Auto Login

[appsforce]

Hello,

I do not want to see the login screen. I would like to automatically log in user, as I will have VestaCP in iframe only accessable via my application. Any help is welcome

Thanks!

[lotnomore]

Hello,

I do not want to see the login screen. I would like to automatically log in user, as I will have VestaCP in iframe only accessable via my application. Any help is welcome

Thanks!

Just allow your browser to save your login info then.

[appsforce]

Sorry I was not clear. I want to automatically login user, using either APIs, HTTP/Basic Auth or something similar. So I am asking are there any solutions or should I make my own

[appsforce]

Ok I did it myself by editing index.php in login folder. Code is below. Of course hardcoding username and password is very unsecure, so I have my authentication code at the top, which in essence authorizes the users logged in to my platform and if they have rights to access control panel, logs them in automatically.

Code: Select all

define('NO_AUTH_REQUIRED', true);
// Main include
include($_SERVER['DOCUMENT_ROOT'] . "/inc/main.php");
$TAB = 'LOGIN';

exec(VESTA_CMD . "v-list-sys-config json", $output, $return_var);
$data = json_decode(implode('', $output), true);
$sys_arr = $data['config'];
foreach ($sys_arr as $key => $value) {
    $_SESSION[$key] = $value;
}
// Detect language
if (empty($_SESSION['language'])) {
    $output = '';
    exec(VESTA_CMD . "v-list-sys-config json", $output, $return_var);
    $config = json_decode(implode('', $output), true);
    $lang = $config['config']['LANGUAGE'];
    $output = '';
    exec(VESTA_CMD . "v-list-sys-languages json", $output, $return_var);
    $languages = json_decode(implode('', $output), true);
    if (in_array($lang, $languages)) {
        $_SESSION['language'] = $lang;
    } else {
        $_SESSION['language'] = 'en';
    }
}
// Generate CSRF token
$_SESSION['token'] = md5(uniqid(mt_rand(), true));
require_once($_SERVER['DOCUMENT_ROOT'] . '/inc/i18n/' . $_SESSION['language'] . '.php');


//if (isset($_POST['user']) && isset($_POST['password'])) {
//    if(isset($_SESSION['token']) && isset($_POST['token']) && $_POST['token'] == $_SESSION['token']) {
$appsforceuser = 'username';
$appsforcepassword = 'password';
$v_user = $appsforceuser; //escapeshellarg($_POST['user']);
$v_ip = escapeshellarg($_SERVER['REMOTE_ADDR']);
// Get user's salt
$output = '';
exec(VESTA_CMD . "v-get-user-salt " . $v_user . " " . $v_ip . " json", $output, $return_var);
$pam = json_decode(implode('', $output), true);
if ($return_var > 0) {
    $ERROR = "<a class=\"error\">" . __('Invalid username or password') . "</a>";
} else {
    $user = $appsforceuser; //$_POST['user'];
    $password = $appsforcepassword; //$_POST['password'];
    $salt = $pam[$user]['SALT'];
    $method = $pam[$user]['METHOD'];
    if ($method == 'md5') {
        $hash = crypt($password, '$1$' . $salt . '$');
    }
    if ($method == 'sha-512') {
        $hash = crypt($password, '$6$rounds=5000$' . $salt . '$');
        $hash = str_replace('$rounds=5000', '', $hash);
    }
    if ($method == 'des') {
        $hash = crypt($password, $salt);
    }
    // Send hash via tmp file
    $v_hash = exec('mktemp -p /tmp');
    $fp = fopen($v_hash, "w");
    fwrite($fp, $hash . "\n");
    fclose($fp);
    // Check user hash
    exec(VESTA_CMD . "v-check-user-hash " . $v_user . " " . $v_hash . " " . $v_ip, $output, $return_var);
    unset($output);
    // Remove tmp file
    unlink($v_hash);
    // Check API answer
    if ($return_var > 0) {
        $ERROR = "<a class=\"error\">" . __('Invalid username or password') . "</a>";
    } else {
        // Make root admin user
        if ($_POST['user'] == 'root')
            $v_user = 'admin';
        // Get user speciefic parameters
        exec(VESTA_CMD . "v-list-user " . $v_user . " json", $output, $return_var);
        $data = json_decode(implode('', $output), true);
        // Define session user
        $_SESSION['user'] = key($data);
        $v_user = $_SESSION['user'];
        // Get user favorites
        get_favourites();
        // Define language
        $output = '';
        exec(VESTA_CMD . "v-list-sys-languages json", $output, $return_var);
        $languages = json_decode(implode('', $output), true);
        if (in_array($data[$v_user]['LANGUAGE'], $languages)) {
            $_SESSION['language'] = $data[$v_user]['LANGUAGE'];
        } else {
            $_SESSION['language'] = 'en';
        }
        // Regenerate session id to prevent session fixation
        session_regenerate_id();
        // Redirect request to control panel interface
        if (!empty($_SESSION['request_uri'])) {
            header("Location: " . $_SESSION['request_uri']);
            unset($_SESSION['request_uri']);
            exit;
        } else {
            header("Location: /");
            exit;
        }
    }
}