| ";
+ $exp = time();
+ $query = "DELETE FROM sessions WHERE EXPIRE < $exp";
+ mysql_query($query);
+ if (($data['STV'] != '') && ($data['login'] != 'yes') && ($data['logout'] == '')) {
+ ContinueSession($data);
+ }
+ else {
+ SetNewSession($data);
+ }
+ $data['uid'] = GetUid($data);
+ $data['user_type'] = GetGid($data);
+ }
+
+function AccessAllowed($user_id, $section_name) {
+ $query = "SELECT IF (EXISTS(SELECT aarum.user_id FROM admin_area_role_user_map aarum
+ INNER JOIN users u ON aarum.user_id = u.id
+ INNER JOIN admin_areas aa ON aa.admin_area_id = aarum.admin_area_id
+ INNER JOIN admin_roles ar ON ar.admin_role_id = aarum.admin_role_id
+ WHERE ar.admin_role = 'admin' AND u.id = $user_id AND aa.admin_area = '$section_name'
+ GROUP BY u.id), 1, 0);";
+ $result = mysql_query($query);
+
+ if (mysql_result($result, 0, 0) == 1) {
+ return true;
+ }
+ return false;
+}
+
+function CheckAccess(&$data, $section) {
+ if (!AccessAllowed($data[uid], $section)) {
+ $data[tpl]->define(array(index=>"index/index.html"));
+ $data[bdy] .= " Sorry, you do not have access to this area. ";
+ $data[tpl]->assign(BODY,$data[bdy]);
+ $data[tpl]->parse(INDEX, array("index"));
+ $data[tpl]->FastPrint("INDEX");
+ exit();
+ }
+}
+
+function AccessDenied(&$data) {
+ $data[idletime] = "600";
+ $data[bdy] = ">![](\"/images/title.gif\") | | ";
+ $exp = time();
+ $query = "DELETE FROM sessions WHERE EXPIRE < $exp";
+ mysql_query($query);
+ $data[bdy] .= " Access Denied ";
+ $data[login] = '';
+ SetNewSession($data);
+ $data[uid] = GetUid($data);
+ $data[user_type] = GetGid($data);
+ }
+
+
+function ContinueSession(&$data) {
+ $exp2 = time()+27200;
+ $query = "SELECT * FROM sessions WHERE SESSIONID='$data[STV]'";
+ $result = mysql_query($query);
+ if (mysql_numrows($result) > 0) {
+ $data[uid] = mysql_result($result,0,'uid');
+ $data[gid] = mysql_result($result,0,'gid');
+ $exp = time()+$data[idletime];
+ $expire = date("D, d-M-Y H:i:s",$exp2);
+ $query = "UPDATE sessions SET EXPIRE='$exp' WHERE SESSIONID='$data[STV]'";
+ mysql_query($query);
+ //Header("Set-Cookie: data[STV]=$data[STV]; expires=$expire GMT; path=/;");
+ Header("Set-Cookie: data[STV]=$data[STV]; path=/;");
+ }
+ else {
+ header("Set-Cookie: data[STV]=; path=/;");
+ $data[bdy] .= "Sorry your login has expired. ";
+ SetNewSession($data);
+ exit;
+ }
+ }
+
+
+function GetUid($data) {
+ $query = "SELECT UID FROM sessions WHERE SESSIONID='$data[STV]'";
+ $result = mysql_query($query);
+ if (mysql_numrows($result) > 0) {
+ return mysql_result($result,0,'UID');
+ }
+ else {
+ return 0;
+ }
+ }
+function GetGid($data) {
+ $query = "SELECT GID FROM sessions WHERE SESSIONID='$data[STV]'";
+ $result = mysql_query($query);
+ if (mysql_numrows($result) > 0) {
+ return mysql_result($result,0,'GID');
+ }
+ else {
+ return 0;
+ }
+ }
+
+function SetNewSession(&$data) {
+ if ($data['login'] == '') {
+ $data['login'] = "yes";
+ $data['tpl']->define(array('index'=>"index/index.html"));
+ $data['bdy'] .= "\n";
+ $data['bdy'] .= " | \n";
+ $data['tpl']->assign('BODY',$data['bdy']);
+ $data['tpl']->parse('MENU', array("menu"));
+ $data['tpl']->parse('INDEX', array("index"));
+ $data['tpl']->FastPrint("INDEX");
+ exit;
+ }
+ else {
+ $query = "SELECT * FROM users WHERE username='$data[user]'";
+ $result = mysql_query($query);
+ if (mysql_numrows($result) > 0) {
+ if (urlencode($data[pass]) != mysql_result($result,0,'pass')) {
+ $data[bdy] .= "Sorry Incorrect Password. ";
+ $data[login]='';
+ SetNewSession($data);
+ }
+ else {
+ $uid = mysql_result($result,0,'uid');
+ $gid = mysql_result($result,0,'gid');
+ $exp = time()+$data[idletime];
+ $exp2 = time()+27200;
+ $expires = date("D, d-M-Y H:i:s",$exp2);
+ srand((double)microtime()*1000000);
+ $session = md5(rand(0,9999999));
+ $query = "INSERT INTO sessions (SESSIONID,UID,GID,EXPIRE) VALUES('$session','$uid','$gid','$exp')";
+ mysql_query($query);
+ $time = time();
+ $query = "UPDATE users SET lastlogon = $time WHERE uid = $uid";
+ mysql_query($query);
+ //header("Set-Cookie: data[STV]=$session; expires=$expires GMT; path=/;");
+ Header("Set-Cookie: data[STV]=$session; path=/;");
+ $data[STV] = $session;
+ $data[uid] = $uid;
+ $data[gid] = $gid;
+ }
+ }
+ else {
+ $data[bdy] .= "Sorry This User Does Not Exist ";
+ $data[login]='';
+ SetNewSession($data);
+ }
+ }
+ }
+?>
diff --git a/include/site.inc b/include/site.inc
new file mode 100755
index 0000000..4d7e174
--- /dev/null
+++ b/include/site.inc
@@ -0,0 +1,28 @@
+assign("SELF","$data[url]");
+ $data['REMOTE_ADDR'] = $REMOTE_ADDR;
+ $data['tpl']->assign("VERSION","0.75");
+
+?>
diff --git a/templates/add.html b/templates/add.html
new file mode 100755
index 0000000..a2806d4
--- /dev/null
+++ b/templates/add.html
@@ -0,0 +1,26 @@
+ |