phpdoc blocks

[squirrelmail.git] / plugins / administrator / auth.php

diff --git a/plugins/administrator/auth.php b/plugins/administrator/auth.php
index 2271582c7aac3abbc613a4cce4c22788f8f83c14..81c11ad46d86338f1b41d1647de6e1cf257a2be6 100644 (file)
--- a/plugins/administrator/auth.php
+++ b/plugins/administrator/auth.php
@@ -1,35 +1,47 @@
 <?php
 
-/*
+/**
  *  This function tell other modules what users have access
  *  to the plugin.
  *  
  *  Philippe Mingo
  *  
- *  $Id$
+ * @version $Id$
+ * @package plugins
+ * @subpackage administrator
  */
-function adm_check_user() {
 
-    GLOBAL $username, $PHP_SELF;
+/**
+ * Check if user has access to administrative functions
+ *
+ * @return boolean
+ * @access private
+ */
+function adm_check_user() {
+    global $PHP_SELF;
+    require_once(SM_PATH . 'functions/global.php');
+    
+    if ( !sqgetGlobalVar('username',$username,SQ_SESSION) ) {
+        $username = '';
+    }
 
-    if ( strpos( 'options.php', $PHP_SELF ) ) {
+    /* This needs to be first, for all non_options pages */
+    if (strpos('options.php', $PHP_SELF)) {
         $auth = FALSE;
-    } else if ( file_exists( '../plugins/administrator/admins' ) ) {
-        $auths = file( '../plugins/administrator/admins' );
-        $auth = in_array( "$username\n", $auths );
-    } else if ( file_exists( '../config/admins' ) ) {
-        $auths = file( '../config/admins' );
-        $auth = in_array( "$username\n", $auths );
-    } else if ( $adm_id = fileowner('../config/config.php') ) {
+    } else if (file_exists(SM_PATH . 'plugins/administrator/admins')) {
+        $auths = file(SM_PATH . 'plugins/administrator/admins');
+        $auth = in_array("$username\n", $auths);
+    } else if (file_exists(SM_PATH . 'config/admins')) {
+        $auths = file(SM_PATH . 'config/admins');
+        $auth = in_array("$username\n", $auths);
+    } else if ($adm_id = fileowner(SM_PATH . 'config/config.php')) {
         $adm = posix_getpwuid( $adm_id );
-        $auth = ( $username == $adm['name'] );
-    }
-    else {
+        $auth = ($username == $adm['name']);
+    } else {
         $auth = FALSE;
     }
 
-    return( $auth );
-
+    return ($auth);
 }
 
-?>
+?>
\ No newline at end of file