Example #1
0
        $_SESSION['tenantID'] = 3;
    }
}
// if can't determine from URL, look for query string. Will default to 3
if (!isset($_SESSION['tenantID'])) {
    $_SESSION['tenantID'] = 0;
    // look to see if tenant specified on query string
    if (isset($_GET["tenant"])) {
        $_SESSION['tenantID'] = $_GET["tenant"];
    } else {
        // for now defaulting to 3: need to update to handle in future
        $_SESSION['tenantID'] = 3;
    }
}
$tenantID = $_SESSION['tenantID'];
Context::$tenantid = $tenantID;
if (!isset($_SESSION['userID'])) {
    // set ID to 0 to indicate unauthenticated user
    $_SESSION['userID'] = 0;
    $userID = 0;
} else {
    $userID = $_SESSION['userID'];
}
Log::debug('instantiating new user for userID=' . $userID, 1);
$user = new User($userID, $tenantID);
Context::$currentUser = $user;
if ($newsession) {
    Log::startSession(session_id(), $tenantID, $userID);
}
if ($userID > 0 && !$user->canAccessTenant($tenantID)) {
    Log::debug('Unauthorized user attempted to access tenant page. (user='******', tenant=' . $tenantID . ')', 9);