2011-04-04 15:16:10 +00:00
|
|
|
|
<?php
|
|
|
|
|
|
|
|
|
|
|
|
//FICHERO DE IDIOMAS
|
|
|
|
|
|
define("LOCALE", "idiomas/");
|
|
|
|
|
|
define("LOCALESET", "sp/");
|
|
|
|
|
|
include LOCALE.LOCALESET."lenguaje.php";
|
|
|
|
|
|
|
|
|
|
|
|
include("functions.php");
|
|
|
|
|
|
include_once("Objects/Usuario.php");
|
|
|
|
|
|
|
|
|
|
|
|
//si es necesario cambiar la config. del php.ini desde tu script
|
|
|
|
|
|
ini_set("session.use_only_cookies","1");
|
|
|
|
|
|
ini_set("session.use_trans_sid","0");
|
|
|
|
|
|
|
|
|
|
|
|
//Nos conectamos a la base de datos
|
|
|
|
|
|
if ($link=conectar()){
|
|
|
|
|
|
|
|
|
|
|
|
//header("Location: index.php?errorusuario=si");
|
|
|
|
|
|
//Obtenemos los campos
|
|
|
|
|
|
$login = stripinput($_POST['usuario']);
|
|
|
|
|
|
$password = stripinput($_POST['password']);
|
|
|
|
|
|
$pass = md5($password);
|
|
|
|
|
|
|
|
|
|
|
|
//ejecutamos una consulta para comprobar si existe el nombre
|
|
|
|
|
|
$result = mysql_query("select * from usuarios where email='$login' and tipo='usuario' and password='$pass';", $link);
|
|
|
|
|
|
|
|
|
|
|
|
//Si es cero, no existe el nombre
|
|
|
|
|
|
$salida = 0;
|
|
|
|
|
|
while($row = mysql_fetch_array($result)){
|
|
|
|
|
|
$salida = $salida + 1;
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
if ($salida == 0) {
|
|
|
|
|
|
header("Location: index.php?errorusuario=si");
|
|
|
|
|
|
} else {
|
|
|
|
|
|
//Cambiamos la variable login de session
|
|
|
|
|
|
$info = mysql_query("select * from usuarios where email='$login' and password='$pass';", $link);
|
|
|
|
|
|
$row = mysql_fetch_array($info);
|
|
|
|
|
|
|
|
|
|
|
|
//Permisos del rol
|
|
|
|
|
|
$rol = $row["rol"];
|
|
|
|
|
|
$info_rol = mysql_query("select permisos from rol where oid='$rol';", $link);
|
|
|
|
|
|
$row_rol = mysql_fetch_array($info_rol);
|
|
|
|
|
|
|
|
|
|
|
|
//usuario y contrase<73>a v<>lidos
|
|
|
|
|
|
//asigno un nombre a la sesi<73>n para poder guardar diferentes datos
|
|
|
|
|
|
session_name("loginUsuario");
|
|
|
|
|
|
// inicio la sesi<73>n
|
|
|
|
|
|
session_start();
|
|
|
|
|
|
|
|
|
|
|
|
$_SESSION["login"] = $login;
|
|
|
|
|
|
$_SESSION["password"] = $password;
|
|
|
|
|
|
$_SESSION["rol"] = $row["rol"];
|
|
|
|
|
|
$_SESSION["oid"] = $row["oid"];
|
|
|
|
|
|
$_SESSION["nombre"] = $row["nombre"];
|
|
|
|
|
|
$_SESSION["descripcion"] = $row["descripcion"];
|
|
|
|
|
|
$_SESSION["permisos"] = $row["permisos"];
|
|
|
|
|
|
$_SESSION["idioma"] = $row["idioma"];
|
|
|
|
|
|
$_SESSION["permisos_rol"] = $row_rol["permisos"];
|
|
|
|
|
|
$_SESSION["duracion"] = constante("sesion");
|
|
|
|
|
|
|
|
|
|
|
|
$usuario = new Usuario($login);
|
|
|
|
|
|
$_SESSION["usuario"] = $usuario;
|
|
|
|
|
|
$_SESSION["ultimaBusquedaPedidos"] = null;
|
|
|
|
|
|
$_SESSION["ultimaBusquedaCandidatos"] = null;
|
|
|
|
|
|
$_SESSION["ultimaBusquedaEmpleados"] = null;
|
|
|
|
|
|
|
|
|
|
|
|
session_set_cookie_params(0, "/", $HTTP_SERVER_VARS["HTTP_HOST"], 0);
|
|
|
|
|
|
//cambiamos la duraci<63>n a la cookie de la sesi<73>n
|
|
|
|
|
|
$_SESSION["autentificado"]= "SI";
|
|
|
|
|
|
//defino la sesi<73>n que demuestra que el usuario est<73> autorizado
|
|
|
|
|
|
$_SESSION["ultimoAcceso"]= date("Y-n-j H:i:s");
|
|
|
|
|
|
|
|
|
|
|
|
header ("Location: aplicacion.php");
|
|
|
|
|
|
}
|
|
|
|
|
|
}else {
|
|
|
|
|
|
//si no existe le mando otra vez a la portada
|
2011-05-19 08:46:58 +00:00
|
|
|
|
// header("Location: index.php?errorusuario=si");
|
2011-04-04 15:16:10 +00:00
|
|
|
|
}
|
|
|
|
|
|
?>
|
