39. );
  40. }
  41. }
  42. if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == "admin") {
  43. if (isset($_GET["duallogin"])) {
  44. if (filter_var($_GET["duallogin"], FILTER_VALIDATE_EMAIL)) {
  45. $stmt = $pdo->prepare("SELECT `username` FROM `mailbox` WHERE `username` = :duallogin");
  46. $stmt->execute(array(':duallogin' => $_GET["duallogin"]));
  47. $num_results = count($stmt->fetchAll(PDO::FETCH_ASSOC));
  48. if ($num_results != 0) {
  49. $_SESSION["dual-login"]["username"] = $_SESSION['mailcow_cc_username'];
  50. $_SESSION["dual-login"]["role"] = $_SESSION['mailcow_cc_role'];
  51. $_SESSION['mailcow_cc_username'] = $_GET["duallogin"];
  52. $_SESSION['mailcow_cc_role'] = "user";
  53. header("Location: /user.php");
  54. }
  55. }
  56. }
  57. if (isset($_POST["edit_admin_account"])) {
  58. edit_admin_account($_POST);
  59. }
  60. if (isset($_POST["dkim_delete_key"])) {
  61. dkim_delete_key($_POST);
  62. }
  63. if (isset($_POST["dkim_add_key"])) {
  64. dkim_add_key($_POST);
  65. }
  66. if (isset($_POST["add_domain_admin"])) {
  67. add_domain_admin($_POST);
  68. }
  69. if (isset($_POST["delete_domain_admin"])) {
  70. delete_domain_admin($_POST);
  71. }
  72. }
  73. if (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == "user") {
  74. if (isset($_POST["edit_user_account"])) {
  75. edit_user_account($_POST);
  76. }
  77. if (isset($_POST["edit_spam_score"])) {
  78. edit_spam_score($_POST);
  79. }
  80. if (isset($_POST["edit_delimiter_action"])) {
  81. edit_delimiter_action($_POST);
  82. }
  83. if (isset($_POST["add_policy_list_item"])) {
  84. add_policy_list_item($_POST);
  85. }
  86. if (isset($_POST["delete_policy_list_item"])) {
  87. delete_policy_list_item($_POST);
  88. }
  89. if (isset($_POST["edit_tls_policy"])) {
  90. edit_tls_policy($_POST);
  91. }
  92. if (isset($_POST["add_syncjob"])) {
  93. add_syncjob($_POST);
  94. }
  95. if (isset($_POST["edit_syncjob"])) {
  96. edit_syncjob($_POST);
  97. }
  98. if (isset($_POST["delete_syncjob"])) {
  99. delete_syncjob($_POST);
  100. }
  101. if (isset($_POST["set_time_limited_aliases"])) {
  102. set_time_limited_aliases($_POST);
  103. }
  104. }
  105. if (isset($_SESSION['mailcow_cc_role']) && ($_SESSION['mailcow_cc_role'] == "admin" || $_SESSION['mailcow_cc_role'] == "domainadmin")) {
  106. if (isset($_POST["edit_domain_admin"])) {
  107. edit_domain_admin($_POST);
  108. }
  109. if (isset($_POST["set_tfa"])) {
  110. set_tfa($_POST);
  111. }
  112. if (isset($_POST["trigger_add_policy_list_item"])) {
  113. add_policy_list_item($_POST);
  114. }
  115. if (isset($_POST["trigger_delete_policy_list_item"])) {
  116. delete_policy_list_item($_POST);
  117. }
  118. if (isset($_POST["mailbox_add_domain"])) {
  119. mailbox_add_domain($_POST);
  120. }
  121. if (isset($_POST["mailbox_add_alias"])) {
  122. mailbox_add_alias($_POST);
  123. }
  124. if (isset($_POST["mailbox_add_alias_domain"])) {
  125. mailbox_add_alias_domain($_POST);
  126. }
  127. if (isset($_POST["mailbox_add_mailbox"])) {
  128. mailbox_add_mailbox($_POST);
  129. }
  130. if (isset($_POST["mailbox_add_mailbox"])) {
  131. mailbox_add_mailbox($_POST);
  132. }
  133. if (isset($_POST["mailbox_edit_alias"])) {
  134. mailbox_edit_alias($_POST);
  135. }
  136. if (isset($_POST["mailbox_edit_domain"])) {
  137. mailbox_edit_domain($_POST);
  138. }
  139. if (isset($_POST["mailbox_edit_mailbox"])) {
  140. mailbox_edit_mailbox($_POST);
  141. }
  142. if (isset($_POST["mailbox_edit_alias_domain"])) {
  143. mailbox_edit_alias_domain($_POST);
  144. }
  145. if (isset($_POST["trigger_delete_policy_list_item"])) {
  146. delete_policy_list_item($_POST);
  147. }
  148. if (isset($_POST["mailbox_delete_domain"])) {
  149. mailbox_delete_domain($_POST);
  150. }
  151. if (isset($_POST["mailbox_delete_alias"])) {
  152. mailbox_delete_alias($_POST);
  153. }
  154. if (isset($_POST["mailbox_delete_alias_domain"])) {
  155. mailbox_delete_alias_domain($_POST);
  156. }
  157. if (isset($_POST["mailbox_delete_mailbox"])) {
  158. mailbox_delete_mailbox($_POST);
  159. }
  160. }
  161. ?>