moved /inc to ../includes

git-svn-id: svn://svn.cccv.de/engel-system@281 29ba0400-6e00-0410-a75a-ca02368028f8

includes/ShowUserPicture.php

@@ -0,0 +1,58 @@
+<?PHP
+
+include ("./inc/config.php");
+include ("./inc/error_handler.php");
+include ("./inc/config_db.php");
+if( !isset($_SESSION))	session_start();
+include ("./inc/secure.php");
+
+
+// Parameter check
+if( !isset($_GET["UID"]) )
+	$_GET["UID"]= "-1";
+
+$SQL= "SELECT * FROM `UserPicture` WHERE `UID`='". $_GET["UID"]. "'";
+$res = mysql_query( $SQL, $con);
+
+if( mysql_num_rows($res) == 1)
+{
+	//genügend rechte
+	if( !isset($_SESSION['UID']) || $_SESSION['UID'] == -1)
+	{
+		header( "HTTP/1.0 403 Forbidden");
+		die( "403 Forbidden");
+	}
+	
+	// ist das bild sichtbar?
+	if( (mysql_result($res, 0, "show")=="N") AND
+	    ($_SESSION['UID']!=$_GET["UID"]) AND 
+	    ($_SESSION['CVS'][ "admin/UserPicture.php" ] == "N"))
+	{
+		$SQL= "SELECT * FROM `UserPicture` WHERE `UID`='-1'";
+		$res = mysql_query( $SQL, $con);
+		if( mysql_num_rows($res) != 1)
+		{
+			header( 'HTTP/1.0 404 Not Found');
+			die( "404 Not Found");
+		}
+	}
+
+	/// bild aus db auslesen
+	$bild = mysql_result($res, 0, "Bild");
+	
+	// ausgabe bild
+	header( "Accept-Ranges: bytes");
+	header( "Content-Length: ". strlen($bild));
+	header( "Content-type: ". mysql_result($res, 0, "ContentType"));
+	header( "Cache-control: public");
+	header( "Cache-request-directive: min-fresh = 120");
+	header( "Cache-request-directive: max-age = 360");
+	echo $bild;
+}
+else
+{
+	header( 'HTTP/1.0 404 Not Found');
+	die( "404 Not Found");
+}
+
+?>

includes/UserCVS.php

@@ -0,0 +1,39 @@
+<?php
+
+if( !isset($_SESSION['UID'])) 
+	$_SESSION['UID'] = -1;
+
+// CVS import Data
+$SQL = "SELECT * FROM `UserCVS` WHERE UID=".$_SESSION['UID'];
+$Erg_CVS =  mysql_query($SQL, $con);
+$_SESSION['CVS'] = mysql_fetch_array($Erg_CVS);
+
+//pagename ermitteln
+$Page["Name"] = substr( $_SERVER['PHP_SELF'], strlen($ENGEL_ROOT) );
+
+
+//recht für diese seite auslesen
+if( isset( $_SESSION['CVS'][ $Page["Name"] ]))
+	$Page["CVS"] = $_SESSION['CVS'][ $Page["Name"] ];
+else
+{
+	echo "SYSTEM ERROR: now right for ". $Page["Name"]. "exist";
+	die;
+}
+
+if( $DEBUG ) 
+{
+//	echo "UserID:". $_SESSION["UID"]. "<br>";
+//	echo "Nick:". $_SESSION["Nick"]. "<br>";
+
+	foreach( $_SESSION as $k => $v)
+		echo "$k = $v<br>\n";
+
+	if( strlen($Page["CVS"]) == 0 )
+		echo "<h1><u> CVS ERROR, on page '". $Page["Name"]. "'</u></h1>";
+	else
+		echo "CVS: ". $Page["Name"]. " => '". $Page["CVS"]. "'<br>";
+	
+}
+
+?>