--- misc/xenconsole/index.php	2013/07/18 13:11:54	2019
+++ misc/xenconsole/index.php	2013/07/19 08:06:00	2020
@@ -60,6 +60,18 @@
 var menu = 0;
 var menu_uuid = '';
 
+var user = "";
+var password = "";
+var loggedin = false;
+
+function isLoggedIn() {
+	if (loggedin == false) {
+		alert("You need to login to perform this operation");
+	}
+	return loggedin;
+}
+
+
 $(document).ready( function() {
 	$("#menu").hide();
 	setInterval(refreshData, 60000);	
@@ -103,13 +115,51 @@
 		var uuid = $(this).attr('uuid');
 		cdSelectorDialog(uuid);
 	});
+	$('#loginlink').click( function(event) {
+		loginDialog();
+	});
 
 	$(document).click( function(event) {
 		closeMenu();
 	});
+	$('#dialog-login').keypress(function(e) {
+    	if (e.keyCode == $.ui.keyCode.ENTER) {
+			loginDialogSubmit();
+    	}
+	});
 });
 
+function loginDialog() {
+	$('#dialog-login').dialog({
+		modal: true,
+		height: 210,
+		width: 325,
+		buttons: {
+			Login: loginDialogSubmit
+		}
+	});
+}
+function loginDialogSubmit() {
+	var params = $('#loginform').serialize();
+
+	$.get('login.php?' + params, function(data) {
+		if (data == "OK") {
+			loggedin = true;
+			username = $('#username').val();
+			password = $('#password').val();
+
+			$('#login').html("Logged in as <i>" + username + "</i>");
+		} else {
+			alert(data);
+		}
+		$("#dialog-login").dialog( "close" );
+	});
+}
+
 function cdSelectorDialog(uuid) {
+	if (isLoggedIn() == false)
+		return;
+
 	$('#cdselector').html('');
 	$('#cdselector').load( 'getisolist.php' );
 	var cddata;
@@ -256,10 +306,9 @@
 function doAction(action, uuid, vm) {
 	var val="";
 
-	var key = prompt("Key");
-	if (key == "" || key == null) {
+	if (isLoggedIn() == false)
 		return;
-	}
+
 	document.body.style.cursor = 'wait';
 	$('#vm_' + vm).find('.state').css("background-image", "url('gfx/vps_topyellow.png')");
 
@@ -277,7 +326,7 @@
 		}
 	}
 
-	var url = "action.php?action=" + action + "&uuid=" + uuid + "&key=" + key + "&val=" + val;;
+	var url = "action.php?action=" + action + "&uuid=" + uuid + "&key=" + password + "&val=" + val;;
 	var response = $.get(url, function(data) {
 		if (data != 'OK') {
 			alert(data);
@@ -289,12 +338,11 @@
 }
 
 function cdAction(action, vbd,vdi) {
-	var key = prompt("Key");
-	if (key == "" || key == null) {
+	if (isLoggedIn() == false)
 		return;
-	}
+
 	document.body.style.cursor = 'wait';
-	var url = "cdaction.php?action=" + action + "&VBD=" + vbd + "&key=" + key + "&VDI=" + vdi;
+	var url = "cdaction.php?action=" + action + "&VBD=" + vbd + "&key=" + password + "&VDI=" + vdi;
 	var response = $.get(url, function(data) {
 		if (data != 'OK') {
 			alert(data);
@@ -308,10 +356,9 @@
 	if (url == '')
 		return;
 
-	var key = prompt("Key");
-	if (key == "" || key == null) {
+	if (isLoggedIn() == false)
 		return;
-	}
+
 	var url = "console.php?url=" + url + "&session=" + session + "&key=" + key + "&name=" + name;
 
 	//window.location = url;
@@ -365,7 +412,10 @@
 	<td colspan='4' class='small' align='right'><?php echo $namelabel . " / " . $xenversion;?><br><?php echo $license;?></td>
 </tr>
 <tr>
-<td width='150'></td>
+<td width='150'>
+	<span id="login" class='small'><i>Not <a href="#" id="loginlink">logged in</a></i>
+	</span>
+</td>
 <td width='150'></td>
 	<td width='150' align='right' class='small'><img src='gfx/icon-cpu.png'>
 		<img id='server_cpu_usage' src='usagebar.php?usage=12' width='102' height='16' title='static dummy data'><div id='server_cpu_usage_txt'>12%</div></td>
@@ -485,6 +535,21 @@
 
 <div style="display: none;">
 
+<div id="dialog-login" title="Login">
+	<form id="loginform">
+	<table border="0">
+		<tr>
+			<td>Username: </td>
+			<td><input type="text" id="username" name="username"></td>
+		<tr>
+		<tr>
+			<td>Password: </td>
+			<td><input type="password" id="password" name="password"></td>
+		</tr>
+	</table>
+	</form>
+</div>
+
 <div id="dialog-cd" title="Select CD">
 
 	<table border=0>