103 lines
2.9 KiB
PHP
103 lines
2.9 KiB
PHP
|
<?php
|
||
|
|
ob_start();
|
||
|
|
|
||
|
|
# Require the needed files...
|
||
|
|
require_once('config.inc.php');
|
||
|
|
require_once(PATH_ADODB . 'adodb.inc.php');
|
||
|
|
require_once(PATH_CORE . 'auth.inc.php');
|
||
|
|
require_once(PATH_CORE . 'database.inc.php');
|
||
|
|
require_once(PATH_CORE . 'session.inc.php');
|
||
|
|
require_once(PATH_CORE . 'setup.inc.php');
|
||
|
|
require_once(PATH_CORE . 'vars.inc.php');
|
||
|
|
require_once(PATH_CORE . 'xml.inc.php');
|
||
|
|
|
||
|
|
# start the debugger
|
||
|
|
$C_debug = new CORE_debugger;
|
||
|
|
|
||
|
|
# remove conflicting s variable
|
||
|
|
if (isset($_GET['s']))
|
||
|
|
{
|
||
|
|
$_GET_s = $_GET['s'];
|
||
|
|
unset($_GET['s']);
|
||
|
|
}
|
||
|
|
else if( isset($_POST['s']))
|
||
|
|
{
|
||
|
|
$_POST_s = $_POST['s'];
|
||
|
|
unset($_POST['s']);
|
||
|
|
}
|
||
|
|
|
||
|
|
# get the vars...
|
||
|
|
$C_vars = new CORE_vars;
|
||
|
|
$VAR = $C_vars->f;
|
||
|
|
|
||
|
|
# initialize the site setup
|
||
|
|
$C_setup = new CORE_setup;
|
||
|
|
|
||
|
|
# initialize the session handler
|
||
|
|
$C_sess = new CORE_session;
|
||
|
|
|
||
|
|
# define the other session variables as constants
|
||
|
|
$C_sess->session_constant();
|
||
|
|
|
||
|
|
# update the session constants
|
||
|
|
$C_sess->session_constant_log();
|
||
|
|
|
||
|
|
# initialze the authentication handler
|
||
|
|
$force = false;
|
||
|
|
$C_auth = new CORE_auth ($force);
|
||
|
|
|
||
|
|
############################################################################
|
||
|
|
# Verify the User's Access
|
||
|
|
$authorized = false;
|
||
|
|
if(defined("SESS_LOGGED") && SESS_LOGGED == "1" && agile_check_auth ( _HTACCESS_ID ) )
|
||
|
|
$authorized = true;
|
||
|
|
|
||
|
|
############################################################################
|
||
|
|
## forward to login page:
|
||
|
|
if ( !$authorized )
|
||
|
|
{
|
||
|
|
header("Location: ".URL."?_page=account:login_cookie&_htaccess_id=" . _HTACCESS_ID. "&_next_page="._RETURN_URL);
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
### Reset the 's' var
|
||
|
|
if(isset($_POST_s))
|
||
|
|
{
|
||
|
|
$_POST['s'] = $_POST_s;
|
||
|
|
}
|
||
|
|
else if (isset($_GET_s))
|
||
|
|
{
|
||
|
|
$_GET['s'] = $_GET_s;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
##############################
|
||
|
|
## Check Authentication ##
|
||
|
|
##############################
|
||
|
|
function agile_check_auth($id)
|
||
|
|
{
|
||
|
|
### Check if user is a member of one of the authorized groups:
|
||
|
|
$db = &DB();
|
||
|
|
$sql = 'SELECT status,group_avail FROM ' . AGILE_DB_PREFIX . 'htaccess WHERE
|
||
|
|
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
||
|
|
status = ' . $db->qstr('1') . ' AND
|
||
|
|
id = ' . $db->qstr($id);
|
||
|
|
$result = $db->Execute($sql);
|
||
|
|
if($result->RecordCount() > 0)
|
||
|
|
{
|
||
|
|
global $C_auth;
|
||
|
|
@$arr = unserialize($result->fields['group_avail']);
|
||
|
|
for($i=0; $i<count($arr); $i++)
|
||
|
|
{
|
||
|
|
if($C_auth->auth_group_by_id($arr[$i]))
|
||
|
|
{
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
ob_end_flush();
|
||
|
|
?>
|