index.php

<?php
/*
** Zabbix
** Copyright (C) 2001-2016 Zabbix SIA
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
**/

/*

 index脚本是非常重要的一个入口，所以结构上也比较复杂。

 大致可以划分为库和宏定义、登录校验、前端展示等三个部分（这个是我自己划分的）。

*/

require_once dirname(__FILE__).'/include/config.inc.php';   //引入库文件
require_once dirname(__FILE__).'/include/forms.inc.php';

$page['title'] = _('ZABBIX');           //设置标题 类型 状态等等的 配置选项。
$page['file'] = 'index.php';

//这个是检测用户表格提交的数据，如果一个变量在fields数组中没有定义，那提交的时候你在脚本中是无法获取的。
// VAR    TYPE    OPTIONAL    FLAGS    VALIDATION    EXCEPTION
$fields = [
    'name' =>        [T_ZBX_STR, O_NO,    null,    null,        'isset({enter})', _('Username')],
    'password' =>    [T_ZBX_STR, O_OPT, null,    null,            'isset({enter})'],
    'sessionid' =>    [T_ZBX_STR, O_OPT, null,    null,            null],
    'reconnect' =>    [T_ZBX_INT, O_OPT, P_SYS|P_ACT,    BETWEEN(0, 65535), null],
    'enter' =>        [T_ZBX_STR, O_OPT, P_SYS,    null,            null],
    'autologin' =>    [T_ZBX_INT, O_OPT, null,    null,            null],
    'request' =>    [T_ZBX_STR, O_OPT, null,    null,            null]
];
check_fields($fields);

// logout  登出
if (isset($_REQUEST['reconnect'])) {
    DBstart();
    add_audit_details(AUDIT_ACTION_LOGOUT, AUDIT_RESOURCE_USER, CWebUser::$data['userid'], '', _('Manual Logout'),
        CWebUser::$data['userid']
    );
    DBend(true);
    CWebUser::logout();
    redirect('index.php');
}

$config = select_config(); //获取配置信息

if ($config['authentication_type'] == ZBX_AUTH_HTTP) {
    if (!empty($_SERVER['PHP_AUTH_USER'])) {
        $_REQUEST['enter'] = _('Sign in');
        $_REQUEST['name'] = $_SERVER['PHP_AUTH_USER'];
    }
    else {
        access_deny(ACCESS_DENY_PAGE);
    }
}

// login via form   登录
if (isset($_REQUEST['enter']) && $_REQUEST['enter'] == _('Sign in')) {
    // try to login
    $autoLogin = getRequest('autologin', 0);

    DBstart();
    $loginSuccess = CWebUser::login(getRequest('name', ''), getRequest('password', ''));
    DBend(true);

    if ($loginSuccess) {
        // save remember login preference
        $user = ['autologin' => $autoLogin];

        if (CWebUser::$data['autologin'] != $autoLogin) {
            API::User()->updateProfile($user);
        }

        $request = getRequest('request');
        if (!zbx_empty($request)) {
            $url = $request;
        }
        elseif (!zbx_empty(CWebUser::$data['url'])) {
            $url = CWebUser::$data['url'];
        }
        else {
            $url = ZBX_DEFAULT_URL;
        }
        redirect($url);
        exit;
    }
    // login failed, fall back to a guest account
    else {
        CWebUser::checkAuthentication(null);
    }
}
else {
    // login the user from the session, if the session id is empty - login as a guest
    CWebUser::checkAuthentication(CWebUser::getSessionCookie());
}

// the user is not logged in, display the login form
if (!CWebUser::$data['alias'] || CWebUser::$data['alias'] == ZBX_GUEST_USER) {
    switch ($config['authentication_type']) {
        case ZBX_AUTH_HTTP:
            echo _('User name does not match with DB');
            break;
        case ZBX_AUTH_LDAP:
        case ZBX_AUTH_INTERNAL:
            if (isset($_REQUEST['enter'])) {
                $_REQUEST['autologin'] = getRequest('autologin', 0);
            }

            if ($messages = clear_messages()) {
                $messages = array_pop($messages);
                $_REQUEST['message'] = $messages['message'];
            }
            $loginForm = new CView('general.login');
            $loginForm->render();
    }
}
else {
    redirect(zbx_empty(CWebUser::$data['url']) ? ZBX_DEFAULT_URL : CWebUser::$data['url']);
}