53 lines
2.1 KiB
PHP
53 lines
2.1 KiB
PHP
|
<?php
|
||
|
|
/**
|
||
|
|
* @version $Id: auth.php 6024 2006-12-18 22:30:07Z friesengeist $
|
||
|
|
* @package Joomla
|
||
|
|
* @copyright Copyright (C) 2005 Open Source Matters. All rights reserved.
|
||
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU/GPL, see LICENSE.php
|
||
|
|
* Joomla! is free software. This version may have been modified pursuant
|
||
|
|
* to the GNU General Public License, and as distributed it includes or
|
||
|
|
* is derivative of works licensed under the GNU General Public License or
|
||
|
|
* other free or open source software licenses.
|
||
|
|
* See COPYRIGHT.php for copyright notices and details.
|
||
|
|
*/
|
||
|
|
|
||
|
|
// no direct access
|
||
|
|
defined( '_VALID_MOS' ) or die( 'Restricted access' );
|
||
|
|
|
||
|
|
$basePath = dirname( __FILE__ );
|
||
|
|
require( $basePath . '/../../globals.php' );
|
||
|
|
|
||
|
|
// $basepath reintialization required as globals.php will kill initial when RGs Emulation `Off`
|
||
|
|
$basePath = dirname( __FILE__ );
|
||
|
|
require( $basePath . '/../../configuration.php' );
|
||
|
|
|
||
|
|
// SSL check - $http_host returns <live site url>:<port number if it is 443>
|
||
|
|
$http_host = explode(':', $_SERVER['HTTP_HOST'] );
|
||
|
|
if( (!empty( $_SERVER['HTTPS'] ) && strtolower( $_SERVER['HTTPS'] ) != 'off' || isset( $http_host[1] ) && $http_host[1] == 443) && substr( $mosConfig_live_site, 0, 8 ) != 'https://' ) {
|
||
|
|
$mosConfig_live_site = 'https://'.substr( $mosConfig_live_site, 7 );
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!defined( '_MOS_MAMBO_INCLUDED' )) {
|
||
|
|
$path = $basePath . '/../../includes/joomla.php';
|
||
|
|
require( $path );
|
||
|
|
}
|
||
|
|
|
||
|
|
session_name( md5( $mosConfig_live_site ) );
|
||
|
|
session_start();
|
||
|
|
// restore some session variables
|
||
|
|
if (!isset( $my )) {
|
||
|
|
$my = new mosUser( $database );
|
||
|
|
}
|
||
|
|
|
||
|
|
$my->id = intval( mosGetParam( $_SESSION, 'session_user_id', '' ) );
|
||
|
|
$my->username = strval( mosGetParam( $_SESSION, 'session_username', '' ) );
|
||
|
|
$my->usertype = strval( mosGetParam( $_SESSION, 'session_usertype', '' ) );
|
||
|
|
$my->gid = intval( mosGetParam( $_SESSION, 'session_gid', '' ) );
|
||
|
|
$session_id = strval( mosGetParam( $_SESSION, 'session_id', '' ) );
|
||
|
|
$logintime = strval( mosGetParam( $_SESSION, 'session_logintime', '' ) );
|
||
|
|
|
||
|
|
if ( $session_id != md5( $my->id.$my->username.$my->usertype.$logintime ) ) {
|
||
|
|
mosRedirect( 'index.php' );
|
||
|
|
die;
|
||
|
|
}
|
||
|
|
?>
|