- Modified pages to use a global module aurhentification function

- Changed shell of website linux user to /bin/false

Author: tbrehm

interface/lib/classes/auth.inc.php

@@ -90,6 +90,16 @@ public function remove_group_from_user($userid,$groupid) {
 			return false;
 		}
 	}
+	
+	public function check_module_permissions($module) {
+		// Check if the current user has the permissions to access this module
+		if(!stristr($_SESSION["s"]["user"]["modules"],$module)) {
+			header("Location: ../index.php");
+			exit;
+		}
+	}
+	
+	
 }
 
 ?>

interface/web/admin/dbsync_del.php

@@ -39,11 +39,7 @@
 * End Form configuration
 ******************************************/
 
-// Checke Berechtigungen für Modul
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+$app->auth->check_module_permissions('admin');
 
 include_once($list_def_file);
 

interface/web/admin/dbsync_edit.php

@@ -39,11 +39,8 @@
 * End Form configuration
 ******************************************/
 
-// Checke Berechtigungen für Modul
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
 
 // Lade Template
 $app->uses('tpl,tform');

interface/web/admin/dbsync_list.php

@@ -39,11 +39,8 @@
 * End Form configuration
 ******************************************/
 
-// Checke Berechtigungen für Modul
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
 
 $app->uses('tpl,listform');
 

interface/web/admin/filesync_del.php

@@ -39,11 +39,8 @@
 * End Form configuration
 ******************************************/
 
-// Checke Berechtigungen für Modul
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
 
 include_once($list_def_file);
 

interface/web/admin/filesync_edit.php

@@ -39,11 +39,8 @@
 * End Form configuration
 ******************************************/
 
-// Checke Berechtigungen für Modul
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
 
 // Lade Template
 $app->uses('tpl,tform');

interface/web/admin/filesync_list.php

@@ -39,11 +39,8 @@
 * End Form configuration
 ******************************************/
 
-// Checke Berechtigungen für Modul
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
 
 $app->uses('tpl,listform');
 

interface/web/admin/groups_del.php

@@ -42,11 +42,8 @@
 require_once('../../lib/config.inc.php');
 require_once('../../lib/app.inc.php');
 
-// Checke Berechtigungen für Modul
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
 
 $app->uses("tform_actions");
 $app->tform_actions->onDelete();

interface/web/admin/groups_edit.php

@@ -41,11 +41,8 @@
 require_once('../../lib/config.inc.php');
 require_once('../../lib/app.inc.php');
 
-// Checking module permissions
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
 
 // Loading classes
 $app->uses('tpl,tform,tform_actions');

interface/web/admin/groups_list.php

@@ -41,11 +41,8 @@
 * End Form configuration
 ******************************************/
 
-// Checking module permissions
-if(!stristr($_SESSION["s"]["user"]["modules"],$_SESSION["s"]["module"]["name"])) {
-	header("Location: ../index.php");
-	exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('admin');
 
 $app->uses('listform_actions');
 $app->listform_actions->onLoad();