From e9a33a141886afe05477dda93b2579babb8094be Mon Sep 17 00:00:00 2001
From: vga256 <vga@vga256.com>
Date: Mon, 3 Jul 2023 13:29:11 -0600
Subject: [PATCH] * Renamed auth.inc to auth.inc.php. It is a general purpose
 authentication module that can be used anywhere. Successful authorization
 sets $logged_in = true

---
 Rocksolid_Light/rocksolid/auth.inc.php | 45 ++++++++++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 Rocksolid_Light/rocksolid/auth.inc.php

diff --git a/Rocksolid_Light/rocksolid/auth.inc.php b/Rocksolid_Light/rocksolid/auth.inc.php
new file mode 100644
index 0000000..839652e
--- /dev/null
+++ b/Rocksolid_Light/rocksolid/auth.inc.php
@@ -0,0 +1,45 @@
+<?php
+$keyfile = $spooldir.'/keys.dat';
+$keys = unserialize(file_get_contents($keyfile));
+// How long should cookie allow user to stay logged in?
+// 14400 = 4 hours
+  $auth_expire = 14400;
+  $logged_in = false;
+  if(!isset($_POST['username'])) {
+    $_POST['username'] = $_COOKIE['mail_name'];
+  }
+  $name = $_POST['username'];
+  if(!isset($_POST['password'])) {
+      $_POST['password'] = null;
+  }
+  if(!isset($_COOKIE['mail_auth'])) {
+      $_COOKIE['mail_auth'] = null;
+  }
+  if(((get_user_mail_auth_data($_COOKIE['mail_name'])) && password_verify($_POST['username'].$keys[0].get_user_config($_POST['username'],'encryptionkey'), $_COOKIE['mail_auth'])) || (password_verify($_POST['username'].$keys[1].get_user_config($_POST['username'],'encryptionkey'), $_COOKIE['mail_auth']))) {
+    $logged_in = true;
+  } else {
+    if(check_bbs_auth($_POST['username'], $_POST['password'])) {
+      $authkey = password_hash($_POST['username'].$keys[0].get_user_config($_POST['username'],'encryptionkey'), PASSWORD_DEFAULT);
+      $pkey = hash('crc32', get_user_config($_POST['username'],'encryptionkey'));
+      set_user_config(strtolower($_POST['username']), "pkey", $pkey);
+?>
+      <script type="text/javascript">
+       if (navigator.cookieEnabled)
+         var authcookie = "<?php echo $authkey; ?>";
+         var savename = "<?php echo stripslashes($name); ?>";
+         var auth_expire = "<?php echo $auth_expire; ?>";
+         var name_expire = "7776000";
+         var pkey = "<?php echo $pkey; ?>";
+         document.cookie = "mail_auth="+authcookie+"; max-age="+auth_expire+"; path=/";
+         document.cookie = "mail_name="+savename+"; max-age="+name_expire+"; path=/";
+         document.cookie = "pkey="+pkey+"; max-age="+name_expire+"; path=/";
+      </script>
+<?php
+      $logged_in = true;
+    }
+    else
+    {
+        echo 'Authorization failed.';
+    }
+  }
+