<?php

/*
Interface Creator
www.bioinformatics.org/phplabware
6 September 2014 release
By Santosh Patnaik, MD, PhD
GPL license
Based on DaDaBik version 3.2 by Eugenio Tacchini - http://www.dadabik.org
*/

// start with default values
$current_user = 'anonymous';
$current_user_is_administrator = 0;

if(($enable_admin_authentication === 1 and isset($admin_check) and $admin_check == 1) or $enable_authentication === 1) {
  // get full URL - for redirections
  $_SERVER['FULL_URL'] = 'http';
  if(isset($_SERVER['HTTPS']) and $_SERVER['HTTPS'] == 'on') {
    $_SERVER['FULL_URL'] .= 's';
  }
  $_SERVER['FULL_URL'] .= '://';
  if(isset($_SERVER['SERVER_PORT']) and $_SERVER['SERVER_PORT'] != '80' and !strpos($_SERVER['HTTP_HOST'], ':')) {
    $_SERVER['FULL_URL'] .= $_SERVER['HTTP_HOST'] . ':' . $_SERVER['SERVER_PORT'] . $_SERVER['SCRIPT_NAME'];
  }
  else {
    $_SERVER['FULL_URL'] .= $_SERVER['HTTP_HOST'] . $_SERVER['SCRIPT_NAME'];
  }
  if(!empty($_SERVER['QUERY_STRING'])) {
    $_SERVER['FULL_URL'] .= '?' . $_SERVER['QUERY_STRING'];
  }

  if(!empty($_SESSION['logged_user_infos_ar'])) {
    // pass, in session...
    $current_user = $_SESSION['logged_user_infos_ar']['username_user'];
    if($_SESSION['logged_user_infos_ar']['user_type_user'] === $users_table_user_type_administrator_value) {
      $current_user_is_administrator = 1;
    }
    // ... but not if not admin for admin page
    // the $business_logic_included and table_exists - needed for install.php during first install and possibly when Interface Creator is backend
    if(($enable_admin_authentication === 1 and isset($admin_check) and $admin_check == 1) and $current_user_is_administrator === 0) {
      if($business_logic_included === 1 and table_exists($users_table_name)) {
        header('Location: ' . $site_url . $dadabik_login_file . '?function=admin&login_message=' . rawurlencode($login_messages_ar['incorrect_admin_login']) . '&go_to=(' . rawurlencode($_SERVER['FULL_URL']) . ')');
        exit;
      }
      elseif(!isset($business_logic_included)) {
        header('Location: ' . $site_url . $dadabik_login_file . '?function=admin&login_message=' . rawurlencode($login_messages_ar['incorrect_admin_login']) . '&go_to=(' . rawurlencode($_SERVER['FULL_URL']) . ')');
        exit;
      }
    }
  }
  else {
    // fail as not in session
    if($enable_admin_authentication === 1 and isset($admin_check) and $admin_check === 1) {
      $function = 'admin';
    }
    else {
      $function = 'regular';
    }
    // do nothing if admin page and admin auth is off
    // the IF for $business_logic_included and table_exists: needed for install.php during first install and possibly when Interface Creator is backend
    if(($enable_authentication === 1 and isset($admin_check) and $admin_check !== 1) or ($enable_admin_authentication === 1 and isset($admin_check) and $admin_check === 1)) {
      if($business_logic_included === 1 and table_exists($users_table_name)) {
        header('Location: ' . $site_url . $dadabik_login_file . '?function=' . $function . '&go_to=(' . rawurlencode($_SERVER['FULL_URL']) . ')');
        exit;
      }
      elseif(!isset($business_logic_included)) {
        header('Location: ' . $site_url . $dadabik_login_file . '?function=' . $function . '&go_to=(' . rawurlencode($_SERVER['FULL_URL']) . ')');
        exit;
      }
    }
    elseif($enable_authentication === 1) {
      header('Location: ' . $site_url . $dadabik_login_file . '?function=' . $function . '&go_to=(' . rawurlencode($_SERVER['FULL_URL']) . ')');
      exit;
    }
  }
}
else {
  // no auth. needed, but still use session values if available
  if(!empty($_SESSION['logged_user_infos_ar'])) {
    $current_user = $_SESSION['logged_user_infos_ar']['username_user'];
    if($_SESSION['logged_user_infos_ar']['user_type_user'] === $users_table_user_type_administrator_value) {
      $current_user_is_administrator = 1;
    }
  }
}