view index.php @ 39:1844df51a55c

Improve authentication.
author Matti Hamalainen <ccr@tnsp.org>
date Tue, 01 Oct 2013 14:34:09 +0300
parents 8ecf7c04a837
children 8c3d425c0560
line wrap: on
line source

<?php
require "mconfig.inc.php";
require "msite.inc.php";
require "mcommon.inc.php";
require "msession.inc.php";


// Switch to https first, if needed
if (!stCheckHTTPS() && isset($_SERVER["REQUEST_URI"]) &&
  array_key_exists($_SERVER["REQUEST_URI"], $securePages))
{
  header("Location: https://".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"]);
  exit;
}


// Check for cache-controlled pages
if (isset($_SERVER["REQUEST_URI"]) &&
  array_key_exists($_SERVER["REQUEST_URI"], $securePages))
  stSetupCacheControl();

// Start output
cmPrintPageHeader($pageTitle,
  " <meta http-equiv=\"Pragma\" content=\"no-cache\" />");

// Initiate SQL database connection
if (!stConnectSQLDB())
{
  // Error occured, bail out early
  cmPrintPageFooter();
  exit;
}

// Fetch non-"hardcoded" settings from SQL database
stReloadSettings();

?>
<div id="headerbox">
 <div id="header">
 <? echo stGetSetting("siteInfoText") ?>
 </div>
 <div id="menu">
  <a href="news">News</a>
  <a href="compos">Compos</a>
  <a href="event">Event</a>
<?
if (stGetSetting("showAttendees"))
echo "  <a href=\"attendees\">Attendees</a>\n";

if (stGetSetting("allowSubmit"))
echo "  <a href=\"entry\">Submit</a>\n";

if (stGetSetting("allowVoting"))
echo "  <a href=\"vote\">Vote</a>\n";

if (stGetSetting("showResults"))
echo "  <a href=\"results\">Results</a>\n";

if (stGetSetting("showAdmin"))
echo "  <a href=\"admin\">Admin</a>\n";
?>
 </div>
</div>

<div id="maincontent">
<div>
<?
$pageName = isset($_GET["p"]) ? $_GET["p"] : "news";
$pageFilename = basename($pageName).".inc.php";
if (file_exists($pageFilename))
  include($pageFilename);
?>
</div>
</div>
<?
cmPrintPageFooter();
?>