require.php

   1 <?php
   2 require(__DIR__."/config.php");
   3 require("lib/access.php");
   4 require("lib/log.php");
   5 require("lib/db.php");
   6 require("lib/functions.php");
   7 session_start();
   8 $page=basename($_SERVER["PHP_SELF"]);
   9 if($page!="login.php"){
  10   if(empty($_SESSION["user"])){
  11     header("Location: login.php");
  12     exit();
  13   }
  14 }
  15 if($page!="login.php" && $page!="index.php"){
  16   $access=checkAccess(basename($_SERVER["PHP_SELF"], ".php"));
  17   if($access!="all" && $access!="view"){
  18     header("Location: error.php");
  19     exit();
  20   }
  21 }
  22 if(!empty($_GET)){
  23   foreach($_GET as $k=>$v){
  24     $_GET[$k]=htmlspecialchars($v);
  25   }
  26 }
  27 if(!empty($_POST)){
  28   foreach($_POST as $k=>$v){
  29     if(is_array($v)){
  30       foreach($v as $k2=>$v2){
  31         $v[$k2]=htmlspecialchars($v2);
  32       }
  33       $_POST["k"]=$v;
  34     }
  35     else{
  36       $_POST[$k]=htmlspecialchars($v);
  37     }
  38   }
  39 }
  40 ?>