Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
adobe.inc	107 B	-rw-r--r--	2008-01-09 07:51
auth.inc	3.52 KB	-rw-r--r--	2025-04-30 14:24
auth.inc.bak	1.12 KB	-rw-r--r--	2025-03-07 12:21
calendar.inc	5.46 KB	-rw-r--r--	2008-01-09 08:36
conf.inc	683 B	-rw-r--r--	2025-03-07 12:21
conf.inc.bak	690 B	-rw-r--r--	2025-03-07 12:21
confdec.inc	364 B	-rw-r--r--	2025-03-07 12:21
createadec.inc	175 B	-rw-r--r--	2008-01-09 07:51
db.inc	146 B	-rw-r--r--	2025-03-07 12:21
declaration.inc	19.69 KB	-rw-r--r--	2026-01-20 15:55
declaration_nav.php	4.76 KB	-rw-r--r--	2025-02-20 10:14
declaration_nav.php4	4.69 KB	-rw-r--r--	2008-01-09 08:36
declaration_nav_int.php	5.87 KB	-rw-r--r--	2021-02-24 09:22
declaration_nav_int.php4	5.96 KB	-rw-r--r--	2015-01-22 06:13
default.css	4.06 KB	-rw-r--r--	2008-01-09 07:51
dont-click.prefs.inc	3.38 KB	-rw-r--r--	2008-01-09 08:36
footer.inc	3.13 KB	-rw-r--r--	2025-05-19 11:13
footer2.inc	157 B	-rw-r--r--	2008-01-09 07:51
func.inc	3.36 KB	-rw-r--r--	2025-01-13 14:32
funcinternational.inc	2.66 KB	-rw-r--r--	2008-01-09 07:51
header.inc	4.12 KB	-rw-r--r--	2025-01-31 07:03
header2.inc	2.05 KB	-rw-r--r--	2008-01-09 08:36
internationalheader.inc	590 B	-rw-r--r--	2008-01-09 07:51
internationalmenu.inc	378 B	-rw-r--r--	2008-01-09 07:51
login_footer.inc	748 B	-rw-r--r--	2008-01-09 07:51
login_header.inc	1.43 KB	-rw-r--r--	2008-01-09 07:51
misc.inc	363 B	-rw-r--r--	2008-01-09 07:51
nav.inc	528 B	-rw-r--r--	2008-01-09 07:51
notice.inc	530 B	-rw-r--r--	2008-01-09 08:36
press.inc	1.53 KB	-rw-r--r--	2008-01-09 08:36
rc4cryptclass.inc	1.27 KB	-rw-r--r--	2008-01-09 07:51
readnext.inc	8.77 KB	-rw-r--r--	2025-03-07 12:21
readnext.inc.bak	6.8 KB	-rw-r--r--	2025-03-07 12:21
readnextold.inc	6.64 KB	-rw-r--r--	2025-03-07 12:21
sched1page2gen.inc	7.65 KB	-rw-r--r--	2025-07-18 08:31
submitcheck.inc	23.74 KB	-rw-r--r--	2025-07-18 09:41
submitcheck.inc.bak	6.28 KB	-rw-r--r--	2025-03-07 12:21
submitcheck2.inc	13.04 KB	-rw-r--r--	2025-07-18 07:32
submitcheck2_A.inc	18.75 KB	-rw-r--r--	2025-07-18 07:47
submitcheck2b.inc	11 KB	-rw-r--r--	2025-07-18 07:47
submitcheck2b_A.inc	14.9 KB	-rw-r--r--	2025-03-07 12:21
submitcheckA.inc	21.38 KB	-rw-r--r--	2025-07-18 07:20
submitcheckqmig.inc	1.35 KB	-rw-r--r--	2025-03-07 12:21
survey_footer.inc	2.35 KB	-rw-r--r--	2008-01-09 07:51
test.html	11.56 KB	-rw-r--r--	2008-01-09 07:51
viewcal.inc	2.33 KB	-rw-r--r--	2008-01-09 08:36
voting_class.inc	11.04 KB	-rw-r--r--	2025-03-07 12:21
work.inc	1.26 KB	-rw-r--r--	2008-01-09 08:36

Rename

<?php

// server should keep session data for AT LEAST 1 hour
ini_set('session.gc_maxlifetime', 3600);

// each client should remember their session id for EXACTLY 1 hour
session_set_cookie_params(3600);

session_start();

$authorized = 1;
$auth = "valid";

include_once($_SERVER['DOCUMENT_ROOT'] . "/php/inc_php7.php");

/*
  if (isset($_REQUEST["PHPSESSID"])) {
  $sessid = $_REQUEST["PHPSESSID"];
  echo $sessid;
  $_COOKIE["PHPSESSID"] = $sessid;
  echo $_COOKIE["PHPSESSID"];
  session_id($sessid);
  }
 */
//	echo $_COOKIE["PHPSESSID"];

include_once($_SERVER['DOCUMENT_ROOT'] . '/cfg/config.php');
include_once($_SERVER['DOCUMENT_ROOT'] . '/echasl23/ewcfg7.php');

$server = EW_CONN_HOST;
$user = EW_CONN_USER;
$pass = EW_CONN_PASS;
$db = EW_CONN_DB;

$conxan = mysql_connect($server, $user, $pass);
mysql_select_db($db, $conxan);

extract($_REQUEST);

$bAuthed = false;
if (!empty($_GET["u"])) {
    $query = "SELECT DISTINCT user_login.contact_id, tblMemberFirms.FirmID, user_login.username
	FROM user_login, OfficeContacts, tblMemberFirmOffices, tblMemberFirms
	WHERE user_login.contact_id=OfficeContacts.ContactsID
        AND OfficeContacts.OfficeID=tblMemberFirmOffices.OfficeID
        AND tblMemberFirmOffices.FirmID=tblMemberFirms.FirmID
        AND MD5(user_login.username) = '" . $_GET["u"] . "'";
    //echo 'Please ignore debug info: ' . $query . '<br />';
    // exit;
    $result = mysql_query($query) or die($query);
    if ($row = mysql_fetch_array($result)) {
        $CID = $row['contact_id'];
        $MemberFirmID = $row["FirmID"];
        $_SESSION["CID"] = $CID;
        $_SESSION["username"] = $row['username'];
        $bAuthed = true;
    } else {
        $bAuthed = false;
    }
} elseif (!empty($_GET["appid"])) {
    $query = "SELECT ApplicationID, Prev_FirmID FROM Applications WHERE MD5(ApplicationID)= '" . $_GET["appid"] . "'";
    // echo 'Please ignore debug info: ' . $query . '<br />';
    // exit;
    $result = mysql_query($query) or die($query);
    if ($row = mysql_fetch_array($result)) {
        $AppID = $row['ApplicationID'];
        $MemberFirmID = $row["FirmID"];
        $_SESSION["AppID"] = $AppID;
        $bAuthed = true;
    } else {
        $bAuthed = false;
    }
} elseif (isset($_SESSION["CID"]) && !empty($_SESSION["CID"])) {
    $bAuthed = true;
    $query = "SELECT DISTINCT user_login.contact_id, tblMemberFirms.FirmID, user_login.username
	FROM user_login, OfficeContacts, tblMemberFirmOffices, tblMemberFirms
	WHERE user_login.contact_id=OfficeContacts.ContactsID
        AND OfficeContacts.OfficeID=tblMemberFirmOffices.OfficeID
        AND tblMemberFirmOffices.FirmID=tblMemberFirms.FirmID
        AND user_login.contact_id = '" . $_SESSION["CID"] . "'";
    // echo 'Please ignore debug info: ' . $query . '<br />';
    // exit;
    $result = mysql_query($query) or die($query);
    if ($row = mysql_fetch_array($result)) {
        $CID = $row['contact_id'];
        $MemberFirmID = $row["FirmID"];
        $_SESSION["CID"] = $CID;
        $_SESSION["username"] = $row['username'];
        $bAuthed = true;
    }
} elseif (isset($_SESSION["username"]) && !empty($_SESSION["username"])) {
    $bAuthed = true;
} elseif (defined("EW_SESSION_USER_NAME") && isset($_SESSION[EW_SESSION_USER_NAME]) && strlen($_SESSION[EW_SESSION_USER_NAME]) > 0) {
    $bAuthed = true;
}

if (!$bAuthed) {
    die("Not authorised");
}

function GetCID() {
    return $_SESSION["CID"];
}

function GetAppID() {
    return $_SESSION["AppID"];
}