xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-07-07 13:24:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: session login check for admin

Browse Source
This commit is contained in:
Martin Ambrus
2017-10-28 11:25:50 +02:00
parent 6226412825
commit 6bbeb0c574
2 changed files with 21 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Session.php
+20 -5
View File
@@ -164,21 +164,36 @@ class Session {
private function checkLogin(){
global $database;
if(isset($_SESSION['username']) && isset($_SESSION['sessid'])) {
$user = '';
$id = '';
$admin = false;
$inAdmin = (strpos($_SERVER['REQUEST_URI'], '/Admin') !== false);
if (!$inAdmin && isset($_SESSION['username'])) {
$user = $_SESSION['username'];
$id = (int) $_SESSION['id_user'];
} else if ($inAdmin && isset($_SESSION['admin_username'])) {
$user = $_SESSION['admin_username'];
$id = (int) $_SESSION['id'];
$admin = true;
}
if($user && ($admin || isset($_SESSION['sessid']))) {
// check if this is not a support user, for who only messages and statistics are available
if ($_SESSION['id_user'] == 1) {
if ($user == 1) {
$req_file = basename($_SERVER['PHP_SELF']);
if (!in_array($req_file, ['nachrichten.php', 'logout.php', 'statistiken.php', 'rules.php', 'karte.php', 'karte2.php', 'spieler.php'])) {
header('Location:nachrichten.php');
exit;
}
}
//Get and Populate Data
$this->PopulateVar();
//update database
$database->addActiveUser($_SESSION['username'], $this->time);
$database->updateUserField($_SESSION['username'], "timestamp", $this->time, 0);
$database->addActiveUser($user, $this->time);
$database->updateUserField($user, "timestamp", $this->time, 0);
return true;
} else {
return false;