Replacing the PDF Engine with a slightly modified TCPDF

[fa-stable.git] / config.php

diff --git a/config.php b/config.php
index d3e74c8fab72182ce17d711ac85b23cfc270d803..86817e45787f892b77e5651ee7dfeb2a321c4228 100644 (file)
--- a/config.php
+++ b/config.php
@@ -9,25 +9,6 @@
        |                                                   |
        \--------------------------------------------------*/
 
-/*
-       // Make sure this directory exists and is writable!
-       $session_save_path = dirname(__FILE__).'/tmp/';
-
-*/
-       $session_save_path = session_save_path();
-       if (strpos($session_save_path, ";") !== false)
-               $session_save_path = substr($session_save_path, strpos($session_save_path, ";") + 1);
-
-       if (isset($session_save_path))
-       {
-               session_save_path($session_save_path);
-               unset($session_save_path);
-       }
-       if (!isset($path_to_root) || isset($_GET['path_to_root']) || isset($_POST['path_to_root']))
-               die("Restricted access");
-       include_once($path_to_root . "/config_db.php");
-       include_once($path_to_root . "/includes/lang/language.php");
-
        //--------------------------------------------------
 
        // User configurable variables
@@ -37,6 +18,9 @@
        Debugging info level also determined by settings in PHP.ini
        if $debug=1 show debugging info, dont show if $debug=0 */
 
+if (!isset($path_to_root) || isset($_GET['path_to_root']) || isset($_POST['path_to_root']))
+       die("Restricted access");
+
        $debug                  = 1;
        $show_sql               = 0;
        $go_debug               = 0;
@@ -47,16 +31,17 @@
        }
        else
        {
+               error_reporting(E_USER_WARNING|E_USER_ERROR|E_USER_NOTICE);
                // ini_alter("error_reporting","E_COMPILE_ERROR|E_ERROR|E_CORE_ERROR|E_PARSE");
-               ini_set("display_errors", "Off");
+               ini_set("display_errors", "On");
        }
        // Main Title
        $app_title = "FrontAccounting";
        // application version
-       $version                = "2.0 Pre Alpha";
+       $version                = "2.0 RC2";
 
        // Build for development purposes
-       $build_version  = "2";
+       $build_version  = date("d.m.Y", filemtime("$path_to_root/CHANGELOG.txt"));
 
        // Powered by
        $power_by               = "FrontAccounting";
@@ -72,7 +57,11 @@
        $use_audit_trail = 0;
 
        /* Integrated base Wiki Help URL or null if not used */
-       $help_base_url = $path_to_root.'/modules/wiki/index.php?n='._('Help').'.';
+       //$help_base_url = $path_to_root.'/modules/wiki/index.php?n='._('Help').'.';
+       $help_base_url = null;
+
+       /* per user data/cache directory */
+       $comp_path = $path_to_root.'/company';
 
        /* allow alpha characters in accounts. 0 = numeric, 1 = alpha numeric, 2 = uppercase alpha numeric */
        $accounts_alpha = 0;
@@ -137,13 +126,17 @@
        If the security setting of the page is contained in the security group as determined by the access level then the user will be allowed access.
        Each page has a $page_security = x; variable
        This value is compared to contents of the array applicable which is based on the access level of the user.
-       Access authorisation is checked in header.inc this is where _SESSION["AccessLevel"] is the index of the security_groups array. If you wish to add more security groups with then you must add a new SecurityHeading to the security_headings array
-       and a new array of Security categories to the Security Groups array
+       Access authorisation is checked in session.inc. If you wish to add more security groups 
+       with then you must add a new SecurityHeading to the security_headings array
+       and a new array of Security categories to the Security Groups _at_the_end_ of the array
        This mechanism allows more fine grained control of access
        security_groups is an array of arrays
        The index is the order in which the array of allowed pages is defined new ones can be defined at will
        or by changing the numbers in each array the security access can be tailored. These numbers need to read
        in conjunction with the Page Security index
+       Special case is security level 20 which is reserved for admins of first
+       registered company (site admins). All potentially dangerous for whole FA 
+       site operations like installing addon modules require access level 20.
        */
 
        $security_headings = array(
@@ -155,7 +148,7 @@
        $security_groups = array(
                        array(1,2),
                        array(1,2,3,4,5,6,7,8,9,10,11,12,13,14,16),
-                       array(1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16),
+                       array(1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,20),
        );
 
        /*
@@ -176,6 +169,14 @@
 
        //MySQL Backup and Restore Settings
 
-       define("BACKUP_PATH", "/admin/backup/");
+if(isset($_SESSION["wa_current_user"])) {
+       define("BACKUP_PATH", $comp_path.'/'.user_company()."/backup/");
+}
+       // static js files path
+       $js_path = $path_to_root.'/js/';
+       // standard external js scripts included in all files
+       $js_static = array('JsHttpRequest.js', 'behaviour.js', 'utils.js', 'inserts.js');
+       // additional js source included in header
+       $js_lib = $js_userlib = array();
 
 ?>
\ No newline at end of file