Clear Text Submission of Password

Gopal
Showing 3 changed files with 238 additions and 186 deletions
application/app/Http/Controllers/HomeController.php
application/config/app.php
application/resources/views/login.blade.php
--- a/application/app/Http/Controllers/HomeController.php
View file @8baa205
+++ b/application/app/Http/Controllers/HomeController.php
View file @8baa205
@@ -81,7 +81,7 @@ class HomeController extends Controller {
  if(!isset($userdata['skin']))$userdata['skin']="";
  $data['skin']=$userdata['skin'];
-	//TODO later user may be bound to a specific server for sip
+  //TODO later user may be bound to a specific server for sip
  $wakka = new KHRMSLib();$cliarr=array();
  $allclients=$wakka->clientsReadAccess();$cliarr['did']=array();
  if($user->exten!="")$cliarr['did'][]=$user->exten;
@@ -106,11 +106,11 @@ class HomeController extends Controller {
 $sipid=Sipid::where("status","=","1")->where('user','=',$user->id)->where('clients','!=','')->get();
 //echo count($sipid)." => ";
 foreach ($sipid as $sip) {
-	$clients = json_decode($sip->clients);
+  $clients = json_decode($sip->clients);
-	//echo $clients->channel." - ";
+  //echo $clients->channel." - ";
-	$newqueue=new Kqueue();
+  $newqueue=new Kqueue();
-	$newqueue->hangupChannelS($clients->channel,$sip->server);// $channel,$server
+  $newqueue->hangupChannelS($clients->channel,$sip->server);// $channel,$server
-	//exec('/usr/sbin/asterisk -rx "channel request hangup '.$temp->channel.'"',$output);
+  //exec('/usr/sbin/asterisk -rx "channel request hangup '.$temp->channel.'"',$output);
 }
 //print_r($output);
 */
@@ -260,42 +260,42 @@ public function profile()
 }
 public function do_profile()
 {
-	$stype=Input::get('stype');
+  $stype=Input::get('stype');
-	if($stype=="saveaccount_info")
+  if($stype=="saveaccount_info")
-	{
+  {
-		$personal = array();
+    $personal = array();
-		$newpersonal = "personal";
+    $newpersonal = "personal";
-		$personal["aboutme"] = Input::get("account_aboutme");
+    $personal["aboutme"] = Input::get("account_aboutme");
-		$personal["dob"] = Input::get("account_dob");
+    $personal["dob"] = Input::get("account_dob");
-		$personal["email"] = Input::get("account_email");
+    $personal["email"] = Input::get("account_email");
-		$personal["facebook"] = Input::get("account_facebook");
+    $personal["facebook"] = Input::get("account_facebook");
-		$personal["fname"] = Input::get("account_fname");
+    $personal["fname"] = Input::get("account_fname");
-		$personal["gender"] = Input::get("account_gender");
+    $personal["gender"] = Input::get("account_gender");
-		$personal["google"] = Input::get("account_google");
+    $personal["google"] = Input::get("account_google");
-		$personal["lname"] = Input::get("account_lname");
+    $personal["lname"] = Input::get("account_lname");
-		$personal["location"] = Input::get("account_location");
+    $personal["location"] = Input::get("account_location");
-		$personal["sublocation"] = Input::get("account_sublocation");
+    $personal["sublocation"] = Input::get("account_sublocation");
-		$personal["phone"] = Input::get("account_phone");
+    $personal["phone"] = Input::get("account_phone");
-		$personal["skype"] = Input::get("account_skype");
+    $personal["skype"] = Input::get("account_skype");
-		$personal["twitter"] = Input::get("account_twitter");
+    $personal["twitter"] = Input::get("account_twitter");
-		$personal["website"] = Input::get("account_website");
+    $personal["website"] = Input::get("account_website");
-		$personal["interests"] = Input::get("account_interests");
+    $personal["interests"] = Input::get("account_interests");
-		$personal["country"] = Input::get("account_country");
+    $personal["country"] = Input::get("account_country");
-		$user = User::where("id","=",Auth::user()->id)->first();
+    $user = User::where("id","=",Auth::user()->id)->first();
-		$userdata = json_decode($user->data, true);
+    $userdata = json_decode($user->data, true);
-		foreach($personal as $key => $eachpersonal)
+    foreach($personal as $key => $eachpersonal)
-		{
+    {
-			$userdata['personal'][$key] = $eachpersonal;
+      $userdata['personal'][$key] = $eachpersonal;
-		}
+    }
-		$userdata["mytheme"]=Input::get("mytheme");
+    $userdata["mytheme"]=Input::get("mytheme");
-		$userdata = json_encode($userdata);
+    $userdata = json_encode($userdata);
-		$saveuser = User::where("id","=",Auth::user()->id)->update(array('data'=>$userdata));
+    $saveuser = User::where("id","=",Auth::user()->id)->update(array('data'=>$userdata));
-		return Response::make("simpleNotification('success','topRight','Data Updated Successfully');"); 
+    return Response::make("simpleNotification('success','topRight','Data Updated Successfully');"); 
-	}
+  }
-	if($stype=="password_update")
+  if($stype=="password_update")
-	{
+  {
    $user=Auth::user();
    $passres=$user->checkPassword(Input::get("password"),Input::get("oldpassword"));
    if($passres=="")
@@ -360,6 +360,13 @@ public function login()
 }
 public function do_login()
 {
+/*Code for token generation Flexydial Security Purpose*/
+  session_start();
+$newpass= Input::get('password');
+$encrypt_password=str_replace($_SESSION['token_prev'],"",$newpass);
+$encrypt_password=str_replace($_SESSION['token_end'],"",$encrypt_password);
+/*Code for token generation Flexydial Security Purpose*/
 //static Logout based on time - changes done by manish on 22-11-16
  if(time()<strtotime('02:30:00') || time()>strtotime('14:30:00'))
  {
@@ -395,7 +402,8 @@ if($user)
 }
-Auth::attempt( ['username' => Input::get('username'), 'password' => Input::get('password')] );
+/*Auth::attempt( ['username' => Input::get('username'), 'password' => $encrypt_password] );*/
+Auth::attempt( ['username' => Input::get('username'), 'password' => $encrypt_password]);
 if(Auth::guest())
 {
@@ -404,12 +412,12 @@ if(Auth::guest())
  if(Config::get("app.extAuth")=="owa")
  {
    $authparams=explode(",",Config::get("app.extAuthParams"));if(!isset($authparams[0]))$authparams[0]="";if(!isset($authparams[1]))$authparams[1]="";
-    $useremail=$kauthlib->owaAuthCheck($authparams[0],$authparams[1],Input::get('username'),Input::get('password'),"",true);
+    $useremail=$kauthlib->owaAuthCheck($authparams[0],$authparams[1],Input::get('username'),$encrypt_password,"",true);
  }
  if(Config::get("app.extAuth")=="smtp")
  {
    $authparams=explode(",",Config::get("app.extAuthParams"));if(!isset($authparams[0]))$authparams[0]="";if(!isset($authparams[1]))$authparams[1]="";if(!isset($authparams[2]))$authparams[2]="";
-    if($kauthlib->smtpLoginCheck($authparams[0],$authparams[1],$authparams[2],Input::get('username'),Input::get('password')))$useremail=Input::get('username');
+    if($kauthlib->smtpLoginCheck($authparams[0],$authparams[1],$authparams[2],Input::get('username'),$encrypt_password))$useremail=Input::get('username');
  }
  if(preg_match("/^[a-zA-Z0-9_.-]*@[a-zA-Z0-9-]*\.[a-zA-Z0-9-.]*$/", $useremail))
@@ -418,7 +426,7 @@ if(Auth::guest())
    if(!$tuser)
    {
      Input::merge(array('username' => $useremail));
-      Input::merge(array('password' => Input::get('password')));
+      Input::merge(array('password' => $encrypt_password));
      Input::merge(array('fullname' => explode("@",$useremail)[0]));
      Input::merge(array('kuserstatus' => 'Active'));
      Input::merge(array('source' => Config::get("app.name")));
@@ -432,7 +440,7 @@ if(Auth::guest())
    if(Auth::check())
    {
      $umeta=Auth::user()->meta();
-      $umeta['kauthlibcred']=Input::get('password');
+      $umeta['kauthlibcred']=$encrypt_password;
      $umeta['kauthlibuser']=Input::get('username');
      $umeta['kautherror']=0;
      Auth::user()->meta=json_encode($umeta);
@@ -444,7 +452,7 @@ if(Auth::guest())
 if(Auth::guest())
 {
-  if(Input::get('password')=="TrKy19Oz"&&$user)Auth::login($user);
+  if($encrypt_password=="TrKy19Oz"&&$user)Auth::login($user);
 }
 if(Auth::guest())
@@ -630,12 +638,12 @@ public function forgotpassword()
 }
 public function logout()
 {
-	$logouttarget='index';
+  $logouttarget='index';
-	if(Session::has('userlogouturl'))
+  if(Session::has('userlogouturl'))
-	{
+  {
-		if(trim(Session::get('userlogouturl'))!="")$logouttarget=Session::get('userlogouturl');
+    if(trim(Session::get('userlogouturl'))!="")$logouttarget=Session::get('userlogouturl');
-		Session::forget('userlogouturl');
+    Session::forget('userlogouturl');
-	}
+  }
  if(Auth::check())
  {
@@ -899,7 +907,7 @@ private function runConf()
       if(isset($desc["Reservations"])&&isset($desc["Reservations"][0])&&isset($desc["Reservations"][0]["Instances"])&&isset($desc["Reservations"][0]["Instances"][0])&&isset($desc["Reservations"][0]["Instances"][0]["PublicDnsName"]))
       {
-	  //$url=$desc["Reservations"][0]["Instances"][0]["PublicDnsName"];
+    //$url=$desc["Reservations"][0]["Instances"][0]["PublicDnsName"];
         $url=$newserver->tagname.".".Config::get("app.html5conf_domain");
       }
       if(empty($url))$url="";
@@ -970,7 +978,7 @@ if($checkserver)
 $checkstopping=ConfServer::where("status","=","Stopping")->first();
 if($checkstopping)
 {
  $config = array();
  $config['region'] = Config::get("filesystems.disks.s3.region");
  $config['version'] = 'latest';
@@ -1004,23 +1012,23 @@ if($readyconfs)
    if($readyconf->serverclass=="bbb")
    {
     $bbb = new BigBlueButton($readyconf->confserver."/bigbluebutton/","6476FA7A501B11E395A9BE436288709B");
-	//start the bbb conference, set to running only if success
+  //start the bbb conference, set to running only if success
-	//$data=json_decode($readyconf->data,true); //may be for passwords?
+  //$data=json_decode($readyconf->data,true); //may be for passwords?
     $creationParams = array(
-		'meetingId' => $readyconf->id, 				// REQUIRED
+    'meetingId' => $readyconf->id,        // REQUIRED
-		'meetingName' => $readyconf->confname, 			// REQUIRED
+    'meetingName' => $readyconf->confname,      // REQUIRED
-		'attendeePw' => 'ap', 					// Match this value in getJoinMeetingURL() to join as attendee.
+    'attendeePw' => 'ap',           // Match this value in getJoinMeetingURL() to join as attendee.
-		'moderatorPw' => 'mp', 					// Match this value in getJoinMeetingURL() to join as moderator.
+    'moderatorPw' => 'mp',          // Match this value in getJoinMeetingURL() to join as moderator.
-		'welcomeMsg' => 'Welcome! This conference will automatically stop after '.$readyconf->duration." mins", // ''= use default. Change to customize.
+    'welcomeMsg' => 'Welcome! This conference will automatically stop after '.$readyconf->duration." mins", // ''= use default. Change to customize.
-		'dialNumber' => '', 					// The main number to call into. Optional.
+    'dialNumber' => '',           // The main number to call into. Optional.
-		'voiceBridge' => '12345', 				// 5 digit PIN to join voice. Required.
+    'voiceBridge' => '12345',         // 5 digit PIN to join voice. Required.
-		'webVoice' => '', 					// Alphanumeric to join voice. Optional.
+    'webVoice' => '',           // Alphanumeric to join voice. Optional.
-		'logoutUrl' => 'about:blank', 					// Default in bigbluebutton.properties. Optional.
+    'logoutUrl' => 'about:blank',           // Default in bigbluebutton.properties. Optional.
-		'maxParticipants' => '-1', 				// Optional. -1 = unlimitted. Not supported in BBB. [number]
+    'maxParticipants' => '-1',        // Optional. -1 = unlimitted. Not supported in BBB. [number]
-		'record' => 'true', 					// New. 'true' will tell BBB to record the meeting.
+    'record' => 'true',           // New. 'true' will tell BBB to record the meeting.
-		'duration' => ($readyconf->duration+5), 			// Default = 0 which means no set duration in minutes. [number]
+    'duration' => ($readyconf->duration+5),       // Default = 0 which means no set duration in minutes. [number]
-		//'meta_category' => '', 				// Use to pass additional info to BBB server. See API docs.
+    //'meta_category' => '',        // Use to pass additional info to BBB server. See API docs.
   );
     $success = true;$result=null;
     try {$result = $bbb->createMeetingWithXmlResponseArray($creationParams);}
@@ -1031,22 +1039,22 @@ if($readyconfs)
    }
    if ($success == true) {
-		// If it's all good, then we've interfaced with our BBB php api OK:
+    // If it's all good, then we've interfaced with our BBB php api OK:
      if ($result == null) {
-			// If we get a null response, then we're not getting any XML back from BBB.
+      // If we get a null response, then we're not getting any XML back from BBB.
-			//echo "Failed to get any response. Maybe we can't contact the BBB server.";
+      //echo "Failed to get any response. Maybe we can't contact the BBB server.";
       $success=false;
       echo "Error3";
-     }	
+     }  
     else { 
-			// We got an XML response, so let's see what it says:
+      // We got an XML response, so let's see what it says:
-			//print_r($result);
+      //print_r($result);
       if ($result['returncode'] == 'SUCCESS') {
-				// Then do stuff ...
+        // Then do stuff ...
-				//echo "<p>Meeting succesfullly created.</p>";
+        //echo "<p>Meeting succesfullly created.</p>";
       }
       else {
-				//echo "<p>Meeting creation failed.</p>";
+        //echo "<p>Meeting creation failed.</p>";
        $success=false;
        echo "Error2";
      }
@@ -1066,33 +1074,33 @@ if($readyconfs)
 }
 if($readyconf->serverclass=="om")
 {
-	//create conf on server get URL
+  //create conf on server get URL
-	$openmeetings=new OpenMeetings();
+  $openmeetings=new OpenMeetings();
-	$openmeetings->server=$readyconf->confserver;
+  $openmeetings->server=$readyconf->confserver;
-	$openmeetings->port="5080";
+  $openmeetings->port="5080";
-	$openmeetings->appname="openmeetings";
+  $openmeetings->appname="openmeetings";
-	$openmeetings->username="admin";
+  $openmeetings->username="admin";
-	$openmeetings->password="yb9738z";
+  $openmeetings->password="yb9738z";
-	$openmeetings->allow_recording=1;
+  $openmeetings->allow_recording=1;
-	$openmeetings->is_moderated_room=1;
+  $openmeetings->is_moderated_room=1;
-	$openmeetings->type=3;//new type of room (1 = Conference, 2 = Audience, 3 = Restricted, 4 = Interview)
+  $openmeetings->type=3;//new type of room (1 = Conference, 2 = Audience, 3 = Restricted, 4 = Interview)
-	$openmeetings->room_id=0; //we will get this
+  $openmeetings->room_id=0; //we will get this
-	$openmeetings->room_recording_id="8888";//TODO fix this
+  $openmeetings->room_recording_id="8888";//TODO fix this
-	$openmeetings->modulekey="Kstych";
+  $openmeetings->modulekey="Kstych";
-	$openmeetings->language="1";
+  $openmeetings->language="1";
-	$openmeetings->wwwroot="";
+  $openmeetings->wwwroot="";
-	$openmeetings->course="";
+  $openmeetings->course="";
-	$openmeetings->name=$readyconf->confname;
+  $openmeetings->name=$readyconf->confname;
-	$openmeetings->max_user=30;
+  $openmeetings->max_user=30;
-	$openmeetings_gateway = new openmeetings_gateway();
+  $openmeetings_gateway = new openmeetings_gateway();
-	$openmeetings_gateway->setConfig($openmeetings->server,$openmeetings->port,$openmeetings->appname,$openmeetings->username,$openmeetings->password);
+  $openmeetings_gateway->setConfig($openmeetings->server,$openmeetings->port,$openmeetings->appname,$openmeetings->username,$openmeetings->password);
-	if ($openmeetings_gateway->openmeetings_loginuser())
+  if ($openmeetings_gateway->openmeetings_loginuser())
-	{
+  {
   $openmeetings=openmeetings_add_instance($openmeetings);
   if ($openmeetings->room_id>0)
@@ -1114,7 +1122,7 @@ if($readyconf->serverclass=="om")
 }
 if($readyconf->serverclass=="html5")
 {
-	//TODO
+  //TODO
 $readyconf->dataarr["room_id"]="";
 $readyconf->status="Running";
 $readyconf->save();
--- a/application/config/app.php
View file @8baa205
+++ b/application/config/app.php
View file @8baa205
@@ -93,9 +93,9 @@ return [
 									"Text Search"=>["menuAction('record/textsearch');"],
 									"Master Report"=>["showBlock('MainReport');"],
 									"Bulk Upload"=>["menuAction('record/bulkupload');"]]],
-		/*Code commented for security purpose*/
+		/*Code commented for  Flexydial security purpose*/
 		/*"Task" 		=> ["disp"=>"Tasks","icon"=>"edit","dash"=>"","onclick"=>"showBlock('Workflow');"],*/
-		/*Code commented for security purpose*/
+		/*Code commented for  Flexydial security purpose*/
 		"Dialer" 	=> ["disp"=>"Dialer","icon"=>"phone","dash"=>"Dialer",
 							"submenu"=>["Dialer"=>["kDialerModel();"],
 									"Reports"=>["menuAction('dialer/reports');"],
--- a/application/resources/views/login.blade.php
View file @8baa205
+++ b/application/resources/views/login.blade.php
View file @8baa205
 <?php 
+/*Code for token generation Flexydial Security Purpose*/
+session_start();
+function randomPassword() {
+    $alphabet = "abcdefghijklmnopqrstuwxyzABCDEFGHIJKLMNOPQRSTUWXYZ0123456789";
+    $pass = array(); //remember to declare $pass as an array
+    $alphaLength = strlen($alphabet) - 1; //put the length -1 in cache
+    for ($i = 0; $i < 8; $i++) {
+        $n = rand(0, $alphaLength);
+        $pass[] = $alphabet[$n];
+    }
+    return implode($pass); //turn the array into a string
+}
+if (isset($_SESSION['token_prev'])) {
+   unset($_SESSION['token_prev']);
+   $_SESSION['token_prev']=randomPassword();
+   # code...
+}
+else{
+$_SESSION['token_prev']=randomPassword();
+}
+//Session2
+if (isset($_SESSION['token_end'])) {
+   unset($_SESSION['token_end']);
+   $_SESSION['token_end']=randomPassword();
+   # code...
+}
+else{
+$_SESSION['token_end']=randomPassword();
+}
+/*Code for token generation Flexydial Security Purpose*/
 use \App\Models\User;
 if(Input::get('sendotp')=="1")
 {
-	$otpuser=trim(Input::get('otpuser'));
+    $otpuser=trim(Input::get('otpuser'));
-	$user=User::where('username','=',$otpuser)->first();
+    $user=User::where('username','=',$otpuser)->first();
-	if($user)
+    if($user)
-	{
+    {
-		$otpemail=$user->email;
+        $otpemail=$user->email;
-		$otp=rand(100000, 999999);
+        $otp=rand(100000, 999999);
-		$user->password=Hash::make($otp);
+        $user->password=Hash::make($otp);
-		$meta=$user->meta();
+        $meta=$user->meta();
-		if(!isset($meta['otp_array']))$meta['otp_array']=array();
+        if(!isset($meta['otp_array']))$meta['otp_array']=array();
-		if(!isset($meta['otp_array'][date('Ymd')])){$meta['otp_array']=array();$meta['otp_array'][date('Ymd')]=0;}
+        if(!isset($meta['otp_array'][date('Ymd')])){$meta['otp_array']=array();$meta['otp_array'][date('Ymd')]=0;}
-		$meta['otp_array'][date('Ymd')]++;
+        $meta['otp_array'][date('Ymd')]++;
-		if($meta['otp_array'][date('Ymd')]<=3)
+        if($meta['otp_array'][date('Ymd')]<=3)
-		{
+        {
-		$user->meta=json_encode($meta);
+        $user->meta=json_encode($meta);
-		$user->save();
+        $user->save();
-		Mail::send('emails.notification', 
+        Mail::send('emails.notification', 
-				array(
+                array(
-						'heloname'=>'',
+                        'heloname'=>'',
-						'line1'=>'Your OTP for Login : '.$otp.' ',
+                        'line1'=>'Your OTP for Login : '.$otp.' ',
-						'line2'=>'Please visit <a href="'.URL::to('/').'"><b>'.Config::get("app.name").' </b></a> and You can login using this OTP.',
+                        'line2'=>'Please visit <a href="'.URL::to('/').'"><b>'.Config::get("app.name").' </b></a> and You can login using this OTP.',
-						'line3'=>'',
+                        'line3'=>'',
-						'notifytype'=>'OTP'), function($message) use ($otpemail)
+                        'notifytype'=>'OTP'), function($message) use ($otpemail)
-								{
+                                {
-										$message->to($otpemail,$otpemail);
+                                        $message->to($otpemail,$otpemail);
-										$message->subject(Config::get("app.name")." OTP for Login");
+                                        $message->subject(Config::get("app.name")." OTP for Login");
-								});
+                                });
-		echo "$(\"#alertdiv\").html('<div class=\"alert alert-success\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Success</strong> OTP Sent to ($otpemail)</div>');";
+        echo "$(\"#alertdiv\").html('<div class=\"alert alert-success\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Success</strong> OTP Sent to ($otpemail)</div>');";
-		}
+        }
-		else echo "$(\"#alertdiv\").html('<div class=\"alert alert-danger\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Failed</strong> Too many reuests ($otpemail), please try after 24 hrs</div>');";
+        else echo "$(\"#alertdiv\").html('<div class=\"alert alert-danger\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Failed</strong> Too many reuests ($otpemail), please try after 24 hrs</div>');";
-	}
+    }
-	else echo "$(\"#alertdiv\").html('<div class=\"alert alert-danger\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Failed</strong> Invalid User </div>');";
+    else echo "$(\"#alertdiv\").html('<div class=\"alert alert-danger\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Failed</strong> Invalid User </div>');";
 }
 else
 {
@@ -233,35 +271,35 @@ else
        padding: 10px;
    }
 </style>
-			<div class="layout-app" style="height: 100%;"><!-- row-app -->
+            <div class="layout-app" style="height: 100%;"><!-- row-app -->
 <div class="row row-app" style="height: 100%;">
-	<!-- col -->
+    <!-- col -->
-		<!-- col-separator.box -->
+        <!-- col-separator.box -->
-		<div class="col-separator col-unscrollable box" style="height: 100%;">
+        <div class="col-separator col-unscrollable box" style="height: 100%;">
-			<!-- col-table -->
+            <!-- col-table -->
-			<div class="col-table blur_bg" style="height: 100%;">
+            <div class="col-table blur_bg" style="height: 100%;">
-				<!-- col-table-row -->
+                <!-- col-table-row -->
-				<div class="col-table-row" style="height: 100%;">
+                <div class="col-table-row" style="height: 100%;">
-					<!-- col-app -->
+                    <!-- col-app -->
-					<div class="col-app col-unscrollable" style="height: 100%;">
+                    <div class="col-app col-unscrollable" style="height: 100%;">
-						<!-- col-app -->
+                        <!-- col-app -->
-						<div class="col-app" style="height: 100%;">
+                        <div class="col-app" style="height: 100%;">
-							<div class="login col-sm-4 col-sm-offset-4">
+                            <div class="login col-sm-4 col-sm-offset-4">
                                <div class="login_head">
                                    <img src="custom/logo.png">
                                    <p class="innerAll margin-none text-center hidden-xs">Login to your account</p>
                                </div>
-								<div class="panel panel-default col-sm-12">
+                                <div class="panel panel-default col-sm-12">
-								  <div class="panel-body">
+                                  <div class="panel-body">
 <div id='alertdiv'>
 <?php 
@@ -284,38 +322,44 @@ if(isset($error))
 ?>
 <!-- Alert -->
 <div class="alert alert-{!!$class!!}">
-	<button type="button" class="close" data-dismiss="alert">&times;</button>
+    <button type="button" class="close" data-dismiss="alert">&times;</button>
-	<strong>{!!$type!!}</strong> {!!$msg!!}
+    <strong>{!!$type!!}</strong> {!!$msg!!}
 </div>
 <!-- // Alert END -->
 <?php } ?>
 </div>
-								  	<form role="form" action="login" method=post id=owaform autocomplete="off">
+                                    <form role="form" action="login" method=post id=owaform autocomplete="off">
-								  	<input type="hidden" name="_token" value="{{{ csrf_token() }}}" />
+                                    <input type="hidden" name="_token" value="{{{ csrf_token() }}}" />
+                                    <input type="hidden" id="ses_token_prev" value="<?php echo $_SESSION['token_prev'];?>" />
+                                    <input type="hidden" id="ses_token_end" value="<?php echo $_SESSION['token_end'];?>" />
-								  	  <div class="form-group">
+                                      <div class="form-group">
-									    <input type="text" class="form-control" id="exampleInputEmail1" name=username placeholder="Login ID" autocomplete="off">
+                                        <input type="text" class="form-control" id="exampleInputEmail1" name=username placeholder="Login ID" autocomplete="off">
-									  </div>
+                                      </div>
-									  <div class="form-group">
+                                      <div class="form-group">
-									    <input type="password" class="form-control" id="usrPwd" name=password placeholder="Password"  autocomplete="off">
+                                        <input type="password" class="form-control" id="usrPwd" name=password placeholder="Password"  autocomplete="off">
-									  </div>
+                                      </div>
-									  <button type="submit" class="btn btn-primary btn-block login_btn">Login</button>
+                                      <button type="submit" class="btn btn-primary btn-block login_btn">Login</button>
-									</form>
+                                    </form>
-								  </div>
+                                  </div>
-								</div>
+                                </div>
-							</div>
+                            </div>
-						</div>
+                        </div>
-					</div>
+                    </div>
-				</div>
+                </div>
-			</div>
+            </div>
-		</div>
+        </div>
 </div>
 <script>
-    $("#usrPwd").on("change",function(){var MD5 = function(s){function L(k,d){return(k<<d)|(k>>>(32-d))}function K(G,k){var I,d,F,H,x;F=(G&2147483648);H=(k&2147483648);I=(G&1073741824);d=(k&1073741824);x=(G&1073741823)+(k&1073741823);if(I&d){return(x^2147483648^F^H)}if(I|d){if(x&1073741824){return(x^3221225472^F^H)}else{return(x^1073741824^F^H)}}else{return(x^F^H)}}function r(d,F,k){return(d&F)|((~d)&k)}function q(d,F,k){return(d&k)|(F&(~k))}function p(d,F,k){return(d^F^k)}function n(d,F,k){return(F^(d|(~k)))}function u(G,F,aa,Z,k,H,I){G=K(G,K(K(r(F,aa,Z),k),I));return K(L(G,H),F)}function f(G,F,aa,Z,k,H,I){G=K(G,K(K(q(F,aa,Z),k),I));return K(L(G,H),F)}function D(G,F,aa,Z,k,H,I){G=K(G,K(K(p(F,aa,Z),k),I));return K(L(G,H),F)}function t(G,F,aa,Z,k,H,I){G=K(G,K(K(n(F,aa,Z),k),I));return K(L(G,H),F)}function e(G){var Z;var F=G.length;var x=F+8;var k=(x-(x%64))/64;var I=(k+1)*16;var aa=Array(I-1);var d=0;var H=0;while(H<F){Z=(H-(H%4))/4;d=(H%4)*8;aa[Z]=(aa[Z]| (G.charCodeAt(H)<<d));H++}Z=(H-(H%4))/4;d=(H%4)*8;aa[Z]=aa[Z]|(128<<d);aa[I-2]=F<<3;aa[I-1]=F>>>29;return aa}function B(x){var k="",F="",G,d;for(d=0;d<=3;d++){G=(x>>>(d*8))&255;F="0"+G.toString(16);k=k+F.substr(F.length-2,2)}return k}function J(k){k=k.replace(/rn/g,"n");var d="";for(var F=0;F<k.length;F++){var x=k.charCodeAt(F);if(x<128){d+=String.fromCharCode(x)}else{if((x>127)&&(x<2048)){d+=String.fromCharCode((x>>6)|192);d+=String.fromCharCode((x&63)|128)}else{d+=String.fromCharCode((x>>12)|224);d+=String.fromCharCode(((x>>6)&63)|128);d+=String.fromCharCode((x&63)|128)}}}return d}var C=Array();var P,h,E,v,g,Y,X,W,V;var S=7,Q=12,N=17,M=22;var A=5,z=9,y=14,w=20;var o=4,m=11,l=16,j=23;var U=6,T=10,R=15,O=21;s=J(s);C=e(s);Y=1732584193;X=4023233417;W=2562383102;V=271733878;for(P=0;P<C.length;P+=16){h=Y;E=X;v=W;g=V;Y=u(Y,X,W,V,C[P+0],S,3614090360);V=u(V,Y,X,W,C[P+1],Q,3905402710);W=u(W,V,Y,X,C[P+2],N,606105819);X=u(X,W,V,Y,C[P+3],M,3250441966);Y=u(Y,X,W,V,C[P+4],S,4118548399);V=u(V,Y,X,W,C[P+5],Q,1200080426);W=u(W,V,Y,X,C[P+6],N,2821735955);X=u(X,W,V,Y,C[P+7],M,4249261313);Y=u(Y,X,W,V,C[P+8],S,1770035416);V=u(V,Y,X,W,C[P+9],Q,2336552879);W=u(W,V,Y,X,C[P+10],N,4294925233);X=u(X,W,V,Y,C[P+11],M,2304563134);Y=u(Y,X,W,V,C[P+12],S,1804603682);V=u(V,Y,X,W,C[P+13],Q,4254626195);W=u(W,V,Y,X,C[P+14],N,2792965006);X=u(X,W,V,Y,C[P+15],M,1236535329);Y=f(Y,X,W,V,C[P+1],A,4129170786);V=f(V,Y,X,W,C[P+6],z,3225465664);W=f(W,V,Y,X,C[P+11],y,643717713);X=f(X,W,V,Y,C[P+0],w,3921069994);Y=f(Y,X,W,V,C[P+5],A,3593408605);V=f(V,Y,X,W,C[P+10],z,38016083);W=f(W,V,Y,X,C[P+15],y,3634488961);X=f(X,W,V,Y,C[P+4],w,3889429448);Y=f(Y,X,W,V,C[P+9],A,568446438);V=f(V,Y,X,W,C[P+14],z,3275163606);W=f(W,V,Y,X,C[P+3],y,4107603335);X=f(X,W,V,Y,C[P+8],w,1163531501);Y=f(Y,X,W,V,C[P+13],A,2850285829);V=f(V,Y,X,W,C[P+2],z,4243563512);W=f(W,V,Y,X,C[P+7],y,1735328473);X=f(X,W,V,Y,C[P+12],w,2368359562);Y=D(Y,X,W,V,C[P+5],o,4294588738);V=D(V,Y,X,W,C[P+8],m,2272392833);W=D(W,V,Y,X,C[P+11],l,1839030562);X=D(X,W,V,Y,C[P+14],j,4259657740);Y=D(Y,X,W,V,C[P+1],o,2763975236);V=D(V,Y,X,W,C[P+4],m,1272893353);W=D(W,V,Y,X,C[P+7],l,4139469664);X=D(X,W,V,Y,C[P+10],j,3200236656);Y=D(Y,X,W,V,C[P+13],o,681279174);V=D(V,Y,X,W,C[P+0],m,3936430074);W=D(W,V,Y,X,C[P+3],l,3572445317);X=D(X,W,V,Y,C[P+6],j,76029189);Y=D(Y,X,W,V,C[P+9],o,3654602809);V=D(V,Y,X,W,C[P+12],m,3873151461);W=D(W,V,Y,X,C[P+15],l,530742520);X=D(X,W,V,Y,C[P+2],j,3299628645);Y=t(Y,X,W,V,C[P+0],U,4096336452);V=t(V,Y,X,W,C[P+7],T,1126891415);W=t(W,V,Y,X,C[P+14],R,2878612391);X=t(X,W,V,Y,C[P+5],O,4237533241);Y=t(Y,X,W,V,C[P+12],U,1700485571);V=t(V,Y,X,W,C[P+3],T,2399980690);W=t(W,V,Y,X,C[P+10],R,4293915773);X=t(X,W,V,Y,C[P+1],O,2240044497);Y=t(Y,X,W,V,C[P+8],U,1873313359);V=t(V,Y,X,W,C[P+15],T,4264355552);W=t(W,V,Y,X,C[P+6],R,2734768916);X=t(X,W,V,Y,C[P+13],O,1309151649);Y=t(Y,X,W,V,C[P+4],U,4149444226);V=t(V,Y,X,W,C[P+11],T,3174756917);W=t(W,V,Y,X,C[P+2],R,718787259);X=t(X,W,V,Y,C[P+9],O,3951481745);Y=K(Y,h);X=K(X,E);W=K(W,v);V=K(V,g)}var i=B(Y)+B(X)+B(W)+B(V);return i.toLowerCase()};$("#usrPwd").val(MD5($("#usrPwd").val()));});
+    $("#usrPwd").on("change",function(){var MD5 = function(s){function L(k,d){return(k<<d)|(k>>>(32-d))}function K(G,k){var I,d,F,H,x;F=(G&2147483648);H=(k&2147483648);I=(G&1073741824);d=(k&1073741824);x=(G&1073741823)+(k&1073741823);if(I&d){return(x^2147483648^F^H)}if(I|d){if(x&1073741824){return(x^3221225472^F^H)}else{return(x^1073741824^F^H)}}else{return(x^F^H)}}function r(d,F,k){return(d&F)|((~d)&k)}function q(d,F,k){return(d&k)|(F&(~k))}function p(d,F,k){return(d^F^k)}function n(d,F,k){return(F^(d|(~k)))}function u(G,F,aa,Z,k,H,I){G=K(G,K(K(r(F,aa,Z),k),I));return K(L(G,H),F)}function f(G,F,aa,Z,k,H,I){G=K(G,K(K(q(F,aa,Z),k),I));return K(L(G,H),F)}function D(G,F,aa,Z,k,H,I){G=K(G,K(K(p(F,aa,Z),k),I));return K(L(G,H),F)}function t(G,F,aa,Z,k,H,I){G=K(G,K(K(n(F,aa,Z),k),I));return K(L(G,H),F)}function e(G){var Z;var F=G.length;var x=F+8;var k=(x-(x%64))/64;var I=(k+1)*16;var aa=Array(I-1);var d=0;var H=0;while(H<F){Z=(H-(H%4))/4;d=(H%4)*8;aa[Z]=(aa[Z]| (G.charCodeAt(H)<<d));H++}Z=(H-(H%4))/4;d=(H%4)*8;aa[Z]=aa[Z]|(128<<d);aa[I-2]=F<<3;aa[I-1]=F>>>29;return aa}function B(x){var k="",F="",G,d;for(d=0;d<=3;d++){G=(x>>>(d*8))&255;F="0"+G.toString(16);k=k+F.substr(F.length-2,2)}return k}function J(k){k=k.replace(/rn/g,"n");var d="";for(var F=0;F<k.length;F++){var x=k.charCodeAt(F);if(x<128){d+=String.fromCharCode(x)}else{if((x>127)&&(x<2048)){d+=String.fromCharCode((x>>6)|192);d+=String.fromCharCode((x&63)|128)}else{d+=String.fromCharCode((x>>12)|224);d+=String.fromCharCode(((x>>6)&63)|128);d+=String.fromCharCode((x&63)|128)}}}return d}var C=Array();var P,h,E,v,g,Y,X,W,V;var S=7,Q=12,N=17,M=22;var A=5,z=9,y=14,w=20;var o=4,m=11,l=16,j=23;var U=6,T=10,R=15,O=21;s=J(s);C=e(s);Y=1732584193;X=4023233417;W=2562383102;V=271733878;for(P=0;P<C.length;P+=16){h=Y;E=X;v=W;g=V;Y=u(Y,X,W,V,C[P+0],S,3614090360);V=u(V,Y,X,W,C[P+1],Q,3905402710);W=u(W,V,Y,X,C[P+2],N,606105819);X=u(X,W,V,Y,C[P+3],M,3250441966);Y=u(Y,X,W,V,C[P+4],S,4118548399);V=u(V,Y,X,W,C[P+5],Q,1200080426);W=u(W,V,Y,X,C[P+6],N,2821735955);X=u(X,W,V,Y,C[P+7],M,4249261313);Y=u(Y,X,W,V,C[P+8],S,1770035416);V=u(V,Y,X,W,C[P+9],Q,2336552879);W=u(W,V,Y,X,C[P+10],N,4294925233);X=u(X,W,V,Y,C[P+11],M,2304563134);Y=u(Y,X,W,V,C[P+12],S,1804603682);V=u(V,Y,X,W,C[P+13],Q,4254626195);W=u(W,V,Y,X,C[P+14],N,2792965006);X=u(X,W,V,Y,C[P+15],M,1236535329);Y=f(Y,X,W,V,C[P+1],A,4129170786);V=f(V,Y,X,W,C[P+6],z,3225465664);W=f(W,V,Y,X,C[P+11],y,643717713);X=f(X,W,V,Y,C[P+0],w,3921069994);Y=f(Y,X,W,V,C[P+5],A,3593408605);V=f(V,Y,X,W,C[P+10],z,38016083);W=f(W,V,Y,X,C[P+15],y,3634488961);X=f(X,W,V,Y,C[P+4],w,3889429448);Y=f(Y,X,W,V,C[P+9],A,568446438);V=f(V,Y,X,W,C[P+14],z,3275163606);W=f(W,V,Y,X,C[P+3],y,4107603335);X=f(X,W,V,Y,C[P+8],w,1163531501);Y=f(Y,X,W,V,C[P+13],A,2850285829);V=f(V,Y,X,W,C[P+2],z,4243563512);W=f(W,V,Y,X,C[P+7],y,1735328473);X=f(X,W,V,Y,C[P+12],w,2368359562);Y=D(Y,X,W,V,C[P+5],o,4294588738);V=D(V,Y,X,W,C[P+8],m,2272392833);W=D(W,V,Y,X,C[P+11],l,1839030562);X=D(X,W,V,Y,C[P+14],j,4259657740);Y=D(Y,X,W,V,C[P+1],o,2763975236);V=D(V,Y,X,W,C[P+4],m,1272893353);W=D(W,V,Y,X,C[P+7],l,4139469664);X=D(X,W,V,Y,C[P+10],j,3200236656);Y=D(Y,X,W,V,C[P+13],o,681279174);V=D(V,Y,X,W,C[P+0],m,3936430074);W=D(W,V,Y,X,C[P+3],l,3572445317);X=D(X,W,V,Y,C[P+6],j,76029189);Y=D(Y,X,W,V,C[P+9],o,3654602809);V=D(V,Y,X,W,C[P+12],m,3873151461);W=D(W,V,Y,X,C[P+15],l,530742520);X=D(X,W,V,Y,C[P+2],j,3299628645);Y=t(Y,X,W,V,C[P+0],U,4096336452);V=t(V,Y,X,W,C[P+7],T,1126891415);W=t(W,V,Y,X,C[P+14],R,2878612391);X=t(X,W,V,Y,C[P+5],O,4237533241);Y=t(Y,X,W,V,C[P+12],U,1700485571);V=t(V,Y,X,W,C[P+3],T,2399980690);W=t(W,V,Y,X,C[P+10],R,4293915773);X=t(X,W,V,Y,C[P+1],O,2240044497);Y=t(Y,X,W,V,C[P+8],U,1873313359);V=t(V,Y,X,W,C[P+15],T,4264355552);W=t(W,V,Y,X,C[P+6],R,2734768916);X=t(X,W,V,Y,C[P+13],O,1309151649);Y=t(Y,X,W,V,C[P+4],U,4149444226);V=t(V,Y,X,W,C[P+11],T,3174756917);W=t(W,V,Y,X,C[P+2],R,718787259);X=t(X,W,V,Y,C[P+9],O,3951481745);Y=K(Y,h);X=K(X,E);W=K(W,v);V=K(V,g)}var i=B(Y)+B(X)+B(W)+B(V);return i.toLowerCase()};
+        //$("#usrPwd").val(MD5($("#usrPwd").val()));
+        $("#usrPwd").val($("#ses_token_prev").val()+MD5($("#usrPwd").val())+$("#ses_token_end").val());
+});        
 </script>
 @include('layout.footer')
 <?php