phpBB Sverige

Kod: Markera allt

<?php 
/*************************************************************************** 
 *                               pagestart.php 
 *                            ------------------- 
 *   begin                : Thursday, Aug 2, 2001 
 *   copyright            : (C) 2001 The phpBB Group 
 *   email                : support@phpbb.com 
 * 
 *   $Id: pagestart.php,v 1.1.2.7 2004/03/24 14:43:31 psotfx Exp $ 
 * 
 * 
 ***************************************************************************/ 

/*************************************************************************** 
 * 
 *   This program is free software; you can redistribute it and/or modify 
 *   it under the terms of the GNU General Public License as published by 
 *   the Free Software Foundation; either version 2 of the License, or 
 *   (at your option) any later version. 
 * 
 ***************************************************************************/ 

/* 
   This file has been modified from the original phpBB 2.0.8a pagestart.php to 
   increase security. For more details, see the "Secure the Admin Panel" tutorial 
   in the phpBBHacks.com Tutorials section. 
*/ 

if (!defined('IN_PHPBB')) 
{ 
   die("Hacking attempt"); 
} 

define('IN_ADMIN', true); 

// Restrict the admin panel to the user with this user_id 
define('ADMIN_RESTRICT_ID', 2); 
// Include files 
include($phpbb_root_path . 'common.'.$phpEx); 

// 
// Start session management 
// 
$userdata = session_pagestart($user_ip, PAGE_INDEX); 
init_userprefs($userdata); 
// 
// End session management 
// 

if (!$userdata['session_logged_in']) 
{ 
   redirect(append_sid("login.$phpEx?redirect=admin/index.$phpEx", true)); 
} 
else if ($userdata['user_level'] != ADMIN)
{
	message_die(GENERAL_MESSAGE, $lang['Not_admin']);
} 

if ($HTTP_GET_VARS['sid'] != $userdata['session_id'] || intval($userdata['user_id']) != intval(ADMIN_RESTRICT_ID) ) 
{ 
   redirect("index.$phpEx?sid=" . $userdata['session_id']); 
} 

if (empty($no_page_header)) 
{ 
   // Not including the pageheader can be neccesarry if META tags are 
   // needed in the calling script. 
   include('./page_header_admin.'.$phpEx); 
} 

?>