118 lines
3.7 KiB
PHP
Executable File
118 lines
3.7 KiB
PHP
Executable File
<?php
|
|
/**
|
|
* session handling
|
|
* see {@link http://www.zen-cart.com/wiki/index.php/Developers_API_Tutorials#InitSystem wikitutorials} for more details.
|
|
*
|
|
* @package initSystem
|
|
* @copyright Copyright 2003-2005 Zen Cart Development Team
|
|
* @copyright Portions Copyright 2003 osCommerce
|
|
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
|
|
* @version $Id: init_sessions.php 2753 2005-12-31 19:17:17Z wilt $
|
|
*/
|
|
if (!defined('IS_ADMIN_FLAG')) {
|
|
die('Illegal Access');
|
|
}
|
|
/**
|
|
* require the session handling functions
|
|
*/
|
|
require(DIR_WS_FUNCTIONS . 'sessions.php');
|
|
/**
|
|
* set the session name and save path
|
|
*/
|
|
zen_session_name('zenid');
|
|
zen_session_save_path(SESSION_WRITE_DIRECTORY);
|
|
/**
|
|
* set the session cookie parameters
|
|
*/
|
|
session_set_cookie_params(0, '/', (zen_not_null($current_domain) ? $current_domain : ''));
|
|
/**
|
|
* set the session ID if it exists
|
|
*/
|
|
if (isset($_POST[zen_session_name()])) {
|
|
zen_session_id($_POST[zen_session_name()]);
|
|
} elseif ( ($request_type == 'SSL') && isset($_GET[zen_session_name()]) ) {
|
|
zen_session_id($_GET[zen_session_name()]);
|
|
}
|
|
/**
|
|
* start the session
|
|
*/
|
|
$session_started = false;
|
|
if (SESSION_FORCE_COOKIE_USE == 'True') {
|
|
zen_setcookie('cookie_test', 'please_accept_for_session', time()+60*60*24*30, '/', (zen_not_null($current_domain) ? $current_domain : ''));
|
|
|
|
if (isset($_COOKIE['cookie_test'])) {
|
|
zen_session_start();
|
|
$session_started = true;
|
|
}
|
|
} elseif (SESSION_BLOCK_SPIDERS == 'True') {
|
|
$user_agent = strtolower($_SERVER['HTTP_USER_AGENT']);
|
|
$spider_flag = false;
|
|
if (zen_not_null($user_agent)) {
|
|
$spiders = file(DIR_WS_INCLUDES . 'spiders.txt');
|
|
for ($i=0, $n=sizeof($spiders); $i<$n; $i++) {
|
|
if (zen_not_null($spiders[$i])) {
|
|
if (is_integer(strpos($user_agent, trim($spiders[$i])))) {
|
|
$spider_flag = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if ($spider_flag == false) {
|
|
zen_session_start();
|
|
$session_started = true;
|
|
}
|
|
} else {
|
|
zen_session_start();
|
|
$session_started = true;
|
|
}
|
|
/**
|
|
* set host_address once per session to reduce load on server
|
|
*/
|
|
if (!isset($_SESSION['customers_host_address'])) {
|
|
if (SESSION_IP_TO_HOST_ADDRESS == 'true') {
|
|
$_SESSION['customers_host_address']= gethostbyaddr($_SERVER['REMOTE_ADDR']);
|
|
} else {
|
|
$_SESSION['customers_host_address'] = OFFICE_IP_TO_HOST_ADDRESS;
|
|
}
|
|
}
|
|
/**
|
|
* verify the ssl_session_id if the feature is enabled
|
|
*/
|
|
if ( ($request_type == 'SSL') && (SESSION_CHECK_SSL_SESSION_ID == 'True') && (ENABLE_SSL == 'true') && ($session_started == true) ) {
|
|
$ssl_session_id = $_SERVER['SSL_SESSION_ID'];
|
|
if (!$_SESSION['SSL_SESSION_ID']) {
|
|
$_SESSION['SSL_SESSION_ID'] = $ssl_session_id;
|
|
}
|
|
if ($_SESSION['SSL_SESSION_ID'] != $ssl_session_id) {
|
|
zen_session_destroy();
|
|
zen_redirect(zen_href_link(FILENAME_SSL_CHECK));
|
|
}
|
|
}
|
|
/**
|
|
* verify the browser user agent if the feature is enabled
|
|
*/
|
|
if (SESSION_CHECK_USER_AGENT == 'True') {
|
|
$http_user_agent = $_SERVER['HTTP_USER_AGENT'];
|
|
if (!$_SESSION['SESSION_USER_AGENT']) {
|
|
$_SESSION['SESSION_USER_AGENT'] = $http_user_agent;
|
|
}
|
|
if ($_SESSION['SESSION_USER_AGENT'] != $http_user_agent) {
|
|
zen_session_destroy();
|
|
zen_redirect(zen_href_link(FILENAME_LOGIN));
|
|
}
|
|
}
|
|
/**
|
|
* verify the IP address if the feature is enabled
|
|
*/
|
|
if (SESSION_CHECK_IP_ADDRESS == 'True') {
|
|
$ip_address = zen_get_ip_address();
|
|
if (!$_SESSION['SESSION_IP_ADDRESS']) {
|
|
$_SESSION['SESSION_IP_ADDRESS'] = $ip_address;
|
|
}
|
|
if ($_SESSION['SESSION_IP_ADDRESS'] != $ip_address) {
|
|
zen_session_destroy();
|
|
zen_redirect(zen_href_link(FILENAME_LOGIN));
|
|
}
|
|
}
|
|
?>
|