blob: 3628065ac225ec540009802fe8fceb5ab3d4f69e [file] [log] [blame]
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -07001<html>
2<head>
3<title>Hotspot 2.0 subscription remediation</title>
4</head>
5<body>
6
7<?php
8
Hai Shalom39ba6fc2019-01-22 12:40:38 -08009require('config.php');
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -070010
Hai Shalom39ba6fc2019-01-22 12:40:38 -080011$db = new PDO($osu_db);
12if (!$db) {
13 die($sqliteerror);
14}
15
16if (isset($_GET["session_id"]))
17 $id = preg_replace("/[^a-fA-F0-9]/", "", $_GET["session_id"]);
18else
19 $id = 0;
20echo "SessionID: " . $id . "<br>\n";
21
22$row = $db->query("SELECT * FROM sessions WHERE id='$id'")->fetch();
23if ($row == false) {
24 die("Session not found");
25}
26
27$username = $row['user'];
28echo "User: " . $username . "@" . $row['realm'] . "<br>\n";
29
30$user = $db->query("SELECT machine_managed,methods FROM users WHERE identity='$username'")->fetch();
31if ($user == false) {
32 die("User not found");
33}
34
35echo "<hr><br>\n";
36
37$cert = $user['methods'] == "TLS" || strncmp($username, "cert-", 5) == 0;
38
39if ($cert) {
40 echo "<a href=\"redirect.php?id=" . $_GET["session_id"] . "\">Complete user subscription remediation</a><br>\n";
41} else if ($user['machine_managed'] == "1") {
42 echo "<a href=\"redirect.php?id=" . $_GET["session_id"] . "\">Complete user subscription remediation</a><br>\n";
43 echo "This will provide a new machine-generated password.<br>\n";
44} else {
45 echo "<form action=\"remediation-pw.php\" method=\"POST\">\n";
46 echo "<input type=\"hidden\" name=\"id\" value=\"$id\">\n";
47 echo "New password: <input type=\"password\" name=\"password\"><br>\n";
48 echo "<input type=\"submit\" value=\"Change password\">\n";
49 echo "</form>\n";
50}
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -070051
52?>
53
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -070054</body>
55</html>