Пример #1
0
 private function _adminAccess()
 {
     require BASE_DIR . BACKEND_DIR . 'db.php';
     if (!isset($_REQUEST['username'])) {
         return false;
     }
     if (!isset($_REQUEST['password'])) {
         return false;
     }
     //check log in
     if (isset($_REQUEST['username']) && isset($_REQUEST['password'])) {
         if (\Backend\Db::incorrectLoginCount($_REQUEST['username'] . '(' . $_SERVER['REMOTE_ADDR'] . ')') > 2) {
             \Backend\Db::log('system', 'backend login suspended (menu management)', $_REQUEST['username'] . '(' . $_SERVER['REMOTE_ADDR'] . ')', 2);
             return false;
         } else {
             $id = \Backend\Db::userId($_REQUEST['username'], $_REQUEST['password']);
             if ($id !== false) {
                 $module = \Db::getModule(null, $groupName = 'standard', $moduleName = 'menu_management');
                 if (\Backend\Db::allowedModule($moduleId = $module['id'], $userId = $id)) {
                     \Backend\Db::log('system', 'backend login (menu management)', $_REQUEST['username'] . ' (' . $_SERVER['REMOTE_ADDR'] . ')', 0);
                     return true;
                 } else {
                     \Backend\Db::log('system', 'this user is not allowed to access menu management module', $_REQUEST['username'] . '(' . $_SERVER['REMOTE_ADDR'] . ')', 1);
                     return false;
                 }
             } else {
                 \Backend\Db::log('system', 'backend login incorrect (menu management)', $_REQUEST['username'] . '(' . $_SERVER['REMOTE_ADDR'] . ')', 1);
                 return false;
             }
         }
     }
     //check log in
     return false;
 }
Пример #2
0
 function worker()
 {
     //make worker actions.
     global $cms;
     global $log;
     global $globalWorker;
     if ($this->session->loggedIn()) {
         //login check
         //deprecated way
         if (isset($_GET['module_id']) && $_GET['module_id'] != '' && \Backend\Db::allowedModule($_GET['module_id'], $cms->session->userId())) {
             $this->curModId = $_GET['module_id'];
             $newModule = \Db::getModule($_GET['module_id']);
             if (Db::allowedModule($_GET['module_id'], $this->session->userId())) {
                 if (file_exists(MODULE_DIR . $newModule['g_name'] . '/' . $newModule['m_name'] . '/backend_worker.php')) {
                     require_once MODULE_DIR . $newModule['g_name'] . '/' . $newModule['m_name'] . '/backend_worker.php';
                 } else {
                     require_once PLUGIN_DIR . $newModule['g_name'] . '/' . $newModule['m_name'] . '/backend_worker.php';
                 }
                 eval('$globalWorker = new \\Modules\\' . $newModule['g_name'] . '\\' . $newModule['m_name'] . '\\BackendWorker();');
                 $globalWorker->work();
             }
         }
         //eof deprecated way
     }
 }