Annotation of loncom/interface/lonpreferences.pm, revision 1.20
1.1 www 1: # The LearningOnline Network
2: # Preferences
3: #
1.20 ! www 4: # $Id: lonpreferences.pm,v 1.19 2003/04/19 01:34:22 www Exp $
1.2 albertel 5: #
6: # Copyright Michigan State University Board of Trustees
7: #
8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
9: #
10: # LON-CAPA is free software; you can redistribute it and/or modify
11: # it under the terms of the GNU General Public License as published by
12: # the Free Software Foundation; either version 2 of the License, or
13: # (at your option) any later version.
14: #
15: # LON-CAPA is distributed in the hope that it will be useful,
16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18: # GNU General Public License for more details.
19: #
20: # You should have received a copy of the GNU General Public License
21: # along with LON-CAPA; if not, write to the Free Software
22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
23: #
24: # /home/httpd/html/adm/gpl.txt
25: #
26: # http://www.lon-capa.org/
27: #
1.1 www 28: # (Internal Server Error Handler
29: #
30: # (Login Screen
31: # 5/21/99,5/22,5/25,5/26,5/31,6/2,6/10,7/12,7/14,
32: # 1/14/00,5/29,5/30,6/1,6/29,7/1,11/9 Gerd Kortemeyer)
33: #
34: # 3/1/1 Gerd Kortemeyer)
35: #
36: # 3/1 Gerd Kortemeyer
37: #
1.3 matthew 38: # 2/13/02 2/14 2/15 Matthew Hall
39: #
40: # This package uses the "londes.js" javascript code.
41: #
42: # TODOs that have to be completed:
43: # interface with lonnet to change the password
44:
1.1 www 45: package Apache::lonpreferences;
46:
47: use strict;
48: use Apache::Constants qw(:common);
1.3 matthew 49: use Apache::File;
50: use Crypt::DES;
51: use DynaLoader; # for Crypt::DES version
1.4 matthew 52: use Apache::loncommon();
1.3 matthew 53:
54: #
55: # Write lonnet::passwd to do the call below.
56: # Use:
57: # my $answer=reply("encrypt:passwd:$udom:$uname:$upass",$tryserver);
58: #
59: ##################################################
60: # password associated functions #
61: ##################################################
62: sub des_keys {
1.4 matthew 63: # Make a new key for DES encryption.
64: # Each key has two parts which are returned seperately.
65: # Please note: Each key must be passed through the &hex function
66: # before it is output to the web browser. The hex versions cannot
67: # be used to decrypt.
1.3 matthew 68: my @hexstr=('0','1','2','3','4','5','6','7',
69: '8','9','a','b','c','d','e','f');
70: my $lkey='';
71: for (0..7) {
72: $lkey.=$hexstr[rand(15)];
73: }
74: my $ukey='';
75: for (0..7) {
76: $ukey.=$hexstr[rand(15)];
77: }
78: return ($lkey,$ukey);
79: }
80:
81: sub des_decrypt {
82: my ($key,$cyphertext) = @_;
83: my $keybin=pack("H16",$key);
84: my $cypher;
85: if ($Crypt::DES::VERSION>=2.03) {
86: $cypher=new Crypt::DES $keybin;
87: } else {
88: $cypher=new DES $keybin;
89: }
90: my $plaintext=
91: $cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,0,16))));
92: $plaintext.=
93: $cypher->decrypt(unpack("a8",pack("H16",substr($cyphertext,16,16))));
1.4 matthew 94: $plaintext=substr($plaintext,1,ord(substr($plaintext,0,1)) );
1.3 matthew 95: return $plaintext;
96: }
97:
1.4 matthew 98: ################################################################
99: # Handler subroutines #
100: ################################################################
1.9 matthew 101:
102: ################################################################
103: # Anonymous Discussion Name Change Subroutines #
104: ################################################################
1.5 www 105: sub screennamechanger {
106: my $r = shift;
107: my $user = $ENV{'user.name'};
108: my $domain = $ENV{'user.domain'};
1.14 www 109: my %userenv = &Apache::lonnet::get
110: ('environment',['screenname','nickname']);
1.6 www 111: my $screenname=$userenv{'screenname'};
1.14 www 112: my $nickname=$userenv{'nickname'};
1.10 www 113: my $bodytag=&Apache::loncommon::bodytag(
1.14 www 114: 'Change Your Nickname and Anonymous Screen Name');
1.5 www 115: $r->print(<<ENDSCREEN);
116: <html>
1.10 www 117: $bodytag
118:
1.6 www 119: <form name="server" action="/adm/preferences" method="post">
120: <input type="hidden" name="action" value="verify_and_change_screenname" />
1.14 www 121: <br />New screenname (shown if you post anonymously):
1.6 www 122: <input type="text" size="20" value="$screenname" name="screenname" />
1.14 www 123: <br />New nickname (shown if you post non-anonymously):
124: <input type="text" size="20" value="$nickname" name="nickname" />
1.6 www 125: <input type="submit" value="Change" />
126: </form>
1.5 www 127: </body>
128: </html>
129: ENDSCREEN
130: }
1.6 www 131:
132: sub verify_and_change_screenname {
133: my $r = shift;
134: my $user = $ENV{'user.name'};
135: my $domain = $ENV{'user.domain'};
1.14 www 136: # Screenname
1.6 www 137: my $newscreen = $ENV{'form.screenname'};
1.14 www 138: $newscreen=~s/[^ \w]//g;
1.6 www 139: my $message='';
140: if ($newscreen) {
1.7 www 141: &Apache::lonnet::put('environment',{'screenname' => $newscreen});
142: &Apache::lonnet::appenv('environment.screenname' => $newscreen);
1.6 www 143: $message='Set new screenname to '.$newscreen;
144: } else {
145: &Apache::lonnet::del('environment',['screenname']);
1.7 www 146: &Apache::lonnet::delenv('environment\.screenname');
1.6 www 147: $message='Reset screenname';
148: }
1.14 www 149: # Nickname
150: $message.='<br />';
1.17 matthew 151: $newscreen = $ENV{'form.nickname'};
1.14 www 152: $newscreen=~s/[^ \w]//g;
153: if ($newscreen) {
154: &Apache::lonnet::put('environment',{'nickname' => $newscreen});
155: &Apache::lonnet::appenv('environment.nickname' => $newscreen);
156: $message.='Set new nickname to '.$newscreen;
157: } else {
158: &Apache::lonnet::del('environment',['nickname']);
159: &Apache::lonnet::delenv('environment\.nickname');
160: $message.='Reset nickname';
161: }
162:
1.10 www 163: my $bodytag=&Apache::loncommon::bodytag(
1.14 www 164: 'Change Your Nickname and Anonymous Screen Name');
1.6 www 165: $r->print(<<ENDVCSCREEN);
166: <html>
1.10 www 167: $bodytag
1.6 www 168: </p>
169: $message
170: </body></html>
171: ENDVCSCREEN
1.20 ! www 172: }
! 173:
! 174: ################################################################
! 175: # Message Forward #
! 176: ################################################################
! 177:
! 178: sub msgforwardchanger {
! 179: my $r = shift;
! 180: my $user = $ENV{'user.name'};
! 181: my $domain = $ENV{'user.domain'};
! 182: my %userenv = &Apache::lonnet::get('environment',['msgforward']);
! 183: my $msgforward=$userenv{'msgforward'};
! 184: my $notification=$userenv{'notification'};
! 185: my $critnotification=$userenv{'critnotification'};
! 186: my $bodytag=&Apache::loncommon::bodytag(
! 187: 'Change Your Message Forwarding and Notification');
! 188: $r->print(<<ENDMSG);
! 189: <html>
! 190: $bodytag
! 191:
! 192: <form name="server" action="/adm/preferences" method="post">
! 193: <input type="hidden" name="action" value="verify_and_change_msgforward" />
! 194: New Forwarding Address(es) (<tt>user:domain,user:domain,...</tt>):
! 195: <input type="text" size="40" value="$msgforward" name="msgforward" /><hr />
! 196: New Message Notification Email Address(es) (<tt>joe\@doe.com,jane\@doe.edu,...</tt>):
! 197: <input type="text" size="40" value="$notification" name="notification" /><hr />
! 198: New Critical Message Notification Email Address(es) (<tt>joe\@doe.com,jane\@doe.edu,...</tt>):
! 199: <input type="text" size="40" value="$critnotification" name="critnotification" /><hr />
! 200: <input type="submit" value="Change" />
! 201: </form>
! 202: </body>
! 203: </html>
! 204: ENDMSG
! 205: }
! 206:
! 207: sub verify_and_change_msgforward {
! 208: my $r = shift;
! 209: my $user = $ENV{'user.name'};
! 210: my $domain = $ENV{'user.domain'};
! 211: my $newscreen = '';
! 212: my $message='';
! 213: foreach (split(/\,/,$ENV{'form.msgforward'})) {
! 214: my ($msuser,$msdomain)=split(/[\@\:]/,$_);
! 215: $msuser=~s/\W//g;
! 216: $msdomain=~s/\W//g;
! 217: if (($msuser) && ($msdomain)) {
! 218: if (&Apache::lonnet::homeserver($msuser,$msdomain) ne 'no_host') {
! 219: $newscreen.=$msuser.':'.$msdomain.',';
! 220: } else {
! 221: $message.='No such user: '.$msuser.':'.$msdomain.'<br>';
! 222: }
! 223: }
! 224: }
! 225: $newscreen=~s/\,$//;
! 226: if ($newscreen) {
! 227: &Apache::lonnet::put('environment',{'msgforward' => $newscreen});
! 228: &Apache::lonnet::appenv('environment.msgforward' => $newscreen);
! 229: $message.='Set new message forwarding to '.$newscreen.'<br />';
! 230: } else {
! 231: &Apache::lonnet::del('environment',['msgforward']);
! 232: &Apache::lonnet::delenv('environment\.msgforward');
! 233: $message.='Reset message forwarding<br />';
! 234: }
! 235: my $notification=$ENV{'form.notification'};
! 236: $notification=~s/\s//gs;
! 237: if ($notification) {
! 238: &Apache::lonnet::put('environment',{'notification' => $notification});
! 239: &Apache::lonnet::appenv('environment.notification' => $notification);
! 240: $message.='Set message notification address to '.$notification.'<br />';
! 241: } else {
! 242: &Apache::lonnet::del('environment',['notification']);
! 243: &Apache::lonnet::delenv('environment\.notification');
! 244: $message.='Reset message notification<br />';
! 245: }
! 246: my $critnotification=$ENV{'form.critnotification'};
! 247: $critnotification=~s/\s//gs;
! 248: if ($critnotification) {
! 249: &Apache::lonnet::put('environment',{'critnotification' => $critnotification});
! 250: &Apache::lonnet::appenv('environment.critnotification' => $critnotification);
! 251: $message.='Set critical message notification address to '.$critnotification;
! 252: } else {
! 253: &Apache::lonnet::del('environment',['critnotification']);
! 254: &Apache::lonnet::delenv('environment\.critnotification');
! 255: $message.='Reset critical message notification<br />';
! 256: }
! 257: my $bodytag=&Apache::loncommon::bodytag(
! 258: 'Change Your Message Forwarding and Notifications');
! 259: $r->print(<<ENDVCMSG);
! 260: <html>
! 261: $bodytag
! 262: </p>
! 263: $message
! 264: </body></html>
! 265: ENDVCMSG
1.6 www 266: }
267:
1.12 www 268: ################################################################
1.19 www 269: # Colors #
1.12 www 270: ################################################################
271:
1.19 www 272: sub colorschanger {
1.12 www 273: my $r = shift;
274: my $bodytag=&Apache::loncommon::bodytag(
1.19 www 275: 'Change Color Scheme for Current Role Type');
276: # figure out colors
277: my $function='student';
278: if ($ENV{'request.role'}=~/^(cc|in|ta|ep)/) {
279: $function='coordinator';
280: }
281: if ($ENV{'request.role'}=~/^(su|dc|ad|li)/) {
282: $function='admin';
283: }
284: if (($ENV{'request.role'}=~/^(au|ca)/) ||
285: ($ENV{'REQUEST_URI'}=~/^(\/priv|\~)/)) {
286: $function='author';
287: }
288: my $domain=&Apache::loncommon::determinedomain();
289: my %colortypes=('pgbg' => 'Page Background',
290: 'tabbg' => 'Header Background',
291: 'sidebg'=> 'Header Border',
292: 'font' => 'Font',
293: 'link' => 'Un-Visited Link',
294: 'vlink' => 'Visited Link',
295: 'alink' => 'Active Link');
296: my $chtable='';
297: foreach my $item (keys %colortypes) {
298: my $curcol=&Apache::loncommon::designparm($function.'.'.$item,$domain);
299: $chtable.='<tr><td>'.$colortypes{$item}.'</td><td bgcolor="'.$curcol.
300: '"> </td><td><input name="'.$item.
301: '" size="8" value="'.$curcol.
302: '" /></td><td><a href="javascript:pjump('."'color','".$colortypes{$item}.
303: "','".$curcol."','"
304: .$item."','".$item."','psub'".');">Select</a></td></tr>';
305: }
306: $r->print(<<ENDCOL);
1.12 www 307: <html>
1.19 www 308: <script>
309:
310: function pclose() {
311: parmwin=window.open("/adm/rat/empty.html","LONCAPAparms",
312: "height=350,width=350,scrollbars=no,menubar=no");
313: parmwin.close();
314: }
315:
316: function pjump(type,dis,value,marker,ret,call) {
317: parmwin=window.open("/adm/rat/parameter.html?type="+escape(type)
318: +"&value="+escape(value)+"&marker="+escape(marker)
319: +"&return="+escape(ret)
320: +"&call="+escape(call)+"&name="+escape(dis),"LONCAPAparms",
321: "height=350,width=350,scrollbars=no,menubar=no");
322:
323: }
324:
325: function psub() {
326: pclose();
327: if (document.parmform.pres_marker.value!='') {
328: document.parmform.action+='#'+document.parmform.pres_marker.value;
329: var typedef=new Array();
330: typedef=document.parmform.pres_type.value.split('_');
331: if (document.parmform.pres_type.value!='') {
332: if (typedef[0]=='date') {
333: eval('document.parmform.recent_'+
334: document.parmform.pres_type.value+
335: '.value=document.parmform.pres_value.value;');
336: } else {
337: eval('document.parmform.recent_'+typedef[0]+
338: '.value=document.parmform.pres_value.value;');
339: }
340: }
341: document.parmform.submit();
342: } else {
343: document.parmform.pres_value.value='';
344: document.parmform.pres_marker.value='';
345: }
346: }
347:
348:
349: </script>
1.12 www 350: $bodytag
351:
352: <form name="server" action="/adm/preferences" method="post">
1.19 www 353: <input type="hidden" name="action" value="verify_and_change_colors" />
354: <table border="2">
355: $chtable
356: </table>
1.12 www 357: <input type="submit" value="Change" />
358: </form>
359: </body>
360: </html>
1.19 www 361: ENDCOL
1.12 www 362: }
363:
1.19 www 364: sub verify_and_change_colors {
1.12 www 365: my $r = shift;
1.19 www 366: # figure out colors
367: my $function='student';
368: if ($ENV{'request.role'}=~/^(cc|in|ta|ep)/) {
369: $function='coordinator';
370: }
371: if ($ENV{'request.role'}=~/^(su|dc|ad|li)/) {
372: $function='admin';
373: }
374: if (($ENV{'request.role'}=~/^(au|ca)/) ||
375: ($ENV{'REQUEST_URI'}=~/^(\/priv|\~)/)) {
376: $function='author';
377: }
378: my $domain=&Apache::loncommon::determinedomain();
379: my %colortypes=('pgbg' => 'Page Background',
380: 'tabbg' => 'Header Background',
381: 'sidebg'=> 'Header Border',
382: 'font' => 'Font',
383: 'link' => 'Un-Visited Link',
384: 'vlink' => 'Visited Link',
385: 'alink' => 'Active Link');
386:
1.12 www 387: my $message='';
1.19 www 388: # my $newscreen='';
389: # $newscreen=~s/\,$//;
390: # if ($newscreen) {
391: # &Apache::lonnet::put('environment',{'msgforward' => $newscreen});
392: # &Apache::lonnet::appenv('environment.msgforward' => $newscreen);
393: # $message.='Set new message forwarding to '.$newscreen.'<br />';
394: # } else {
395: # &Apache::lonnet::del('environment',['msgforward']);
396: # &Apache::lonnet::delenv('environment\.msgforward');
397: # $message.='Reset message forwarding<br />';
398: # }
399:
1.12 www 400: my $bodytag=&Apache::loncommon::bodytag(
1.19 www 401: 'Change Color Scheme for Current Role Type');
402: $r->print(<<ENDVCCOL);
1.12 www 403: <html>
404: $bodytag
405: </p>
406: $message
407: </body></html>
1.19 www 408: ENDVCCOL
1.12 www 409: }
410:
1.4 matthew 411: ######################################################
412: # password handler subroutines #
413: ######################################################
1.3 matthew 414: sub passwordchanger {
1.4 matthew 415: # This function is a bit of a mess....
1.3 matthew 416: # Passwords are encrypted using londes.js (DES encryption)
417: my $r = shift;
1.4 matthew 418: my $errormessage = shift;
419: $errormessage = ($errormessage || '');
1.3 matthew 420: my $user = $ENV{'user.name'};
421: my $domain = $ENV{'user.domain'};
422: my $homeserver = $ENV{'user.home'};
423: my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
424: # Check for authentication types that allow changing of the password.
425: return if ($currentauth !~ /^(unix|internal):/);
426: #
427: # Generate keys
428: my ($lkey_cpass ,$ukey_cpass ) = &des_keys();
429: my ($lkey_npass1,$ukey_npass1) = &des_keys();
430: my ($lkey_npass2,$ukey_npass2) = &des_keys();
1.4 matthew 431: # Store the keys in the log files
1.3 matthew 432: my $lonhost = $r->dir_config('lonHostID');
433: my $logtoken=Apache::lonnet::reply('tmpput:'
434: .$ukey_cpass . $lkey_cpass .'&'
435: .$ukey_npass1 . $lkey_npass1.'&'
436: .$ukey_npass2 . $lkey_npass2,
437: $lonhost);
1.4 matthew 438: # Hexify the keys for output as javascript variables
1.3 matthew 439: $ukey_cpass = hex($ukey_cpass);
440: $lkey_cpass = hex($lkey_cpass);
441: $ukey_npass1= hex($ukey_npass1);
442: $lkey_npass1= hex($lkey_npass1);
443: $ukey_npass2= hex($ukey_npass2);
444: $lkey_npass2= hex($lkey_npass2);
445: # Output javascript to deal with passwords
1.4 matthew 446: # Output DES javascript
1.9 matthew 447: $r->print("<html><head>");
1.3 matthew 448: {
449: my $include = $r->dir_config('lonIncludes');
450: my $jsh=Apache::File->new($include."/londes.js");
451: $r->print(<$jsh>);
452: }
1.10 www 453: my $bodytag=&Apache::loncommon::bodytag('Change Password','',
454: 'onLoad="init();"');
1.3 matthew 455: $r->print(<<ENDFORM);
1.9 matthew 456: </head>
1.10 www 457: $bodytag
1.1 www 458:
1.3 matthew 459: <script language="JavaScript">
460:
461: function send() {
462: uextkey=this.document.client.elements.ukey_cpass.value;
463: lextkey=this.document.client.elements.lkey_cpass.value;
464: initkeys();
465:
466: this.document.server.elements.currentpass.value
467: =crypted(this.document.client.elements.currentpass.value);
468:
469: uextkey=this.document.client.elements.ukey_npass1.value;
470: lextkey=this.document.client.elements.lkey_npass1.value;
471: initkeys();
472: this.document.server.elements.newpass_1.value
473: =crypted(this.document.client.elements.newpass_1.value);
474:
475: uextkey=this.document.client.elements.ukey_npass2.value;
476: lextkey=this.document.client.elements.lkey_npass2.value;
477: initkeys();
478: this.document.server.elements.newpass_2.value
479: =crypted(this.document.client.elements.newpass_2.value);
480:
481: this.document.server.submit();
482: }
483:
484: </script>
1.4 matthew 485: $errormessage
1.10 www 486:
1.3 matthew 487: <p>
488: <!-- We seperate the forms into 'server' and 'client' in order to
489: ensure that unencrypted passwords will not be sent out by a
490: crappy browser -->
491:
492: <form name="server" action="/adm/preferences" method="post">
493: <input type="hidden" name="logtoken" value="$logtoken" />
494: <input type="hidden" name="action" value="verify_and_change_pass" />
495: <input type="hidden" name="currentpass" value="" />
1.4 matthew 496: <input type="hidden" name="newpass_1" value="" />
497: <input type="hidden" name="newpass_2" value="" />
1.3 matthew 498: </form>
499:
500: <form name="client" >
501: <table>
1.4 matthew 502: <tr><td align="right"> Current password: </td>
503: <td><input type="password" name="currentpass" size="10"/> </td></tr>
504: <tr><td align="right"> New password: </td>
505: <td><input type="password" name="newpass_1" size="10" /> </td></tr>
506: <tr><td align="right"> Confirm password: </td>
507: <td><input type="password" name="newpass_2" size="10" /> </td></tr>
1.3 matthew 508: <tr><td colspan="2" align="center">
509: <input type="button" value="Change Password" onClick="send();">
510: </table>
1.4 matthew 511: <input type="hidden" name="ukey_cpass" value="$ukey_cpass" />
512: <input type="hidden" name="lkey_cpass" value="$lkey_cpass" />
1.3 matthew 513: <input type="hidden" name="ukey_npass1" value="$ukey_npass1" />
514: <input type="hidden" name="lkey_npass1" value="$lkey_npass1" />
515: <input type="hidden" name="ukey_npass2" value="$ukey_npass2" />
516: <input type="hidden" name="lkey_npass2" value="$lkey_npass2" />
517: </form>
518: </p>
519: ENDFORM
520: #
521: return;
522: }
523:
524: sub verify_and_change_password {
525: my $r = shift;
526: my $user = $ENV{'user.name'};
527: my $domain = $ENV{'user.domain'};
528: my $homeserver = $ENV{'user.home'};
529: my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
1.4 matthew 530: # Check for authentication types that allow changing of the password.
531: return if ($currentauth !~ /^(unix|internal):/);
1.3 matthew 532: #
1.4 matthew 533: $r->print(<<ENDHEADER);
534: <html>
535: <head>
536: <title>LON-CAPA Preferences: Change password for $user</title>
537: </head>
538: ENDHEADER
1.3 matthew 539: #
540: my $currentpass = $ENV{'form.currentpass'};
541: my $newpass1 = $ENV{'form.newpass_1'};
542: my $newpass2 = $ENV{'form.newpass_2'};
543: my $logtoken = $ENV{'form.logtoken'};
544: # Check for empty data
1.4 matthew 545: unless (defined($currentpass) &&
546: defined($newpass1) &&
547: defined($newpass2) ){
548: &passwordchanger($r,"<p>\n<font color='#ff0000'>ERROR</font>".
549: "Password data was blank.\n</p>");
1.3 matthew 550: return;
551: }
1.16 albertel 552: # Get the keys
553: my $lonhost = $r->dir_config('lonHostID');
1.3 matthew 554: my $tmpinfo = Apache::lonnet::reply('tmpget:'.$logtoken,$lonhost);
555: if (($tmpinfo=~/^error/) || ($tmpinfo eq 'con_lost')) {
1.4 matthew 556: # I do not a have a better idea about how to handle this
1.3 matthew 557: $r->print(<<ENDERROR);
558: <p>
559: <font color="#ff0000">ERROR:</font> Unable to retrieve stored token for
1.4 matthew 560: password decryption. Please log out and try again.
1.3 matthew 561: </p>
562: ENDERROR
1.4 matthew 563: # Probably should log an error here
1.3 matthew 564: return;
565: }
566: my ($ckey,$n1key,$n2key)=split(/&/,$tmpinfo);
1.4 matthew 567: #
1.17 matthew 568: $currentpass = &des_decrypt($ckey ,$currentpass);
569: $newpass1 = &des_decrypt($n1key,$newpass1);
570: $newpass2 = &des_decrypt($n2key,$newpass2);
1.4 matthew 571: #
1.3 matthew 572: if ($newpass1 ne $newpass2) {
1.4 matthew 573: &passwordchanger($r,
574: '<font color="#ff0000">ERROR:</font>'.
575: 'The new passwords you entered do not match. '.
576: 'Please try again.');
577: return;
578: }
579: if (length($newpass1) < 7) {
580: &passwordchanger($r,
581: '<font color="#ff0000">ERROR:</font>'.
582: 'Passwords must be a minimum of 7 characters long. '.
583: 'Please try again.');
1.3 matthew 584: return;
585: }
1.4 matthew 586: #
587: # Check for bad characters
588: my $badpassword = 0;
589: foreach (split(//,$newpass1)) {
590: $badpassword = 1 if ((ord($_)<32)||(ord($_)>126));
591: }
592: if ($badpassword) {
593: # I can't figure out how to enter bad characters on my browser.
594: &passwordchanger($r,<<ENDERROR);
595: <font color="#ff0000">ERROR:</font>
596: The password you entered contained illegal characters.<br />
597: Valid characters are: space and <br />
598: <pre>
599: !"\#$%&\'()*+,-./0123456789:;<=>?\@
600: ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_\`abcdefghijklmnopqrstuvwxyz{|}~
601: </pre>
602: ENDERROR
603: }
604: #
605: # Change the password (finally)
606: my $result = &Apache::lonnet::changepass
607: ($user,$domain,$currentpass,$newpass1,$homeserver);
608: # Inform the user the password has (not?) been changed
609: if ($result =~ /^ok$/) {
610: $r->print(<<"ENDTEXT");
1.9 matthew 611: <h2>The password for $user was successfully changed</h2>
1.4 matthew 612: ENDTEXT
613: } else {
614: # error error: run in circles, scream and shout
615: $r->print(<<ENDERROR);
1.9 matthew 616: <h2><font color="#ff0000">The password for $user was not changed</font></h2>
1.8 matthew 617: Please make sure your old password was entered correctly.
1.4 matthew 618: ENDERROR
619: }
620: return;
1.3 matthew 621: }
622:
1.4 matthew 623: ######################################################
624: # other handler subroutines #
625: ######################################################
626:
1.3 matthew 627: ################################################################
628: # Main handler #
629: ################################################################
1.1 www 630: sub handler {
631: my $r = shift;
1.3 matthew 632: my $user = $ENV{'user.name'};
633: my $domain = $ENV{'user.domain'};
1.1 www 634: $r->content_type('text/html');
1.4 matthew 635: # Some pages contain DES keys and should not be cached.
636: &Apache::loncommon::no_cache($r);
1.1 www 637: $r->send_http_header;
638: return OK if $r->header_only;
1.9 matthew 639: #
1.3 matthew 640: if ($ENV{'form.action'} eq 'changepass') {
641: &passwordchanger($r);
642: } elsif ($ENV{'form.action'} eq 'verify_and_change_pass') {
643: &verify_and_change_password($r);
1.5 www 644: } elsif ($ENV{'form.action'} eq 'changescreenname') {
645: &screennamechanger($r);
1.6 www 646: } elsif ($ENV{'form.action'} eq 'verify_and_change_screenname') {
647: &verify_and_change_screenname($r);
1.12 www 648: } elsif ($ENV{'form.action'} eq 'changemsgforward') {
649: &msgforwardchanger($r);
650: } elsif ($ENV{'form.action'} eq 'verify_and_change_msgforward') {
651: &verify_and_change_msgforward($r);
1.19 www 652: } elsif ($ENV{'form.action'} eq 'changecolors') {
653: &colorschanger($r);
654: } elsif ($ENV{'form.action'} eq 'verify_and_change_colors') {
655: &verify_and_change_colors($r);
1.15 albertel 656: } elsif ($ENV{'form.action'} eq 'debugtoggle') {
657: if ($ENV{'user.name'} eq 'albertel' ) {
658: if ($ENV{'user.debug'}) {
659: &Apache::lonnet::delenv('user\.debug');
660: } else {
661: &Apache::lonnet::appenv('user.debug' => 1);
662: }
663: }
1.3 matthew 664: } else {
665: $r->print(<<ENDHEADER);
1.1 www 666: <html>
667: <head>
1.4 matthew 668: <title>LON-CAPA Preferences</title>
1.1 www 669: </head>
1.3 matthew 670: ENDHEADER
1.10 www 671: $r->print(&Apache::loncommon::bodytag('Change Your Preferences'));
1.3 matthew 672: # Determine current authentication method
673: my $currentauth=&Apache::lonnet::queryauthenticate($user,$domain);
674: if ($currentauth =~ /^(unix|internal):/) {
1.4 matthew 675: $r->print(<<ENDPASSWORDFORM);
676: <form name="client" action="/adm/preferences" method="post">
1.14 www 677: <input type="hidden" name="action" value="changepass" />
678: <input type="submit" value="Change password" />
1.4 matthew 679: </form>
680: ENDPASSWORDFORM
1.13 www 681: }
1.5 www 682: # Change screen name
683: $r->print(<<ENDSCREENNAMEFORM);
684: <form name="client" action="/adm/preferences" method="post">
1.14 www 685: <input type="hidden" name="action" value="changescreenname" />
686: <input type="submit"
687: value="Change nickname and anonymous discussion screen name" />
1.5 www 688: </form>
689: ENDSCREENNAMEFORM
1.12 www 690: $r->print(<<ENDMSGFORWARDFORM);
691: <form name="client" action="/adm/preferences" method="post">
1.14 www 692: <input type="hidden" name="action" value="changemsgforward" />
1.18 www 693: <input type="submit" value="Change message forwarding and notification addresses" />
1.12 www 694: </form>
695: ENDMSGFORWARDFORM
1.11 www 696: # The "about me" page
1.15 albertel 697: my $aboutmeaction=
698: '/adm/'.$ENV{'user.domain'}.'/'.$ENV{'user.name'}.'/aboutme';
699: $r->print(<<ENDABOUTME);
1.11 www 700: <form name="client" action="$aboutmeaction" method="post">
1.14 www 701: <input type="hidden" name="action" value="changescreenname" />
1.19 www 702: <input type="submit" value="Edit the 'About Me' personal information screen" />
1.11 www 703: </form>
704: ENDABOUTME
1.19 www 705: $r->print(<<ENDCOLORFORM);
706: <form name="client" action="/adm/preferences" method="post">
707: <input type="hidden" name="action" value="changecolors" />
708: <input type="submit" value="Change color scheme" />
709: </form>
710: ENDCOLORFORM
711:
1.15 albertel 712: if ($ENV{'user.name'} eq 'albertel') {
713: $r->print(<<ENDDEBUG);
714: <form name="client" action="/adm/preferences" method="post">
715: <input type="hidden" name="action" value="debugtoggle" />
716: <input type="submit" value="Toggle Debug" />
717: Current Debug status is -$ENV{'user.debug'}-.
718: </form>
719: ENDDEBUG
720: }
721: # Other preference setting code should be added here
1.3 matthew 722: }
723: $r->print(<<ENDFOOTER);
1.1 www 724: </body>
725: </html>
1.3 matthew 726: ENDFOOTER
1.1 www 727: return OK;
1.13 www 728: }
1.1 www 729:
730: 1;
731: __END__
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>