commit initial
This commit is contained in:
Jérôme Bousquié
commit
51d0c765b7
30
index.php
Normal file
30
index.php
Normal file
@ -0,0 +1,30 @@
|
||||
<?php
|
||||
include_once('winlogconf.php');
|
||||
include_once('admin/db_access.php');
|
||||
|
||||
// ne traiter que sur des requêtes POST sur le port 443
|
||||
if ( $_SERVER["REQUEST_METHOD"] == "POST" && $_SERVER["SERVER_PORT"] == "443") {
|
||||
|
||||
$action = $_POST["action"];
|
||||
$username = $_POST["username"];
|
||||
$computer = $_POST["computer"];
|
||||
$code = $_POST["code"];
|
||||
$ip = $_SERVER["REMOTE_ADDR"];
|
||||
|
||||
if (strcmp($code, $server_code)!=0) { exit; } // se protéger des POST anonymes par un code partagé entre client et serveur
|
||||
|
||||
$db = db_connect();
|
||||
|
||||
// requête de purge d'une éventuelle connexion restée ouverte sur une machine (multi-session non autorisée sur les PC)
|
||||
$req_purge_C = 'UPDATE connexions SET close = 1 WHERE close = 0 AND hote = "'.$computer.'"';
|
||||
// requête de création de l'enregistrement de connexion
|
||||
$req_con_C ='INSERT INTO connexions (username, hote, ip, debut_con, close) VALUES ("'.$username.'", "'.$computer.'", "'.$ip.'", CURRENT_TIMESTAMP(),0)';
|
||||
//requête de mise à jour (fermeture) de la connexion
|
||||
$req_con_D = 'UPDATE connexions SET close = 1 WHERE close = 0 AND username = "'.$username.'" AND hote = "'.$computer.'"';
|
||||
// si action = C alors $req = $req_con_C, sinon $req_con_D
|
||||
$req = $action == "C" ? $req_con_C:$req_con_D;
|
||||
|
||||
if ($action == "C") { db_query($db, $req_purge_C); } // on commence par purger avant de créer une connexion
|
||||
$res = db_query($db, $req);
|
||||
}
|
||||
?>
|
||||
9
log.vbs
Normal file
9
log.vbs
Normal file
@ -0,0 +1,9 @@
|
||||
Dim o, n, data, secopt
|
||||
Set o = CreateObject("WinHttp.WinHttpRequest.5.1")
|
||||
Set n = CreateObject("wscript.network")
|
||||
o.setproxy 1
|
||||
o.Option(4) = 13056 'pour forcer à ignorer toutes les erreurs de certificats
|
||||
o.open "POST", "https://winlog.dometud.iut-rodez.local/", False
|
||||
o.setRequestHeader "Content-Type", "application/x-www-form-urlencoded"
|
||||
data = "action=C&username="+n.Username+"&computer="+n.ComputerName
|
||||
o.send data
|
||||
31
logcas.php
Normal file
31
logcas.php
Normal file
@ -0,0 +1,31 @@
|
||||
<?php
|
||||
//
|
||||
// phpCAS simple client
|
||||
//
|
||||
|
||||
|
||||
// import phpCAS lib
|
||||
include_once('CAS/CAS.php');
|
||||
|
||||
//phpCAS::setDebug();
|
||||
|
||||
// initialize phpCAS
|
||||
phpCAS::client(CAS_VERSION_2_0,$cas_server,$cas_port,$cas_path);
|
||||
|
||||
// no SSL validation for the CAS server
|
||||
phpCAS::setNoCasServerValidation();
|
||||
|
||||
// check CAS authentication
|
||||
phpCAS::checkAuthentication();
|
||||
|
||||
// at this step, the user has been authenticated by the CAS server
|
||||
// and the user's login name can be read with phpCAS::getUser().
|
||||
function Autorise($user, $liste_users_autorises) {
|
||||
return in_array($user, $liste_users_autorises);
|
||||
}
|
||||
|
||||
// logout if desired
|
||||
if (isset($_REQUEST['logout'])) {
|
||||
phpCAS::logout();
|
||||
}
|
||||
?>
|
||||
9
logout.vbs
Normal file
9
logout.vbs
Normal file
@ -0,0 +1,9 @@
|
||||
Dim o, n, data
|
||||
Set o = CreateObject("WinHttp.WinHttpRequest.5.1")
|
||||
Set n = CreateObject("wscript.network")
|
||||
o.setproxy 1
|
||||
o.open "POST", "http://winlog.dometud.iut-rodez.local/", False
|
||||
o.setRequestHeader "Content-Type", "application/x-www-form-urlencoded"
|
||||
data = "action=D&username="+n.Username+"&computer="+n.ComputerName
|
||||
o.send data
|
||||
|
||||
46
proxy/squid.php
Normal file
46
proxy/squid.php
Normal file
@ -0,0 +1,46 @@
|
||||
<?php
|
||||
//header('Content-type: application/json; charset=utf-8');
|
||||
include('../admin/winlog_admin_conf.php');
|
||||
include('../admin/connexions.php');
|
||||
$ip = $_GET["ip"];
|
||||
$src = $_GET["src"];
|
||||
$target = $_GET["tgt"];
|
||||
$username = "";
|
||||
|
||||
$prefixe_reseau_captif = "10.3."; // prefixe du réseau captif
|
||||
|
||||
if ($src!="etudiants" && $src!="personnels") {
|
||||
// si src <> étudiants ou personnels :
|
||||
// la requête vient directement de cache.iut-rodez.fr : $ip reçu est fiable
|
||||
// il s'agit d'un accès interdit depuis un poste fixe de l'IUT
|
||||
// sinon :
|
||||
// la requête vient d'un iframe inclus dans la page interdit.php
|
||||
// on ne peut se baser que sur X_FORWARDED_FOR
|
||||
|
||||
$adresses = explode(',', $_SERVER["HTTP_X_FORWARDED_FOR"]);
|
||||
// le header peut contenir plusieurs ip (ex: routeur Kanet) => on récupère un tableau
|
||||
$ip = "";
|
||||
$lg_prefixe = strlen($prefixe_reseau_captif);
|
||||
foreach($adresses as $http_ip) {
|
||||
if (substr($http_ip, 0, $lg_prefixe) == $prefixe_reseau_captif) { $ip = $http_ip; }
|
||||
}
|
||||
|
||||
$connexions_wifi = Connexions_wifi();
|
||||
$i = 0;
|
||||
while ($connexions_wifi[$i]) {
|
||||
if ($connexions_wifi[$i]["ip"] == $ip) { $username = $connexions_wifi[$i]["username"];}
|
||||
$i++;
|
||||
}
|
||||
|
||||
}
|
||||
else { // src= etudiants ou personnels
|
||||
$con_ip = Con_ip($ip);
|
||||
if (!empty($con_ip)) { $username = $con_ip[1]; }
|
||||
}
|
||||
|
||||
$db = db_connect();
|
||||
$req_log = 'INSERT INTO proxy (ip, username, target, logts) VALUES ( "'.$ip.'", "'.$username.'", "'.$target.'", CURRENT_TIMESTAMP() )';
|
||||
$req_purge = 'DELETE from proxy WHERE timestampdiff(SECOND, timestamp(logts), timestamp(now())) > 60'; // on purge les logs de plus de 1mn
|
||||
$res = db_query($db, $req_purge);
|
||||
$res = db_query($db, $req_log);
|
||||
?>
|
||||
69
wifi/kanet.php
Normal file
69
wifi/kanet.php
Normal file
@ -0,0 +1,69 @@
|
||||
<?php
|
||||
|
||||
// conf serveur CAS
|
||||
$cas_server = 'cas.iut-rodez.fr';
|
||||
$cas_path = '/cas';
|
||||
$cas_port = 443;
|
||||
include_once('../logcas.php');
|
||||
include_once('../winlogconf.php'); // importation de la conf mysql
|
||||
|
||||
|
||||
$prefixe_reseau_captif = "10.3."; // prefixe du réseau captif
|
||||
$delai = "15"; // délai en secondes de renvoi de la requête depuis le browser
|
||||
$delai_vie = "40"; // délai en secondes avant de fermer une connexion en base
|
||||
// le délai de vie doit être supérieur au délai de reload
|
||||
|
||||
|
||||
$cas_user = phpCAS::getUser();
|
||||
$action = $_GET['action'];
|
||||
// $action :
|
||||
// si "C" => création d'un enregistrement de connexion
|
||||
// si "U" => mise à jour d'un enregistrement existant (déconnexion)
|
||||
|
||||
$browser = $_SERVER["HTTP_USER_AGENT"];
|
||||
$adresses = explode(',', $_SERVER["HTTP_X_FORWARDED_FOR"]);
|
||||
// le header peut contenir plusieurs ip (ex: routeur Kanet) => on récupère un tableau
|
||||
$wifi_ip = "";
|
||||
$lg_prefixe = strlen($prefixe_reseau_captif);
|
||||
foreach($adresses as $http_ip) {
|
||||
if (substr($http_ip, 0, $lg_prefixe) == $prefixe_reseau_captif) { $wifi_ip = $http_ip; }
|
||||
}
|
||||
|
||||
$req_check = 'SELECT * FROM wifi WHERE wifi_username="'.$cas_user.'" AND wifi_ip="'.$wifi_ip.'" AND close=0'; // recherche connexion déjà ouverte
|
||||
$req_con = 'INSERT INTO wifi (wifi_username, wifi_ip, wifi_browser, wifi_deb_conn, wifi_fin_conn, close) VALUES ( "'.$cas_user.'", "'.$wifi_ip.'", "'.$browser.'", CURRENT_TIMESTAMP(), CURRENT_TIMESTAMP(), 0 )';
|
||||
|
||||
$req_clos = 'UPDATE wifi SET close = 1 WHERE close = 0 AND timestampdiff(SECOND, timestamp(wifi_fin_conn), timestamp(now())) > '.$delai_vie; // ferme TOUTES les connexions trop anciennes
|
||||
|
||||
$req_maj = 'UPDATE wifi SET wifi_fin_conn = CURRENT_TIMESTAMP() WHERE close = 0 AND wifi_username = "'.$cas_user.'" AND wifi_ip = "'.$wifi_ip.'"';
|
||||
|
||||
$db = mysql_pconnect($db_server, $db_user, $db_passwd);
|
||||
mysql_select_db($db_dbname, $db);
|
||||
|
||||
$clos = mysql_query($req_clos, $db); // dans tous les cas, on ferme toutes les connexions trop anciennes
|
||||
|
||||
|
||||
if ($action == "C") {
|
||||
$deja_con = mysql_query($req_check, $db);
|
||||
$req = $req_maj;
|
||||
if (mysql_num_rows($deja_con) == 0) { $req = $req_con; }
|
||||
// si non déjà connecté, alors connecte, sinon update
|
||||
}
|
||||
if ($action=="U") { $req = $req_maj; }
|
||||
$res = mysql_query($req, $db);
|
||||
|
||||
|
||||
|
||||
// on sert une page web vide qui se reloade toutes les $delai secondes dans une iframe invisible
|
||||
// (seulement sur action == U, sinon une iframe charge une fois unique la page => action == C)
|
||||
// mieux qu'un appel ajax : kanet.php est un client CAS, xhr ne suit pas la redirection CAS
|
||||
?>
|
||||
<html>
|
||||
<head>
|
||||
<?php
|
||||
if ($action == "U") { echo('<meta http-equiv="refresh" content="'.$delai.'">'); }
|
||||
?>
|
||||
</head>
|
||||
<body>
|
||||
still alive...
|
||||
</body>
|
||||
</html>
|
||||
Loading…
x
Reference in New Issue
Block a user