<?php
//**************************************************//
//           PM HUB(Project Management)             //
//--------------------------------------------------//
//      Copyright 2001, All Open Source             // 
//      Patrick C. Wang (patrickwang@163.com)       //
//--------------------------------------------------//
// THE SOURCE CODES FOR THE SITE ARE OPENED FOR     //
// ALL, BUT ANY ATTEMPTS THAT USING THEM FOR        // 
// COMMERCE ARE NOT ALLOWED BY FREE! YOU CAN        //
// CONTACT ME FOR LICENCE FEE PLEASE.               //
//**************************************************//

/**
 * Security protection of system.
 * @page:	security.inc.php
 */

/* start session support and enforce login */
session_start();
if (!strstr($HUB['sys']['login'], $PHP_SELF) && !session_is_registered('member'))
{
	header('Location: ' . $HUB['sys']['login']);	
	exit();
}

/* check privileges while visiting contents related to specific project */

// security of '/admin'
if (stristr($PHP_SELF, $HUB['sys']['app'] . '/admin') && ($HTTP_SESSION_VARS['member']->level < $HUB['stts']['member']['5']))
{
	header('Location: ' . $HUB['sys']['error']);
	exit();
}

// security of '/project'
if (stristr($PHP_SELF, $HUB['sys']['app'] . '/project'))
{
	$level = 0;
	if (stristr($PHP_SELF, $HUB['sys']['app'] . '/project/materials.php') || stristr($PHP_SELF, $HUB['sys']['app'] . '/project/download.php'))
	{
		$level = 1;
	}
	elseif (stristr($PHP_SELF, $HUB['sys']['app'] . '/project/add.php') || stristr($PHP_SELF, $HUB['sys']['app'] . '/project/attach.php'))
	{
		$level = 3;	
	}
	elseif (stristr($PHP_SELF, $HUB['sys']['app'] . '/project/organize.php') || stristr($PHP_SELF, $HUB['sys']['app'] . '/project/delete.php'))
	{
		$level = 4;	
	}
	else
	{
		$level = 2;	
	}
	
	$security_p = new Project();
	if (!$security_p->is_valid($HTTP_SESSION_VARS['project']->id, $HTTP_SESSION_VARS['member']->id, $level))
	{
		if ($HTTP_SESSION_VARS['project']->job == $GLOBALS['HUB']['stts']['mprel']['1'])
		{
			header('Location: ' . $HUB['sys']['url'] . '/project/materials.php');
			exit();
		}
		else
		{
			header('Location: ' . $HUB['sys']['error']);
			exit();
		}	
	}
	unset($security_p);
}

?>