<?php
+/**
+ * Administrator plugin - Authentication routines
+ *
+ * This function tell other modules what users have access
+ * to the plugin.
+ *
+ * @author Philippe Mingo
+ * @copyright © 1999-2007 The SquirrelMail Project Team
+ * @license http://opensource.org/licenses/gpl-license.php GNU Public License
+ * @version $Id$
+ * @package plugins
+ * @subpackage administrator
+ */
+
+/**
+ * Check if user has access to administrative functions
+ *
+ * @return boolean
+ */
function adm_check_user() {
+ global $plugins;
- GLOBAL $username;
+ /* fail if the plugin is not enabled */
+ if ( !in_array('administrator', $plugins) ) {
+ return FALSE;
+ }
- $auth = FALSE;
-
- if ( file_exists( '../plugins/administrator/admins' ) ) {
- $auths = file( '../plugins/administrator/admins' );
- $auth = in_array( $username, $auths );
- }else if ( $adm_id = fileowner('../config/config.php') ) {
- $adm = posix_getpwuid( $adm_id );
- if ( $username == $adm['name'] ) {
- $auth = TRUE;
- }
+ if ( !sqgetGlobalVar('username',$username,SQ_SESSION) ) {
+ $username = '';
}
- return( $auth );
+ /* This needs to be first, for all non_options pages */
+ //if (!defined('PAGE_NAME') || strpos(PAGE_NAME, 'options') === FALSE) {
+ if (!defined('PAGE_NAME')
+ || (PAGE_NAME != 'administrator_options' && PAGE_NAME != 'options')) {
+ $auth = FALSE;
+ } else if (file_exists(SM_PATH . 'plugins/administrator/admins')) {
+ $auths = file(SM_PATH . 'plugins/administrator/admins');
+ array_walk($auths, 'adm_array_trim');
+ $auth = in_array($username, $auths);
+ } else if (file_exists(SM_PATH . 'config/admins')) {
+ $auths = file(SM_PATH . 'config/admins');
+ array_walk($auths, 'adm_array_trim');
+ $auth = in_array($username, $auths);
+ } else if (($adm_id = fileowner(SM_PATH . 'config/config.php')) &&
+ function_exists('posix_getpwuid')) {
+ $adm = posix_getpwuid( $adm_id );
+ $auth = ($username == $adm['name']);
+ } else {
+ $auth = FALSE;
+ }
+ return ($auth);
}
-?>
\ No newline at end of file
+/**
+ * Removes whitespace from array values
+ * @param string $value array value that has to be trimmed
+ * @param string $key array key
+ * @since 1.5.1 and 1.4.5
+ * @access private
+ */
+function adm_array_trim(&$value,$key) {
+ $value=trim($value);
+}