include("inc/layout.php"); include 'xor_encrypt.php'; define("EVENT_FILE", '/var/www/html/events.txt'); define("COOKIENAME", "rvpkauth"); define("PASSWD", "SisuAuto"); define("XORPASS", '213klasd034kadf+45ösfasfa+5adfsacöä2+f'); header("Cache-Control: no-cache"); // HTTP/1.1 header("Expires: Sat, 26 Jul 1997 05:00:00 GMT"); // Date in the // ----------------------------------------------------------------- // Logout if necessary if ($_REQUEST["logout"]) { setcookie (COOKIENAME, "", time() - 3600); header('Location: events.php'); exit(0); } // Handle login form $userId = ""; $userPwd = ""; $loggedIn = false; if ($_REQUEST["loginuid"]) { $userId = strtoupper($_REQUEST["loginuid"]); } if ($_COOKIE[COOKIENAME]) { ParseLoginCookie(); } if ($userPwd != PASSWD) { if (($_REQUEST["loginpwd"] == PASSWD) && ($_REQUEST["loginuid"] != "")) SetLoginCookie($_REQUEST["loginuid"], $_REQUEST["loginpwd"]); else { DisplayLoginForm(); exit(0); } } // We're logged in $loggedIn = true; // Always read events $events = ReadEvents(date("Y", time())); // Display correct information if ($_REQUEST["save"]) SaveEvent($events); else if ($_REQUEST["edit"]) DisplayEditForm($events, $_REQUEST["edit"], ""); else if ($_REQUEST["delete"]) DeleteEvent($events, $_REQUEST["id"]); else if($_REQUEST["enroll"]) EnrollToEvent($events, $_REQUEST["enroll"], $_REQUEST["mode"]); else DisplayEvents($events); // Exit here exit(0); // ----------------------------------------------------------------- function SetLoginCookie($uid, $pwd) { global $userId, $userPwd; $uid = preg_replace("/[^a-zåäö-]/i","", $uid); $cookieString = $uid . ':' . $pwd; $cookieString = XOREncrypt($cookieString, XORPASS); SetCookie(COOKIENAME, $cookieString); $userId = strtoupper($uid); $userPwd = $pwd; } function ParseLoginCookie() { global $userId, $userPwd; $cookieString = $_COOKIE[COOKIENAME]; $cookieString = XORDecrypt($cookieString, XORPASS); $cookieParts = explode(":", $cookieString, 2); $userId = strtoupper($cookieParts[0]); $userPwd = $cookieParts[1]; } function DisplayLoginForm() { global $userId; $userId = preg_replace("/[^a-zåäö-]/i","", $userId); PageHeader("Kalenteri", "events"); ?>
PageFooter(); } // ----------------------------------------------------------------- function DisplayEditForm($events, $id, $errormsg) { global $userId; // Search for correct event (if not new event) $event = 0; if ($id != "new") { $event = GetEventWithId($events, $id); } // Allow delete $allowDelete = (($id != "") && ($id != "new")); // Some default values for form $responsible = $userId; $enrollchecked = " checked"; if ($_REQUEST["save"]) { // Values from save attempt $eventDate = $_REQUEST["date"]; $eventTime = $_REQUEST["time"]; $title = $_REQUEST["title"]; $responsible = $_REQUEST["responsible"]; $description = $_REQUEST["description"]; $enrollchecked = ($_REQUEST["allowenrollment"] == "Y"?"checked":""); } else if ($id != "new") { // Values from file $eventDate = date("j.n.Y", $event->datestamp); $eventTime = $event->timestring; $title = $event->title; $responsible = $event->responsible; $description = preg_replace('/