$username .= " ("._ADMIN_SHORT.")";
} // END - if
} else {
- // Hmmm, logged in and no valid cookies???
+ // Hmmm, logged in and no valid userid?
$username = "<I>"._UNKNOWN."</I>";
+
+ // Destroy session
+ destroy_user_session();
+
+ // Kill userid
+ $GLOBALS['userid'] = 0;
}
// Free memory
SQL_FREERESULT($result);
} elseif (IS_ADMIN()) {
+ // Admin is there
$username = _ADMIN;
} else {
// He's a guest, hello there... ;-)
case "mem_only":
case "done":
// Construct module name
- define('__MODULE', sprintf("%sinc/modules/%s.php", PATH, $GLOBALS['module']));
+ define('__MODULE', sprintf("%sinc/modules/%s.php", PATH, SQL_ESCAPE($GLOBALS['module'])));
// Does the module exists on local file system?
if ((FILE_READABLE(__MODULE)) && (sizeof($FATAL) == 0)) {