X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;ds=sidebyside;f=includes%2Fsession.inc;h=04acec518543dc53ddc940be48a8f0bc6ad933d3;hb=7796f55d85412cbc2904b0577b419d9625958257;hp=3617a91c8dc709e80b4ad74c9f89af9ae5f578a7;hpb=d497aeb2d93ed1c705007fa6ff84a4c470f7f538;p=fa-stable.git diff --git a/includes/session.inc b/includes/session.inc index 3617a91c..04acec51 100644 --- a/includes/session.inc +++ b/includes/session.inc @@ -76,6 +76,28 @@ function check_page_security($page_security) exit; } } +/* + Helper function for setting page security level depeding on + GET start variable and/or some value stored in session variable. + Before the call $page_security should be set to default page_security value. +*/ +function set_page_security($value=null, $trans = array(), $gtrans = array()) +{ + global $page_security; + + // first check is this is not start page call + foreach($gtrans as $key => $area) + if (isset($_GET[$key])) { + $page_security = $area; + return; + } + + // then check session value + if (isset($trans[$value])) { + $page_security = $trans[$value]; + return; + } +} //----------------------------------------------------------------------------- // Removing magic quotes from nested arrays/variables @@ -229,15 +251,6 @@ if (strstr($_SERVER['PHP_SELF'], 'logout.php') == false){ $_SESSION["App"] = new front_accounting(); $_SESSION["App"]->init(); } - - /* - This call is necessary only at: - . on any page with non-standard security areas - . in security roles editor - To be optmized after. - */ - add_access_extensions(); - } // POST vars cleanup needed for direct reuse. // We quote all values later with db_escape() before db update.