Freeradius users script added

[ga4php.git] / authserver / www / admin_actions.php

diff --git a/authserver/www/admin_actions.php b/authserver/www/admin_actions.php
index d6a224c..e5ddb11 100644 (file)
--- a/authserver/www/admin_actions.php
+++ b/authserver/www/admin_actions.php
@@ -10,6 +10,34 @@ else $loggedin = false;
 
 if(isset($_REQUEST["action"])) {
        switch($_REQUEST["action"]) {
+               case "recreatehotptoken":
+                       $username = $_REQUEST["username"];
+                       $myAC->addUser($username, "HOTP");
+                       header("Location: ?message=".urlencode("seemed to work?"));
+                       break;
+               case "recreatetotptoken":
+                       $username = $_REQUEST["username"];
+                       $myAC->addUser($username, "TOTP");
+                       header("Location: ?message=".urlencode("seemed to work?"));
+                       break;
+               case "deletetoken":
+                       $username = $_REQUEST["username"];
+                       $myAC->deleteUserToken($username);
+                       header("Location: ?message=".urlencode("seemed to work?"));
+                       break;
+               case "edituser":
+                       $username = $_REQUEST["username"];
+                       if($_REQUEST["original_real"] != $_REQUEST["realname"]) {
+                               $myAC->setUserRealName($username, $_REQUEST["realname"]);
+                       }
+                       if($_REQUEST["password"] != "") {
+                               if($_REQUEST["password"]!=$_REQUEST["password_conf"]) {
+                                       header("Location: ?message=confirmfalse");
+                               } else {
+                                       $myAC->setUserPass($username, $_REQUEST["password"]);
+                               }
+                       }
+                       break;
                case "login":
                        $username = $_REQUEST["username"];
                        $password = $_REQUEST["password"];
@@ -19,7 +47,7 @@ if(isset($_REQUEST["action"])) {
                                $_SESSION["username"] = $username;
                                header("Location: admin.php");
                        } else {
-                               header("Location: admin.php?message=loginfail");
+                               header("Location: admin.php?error=".urlencode("Login Failed"));
                        }
                        
                        exit(0);
@@ -32,7 +60,12 @@ if(isset($_REQUEST["action"])) {
                        break;
                case "createuser":
                        $username = $_REQUEST["username"];
-                       $myAC->addUser($username);
+                       $users = explode(",",$username);
+                       foreach($users as $user) {
+                               $user = trim($user);
+                               error_log("createing, $user\n");
+                               if($user != "" && strlen($user)>2) $myAC->addUser($user);
+                       }
                        header("Location: admin.php");
                        exit(0);
                        break;
@@ -57,10 +90,10 @@ if(isset($_REQUEST["action"])) {
                        $myAC->setUserPass($username, "");
                        break;
                case "getotkimg":
-                       
                        $otk = $_REQUEST["otk"];
+                       $username = $_REQUEST["username"];
                        error_log("requesting otk, $otk");
-                       $otk_img = $myAC->getOtkPng($otk);
+                       $otk_img = $myAC->getOtkPng($username,$otk);
                        header("Content-type: image/png");
                        echo $otk_img;
                        exit(0);