engelsystem/includes/UserCVS.php

<?php
  if(!isset($_SESSION['UID']))
    $_SESSION['UID'] = -1;

  // CVS import Data
  $SQL_CVS = "SELECT * FROM `UserCVS` WHERE UID=" . $_SESSION['UID'];
  $Erg_CVS =  mysql_query($SQL_CVS, $con);
  $_SESSION['CVS'] = mysql_fetch_array($Erg_CVS);

  // Group import Data, if nesseary
  if(isset($_SESSION['CVS']["GroupID"])) {
    $SQL_GRP = "SELECT * FROM `UserCVS` WHERE UID=" . $_SESSION['CVS'][ "GroupID" ];
    $Erg_GRP =  mysql_query($SQL_GRP, $con);
    $_SESSION['CVS_Group'] = mysql_fetch_array($Erg_GRP);
  
    foreach($_SESSION['CVS'] as $k => $v) {
      if($v == "G")
        $_SESSION['CVS'][$k] = $_SESSION['CVS_Group'][$k];
    }
  }

  // pagename ermitteln
  //$Page["Name"] = basename($_SERVER['PHP_SELF']);
  $Page["Name"] = str_replace($ENGEL_ROOT, '', $_SERVER['PHP_SELF']);

  //recht fuer diese seite auslesen
  if(isset($_SESSION['CVS'][$Page["Name"]]))
    $Page["CVS"] = $_SESSION['CVS'][$Page["Name"]];
  else {
    echo "SYSTEM ERROR: no right for " . $Page["Name"] . " exists.";
    die;
  }

  if($debug) {
    echo "<pre>\$_SESSION:\n";
    print_r($_SESSION);
    echo "</pre>";

    if( strlen($Page["CVS"]) == 0 )
      echo "<h1><u> CVS ERROR, on page '". $Page["Name"]. "'</u></h1>";
    else
      echo "CVS: ". $Page["Name"]. " => '". $Page["CVS"]. "'<br />";
  }

  function funktion_isLinkAllowed($PageName) {
    global $_SESSION;

    // separate page parameter
    $ParameterPos = strpos($PageName, ".php?");

    if($ParameterPos === false)
      $pName = $PageName;
    else
      $pName = substr($PageName, 0, $ParameterPos + 4);
  
    // check rights
    if((isset( $_SESSION['CVS'][ $pName ]) === true) && $_SESSION['CVS'][ $pName ] == "Y")
      return true;

    return false;
  }

  function funktion_isLinkAllowed_addLink_OrLinkText( $PageName, $LinkText) {
    global $url, $ENGEL_ROOT;

    if(funktion_isLinkAllowed( $PageName) === true)
      return "<a href=\"" . $url. $ENGEL_ROOT . $PageName . "\">" . $LinkText . "</a>";
  
    return $LinkText;
  }

  function funktion_isLinkAllowed_addLink_OrEmpty( $PageName, $LinkText) {
    global $url, $ENGEL_ROOT;

    if(funktion_isLinkAllowed( $PageName) === true)
      return "<a href=\"" . $url . $ENGEL_ROOT . $PageName . "\">" . $LinkText . "</a>";

    return "";
  }
?>