1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
<?php
/* * *******************************************************************************
* spacial
* top list menu define in english alphabet a,b,c,d,e,f in sequence
* else get id_top
* @author PanDaRianZ
* pandarianz@gmail.com
* ******************************************************************************** */
/* * **************************************************************
function id_top_permission
INPUT : id_top
ACTION : check if id_top exists in permission
OUTPUT : TRUE , FALSE
* ************************************************************** */
function id_top_permission($id_top) {
if ($_SESSION['admin_web'] == "admin")
return true;
$id_user = $_SESSION["id_user_admin"];
$array_permission = select_query_data("module_access", "cms_main_user", "id_user", $id_user);
if ($array_permission != "") {
$array_module = explode(",", $array_permission);
if (in_array($id_top, $array_module))
return true;
else
return false;
}
return false; // default
}
/* * **************************************************************
function id_sub_permission
INPUT : id_sub
ACTION : select id_sub from menu table and check if id_top exists in permission
OUTPUT : TRUE , FALSE
* ************************************************************** */
function id_sub_permission($id_sub) {
if ($_SESSION['admin_web'] == "admin")
return true;
$id_user = $_SESSION["id_user_admin"];
$array_permission = select_query_data("module_access", "cms_main_user", "id_user", $id_user);
if ($array_permission != "") {
$array_module = explode(",", $array_permission);
$sql_get_sub = "SELECT id_top FROM cms_menu_sub WHERE id_sub = $id_sub";
$result_id_sub = select_result_query("id_top", "cms_menu_sub", "id_sub", $id_sub);
$flag = 0;
while ($data_sub = mysql_fetch_array($result_id_sub)) {
if (in_array($data_sub[id_top], $array_module))
return true;
}
}
return false; // default
}
/* * **************************************************************
function id_sub_permission
INPUT : id_top , URL to redirec
ACTION : check if id_top exists in permission then redirec
OUTPUT : TRUE if have permission, Refresh page to login if don't have permission
* ************************************************************** */
function check_page_permission($id_top, $url = NULL) {
if ($_SESSION['admin_web'] == "admin")
return true;
$id_user = $_SESSION["id_user_admin"];
$array_permission = select_query_data("module_access", "cms_main_user", "id_user", $id_user);
if ($array_permission != "") {
$array_module = explode(",", $array_permission);
if (in_array($id_top, $array_module))
return true;
else {
if ($url != NULL)
echo "<meta http-equiv='refresh' content='0; url=$url'>";
else
echo "<meta http-equiv='refresh' content='0; url=index.php?mod=login&path=login&case_=1'>";
}
}
return false; // default
}
?>
|