Exemplo n.º 1
0
    exit;
}
/* Check for uniqe ip address */
$ui = session::global_get('ui');
if ($_SERVER['REMOTE_ADDR'] != $ui->ip) {
    new log('security', 'login', '', array(), 'main.php called with session which has a changed IP address.');
    header('Location: index.php?signout=1&message=newip');
    exit;
}
$config = session::global_get('config');
/* If SSL is forced, just forward to the SSL enabled site */
if ($config->get_cfg_value('forcessl') == 'TRUE' && $ssl != '') {
    header("Location: {$ssl}");
    exit;
}
timezone::setDefaultTimezoneFromConfig();
/* Check for invalid sessions */
if (session::global_get('_LAST_PAGE_REQUEST') != '') {
    /* check FusionDirectory.conf for defined session lifetime */
    $max_life = $config->get_cfg_value('sessionLifetime', 60 * 60 * 2);
    /* get time difference between last page reload */
    $request_time = time() - session::global_get('_LAST_PAGE_REQUEST');
    /* If page wasn't reloaded for more than max_life seconds
     * kill session
     */
    if ($request_time > $max_life) {
        session::destroy();
        new log('security', 'login', '', array(), 'main.php called with expired session - logging out');
        header('Location: index.php?signout=1&message=expired');
        exit;
    }