`*\;\[\]\{\}\/\\\\]/'; if (preg_match($eviltext, $u)) { $u = preg_replace($eviltext,'',$u); } if (strlen($u) > 60) { $u = substr($u, 0, 60); } if (preg_match($eviltext, $p)) { $p = preg_replace($eviltext,'',$p); } if (strlen($p) > 40) { $p = substr($p, 0, 40); } // GRAB IP, SET TIME RANGE FOR LOGONS if (getenv("HTTP_CLIENT_IP")) { $ip = getenv("HTTP_CLIENT_IP"); } else if(getenv("HTTP_X_FORWARDED_FOR")) { $ip = getenv("HTTP_X_FORWARDED_FOR"); } else if(getenv("REMOTE_ADDR")) { $ip = getenv("REMOTE_ADDR"); } else { $ip = "UNKNOWN"; } $date = date("Y-m-d"); require ('/home/default/borealis.gi/user/db_access/access.php'); // Connect to the db. if ($u != 'GUEST') { // CHECK THE BANNED IP LIST $query = 'SELECT ip FROM events WHERE ip="'.$ip.'" AND timestamp LIKE "'.$date.'%" AND event_type="99"'; $result = @mysql_query ($query); // Run the query. $count = mysql_num_rows($result); // CHECK FOR ADMIN OVERRIDE $query2 = 'SELECT ip FROM events WHERE ip="'.$ip.'" AND timestamp LIKE "'.$date.'%" AND event_type="98"'; $result2 = @mysql_query ($query2); // Run the query. $count2 = mysql_num_rows($result2); if (($count > 0) && ($count2 == 0)) { $message = 'TOO MANY FAILURES - LOGON DISABLED'; // LOG THE FAILED ATTEMPT $querykeys = 'event_type, user, ip, timestamp'; $queryvalues = '"3", "'.$u.'", "'.$ip.'", NOW()'; $log_query = "INSERT INTO events ($querykeys) VALUES ($queryvalues)"; $log_result = @mysql_query ($log_query); // Run the query. } else { $queryx = "SELECT * FROM users WHERE user = '$u' AND password = MD5('$p') AND user_year = $year"; $resultx = @mysql_query ($queryx); // Run the query. $countx = mysql_num_rows($resultx); if ($countx == 0) { $message = 'Invalid Username or Password'; // LOG THE FAILED ATTEMPT $querykeys = 'event_type, user, ip, timestamp'; $queryvalues = '"2", "'.$u.'", "'.$ip.'", NOW()'; $log_query = "INSERT INTO events ($querykeys) VALUES ($queryvalues)"; $log_result = @mysql_query ($log_query); // Run the query. // CHECK FOR MULTIPLE FAILED ATTEMPTS $check_query = 'SELECT ip FROM events WHERE ip="'.$ip.'" AND '. 'timestamp LIKE "'.$date.'%" AND event_type="2"'; $check_result = @mysql_query ($check_query); // Run the query. $check_count = mysql_num_rows($check_result); if ($check_count > 20) { // BLOCK IP $querykeys = 'event_type, user, ip, timestamp'; $queryvalues = '"99", "'.$u.'", "'.$ip.'", NOW()'; $log_query = "INSERT INTO events ($querykeys) VALUES ($queryvalues)"; $log_result = @mysql_query ($log_query); // Run the query. //$disable_query = 'UPDATE users SET disabled=1 where user="'.$u.'"'; //$result = @mysql_query ($disable_query); // Run the query. } } if ($countx == 1) { while ($row = mysql_fetch_array ($resultx, MYSQL_ASSOC)) { if ($row['disabled'] == 1) { $message = 'Account Disabled'; // LOG THE FAILED ATTEMPT $querykeys = 'event_type, user, ip, timestamp'; $queryvalues = '"3", "'.$u.'", "'.$ip.'", NOW()'; $log_query = "INSERT INTO events ($querykeys) VALUES ($queryvalues)"; $log_result = @mysql_query ($log_query); // Run the query. } else { $_SESSION['logon'] = '1'; $_SESSION['user_id'] = $row['user_id']; $_SESSION['user'] = $row['user']; $_SESSION['user_id'] = $row['user_id']; $_SESSION['company'] = $row['company']; $_SESSION['auth_level'] = $row['auth_level']; $_SESSION['year'] = $year; // LOG THE EVENT $querykeys = 'event_type, user, user_id, company_name, company_id, ip, timestamp'; $queryvalues = '"1", "'.$u.'", "'.$_SESSION['user_id'].'", "'.$_SESSION['company_name']. '", "'.$_SESSION['company_id'].'", "'.$ip.'", NOW()'; $log_query = "INSERT INTO events ($querykeys) VALUES ($queryvalues)"; $log_result = @mysql_query ($log_query); // Run the query. mysql_close(); // Close the database connection. if ($_SESSION['auth_level'] == '3') { //header ('HTTP/1.0 302 Found'); //echo ' '; header('Location: meeting.php'); exit(); } else { //header ('HTTP/1.0 302 Found'); // echo ' '; header('Location: meeting.php'); // header('Location: logon.php'); exit(); } } } } } mysql_close(); // Close the database connection. } else { $_SESSION['logon'] = '1'; $_SESSION['user'] = $u; $_SESSION['year'] = $year; $_SESSION['auth_level'] = '0'; $query2 = "select company from users where user='meetingadmin'"; $result2= @mysql_result($query2); $company = @mysql_result ($result2, 0); $_SESSION['company'] = $company; // LOG THE EVENT $querykeys = 'event_type, user, ip, timestamp'; $queryvalues = '1, "'.$u.'", "'.$ip.'", NOW()'; $log_query = "INSERT INTO events ($querykeys) VALUES ($queryvalues)"; $log_result = @mysql_query ($log_query); // Run the query. mysql_close(); // Close the database connection. //header ('HTTP/1.0 302 Found'); //echo ' '; header('Location: meeting.php'); exit(); } } $_SESSION['year'] = $year; $_SESSION['user'] = ''; $_SESSION['user_id'] = ''; $_SESSION['company'] = ''; $_SESSION['logon'] = ''; $_SESSION['auth_level'] = 0; echo '

'; if ($_GET['test'] == 1) { echo ''; } echo '

'; echo ""; if ($diff > 0) { echo ''; } echo ' Annual Meeting Logon Username Password '; // MEETING START TIME - always London time, independent of the server's timezone. // (PHP 5 compatible: no intdiv(), no global timezone change.) $meeting_start = strtotime('2026-10-05 16:00:00 Europe/London'); $now = time(); $diff = $meeting_start - $now; $days = 0; $hours = 0; $mins = 0; $disabled = ''; if ($diff > 0) { $days = (int) floor($diff / 86400); $hours = (int) floor(($diff % 86400) / 3600); $mins = (int) floor(($diff % 3600) / 60); // Enable Submit only within 10 minutes of the start if ($diff > 600) { $disabled = ' disabled'; } } if (array_key_exists('ADM', $_GET) && $_GET['ADM'] == 1) { $disabled = ''; } echo ' '.$message.'  '; echo "Meeting begins in "; if ($days > 0) { echo "$days day".($days == 1 ? '' : 's')." "; } echo "$hours hours and $mins minutes."; echo '

NOTE: Logon information can be found on your Proxy form,
sent via email from the Borealis Family of Companies

If you do not have your logon information, you may log on
as GUEST and leave the password blank

'; echo "\n\n"; echo' '; exit(); ?>