Commit 0467f982eddef0a83841da1702e3b8543ce55986

Authored by Michael Joseph
1 parent dae73eeb

added session handling and authorisation check


git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@142 c91229c3-7414-0410-bfa2-8a42b809f60b
Showing 1 changed file with 40 additions and 35 deletions
dashboard.php
@@ -31,43 +31,48 @@ require_once("$default->owl_fs_root/lib/visualpatterns/PatternTableSqlQuery.inc" @@ -31,43 +31,48 @@ require_once("$default->owl_fs_root/lib/visualpatterns/PatternTableSqlQuery.inc"
31 // page start 31 // page start
32 // ------------------------------- 32 // -------------------------------
33 33
34 -checkSession(); 34 +if (checkSession()) {
35 35
36 -// check if this page is authorised, ie. has come from control.php  
37 -if ($_SESSION["authorised"]) {  
38 - // create a page  
39 -  
40 - // logo  
41 - $img = new PatternImage("$default->owl_root_url/locale/$default->owl_lang/graphics/$default->logo");  
42 -  
43 - // build the top menu of links  
44 - $aTopMenuLinks = array(0=>generateControllerUrl("LOGOUT"));  
45 - $aTopMenuText = array(0=>"logout");  
46 - $oPatternTableLinks = new PatternTableLinks($aTopMenuLinks, $aTopMenuText, 3, 1);  
47 -  
48 - // build the central dashboard  
49 - /*  
50 - $aCentralPageColumns = array(0=>"name",1=>"parent",2=>"security");  
51 - $aColumnTypes = array(0=>1,1=>2,2=>1);  
52 - $oTableSqlQuery = & new PatternTableSqlQuery("Folders", $aCentralPageColumns, $aColumnTypes);  
53 - ($HTTP_GET_VARS["fStartIndex"]) ? $oTableSqlQuery->setStartIndex($HTTP_GET_VARS["fStartIndex"]) : $oTableSqlQuery->setStartIndex(0);  
54 - $oTableSqlQuery->setLinkType(1);  
55 - */  
56 -  
57 - /* get a page */  
58 - $tmp = new PatternMainPage();  
59 -  
60 - /* put the page together */  
61 - $tmp->setNorthWestPayload($img);  
62 - $tmp->setNorthPayload($oPatternTableLinks);  
63 - //$tmp->setCentralPayload($oTableSqlQuery);  
64 - $tmp->setFormAction("dashboard.php");  
65 - $tmp->render();  
66 - 36 + // check if this page is authorised, ie. has come from control.php
  37 + if ($_SESSION["authorised"]) {
  38 + // create a page
  39 +
  40 + // logo
  41 + $img = new PatternImage("$default->owl_root_url/locale/$default->owl_lang/graphics/$default->logo");
  42 +
  43 + // build the top menu of links
  44 + $aTopMenuLinks = array(0=>generateControllerUrl("logout"), 1=>generateControllerUrl("scratchPad"));
  45 + $aTopMenuText = array(0=>"logout", 1=>"scratchPad");
  46 + $oPatternTableLinks = new PatternTableLinks($aTopMenuLinks, $aTopMenuText, 3, 1);
  47 +
  48 + // build the central dashboard
  49 + /*
  50 + $aCentralPageColumns = array(0=>"name",1=>"parent",2=>"security");
  51 + $aColumnTypes = array(0=>1,1=>2,2=>1);
  52 + $oTableSqlQuery = & new PatternTableSqlQuery("Folders", $aCentralPageColumns, $aColumnTypes);
  53 + ($HTTP_GET_VARS["fStartIndex"]) ? $oTableSqlQuery->setStartIndex($HTTP_GET_VARS["fStartIndex"]) : $oTableSqlQuery->setStartIndex(0);
  54 + $oTableSqlQuery->setLinkType(1);
  55 + */
  56 +
  57 + /* get a page */
  58 + $tmp = new PatternMainPage();
  59 +
  60 + /* put the page together */
  61 + $tmp->setNorthWestPayload($img);
  62 + $tmp->setNorthPayload($oPatternTableLinks);
  63 + //$tmp->setCentralPayload($oTableSqlQuery);
  64 + $tmp->setFormAction("dashboard.php");
  65 + $tmp->render();
  66 +
  67 + } else {
  68 + // FIXME: redirect to no permission page
  69 + print "you do not have access to view this page! please go away, and come back when you do.<br>";
  70 + echo generateLink("logout") . "logout</a>";
  71 + }
67 } else { 72 } else {
68 - // FIXME: redirect to no permission page  
69 - print "you do not have access to view this page! please go away, and come back when you do.<br>";  
70 - echo generateLink("LOGOUT") . "logout</a>"; 73 + // no session, should have been redirected
  74 + echo "no session<br>";
  75 + print_r($_SESSION);
71 } 76 }
72 ?> 77 ?>
73 78