" .
dbi_error () . "\n";
exit;
}
// global settings have not been loaded yet, so check for public_access now
$res = dbi_query ( "SELECT cal_value FROM webcal_config " .
"WHERE cal_setting = 'public_access'" );
$pub_acc_enabled = false;
if ( $res ) {
if ( $row = dbi_fetch_row ( $res ) ) {
if ( $row[0] == "Y" )
$pub_acc_enabled = true;
}
dbi_free_result ( $res );
}
if ( $pub_acc_enabled ) {
$res = dbi_query ( "SELECT cal_value FROM webcal_config " .
"WHERE cal_setting = 'public_access_can_add'" );
if ( $res ) {
if ( $row = dbi_fetch_row ( $res ) ) {
$public_access_can_add = $row[0];
}
dbi_free_result ( $res );
}
}
// Debugging stuff :-)
//echo "pub_acc_enabled = " . ( $pub_acc_enabled ? "true" : "false" ) . "
";
//echo "session_not_found = " . ( $session_not_found ? "true" : "false" ) . "
";
//echo "use_http_auth = " . ( $use_http_auth ? "true" : "false" ) . "
";
//echo "PHP_AUTH_USER = $PHP_AUTH_USER
";
//echo "login = $login
";
if ( empty ( $PHP_SELF ) )
$PHP_SELF = $_SERVER["PHP_SELF"];
if ( empty ( $login_url ) )
$login_url = "login.php";
if ( strstr ( $login_url, "?" ) )
$login_url .= "&";
else
$login_url .= "?";
if ( ! empty ( $login_return_path ) )
$login_url .= "return_path=$login_return_path";
if ( $pub_acc_enabled && $session_not_found ) {
$login = "__public__";
$is_admin = false;
$lastname = "";
$firstname = "";
$fullname = "Public Access"; // Will be translated after translation is loaded
$user_email = "";
} else if ( ! $pub_acc_enabled && $session_not_found && ! $use_http_auth ) {
do_redirect ( $login_url );
exit;
}
if ( empty ( $login ) && $use_http_auth ) {
if ( strstr ( $PHP_SELF, "login.php" ) ) {
// ignore since login.php will redirect to index.php
} else {
send_http_login ();
}
} else if ( ! empty ( $login ) ) {
// they are already logged in ($login is set in validate.php)
if ( strstr ( $PHP_SELF, "login.php" ) ) {
// ignore since login.php will redirect to index.php
} else if ( $login == "__public__" ) {
$is_admin = false;
$lastname = "";
$firstname = "";
$fullname = "Public Access";
$user_email = "";
} else {
user_load_variables ( $login, "login_" );
if ( ! empty ( $login_login ) ) {
$is_admin = ( $login_is_admin == "Y" ? true : false );
$is_moderator = ( $login_is_moderator == "Y" ? true : false );
$lastname = $login_lastname;
$firstname = $login_firstname;
$fullname = $login_fullname;
$user_email = $login_email;
} else {
// Invalid login
if ( $use_http_auth ) {
send_http_login ();
} else {
// This shouldn't happen since login should be validated in validate.php
// If it does happen, it means we received an invalid login cookie.
//echo "Error getting user info for login \"$login\".";
do_redirect ( $login_url . "&error=Invalid+session+found." );
}
}
}
}
//else if ( ! $single_user ) {
// echo "Error(3)! no login info found: " . dbi_error () . "SQL: $sql";
// exit;
//}
// If they are accessing using the public login, restrict them from using
// certain pages.
$not_auth = false;
if ( $login == "__public__" ) {
if ( strstr ( $PHP_SELF, "views.php" ) ||
strstr ( $PHP_SELF, "views_edit_handler.php" ) ||
strstr ( $PHP_SELF, "category.php" ) ||
strstr ( $PHP_SELF, "category_handler.php" ) ||
strstr ( $PHP_SELF, "admin.php" ) ||
strstr ( $PHP_SELF, "admin_handler.php" ) ||
strstr ( $PHP_SELF, "groups.php" ) ||
strstr ( $PHP_SELF, "group_edit_handler.php" ) ||
strstr ( $PHP_SELF, "pref.php" ) ||
strstr ( $PHP_SELF, "pref_handler.php" ) ||
strstr ( $PHP_SELF, "edit_user.php" ) ||
strstr ( $PHP_SELF, "edit_user_handler.php" ) ||
strstr ( $PHP_SELF, "approve_entry.php" ) ||
strstr ( $PHP_SELF, "reject_entry.php" ) ||
strstr ( $PHP_SELF, "del_entry.php" ) ||
strstr ( $PHP_SELF, "set_entry_cat.php" ) ||
strstr ( $PHP_SELF, "list_unapproved.php" ) ||
strstr ( $PHP_SELF, "layers.php" ) ||
strstr ( $PHP_SELF, "layer_toggle.php" ) ) {
$not_auth = true;
}
if ( $public_access_can_add != 'Y' ) { // do not allow add
if ( strstr ( $PHP_SELF, "edit_entry.php" ) ||
strstr ( $PHP_SELF, "edit_entry_handler.php" ) ||
strstr ( $PHP_SELF, "import.php" ) ) {
$not_auth = true;
}
}
}
if ( empty ( $is_admin ) || ! $is_admin ) {
if ( strstr ( $PHP_SELF, "admin.php" ) ||
strstr ( $PHP_SELF, "admin_handler.php" ) ||
strstr ( $PHP_SELF, "groups.php" ) ||
strstr ( $PHP_SELF, "group_edit.php" ) ||
strstr ( $PHP_SELF, "group_edit_handler.php" ) ||
strstr ( $PHP_SELF, "edit_template.php" ) ||
strstr ( $PHP_SELF, "activity_log.php" ) ) {
$not_auth = true;
}
}
// restrict access if calendar is read-only
if ( $readonly == "Y" ) {
if ( strstr ( $PHP_SELF, "views.php" ) ||
strstr ( $PHP_SELF, "views_edit_handler.php" ) ||
strstr ( $PHP_SELF, "category.php" ) ||
strstr ( $PHP_SELF, "category_handler.php" ) ||
strstr ( $PHP_SELF, "groups.php" ) ||
strstr ( $PHP_SELF, "group_edit_handler.php" ) ||
strstr ( $PHP_SELF, "pref.php" ) ||
strstr ( $PHP_SELF, "pref_handler.php" ) ) {
$not_auth = true;
}
}
// We can't call translate() here because translate.php gets loaded
// after this include file :-(
// So, instead of an error message that may be in the wrong language,
// just redirect to some other page.
if ( $not_auth ) {
/*
echo "
" . translate($application_name) . " " .
translate("Error") . "\n";
echo "" . translate ( "Error" ) . "
\n" .
translate ( "You are not authorized" );
*/
do_redirect ( "week.php" );
}
?>