#include "webemail.h"int encodeverify(char *user, char *pass) //checks uncoded pass and user{	passwd *temp;	temp = getpwnam(user);	if (temp == NULL)	{		return 1; //no user	}	decode(pass);	if (verify(user, pass)==0)	{		return 0; //encrypt pass and user good	}	return 2; //bad pass}int verify(char *user, char *pass) //checks user and pass{	passwd *temp;	char logerror[100];	htmldecode(user);  //removes special html chars from user name	htmldecode(pass);  //removes special html chars from password	//block root access for security.	if (ALLOWROOT == 0)	{		if (strcmp(user, "root") == 0)		{			error("Verify(): Root logins are not allowed");			return 1; //no user		}	}	#ifdef HAS_SHADOW      	 spwd *spwddata;  	#endif	temp = getpwnam(user);	if (temp == NULL)	{		openlog("webemail", LOG_NDELAY, LOG_AUTHPRIV);		snprintf(logerror, 100, "User not found: %s", user);		syslog(LOG_NOTICE | LOG_AUTHPRIV, logerror);		closelog();		strcpy(globaluser, "unknown user");		return 1; //no user	}	#ifdef HAS_SHADOW          spwddata = getspnam(user);          if (spwddata != NULL)             temp->pw_passwd = spwddata->sp_pwdp;	  else	  {		strcpy(globaluser, "unknown user");		error("Verify(): Error verifing shadow password");		exit(0);	  }  	#endif	 if (strcmp(crypt(pass, temp->pw_passwd),temp->pw_passwd)==0)	 {		strcpy(globaluser, temp->pw_name);	 	return 0; //pass ok	 }	 openlog("webemail", LOG_NDELAY, LOG_AUTHPRIV);	 snprintf(logerror, 100, "Wrong pass: %s", user);	 syslog(LOG_NOTICE | LOG_AUTHPRIV, logerror);	 closelog();	 strcpy(globaluser, "unknown user");	 return 2; //pass wrong}int setcookies(char line[400]) //sets user and pass cookies (encoded){	char answer[400];	char userspace[400];	char passspace[400];	char *user;	char *pass;	passwd *temp;	user = finddata(line, "user=", userspace);	pass = finddata(line, "pass=", passspace);		if (verify(user, pass)!=0)	{		return 0; //bad password	}	temp = getpwnam(user);	if (temp == NULL)	{		return 0;	}	cout << "Set-cookie: EUSER=" << user << endl;	encode(pass);	cout << "Set-cookie: EPASS=" << pass << endl;	//writes a log in /var/log/security saying they logged in	openlog("webemail", LOG_NDELAY, LOG_AUTHPRIV);	syslog(LOG_NOTICE | LOG_AUTHPRIV, globaluser);	closelog();	if (setgid(temp->pw_gid) !=0)	{		error("Setcookies(): can't switch group");		exit(0);	}	if (setuid(temp->pw_uid) != 0)	{		error("Setcookies(): can't switch user");		exit(0);	}	system("wesetup"); //lauch setup  program	return 1;}void encode(char *text) //encodes cookie text{	int i = 0;	int temp;	while (text[i] != '\0')	{		if (text[i] <= 'Z' && text[i] >= 'A')		{			temp = text[i];			temp=temp + 10;			if (temp > 'Z')			{				temp = temp-26;			}			text[i]=(char)temp;		}		if (text[i] <= 'z' && text[i] >= 'a')		{			temp = text[i];			temp=temp + 10;			if (temp > 'z')			{				temp = temp-26;			}			text[i]=(char)temp;		}		i++;	}}void decode(char *text) //decodes cookie text{	int i = 0;	while (text[i] != '\0')	{		if (text[i] <= 'Z' && text[i] >= 'A')		{			text[i] = text[i] - 10;			if (text[i] < 'A')				text[i] = text[i]+26;		}		if (text[i] <= 'z' && text[i] >= 'a')		{			text[i] = text[i] - 10;			if (text[i] < 'a')				text[i] = text[i]+26;		}		i++;	}}int verifycookies() //checks cookie, user and pass{	char *env;	char userspace[100];	char passspace[100];	char *user;	char *pass;	passwd *info;	if ((env = getenv("HTTP_COOKIE")) != NULL)	{		user = finddata(env, "EUSER=", userspace);		if (user == NULL)		{			cout << "Set-cookie: EUSER=none; expires=Wednesday, 09-JAN-1980 23:00:00 GMT" << endl;			cout << "Set-cookie: EPASS=none; expires=Wednesday, 09-JAN-1980 23:00:00 GMT" << endl;			return 1;		}		pass = finddata(env, "EPASS=", passspace);				if (pass == NULL)		{			cout << "Set-cookie: EUSER=none; expires=Wednesday, 09-JAN-1980 23:00:00 GMT" << endl;			cout << "Set-cookie: EPASS=none; expires=Wednesday, 09-JAN-1980 23:00:00 GMT" << endl;			return 1;		}		decode(pass);		if (verify(user, pass)==0)		{			strcpy(globaluser, user);			info=getpwnam(globaluser);			if (setgid(info->pw_gid) !=0)			{				error("Verifycookies(): can't switch group");				exit(1);			}			if (setuid(info->pw_uid) != 0)			{				error("verifycookies(): can't switch user");				exit(1);			}			return 0; //user pass ok		}		return 1;	}	return 1;}