MRBS 1.12.2 等保2.0二级整改完整提交

包含：登录失败锁定、90天密码有效期、30分钟会话超时、
强制改密、登录审计日志、屏幕水印、企业背景图、
备案信息固定底部、favicon、登录页JS修复等全部改动

web/ajax/check_slot.php

@@ -0,0 +1,48 @@
+<?php
+declare(strict_types=1);
+namespace MRBS;
+
+use MRBS\Form\Form;
+
+
+// An Ajax function to check which of an array of time slots is invalid.  (We need to do
+// this server side because the client does not have sophisticated enough timezone
+// handling facilities)
+//
+// Input parameters:
+//    $id       the request id so that the client can match results to requests
+//    $slots    an array of slot times in seconds from the start of the calendar day
+//    $day
+//    $month
+//    $year
+//    $tz
+//
+//  Returns an array of slots which are invalid
+
+require '../defaultincludes.inc';
+
+// Check the CSRF token
+Form::checkToken();
+
+// Check the user is authorised for this page
+checkAuthorised(this_page());
+
+// Get the non-standard form variables ($day, $month and $year are standard)
+$id = get_form_var('id', 'string');
+$slots = get_form_var('slots', 'array');
+$tz = get_form_var('tz', 'string');
+
+$result = array('id' => $id, 'slots' => array());
+
+foreach ($slots as $s)
+{
+  if (is_invalid_datetime(0, 0, $s, $month, $day, $year, $tz))
+  {
+    $result['slots'][] = $s;
+  }
+}
+
+http_headers(array("Content-Type: application/json"));
+
+echo json_encode($result);
+