Initial Commit of AgileBill Open Source
This commit is contained in:
103
cookie.index.php
Normal file
103
cookie.index.php
Normal file
@@ -0,0 +1,103 @@
|
||||
<?php
|
||||
ob_start();
|
||||
|
||||
# Require the needed files...
|
||||
require_once('config.inc.php');
|
||||
require_once(PATH_ADODB . 'adodb.inc.php');
|
||||
require_once(PATH_CORE . 'auth.inc.php');
|
||||
require_once(PATH_CORE . 'database.inc.php');
|
||||
require_once(PATH_CORE . 'session.inc.php');
|
||||
require_once(PATH_CORE . 'setup.inc.php');
|
||||
require_once(PATH_CORE . 'vars.inc.php');
|
||||
require_once(PATH_CORE . 'xml.inc.php');
|
||||
|
||||
# start the debugger
|
||||
$C_debug = new CORE_debugger;
|
||||
|
||||
# remove conflicting s variable
|
||||
if (isset($_GET['s']))
|
||||
{
|
||||
$_GET_s = $_GET['s'];
|
||||
unset($_GET['s']);
|
||||
}
|
||||
else if( isset($_POST['s']))
|
||||
{
|
||||
$_POST_s = $_POST['s'];
|
||||
unset($_POST['s']);
|
||||
}
|
||||
|
||||
# get the vars...
|
||||
$C_vars = new CORE_vars;
|
||||
$VAR = $C_vars->f;
|
||||
|
||||
# initialize the site setup
|
||||
$C_setup = new CORE_setup;
|
||||
|
||||
# initialize the session handler
|
||||
$C_sess = new CORE_session;
|
||||
|
||||
# define the other session variables as constants
|
||||
$C_sess->session_constant();
|
||||
|
||||
# update the session constants
|
||||
$C_sess->session_constant_log();
|
||||
|
||||
# initialze the authentication handler
|
||||
$force = false;
|
||||
$C_auth = new CORE_auth ($force);
|
||||
|
||||
############################################################################
|
||||
# Verify the User's Access
|
||||
$authorized = false;
|
||||
if(defined("SESS_LOGGED") && SESS_LOGGED == "1" && agile_check_auth ( _HTACCESS_ID ) )
|
||||
$authorized = true;
|
||||
|
||||
############################################################################
|
||||
## forward to login page:
|
||||
if ( !$authorized )
|
||||
{
|
||||
header("Location: ".URL."?_page=account:login_cookie&_htaccess_id=" . _HTACCESS_ID. "&_next_page="._RETURN_URL);
|
||||
exit();
|
||||
}
|
||||
|
||||
|
||||
### Reset the 's' var
|
||||
if(isset($_POST_s))
|
||||
{
|
||||
$_POST['s'] = $_POST_s;
|
||||
}
|
||||
else if (isset($_GET_s))
|
||||
{
|
||||
$_GET['s'] = $_GET_s;
|
||||
}
|
||||
|
||||
|
||||
##############################
|
||||
## Check Authentication ##
|
||||
##############################
|
||||
function agile_check_auth($id)
|
||||
{
|
||||
### Check if user is a member of one of the authorized groups:
|
||||
$db = &DB();
|
||||
$sql = 'SELECT status,group_avail FROM ' . AGILE_DB_PREFIX . 'htaccess WHERE
|
||||
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
||||
status = ' . $db->qstr('1') . ' AND
|
||||
id = ' . $db->qstr($id);
|
||||
$result = $db->Execute($sql);
|
||||
if($result->RecordCount() > 0)
|
||||
{
|
||||
global $C_auth;
|
||||
@$arr = unserialize($result->fields['group_avail']);
|
||||
for($i=0; $i<count($arr); $i++)
|
||||
{
|
||||
if($C_auth->auth_group_by_id($arr[$i]))
|
||||
{
|
||||
return true;
|
||||
}
|
||||
}
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
ob_end_flush();
|
||||
?>
|
Reference in New Issue
Block a user