X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Fsession.php;h=591cb1c4eea7cd076606943e592528ff1ecc8ae8;hp=268c2d4715fe818e0a2669a7c54652dc2ba04d3d;hb=ab82613b0100336c0966a742c986874ec1692672;hpb=b5912168d72ae511eb623c3d92540c82d31b93c5 diff --git a/inc/session.php b/inc/session.php index 268c2d4715..591cb1c4ee 100644 --- a/inc/session.php +++ b/inc/session.php @@ -10,9 +10,14 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Sitzungs-Management * * -------------------------------------------------------------------- * - * * + * $Revision:: $ * + * $Date:: $ * + * $Tag:: 0.2.1-FINAL $ * + * $Author:: $ * + * Needs to be in all Files and every File needs "svn propset * + * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * - * Copyright (c) 2003 - 2008 by Roland Haeder * + * Copyright (c) 2003 - 2009 by Roland Haeder * * For more information visit: http://www.mxchange.org * * * * This program is free software; you can redistribute it and/or modify * @@ -32,72 +37,41 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) -{ - $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; - require($INC); +if (!defined('__SECURITY')) { + die(); } -// Check if view.php nor click.php was called -// If not set variables to default -if (empty($CLICK)) $CLICK = 0; -if (empty($VIEW)) $VIEW = 0; +// Set session save path if set +if (getConfig('session_save_path') != '') { + // Please make sure this valid! + session_save_path(getConfig('session_save_path')); +} // END - if -// Skip updating of cookies when viewing a banner -if (($VIEW == 1) && ($_SERVER['PHP_SELF'])) return; +if (session_id() == '') { + // Start the session + session_start(); +} // END - if -// Start the session -@session_start(); -$PHPSESSID = @session_id(); +// Load language file(s) +loadLanguageFile(); -// Store language code in cookie -set_session("mx_lang", $mx_lang); +// Determine and set referal id +determineReferalId(); -// Check if refid is set -if ((!empty($_GET['user'])) && ($CLICK == 1) && ($_SERVER['PHP_SELF'] == "click.php")) { - // The variable user comes from the click-counter script click.php and we only accept this here - $GLOBALS['refid'] = bigintval($_GET['user']); -} +// Transfer userid from session and validate it +if (isSessionVariableSet('userid')) { + // Get it secured from session + setUserId(getSession('userid')); -if (!empty($_POST['refid'])) { - // Get referral id from variable refid (so I hope this makes my script more compatible to other scripts) - $GLOBALS['refid'] = SQL_ESCAPE(strip_tags($_POST['refid'])); -} elseif (!empty($_GET['refid'])) { - // Get referral id from variable refid (so I hope this makes my script more compatible to other scripts) - $GLOBALS['refid'] = SQL_ESCAPE(strip_tags($_GET['refid'])); -} elseif (!empty($_GET['ref'])) { - // Set refid=ref (the referral link uses such variable) - $GLOBALS['refid'] = SQL_ESCAPE(strip_tags($_GET['ref'])); -} elseif (!empty($_SESSION['refid'])) { - // Simply reset cookie - $GLOBALS['refid'] = bigintval($_SESSION['refid']); -} elseif (GET_EXT_VERSION("sql_patches") != "") { - // Set default refid as refid in URL - $GLOBALS['refid'] = $_CONFIG['def_refid']; -} else { - // No default ID when sql_patches is not installed - $GLOBALS['refid'] = 0; -} + // Is it valid? + if (!isMember()) { + // Then destroy the user id + destroyUserSession(); -// Set cookie when default refid > 0 -if (empty($_SESSION['refid']) || (!empty($GLOBALS['refid'])) || (($_SESSION['refid'] == "0") && ($_CONFIG['def_refid'] > 0))) { - // Set cookie - set_session("refid", $GLOBALS['refid']); -} + // Kill userid + setUserId(0); + } // END - if +} // END - if -// Test cookies if index.php or modules.php is loaded -if ((basename($_SERVER['PHP_SELF']) == "index.php") || (basename($_SERVER['PHP_SELF']) == "modules.php") || (mxchange_installing)) -{ - if (count($_SESSION) > 0) - { - // Cookies accepted! - define('__COOKIES', true); - } - else - { - // Cookies rejected! - define('__COOKIES', false); - } -} -// +// [EOF] ?>