Example #1
0
    die;
} else {
    if (!$user->has_access_to_admin()) {
        //User loged in, but don't have a sufficient accesslevel to the admin panel
        $user->showLogin("noaccess");
        die;
    } else {
        if (!$user->checkSession()) {
            //User loged in, has access to admin panel. BUT the session might have been hijacked :O
            $user->showLogin("Your login session has been revoked for security reasons<br />Maybe you switched to another wifi?<br />Please login again..");
            die;
        }
    }
}
if (isset($_GET['user']) && $_GET['user'] == "logout") {
    $user->LogoutUser();
    header("location: index.php");
    die;
}
//////////////////////////////////
//Decide stuff here
$admin = new Administrator($db);
//This is the interfase template designers talk to
//Load modules
$result = $db->sql("SELECT foldername,backend FROM " . $db->tb_prefix . "modules");
while ($v = mysql_fetch_array($result, MYSQL_ASSOC)) {
    if ($v['backend'] == "") {
        continue;
    }
    //Possible rfi
    //and defintly a lfi