login登录加密

login登录加密

//引用加密库
document.write("<script type="text/javascript" charset='utf-8' src="/com/lib/md5.js"></script>");
document.write("<script type="text/javascript" charset='utf-8' src="/com/lib/jsbn.js"></script>");
document.write("<script type="text/javascript" charset='utf-8' src="/com/lib/prng4.js"></script>");
document.write("<script type="text/javascript" charset='utf-8' src="/com/lib/rng.js"></script>");
document.write("<script type="text/javascript" charset='utf-8' src="/com/lib/rsa.js"></script>");// JavaScript Document
DelCookie("only_use_webrc");// 清除只使用WEB资源标记
DelCookie("webonly");// 清除不启动服务标记
DelCookie("isWebSvcLogout");// 清除使用WEB资源注销标记
DelCookie("is_reminded");// 清除过期提醒标记
Cookie.clearCookie();
Cookie.delCookie("need_ist_cscm");
var v &#Cookie("need_ist_cscm");//暂时不知道什么原因，这句不加就是清不掉need_ist_cscm
var g_documentComplete = 0;
var INST_COMP = 4;
var INST_MAC = 5;/* add for M6.6*/
//记录vpn是从哪里访问的
var hashIndex = location.href.lastIndexOf("#");
var sourceUrl = "";
if(hashIndex != -1 && location.href.length > (hashIndex + 1)) {sourceUrl = location.href.substr(hashIndex + 1);sourceUrl = decodeURIComponent(sourceUrl);
}
else {sourceUrl = location.href;
}
sourceUrl = place(/?.*/,""); //把url中的参数去掉，不需要
SetCookie("VpnLine", sourceUrl);var checkAttackResult = null;
var checkMITMAttack = false;
/*
if(IsIE()){checkMITMAttack = false;
}
*/
//禁用启用登录按钮
function disableSubBtn(state){var form = $ID("formLogin");if(form){for(var i=0,len = form.elements.length;i<len;i++){var el = form.elements[i];assert("debug",el.type);pe){el.disabled = state;}}}
}function loadedAction(){if(client.showHelpCenter == '1' && !$ID("helper")){addStyleLink("/com/css/helper.css");//加帮助链接var helpLink = window.language === 'zh_CN' ? '/com/help/' : '/com/help_en/';var helperStr = '<div class="link_bar" id="_link_bar"><a class="helper" href="' + helpLink + '" target="_blank">'+tr('帮助')+'</a></div>';append(document.body,helperStr);}var langEl = $ID("language");if(langEl){var sys_lang = String(window.navigator.language|| window.navigator.systemLanguage|| window.navigator.userLanguage|| window.navigator.browserLanguage).toLowerCase();//非中文环境不显示语言切换按钮if(sys_lang !== 'zh-cn'){langEl.style.display = "none";}else{langEl.style.display = "";if($ID("zh_CN") && $ID("en_US")){var zh_CN = $ID('zh_CN'),en_US = $ID('en_US');if(zh_CN && window.language === 'zh_CN'){veAttribute('href');zh_CN.className = 'zh_CN_disable';}if(en_US && window.language !== 'zh_CN'){veAttribute('href');en_US.className = 'en_US_disable';}}}}checkMITMAttack = typeof client.EnableMidAtkCheck!="undefined"?client.EnableMidAtkCheck=="1":false;//checkMITMAttack = true;if(checkMITMAttack){SetCookie("ignore_cscm","0");disableSubBtn(true);//禁用输入元素ateCscm(function(){checkAttackResult = g_CscmObj.CheckMITMAttack().toString();if(checkAttackResult!=null&&String()!="0"){//disableSubBtn(true);alert(tr("你访问的SSL VPN正遭受中间人攻击，将不能使用用户名/密码认证！"));}else{//检测到没有被攻击if(useProxy()){//同时启用中间人攻击与ie代理alert(tr("服务器启用中间人攻击检测，不允许使用IE代理登录")+tr('SSLVPN'));}else{//启用输入元素disableSubBtn(false);}}try{initPageState();}catch(e){//ssage);}});}else{initPageState();}
}
loadedAction.done = false;document.write("<script language="javascript" type="text/javascript" charset='utf-8' src="/com/64sys.js"></scr"+"ipt>");	//x64位支持addEvent(window, 'load', function () {if (Browser.is64 && Browser.isIE) {InitFor64('login');} else {loadedAction.done = true;loadedAction();}// Start add by hcz for M7.1 2016.01.05// 规避解决 win10 ie11浏览器下默认模板登录页面渲染多余输入框的问题,再次设置元素宽度,重排页面if ($ID("label_psw")) {$ID("label_psw").style.width = "100%";}// End add by hcz for M7.1 2016.01.05});/*M5.3EN*/
var doHide = (function(){lversion < window.TMLVER){return function(el){el = typeof(el) === 'string' ? ElementById(el) : el;if(el){el.className = 'hide';}}}else{return function(el){el = typeof(el) === 'string' ? ElementById(el) : el;if(el){el.style.display = 'none';}}}})(),doShow = (function(){lversion < window.TMLVER){return function(el){el = typeof(el) === 'string' ? ElementById(el) : el;if(el){el.className = '';}}}else{return function(el){el = typeof(el) === 'string' ? ElementById(el) : el;if(el){el.style.display = '';}}}})();
/*end M5.3EN*/function initPageState(){if(isWin()){var sangforTool = $ID("SangforTool");if(sangforTool && client.showSvpntool == "1"){doShow(sangforTool);}}if(isMac() && !$ID("MacSystem")){var ComLayer = $ID("ComLayer"),MacSystem,MacSysLink;if(ComLayer){if(ComLayer.tagName === "A"){MacSystem = ateElement('a');MacSysLink = MacSystem;MacSysLink.href = "javascript:onInstall(INST_MAC)";MacSysLink.innerHTML = tr("手动安装组件");}else{MacSystem = ateElement('li');MacSysLink = MacSystem;MacSysLink.innerHTML = '<a href="javascript:onInstall(INST_MAC)">'+tr('手动安装组件')+'</a>';}MacSysLink.id = "MacSystem";MacSysLink.className = "hide";ComLayer.parentNode.insertBefore(MacSystem, ComLayer);client.N_MACSYSTEM = "MacSystem";}}if(Browser.isIpad){	//M5.2 20110613 luyivar iPadClient = $ID("iPadClient"),keyTools =$ID("key_tools"),iPadClientLink;//M7.6.3 20180402 zllif(keyTools){doHide(keyTools);}if(iPadClient){if(iPadClient.tagName === "A"){iPadClientLink = iPadClient;}else{iPadClientLink = ElementsByTagName("A")[0];}if(iPadClientLink){iPadClientLink.innerHTML = tr("使用客户端，获得更好体验");//iPadClientLink.href = "=1&mt=8";iPadClientLink.href = "/por/ipad.csp";}doShow(iPadClient);}if(client.showHelpCenter == "1" && $ID('helper')){doHide($ID('helper'));}}else{if(client.showHelpCenter == "1" && $ID('helper')){doShow($ID('helper'));}}if(DKEY_READY_INSTALL_CSCM == GetCookie("UsingDkey")){CertLogin();}/* check Anonymous login */if(client.EnableAnonymous == '1' && client.denyNormalAccess == '1'){if(errorMsg != ''){alert(errorMsg);window.close();}$ID(client.N_INPUTNAME).value = t["ANONYMOUS_USER"];$ID(client.N_INPUTPASS).value = "";$ID(client.N_LOGFORM).submit();}checkAnonymousLogin();/* initialize layout */SetCookie("g_LoginPage","login_psw");SetCookie("VisitTimes","0");SetCookie("haveLogin", "0");Cookie.setCookie("auto_login_count",0);if(errorMsg != "" && errorMsg.indexOf(tr("尝试暴破登录，启用图形校验码"))==-1){showMsg("error", errorMsg);}else{hideMsg();}var doDisplay = (client.N_HIDEBUTTONS != "true" || GetCookie("g_LoginPage") == "logout")? doShow : doHide;doDisplay(client.N_SIGNINBYCERT);	//show cert login buttonvar dkeyBnt = $ID(client.N_SIGNINBYDKEY);if(!isWin()){//跨平台不支dkey登录doHide(dkeyBnt);}else{doDisplay(dkeyBnt);	//show dkey login button}if($ID("loginTypes")){doDisplay('loginTypes');}// 忘记密码if (client.EnableResetPsw == "1") {doShow("resetpsw");}else {doHide("resetpsw");}if(client.EnableRandCode == '1'){$ID(client.N_INPUTRAND).getElementsByTagName('img')[0].src = '/por/rand_code.csp';doShow(client.N_INPUTRAND);}else{doHide(client.N_INPUTRAND);}if(client.showSetup == "1" && !Browser.isIpad){if(isMac()){doShow(client.N_MACSYSTEM);doHide(client.N_COMPLAYER);}else{doShow(client.N_COMPLAYER);doHide(client.N_MACSYSTEM);}}else{doHide(client.N_COMPLAYER);doHide(client.N_MACSYSTEM);}if(isWin()){if(client.EnableDKeyVer != "0"){doShow(client.N_DKEYTIPS);}else{doHide(client.N_DKEYTIPS);}}g_documentComplete = 1;//M60易用性改进addEvent($ID(client.N_INPUTPASS),'focus',function(){this.select();});if($ID(client.N_INPUTNAME) != null){try{ $ID(client.N_INPUTNAME).focus(); }catch(ex){}}
}//切换图形验证码
function ChangeRandCode()
{var objImg = $ID(client.N_RANDCODEIMG);objImg.src='/por/rand_code.csp?rnd='+Math.random();
}//这个方法点击证书登录时触发
function CertLogin(){SetCookie("UsingDkey","0");self.location.href = 'login_cert.csp';
}function checkAnonymousLogin()
{try{var nodeInput = $ID(client.N_INPUTNAME);var nodeButton = $ID(client.N_BUTTONNAME);var certname = GetCookie("CERT_USERNAME");if(client.EnableAnonymous == "1" && (certname == "SangforDefaultValue" || certname == "0" || certname == "SinforDefaultValue") ){var anonyButton = $ID(client.N_ANONYBUTTONNAME);if(anonyButton){//M60之后匿名按钮用新的按钮anonyButton.style.display = '';}else{//M60以下版本的逻辑，匿名按钮与登录按钮是同一个nodeButton.innerHTML = (nodeInput.value.length > 0)?t['NORMAL_LOGIN']:t['ANONYMOUS_LOGIN'];}}else {}}catch(e){/*do nothing*/}
}function closeSoftKb()
{if(client.EnableKeypad == "1")closekeyboard();
}//panwc added for 4.2 anonymous login 2009.04.14 -->
function onInputNameFocus()
{if(client.EnableAnonymous == "1")$ID(client.N_BUTTONNAME).innerHTML = t['NORMAL_LOGIN'];
}function onButtonMouseMove()
{checkAnonymousLogin();
}function onInputNameBlur()
{checkAnonymousLogin();
}function onInstall(toInstall)
{var parma =  "width=400,height=160,top=100,left=100,resizable=yes,location=no,menubar=no,scrollbars=no,status=no";window.open("../com/setup.html?" + toInstall,"install", parma);
}function HandleDkey()
{var ua = LowerCase();if (ua.indexOf("edge") >= 0) {alert(tr("Edge浏览器暂不支持USB-Key登录，请更换其他浏览器"));} else {window.location = "dkey_portal.csp";}
}function HelpCenter()
{var help_link = window.language === 'zh_CN' ? '../com/help/' : '../com/help_en/';window.open(help_link);
}if(Browser.isIpad || (!Browser.isIE && /x64/.test(LowerCase()))){SetCookie("webonly","1");SetCookie("allowlogin","1");
}//将登录按钮原submit类型改为button类型
function nomalLogin()
{if(formSubmit(false)){var form = $ID("formLogin");if(form){$ID(client.N_LOGFORM).submit();}}
}//新增匿名登录
function anonymousLogin()
{if(formSubmit(true)){var form = $ID("formLogin");if(form){$ID(client.N_LOGFORM).submit();}}
}//M6.8增加对密码RSA加密
function doEncrypt(str){var rsa;rsa = new RSAKey();var exp = typeof(client.EncryptExp) !== 'undefined' ? client.EncryptExp : "65537";rsa.setPublic(client.EncryptKey, parseInt(exp).toString(16));var res = pt(str);if (res) {return res;}return "";
}//m60开始新增isAnonymous，支持匿名按钮独立出来
function formSubmit(isAnonymous)
{var progid = G_DLLS[ID_CSCM][ID_PROGID];if(!g_CscmObj){g_CscmObj = CreateObject(progid);}/* //6.9以前版本升级上来后, 不存在SetSvpnStartTime接口, 会报脚本错误if(g_CscmObj != null && isWin())//windows才需要统计时间{g_CscmObj.SetSvpnStartTime();}*/if(typeof(g_documentComplete) == "undefined" || g_documentComplete == 0)return false;if(checkReLoginEx()) return  false;var usrname = $ID(client.N_INPUTNAME).im();$ID(client.N_INPUTNAME).value = usrname;var usrpsw = $ID(client.N_INPUTPASS).value;var isEncrypt = 1;if($ID(client.N_BUTTONNAME).innerHTML == t["ANONYMOUS_LOGIN"]){isAnonymous = true;}if(typeof(client.EncryptKey) == "undefined" || !client.EncryptKey || isAnonymous){isEncrypt = 0;	//密钥不存在(兼容老模板)或匿名登录时, 不加密}else{usrpsw = doEncrypt(usrpsw);}var url = $ID("formLogin").action;if(url.indexOf("?") == -1){$ID("formLogin").action = url + "?encrypt="+isEncrypt;}else{$ID("formLogin").action = url + "&encrypt="+isEncrypt;}var isValidSign = true;if(isAnonymous){$ID(client.N_INPUTNAME).value = t["ANONYMOUS_USER"];$ID(client.N_INPUTPASS).value = "";$ID("randcode").value = "";return isValidSign;}//panwc added endif(usrname == ""){showMsg("error",t["NEED_USERNAME"]);$ID(client.N_INPUTNAME).focus();isValidSign = false;}if(mbStringLength(usrname) > 72){showMsg("error",t["INVALID_USER"]);$ID(client.N_INPUTNAME).focus();isValidSign = false;}var rand = "";if(client.EnableRandCode == '1'){rand=$ID("randcode").value;if(rand == ""){showMsg("error",t["NEED_RANDCODE"]);$ID("randcode").focus();isValidSign = false;}}if(isValidSign==true){$ID(client.N_BUTTONNAME).disabled = true;showMsg("load",t['LOGING']);}//checkAttackResult = 0;if(checkMITMAttack&&isValidSign){if(checkAttackResult=="0"){//alert("rand:"+rand);var result =  g_CscmObj.GetMITEMAttackResult(usrname,LowerCase()).toString();//alert("result:"+result);$ID("txtMITEMAttack").value = result;var randcodeEl = $ID("randcode");randcodeEl.id = "_randcode";randcodeEl.name = "_randcode";randcodeEl.value = "";var hiddenCode = createHidden("svpn_rand_code");hiddenCode.value = hex_String().toLowerCase());var parentEl = $ID("txtMITEMAttack").parentNode;parentEl.appendChild(hiddenCode);$ID(client.N_INPUTPASS).value = "";//清空密码}else{alert(tr("没有通过安全检查,不能登录"));isValidSign = false;}}else if(isValidSign){//最后填充加密后的值,避免重复加密$ID(client.N_INPUTPASS).value = usrpsw;}return isValidSign;
}

转载于:.html