mirror of
https://github.com/ZoneMinder/zoneminder.git
synced 2026-03-21 15:22:46 -04:00
10dba9b4c2
When a user accesses a view but receives an error, and is not logged on, he is offered a login prompt instead. The login prompt saves the original query URL in a hidden field, and postlogin redirects back to the original URL once the user has logged on. If the user is logged in and there is an error, no login prompt is shown. This allows the user to click an event link in an e-mail and then log in before being shown the event, instead of requiring going back through the front ZM page to log in.
164 lines
4.5 KiB
PHP
164 lines
4.5 KiB
PHP
<?php
|
|
//
|
|
// ZoneMinder main web interface file, $Date$, $Revision$
|
|
// Copyright (C) 2001-2008 Philip Coombes
|
|
//
|
|
// This program is free software; you can redistribute it and/or
|
|
// modify it under the terms of the GNU General Public License
|
|
// as published by the Free Software Foundation; either version 2
|
|
// of the License, or (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with this program; if not, write to the Free Software
|
|
// Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
//
|
|
|
|
error_reporting( E_ALL );
|
|
|
|
$debug = false;
|
|
if ( $debug )
|
|
{
|
|
// Use these for debugging, though not both at once!
|
|
phpinfo( INFO_VARIABLES );
|
|
//error_reporting( E_ALL );
|
|
}
|
|
|
|
// Use new style autoglobals where possible
|
|
if ( version_compare( phpversion(), "4.1.0", "<") )
|
|
{
|
|
$_SESSION = &$HTTP_SESSION_VARS;
|
|
$_SERVER = &$HTTP_SERVER_VARS;
|
|
}
|
|
|
|
// Useful debugging lines for mobile devices
|
|
if ( false )
|
|
{
|
|
ob_start();
|
|
phpinfo( INFO_VARIABLES );
|
|
$fp = fopen( "/tmp/env.html", "w" );
|
|
fwrite( $fp, ob_get_contents() );
|
|
fclose( $fp );
|
|
ob_end_clean();
|
|
}
|
|
|
|
if ( isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == 'on' )
|
|
{
|
|
$protocol = 'https';
|
|
}
|
|
else
|
|
{
|
|
$protocol = 'http';
|
|
}
|
|
define( "ZM_BASE_URL", $protocol.'://'.$_SERVER['HTTP_HOST'] );
|
|
|
|
if ( isset($_GET['skin']) )
|
|
$skin = $_GET['skin'];
|
|
elseif ( isset($_COOKIE['zmSkin']) )
|
|
$skin = $_COOKIE['zmSkin'];
|
|
else
|
|
$skin = "classic";
|
|
|
|
if ( isset($_GET['css']) )
|
|
$css = $_GET['css'];
|
|
elseif ( isset($_COOKIE['zmCSS']) )
|
|
$css = $_COOKIE['zmCSS'];
|
|
else
|
|
$css = "classic";
|
|
|
|
define( "ZM_BASE_PATH", dirname( $_SERVER['REQUEST_URI'] ) );
|
|
define( "ZM_SKIN_PATH", "skins/$skin" );
|
|
|
|
$skinBase = array(); // To allow for inheritance of skins
|
|
if ( !file_exists( ZM_SKIN_PATH ) )
|
|
Fatal( "Invalid skin '$skin'" );
|
|
require_once( ZM_SKIN_PATH.'/includes/init.php' );
|
|
$skinBase[] = $skin;
|
|
|
|
ini_set( "session.name", "ZMSESSID" );
|
|
|
|
session_start();
|
|
|
|
if ( !isset($_SESSION['skin']) || isset($_REQUEST['skin']) )
|
|
{
|
|
$_SESSION['skin'] = $skin;
|
|
setcookie( "zmSkin", $skin, time()+3600*24*30*12*10 );
|
|
}
|
|
|
|
if ( !isset($_SESSION['css']) || isset($_REQUEST['css']) ) {
|
|
$_SESSION['css'] = $css;
|
|
setcookie( "zmCSS", $css, time()+3600*24*30*12*10 );
|
|
}
|
|
|
|
require_once( 'includes/config.php' );
|
|
require_once( 'includes/logger.php' );
|
|
|
|
if ( ZM_OPT_USE_AUTH )
|
|
if ( isset( $_SESSION['user'] ) )
|
|
$user = $_SESSION['user'];
|
|
else
|
|
unset( $user );
|
|
else
|
|
$user = $defaultUser;
|
|
|
|
require_once( 'includes/lang.php' );
|
|
require_once( 'includes/functions.php' );
|
|
|
|
if ( isset($_REQUEST['view']) )
|
|
$view = detaintPath($_REQUEST['view']);
|
|
|
|
if ( isset($_REQUEST['request']) )
|
|
$request = detaintPath($_REQUEST['request']);
|
|
|
|
if ( isset($_REQUEST['action']) )
|
|
$action = detaintPath($_REQUEST['action']);
|
|
|
|
foreach ( getSkinIncludes( 'skin.php' ) as $includeFile )
|
|
require_once $includeFile;
|
|
|
|
require_once( 'includes/actions.php' );
|
|
|
|
if ( isset( $_REQUEST['request'] ) )
|
|
{
|
|
foreach ( getSkinIncludes( 'ajax/'.$request.'.php', true, true ) as $includeFile )
|
|
{
|
|
if ( !file_exists( $includeFile ) )
|
|
Fatal( "Request '$request' does not exist" );
|
|
require_once $includeFile;
|
|
}
|
|
return;
|
|
}
|
|
else
|
|
{
|
|
if ( $includeFiles = getSkinIncludes( 'views/'.$view.'.php', true, true ) )
|
|
{
|
|
foreach ( $includeFiles as $includeFile )
|
|
{
|
|
if ( !file_exists( $includeFile ) )
|
|
Fatal( "View '$view' does not exist" );
|
|
require_once $includeFile;
|
|
}
|
|
// If the view overrides $view to 'error', and the user is not logged in, then the
|
|
// issue is probably resolvable by logging in, so provide the opportunity to do so.
|
|
// The login view should handle redirecting to the correct location afterward.
|
|
if ( $view == 'error' && !isset($user) )
|
|
{
|
|
$view = 'login';
|
|
foreach ( getSkinIncludes( 'views/login.php', true, true ) as $includeFile )
|
|
require_once $includeFile;
|
|
}
|
|
}
|
|
// If the view is missing or the view still returned error with the user logged in,
|
|
// then it is not recoverable.
|
|
if ( !$includeFiles || $view == 'error' )
|
|
{
|
|
foreach ( getSkinIncludes( 'views/error.php', true, true ) as $includeFile )
|
|
require_once $includeFile;
|
|
}
|
|
}
|
|
?>
|