bc50352c93
Add variable in bl-kernel/boot/init.php that allows User to rename bl-kernel/admin folder.
User can then define variable in bl-kernel/boot/init.php and change the foldername itself to effect the rename.
Add global $adminfolder variable as necessary and replace relevant 'admin' strings with $adminfolder.
Applies to most of the files in bl-kernel/admin/controllers.
Line 16- Reference Admin folder variable within function
global $adminfolder;
Line 29 - Replace Admin string with folder variable:
Redirect::page($adminfolder, 'dashboard');
Original: Redirect::page('admin', 'dashboard');
56 lines
1.7 KiB
PHP
56 lines
1.7 KiB
PHP
<?php defined('BLUDIT') or die('Bludit CMS.');
|
|
|
|
// ============================================================================
|
|
// Check role
|
|
// ============================================================================
|
|
|
|
// ============================================================================
|
|
// Functions
|
|
// ============================================================================
|
|
|
|
function checkPost($args)
|
|
{
|
|
global $Security;
|
|
global $Login;
|
|
global $Language;
|
|
global $adminfolder;
|
|
|
|
if($Security->isBlocked()) {
|
|
Alert::set($Language->g('IP address has been blocked').'<br>'.$Language->g('Try again in a few minutes'));
|
|
return false;
|
|
}
|
|
|
|
// Verify User sanitize the input
|
|
if( $Login->verifyUser($_POST['username'], $_POST['password']) )
|
|
{
|
|
// Renew the token. This token will be the same inside the session for multiple forms.
|
|
$Security->generateTokenCSRF();
|
|
|
|
Redirect::page($adminfolder, 'dashboard');
|
|
return true;
|
|
}
|
|
|
|
// Bruteforce protection, add IP to blacklist.
|
|
$Security->addLoginFail();
|
|
Alert::set($Language->g('Username or password incorrect'));
|
|
|
|
return false;
|
|
}
|
|
|
|
// ============================================================================
|
|
// Main before POST
|
|
// ============================================================================
|
|
|
|
// ============================================================================
|
|
// POST Method
|
|
// ============================================================================
|
|
|
|
if( $_SERVER['REQUEST_METHOD'] == 'POST' )
|
|
{
|
|
checkPost($_POST);
|
|
}
|
|
|
|
// ============================================================================
|
|
// Main after POST
|
|
// ============================================================================
|