function validate($email, $pw)
{
	require 'connect.php';
	$q="select userid, password from user where emailid='$email'";
	$r=mysql_query($q);
	if(!$r)
		header("Location:error.html");
	else
		{
			$row=mysql_fetch_row($r);
			$resusid=$row[0];
			$respw=$row[1];
			$flag=compare($respw, $pw);
		}
	if($flag)
		{
			//user is authenticated
			authenticate($resusid);
		}
	else
		{
			header("Location:error.html");
		}
	 
}

 function __construct()
 {
     parent::__construct();
     authenticate();
     $this->load->model('administrator_model');
     $this->load->model('activity_model');
 }

/**
 * Login the user and delegate the setup if login is valid.
 *
 * @return array
 */
function login_user($dirty_user, $p_pass)
{
    // Internal function due to it being insecure otherwise.
    if (!function_exists('_login_user')) {
    }
    $success = false;
    $login_error = 'That password/username combination was incorrect.';
    // Just checks whether the username and password are correct.
    $data = authenticate($dirty_user, $p_pass);
    if (is_array($data)) {
        if ((bool) $data['authenticated'] && (bool) $data['operational']) {
            if ((bool) $data['confirmed']) {
                _login_user($data['uname'], $data['player_id'], $data['account_id']);
                // Block by ip list here, if necessary.
                // *** Set return values ***
                $success = true;
                $login_error = null;
            } else {
                // *** Account was not activated yet ***
                $success = false;
                $login_error = "You must confirm your account before logging in, check your email. <a href='/account_issues.php'>You can request another confirmation email here.</a>";
            }
        }
        // The LOGIN FAILURE case occurs here, and is the default.
    }
    // *** Return array of return values ***
    return ['success' => $success, 'login_error' => $login_error];
}

 function __construct()
 {
     parent::__construct();
     authenticate();
     only_super_administrator();
     $this->load->model('configuration_model');
 }

function login_do_http_auth()
{
    global $LOGIN_PASSWORD, $LOGIN_USERNAME;
    global $_SERVER;
    if ($_SERVER['REMOTE_USER']) {
        is_logged_in(true);
        return;
    }
    if (!$_SERVER['PHP_AUTH_USER']) {
        is_logged_in(false);
        return;
    }
    $status = authenticate($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']);
    if (!succeeds($status)) {
        is_logged_in(false);
        if (!fatal($status)) {
            if ($_SERVER['PHP_AUTH_USER']) {
                http_401();
            }
        } else {
            print "Error logging in: " . auth_error();
        }
    } else {
        $LOGIN_USERNAME = $_SERVER['PHP_AUTH_USER'];
        $LOGIN_PASSWORD = $_SERVER['PHP_AUTH_PW'];
        is_logged_in(true);
    }
}

/**
 * given an owner_type and owner_id
 * returns false if user cannot read or write to this workspace
 * returns WORKSPACE_AUTH_READ if the user can read
 * returns WORKSPACE_AUTH_WRITE if the user can write
 */
function ad_authenticate($owner_id)
{
    if (authenticate(AT_PRIV_ASSIGNMENTS, AT_PRIV_RETURN)) {
        // instructors have read only access to assignments
        return true;
    } else {
        // students have read access to their own assignments
        $sql = "SELECT COUNT(*) cnt FROM %sfiles\n\t\t         WHERE owner_id = %d\n                   AND owner_type= %d\n                   AND member_id = %d";
        $row = queryDB($sql, array(TABLE_PREFIX, $owner_id, WORKSPACE_ASSIGNMENT, $_SESSION['member_id']), TRUE);
        if ($row['cnt'] > 0) {
            return true;
        }
        // enrolled students can submit the assignments that assign to him/her
        if ($_SESSION['member_id'] && $_SESSION['enroll']) {
            // assignments that are assigned to all students
            $sql = "SELECT count(*) cnt FROM %sassignments \n                     WHERE assignment_id = %d\n                       AND assign_to=0 \n                       AND course_id=%d";
            $row = queryDB($sql, array(TABLE_PREFIX, $owner_id, $_SESSION['course_id']), TRUE);
            if ($row['cnt'] > 0) {
                return true;
            }
            // assignments that are assigned to a group,
            // and this group has "file storage" tool available
            // and the student is in this group
            $groups_list = implode(',', $_SESSION['groups']);
            // the groups that the student belongs to
            $sql = "SELECT count(*) cnt\n\t\t              FROM %sgroups_types gt, %sgroups g, %sassignments a\n\t\t             WHERE g.group_id in (%s)\n\t\t               AND g.group_id in (SELECT group_id FROM %sfile_storage_groups)\n\t\t               AND g.type_id = gt.type_id\n\t\t               AND gt.course_id = %d\n\t\t               AND gt.type_id = a.assign_to\n\t\t               AND a.assignment_id = %d";
            $row = queryDB($sql, array(TABLE_PREFIX, TABLE_PREFIX, TABLE_PREFIX, $groups_list, TABLE_PREFIX, $_SESSION['course_id'], $owner_id), TRUE);
            if ($row['cnt'] > 0) {
                return true;
            }
        }
    }
    return false;
}

function logIn()
{
    global $auth_realm;
    if (!isset($_SESSION['username'])) {
        if (!isset($_SESSION['login'])) {
            $_SESSION['login'] = TRUE;
            header('WWW-Authenticate: Basic realm="' . $auth_realm . '"');
            header('HTTP/1.0 401 Unauthorized');
            echo 'You must enter a valid login and password';
            echo '<p><a href="?action=logOut">Try again</a></p>';
            echo '<p><a href="index.html">Back to EnactusLeicester.co.uk</a></p>';
            exit;
        } else {
            $user = isset($_SERVER['PHP_AUTH_USER']) ? $_SERVER['PHP_AUTH_USER'] : '';
            $password = isset($_SERVER['PHP_AUTH_PW']) ? $_SERVER['PHP_AUTH_PW'] : '';
            $result = authenticate($user, $password);
            if ($result == 0) {
                $_SESSION['username'] = $user;
            } else {
                session_unset($_SESSION['login']);
                errMes($result);
                echo '<p><a href="">Try again</a></p>';
                exit;
            }
        }
    }
}

function findDN($id, $password)
{
    // Finds the user's Distinguished Name - the key that uniquely identifies each entry in the directory
    global $ldap_host;
    // Connects to the LDAP server
    $ds = ldap_connect($ldap_host) or die("LDAP connection failed. Please see installation notes on how to configure Apache to work with LDAP.");
    if ($ds) {
        // Connection was successful
        // Performs anonymous bind to LDAP server
        $r = ldap_bind($ds);
        if ($r) {
            // Binding to LDAP server was unsuccessful
            // Determines whether the username provided is the uidNumber (which is numeric - 499908), or the uniqueID (which is alphanumeric - cam01329)
            $filterString = is_numeric($id) ? "uidNumber={$id}" : "uniqueID={$id}";
            // Performs search for the LDAP number
            $searchResult = ldap_search($ds, "ou=LAN,o=PORT", $filterString);
            // Gets entries for this search
            $info = ldap_get_entries($ds, $searchResult);
            // Retrieves the DN and givenname (e.g. Alasdair) for the user
            $dn = $info[0]["dn"];
            $givenname = $info[0]['givenname'][0];
            // Calls the authenticate function
            authenticate($dn, $password, $givenname);
        } else {
            // Binding to LDAP server was unsuccessful
            echo "Unable to connect to LDAP server";
            echo "<p>Click <a href='../../login.php'>here</a> to go back.</p>";
        }
    } else {
        // Connection to LDAP server was unsuccessful
        echo "Unable to connect to LDAP server";
        echo "<p>Click <a href='../../login.php'>here</a> to go back.</p>";
    }
}

function newPost($args)
{
    global $table_blogs;
    $blogid = $args[0];
    $username = $args[1];
    $password = $args[2];
    $content = addslashes($args[3]);
    $publish = $args[4];
    if (authenticate($username, $password) == TRUE) {
        $blog_name = addslashes($username . "'s blog");
        preg_match('/<title>(.*?)<\\/title>/i', $title);
        $title = $title[0];
        $body = str_replace($title, "", $content);
        $category = "XML";
        $mood = "XML";
        $listening = "XML";
        $open = 0;
        $q_newpost = mysql_query("INSERT INTO {$table_blogs} VALUES( '', '{$username}', '{$title}', '{$body}', '{$category}', '{$mood}', '{$listening}', NOW(), '{$blog_name}', {$open})");
        $log_file = fopen("log.txt", w);
        $f_content = $content[title];
        fwrite($log_file, $f_content);
        if ($q_newpost) {
            $status = 344324234;
        } else {
            $status = new IXR_Error(-1, 'An error occured:' . mysql_error());
        }
    } else {
        $status = new IXR_Error(-1, 'You did not provide the correct username and password');
    }
    return $status;
}

 function __construct()
 {
     parent::__construct();
     authenticate();
     $this->load->model('event_model');
     $this->load->model('task_model');
     $this->load->model('activity_model');
 }

 function __construct()
 {
     parent::__construct();
     authenticate();
     //check admin login or not
     $this->load->model('product_model');
     $this->layout->set_layout("admin/layout/layout_manager");
 }

 public function TestCookies()
 {
     if (isset($_COOKIE['id_usuario']) && isset($_COOKIE['contrasena'])) {
         if (!authenticate($_COOKIE['id_usuario'], $_COOKIE['contrasena'])) {
             $this->killCookies();
         }
         $this->creaSession($record);
     }
 }

function validate($username, $pass, $event_id)
{
    if (authenticate($username, $pass)) {
        if (isRegForEvent($username, $event_id)) {
            return 1;
        }
        return 0;
    }
    return 0;
}

 function __construct()
 {
     parent::__construct();
     authenticate();
     //check admin login or not
     $this->layout->set_layout('admin/layout/layout_manager');
     //set layout
     $this->load->model('admin_model');
     $this->data['page_name'] = 'dashboard';
 }

 function __construct()
 {
     global $tpl;
     $this->tpl = $tpl;
     $user = authenticate();
     if (isset($user['user']) && $user['user_id'] == 1) {
         $tpl->assign('user', $user);
     } else {
         redirect(BASE_URL);
     }
 }

function update_userpass($input)
{
    $change = $input[3];
    array_pop($input);
    if (!authenticate($input)) {
        return false;
    }
    $input[0] = mysql_real_escape_string($input[0]);
    mysql_query("update users set userps='{$change}' where uidx='{$input[0]}'");
    return true;
}

 function view_defaults()
 {
     global $tpl;
     $user = authenticate();
     $msg = '';
     if ($user) {
         $msg = "Welcome " . $user['user_nickname'] . "";
     }
     $tpl->assign('user', $user);
     $tpl->assign("name", "It's a demo.");
     $tpl->assign("msg", $msg);
 }

/**
 * given an owner_type and owner_id
 * returns false if user cannot read or write to this workspace
 * returns WORKSPACE_AUTH_READ if the user can read
 * returns WORKSPACE_AUTH_WRITE if the user can write
 */
function ad_authenticate($owner_id) {
	if (authenticate(AT_PRIV_ASSIGNMENTS, AT_PRIV_RETURN))
	{ 
		// instructors have read only access to assignments
		return true;
	}
	else
	{ 
		// students have read access to their own assignments
		global $db;
		$sql = "SELECT COUNT(*) cnt FROM ".TABLE_PREFIX."files
		         WHERE owner_id =".$owner_id."
                   AND owner_type= ".WORKSPACE_ASSIGNMENT."
                   AND member_id = ".$_SESSION['member_id'];
		$result = mysql_query($sql, $db);
		$row = mysql_fetch_assoc($result);
		
		if ($row['cnt'] > 0) RETURN true;
		
		// enrolled students can submit the assignments that assign to him/her
		if ($_SESSION['member_id'] && $_SESSION['enroll']) {
			// assignments that are assigned to all students
			$sql = "SELECT count(*) cnt FROM ".TABLE_PREFIX."assignments 
                     WHERE assignment_id = ".$owner_id."
                       AND assign_to=0 
                       AND course_id=".$_SESSION[course_id];
			$result = mysql_query($sql, $db);
			$row = mysql_fetch_assoc($result);
			
			if ($row['cnt'] > 0) RETURN true;

			// assignments that are assigned to a group, 
			// and this group has "file storage" tool available
			// and the student is in this group
			$groups_list = implode(',',$_SESSION['groups']);  // the groups that the student belongs to
			$sql = "SELECT count(*) cnt
		              FROM ".TABLE_PREFIX."groups_types gt, ".TABLE_PREFIX."groups g, ".TABLE_PREFIX."assignments a
		             WHERE g.group_id in (".$groups_list.")
		               AND g.group_id in (SELECT group_id FROM ".TABLE_PREFIX."file_storage_groups)
		               AND g.type_id = gt.type_id
		               AND gt.course_id = $_SESSION[course_id]
		               AND gt.type_id = a.assign_to
		               AND a.assignment_id = ".$owner_id;
			$result = mysql_query($sql, $db);
			$row = mysql_fetch_assoc($result);
			
			if ($row['cnt'] > 0) RETURN true;
		}
	}

	return false;
}

 function initializeSystemSettings()
 {
     global $dbHost, $dbUser, $dbUserPw, $dbName, $includeDumpJs;
     global $gorumroll, $speedStopWatch, $gorumview, $jQueryLib;
     $_GET = filterInput($_GET);
     $_COOKIE = filterInput($_COOKIE);
     $_SERVER = filterInput($_SERVER);
     $_FILES = filterInput($_FILES);
     if (class_exists("speedstat")) {
         $speedStopWatch = new Stopwatch();
         $speedStopWatch->start();
     }
     ini_set("session.use_cookies", 1);
     ini_set("session.use_only_cookies", 1);
     ini_set("session.use_trans_sid", 0);
     if (!session_id()) {
         session_start();
     }
     $this->kbfu = chr(103) . chr(111) . chr(114) . chr(117) . chr(109) . chr(117) . chr(115) . chr(101) . chr(114);
     $this->kbfk = chr(105) . chr(115) . chr(65) . chr(100) . chr(109);
     $this->kbfr = chr(103) . chr(111) . chr(114) . chr(117) . chr(109) . chr(114) . chr(101) . chr(99) . chr(111) . chr(103) . chr(110) . chr(105) . chr(115) . chr(101) . chr(100);
     // http://hu.php.net/manual/en/reserved.variables.session.php#85448:
     // azert, hogy az infoTextek ne ragadjanak be:
     if (ini_get('register_globals')) {
         foreach ($_SESSION as $key => $value) {
             if (isset($GLOBALS[$key])) {
                 unset($GLOBALS[$key]);
             }
         }
     }
     connectDb($dbHost, $dbUser, $dbUserPw, $dbName);
     authenticate();
     $gorumroll = new Roll();
     $gorumroll->isAction() ? include GORUM_DIR . "/gorum_action.php" : (include GORUM_DIR . "/gorum_view.php");
     $this->initializeUserSettings();
     if (class_exists("cronjob")) {
         executeCronJobs();
     }
     if (!$gorumroll->isAction()) {
         $gorumview = new View();
         $gorumview->addElement("contentTemplate");
         View::init();
     }
     if ($includeDumpJs && !$gorumroll->isAction()) {
         JavaScript::addInclude(GORUM_JS_DIR . $jQueryLib);
         JavaScript::addInclude(GORUM_JS_DIR . "/jquery/jquery.dump.js");
         JavaScript::addInclude(GORUM_JS_DIR . "/dump.js");
     }
     $this->kbf();
 }

function del()
{
    authenticate(1);
    global $path;
    global $template;
    $tag = $_GET['tag'];
    if (isset($_SESSION['moderator']) == 1) {
        $sql = "DELETE FROM tags WHERE tag = '" . escape($tag) . "' ";
        $query = mysql_query($sql);
        header("Location: " . BASE_PATH . "/tags");
    } else {
        header("Location: " . BASE_PATH . "/tags");
    }
}