vb.org Archive - View Single Post - Simple vB User login and access control on non vB pages

Snatch · #**122** 03-22-2006, 10:36 AM

I get this Error

Code:

Notice: Undefined index: HTTP_REFERER in /var/www/web1/html/vb3/includes/class_core.php on line 1574

And this ist my index.php

PHP Code:


			
<?php

chdir('/var/www/web1/html/vb3');  

require_once('/var/www/web1/html/vb3/global.php');  

?>

<html>  

<body>  

<?php

/************************************************\

 * File Uploader

 * **********************************************

 * File Name    : index.php

 * Author       : Tuan Do @ [url]www.celerondude.com[/url]

 * Email        : [email]dork@celerondude.com[/email]

 * Purpose      : load actions

\************************************************/



 require_once('/var/www/web1/html/test/login_inc.php');

   

//-----------------------------------------------

// Initialize some stuff

//-----------------------------------------------

ob_start('ob_gzhandler');

error_reporting(E_ALL);

define('UPLOADER', 1);



//-----------------------------------------------

// Require neccessary files and initialize objects

//-----------------------------------------------

require_once('includes/common.inc.php');

require_once('includes/template.class.php');

require_once('includes/functions.inc.php');

$Template = new Template('templates');

$Template->_cache = 1;

$Template->_cache_dir = 'cache/';

$start = timer();





  

//-----------------------------------------------

// Load the settings file

//-----------------------------------------------

$Settings = load_file($settings_file);





//-----------------------------------------------

// Files to include and the action

//-----------------------------------------------

$includes = array(

                    'default'               => 'uploader.php',

                    'login'                 => 'login.php',

                    'logout'                => 'logout.php',

                    'register'              => 'register.php',

                    'lostpassword'          => 'lostpassword.php',

                    'browse'                => 'browse.php',

                    'viewfiles'             => 'viewfiles.php',

                    'changepassword'        => 'changepassword.php',

                );

if( !isset($_GET['action']) || empty($_GET['action']) || !isset($includes[$_GET['action']]) )

{

    $action = 'default';

}

else

{

    $action =& $_GET['action'];

}



//-----------------------------------------------

// Authenticate user

//----------------------------------------------- 

$banned [] = 'x.x.x.x';

$banned [] = 'x.x.x.x';

$banned [] = 'x.x.x';



if ( in_array ( $_SERVER['REMOTE_ADDR'], $banned ) )

{

    show_message('Access Denied', 'Your IP address has been restricted from accessing this uploader.', 1);



    $Template->display('index.tpl');

    

    exit;

}

$logged_in = 0;

if($Settings['password_required'] && $action != 'register' && $action != 'lostpassword' && $action != 'login' && $action != 'lostpassword')

{

    session_start();

    if(!isset($_SESSION['uploader_username']))

    {

        if(isset($_COOKIE['uploader_userid']) && isset($_COOKIE['uploader_password']))

        {

            $user = authenticate_by_id($_COOKIE['uploader_userid'], $_COOKIE['uploader_password']);

            if(!$user)

            {

                $action = 'login';

            }

            else

            {

                $logged_in = 1;

                $current_user = $user['username'];

                $Template->assign('logged_in', 1);

            }

        }

        else

        {

            $action = 'login';

        }

    }

    else

    {

        $current_user = $_SESSION['uploader_username'];

        $logged_in = 1;

        $Template->assign('logged_in', 1);

    }

}





//-----------------------------------------------

// Load action file.

//-----------------------------------------------

require( 'includes/' . $includes[$action]);



//-----------------------------------------------

// Included files made changes to the template

// Now print everything

//-----------------------------------------------

if($Settings['password_required'] && !$logged_in)

{

    $Template->assign('noheader', 1);

}



$Template->assign('runtime', timer($start) );

$Template->display('index.tpl');

?>

</body>  

</html>

GreeTz
Snatch

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01247 seconds Memory Usage 1,840KB Queries Executed 11 (?)
More Information
Template Usage: (1)SHOWTHREAD_SHOWPOST (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_code (1)bbcode_php (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_box (1)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (1)post_thanks_postbit_info (1)postbit (1)postbit_onlinestatus (1)postbit_wrapper (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit reputationlevel showthread	Included Files: ./showpost.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_postinfo_query fetch_postinfo fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showpost_start bbcode_fetch_tags bbcode_create postbit_factory showpost_post postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start showpost_complete
Messages: