-
Notifications
You must be signed in to change notification settings - Fork 1
/
header.php
100 lines (94 loc) · 4.54 KB
/
header.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
<?php
$teaminator_url = "https://rathhansen.com/teaminator/";
include_once("dbConnect.php");
$db = new DB;
session_start();
if(isset($_SESSION['login_ID'])) {
$user_sql = "SELECT user, login_hash FROM users WHERE ID=:ID";
$user_val = [[":ID",$_SESSION['login_ID']]];
$login_hash = $db->query($user_sql,$user_val);
// Check hash and user from DB against session hash and user
if($_SESSION['login_user'] != $login_hash[0]['user'] || $_SESSION['login_hash'] != $login_hash[0]['login_hash']) {
if("https://" . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF'] != $teaminator_url . "login.php") {
header("Location: " . $teaminator_url . "login.php");
}
}
// Before sending the user on the way make sure to update hash
$token = substr(str_shuffle("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"), 0, 1).substr(md5(time()),1);
$set_token_sql = "UPDATE users SET login_hash=:login_hash WHERE ID=:ID";
$set_token_values = [
[":login_hash",$token],
[":ID",$_SESSION['login_ID']]
];
$db->query($set_token_sql,$set_token_values);
$_SESSION['login_hash'] = $token;
} else {
if("https://" . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF'] != $teaminator_url . "login.php") {
header("Location: " . $teaminator_url . "login.php");
}
}
function echoActiveClassIfRequestMatches($requestUri)
{
$current_file_name = basename($_SERVER['PHP_SELF'], ".php");
if ($current_file_name == $requestUri) {
echo 'class="active"';
}
}
?>
<!DOCTYPE html>
<head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Coding Pirates Teaminator</title>
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css" integrity="sha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp" crossorigin="anonymous">
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script>
<script src="http://ajax.googleapis.com/ajax/libs/jquery/2.0.0/jquery.min.js"></script>
<script src="<?php echo $teaminator_url . 'duallistbox/dist/jquery.bootstrap-duallistbox.min.js'; ?>"></script>
<link rel="stylesheet" type="text/css" href="<?php echo $teaminator_url . 'duallistbox/src/bootstrap-duallistbox.css'; ?>">
<link href="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.3/css/select2.min.css" rel="stylesheet" />
<script src="https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.3/js/select2.min.js"></script>
</head>
<nav class="navbar navbar-default">
<div class="container-fluid">
<div class="navbar-header">
<a class="navbar-brand" href="<?php echo $teaminator_url; ?>" title="Coding Pirates Teaminator">Coding Pirates Teaminator til Coding Pirates Gamejam <?php echo date("Y"); ?>!</a>
</div>
<ul class="nav navbar-nav">
<li <?php echo echoActiveClassIfRequestMatches("index"); ?>>
<a href="<?php echo $teaminator_url; ?>" title="Coding Pirates Teaminator hjem">
Hjem
</a>
</li>
<li <?php echo echoActiveClassIfRequestMatches("teaminator-add-manual"); ?>>
<a href="<?php echo $teaminator_url . 'teaminator-add-manual.php'; ?>" title="Tilføj person manuelt">
Tilføj person manuelt
</a>
</li>
<li <?php echo echoActiveClassIfRequestMatches("csv-upload"); ?>>
<a href="<?php echo $teaminator_url . 'csv-upload.php'; ?>" title="Upload CSV fil">
Upload CSV fil
</a>
</li>
<li <?php echo echoActiveClassIfRequestMatches("showTeams"); ?>>
<a href="<?php echo $teaminator_url . 'showTeams.php'; ?>" title="Hold">
Hold
</a>
</li>
<li <?php echo echoActiveClassIfRequestMatches("add-team"); ?>>
<a href="<?php echo $teaminator_url . 'add-team.php'; ?>" title="Tilføj hold">
Tilføj hold
</a>
</li>
<li <?php echo echoActiveClassIfRequestMatches("choose"); ?>>
<a href="<?php echo $teaminator_url . 'choose.php'; ?>" title="Vælg interesser">
Vælg interesser
</a>
</li>
<li <?php echo echoActiveClassIfRequestMatches("genteams"); ?>>
<a href="<?php echo $teaminator_url . 'genteams.php'; ?>" title="Generer teams">
Generer teams
</a>
</li>
</ul>
</div>
</nav>
<div class="container">