webinterface.git

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
<?php
require_once('session/start.php');
require_once('x509.php');
require_role(array(ROLE_SYSTEMUSER, ROLE_SUBUSER, ROLE_VMAIL_ACCOUNT));
if ($_GET['action'] == 'new')
{
  check_form_token('clientcert_add');
  if (! isset($_SESSION['clientcert_cert']))
    system_failure('Kein Zertifikat');
  
  add_clientcert($_SESSION['clientcert_cert'], $_SESSION['clientcert_dn'], $_SESSION['clientcert_issuer']);
  // Räume session auf
  unset($_SESSION['clientcert_cert']);
  unset($_SESSION['clientcert_dn']);
  unset($_SESSION['clientcert_issuer']);
  header('Location: cert');
}
elseif ($_GET['action'] == 'delete')
{
  $cert = get_cert_by_id($_GET['id']);
  if (! $cert)
    system_failure('no ID');
  $username = NULL;
  if ($_SESSION['role'] == ROLE_SYSTEMUSER) {
    $username = $_SESSION['userinfo']['username'];
    if (isset($_SESSION['subuser']))
      $username = $_SESSION['subuser'];
  } elseif ($_SESSION['role'] == ROLE_VMAIL_ACCOUNT) {
    $username = $_SESSION['mailaccount'];
  }
  if (! ($cert['username'] == $username))
    system_failure('Das Zertifikat ist nicht für Ihren Zugang eingerichtet');
  $sure = user_is_sure();
  if ($sure === NULL)
  {
    are_you_sure("action=delete&id={$cert['id']}", "Möchten Sie das Zertifikat »{$cert['dn']}« wirklich löschen?");
  }
  elseif ($sure === true)
  {
    delete_clientcert($cert['id']);
    if (! $debugmode)
      header("Location: cert");
  }
  elseif ($sure === false)
  {
    if (! $debugmode)
      header("Location: cert");
 
 
הההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההה
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX