index.php

Go to the documentation of this file.

<?php

chdir ('..');

define('IL_CERT_SSO', true);
define('IL_COOKIE_PATH', $_REQUEST['cookie_path']);
if ($_REQUEST['ilias_path'])
    define('ILIAS_HTTP_PATH', $_REQUEST['ilias_path']);

include_once './Services/Authentication/classes/class.ilAuthUtils.php';

$_POST['auth_mode'] = AUTH_APACHE;

ilAuthFactory::setContext(ilAuthFactory::CONTEXT_APACHE);

require_once "include/inc.header.php";

$redirect = $_GET['r'];

$path = ILIAS_DATA_DIR . '/' . CLIENT_ID . '/apache_auth_allowed_domains.txt';
if (file_exists($path) && is_readable($path)) {
        foreach(file($path) as $line) {
                if (trim($line)) {
                        $validDomains[$line] = 1;
                }
        }
        
}
else {
        $validDomains = array();        
}

$validDomains[] = $_SERVER['HTTP_HOST'];

$P = parse_url($redirect);
$pos = strrpos(substr($P["host"],0,strrpos($P["host"], '.')), '.' );
if($pos===false) {
        $pos = 0;
}
else {
        $pos += 1;
}

$domain = substr($P["host"],$pos);

if($validDomains[$domain] !== 1) {
        die('The redirect target "'.$redirect.'" is not in the list of allowed domains.');
}

if (strpos($redirect, '?') === false)
        $redirect .= '?passed_sso=1';
else
        $redirect .= '&passed_sso=1';

if ((defined('APACHE_ERRORCODE') && APACHE_ERRORCODE) || (!$ilUser || $ilUser->getId() == ANONYMOUS_USER_ID || !$ilUser->getId()))
        $redirect .= '&auth_stat='. AUTH_APACHE_FAILED;



header('Location: ' . $redirect);