Add openid security
[contractdashboard.git] / lib / common.inc.php
blob:a/lib/common.inc.php -> blob:b/lib/common.inc.php
--- a/lib/common.inc.php
+++ b/lib/common.inc.php
@@ -8,6 +8,41 @@
 

 if (!$conn) {

     die("A database error occurred.\n");

+}

+

+define('ROOT' , pathinfo(__FILE__, PATHINFO_DIRNAME));

+if (strstr($_SERVER['PHP_SELF'], "labs/")) {

+    $basePath = "../";

+}

+

+require ROOT . DIRECTORY_SEPARATOR.'..'.DIRECTORY_SEPARATOR.'lib'.DIRECTORY_SEPARATOR.'openid.php';

+$openid = new LightOpenID($_SERVER['HTTP_HOST']);

+

+function login() {

+    global $openid;

+    if (!$openid->mode) {

+        $openid->required = array('contact/email');

+        $openid->identity = 'https://www.google.com/accounts/o8/id';

+        header('Location: ' . $openid->authUrl());

+    }

+}

+

+function auth() {

+    global $openid;

+    if ($_SESSION['authed'] == true) {

+        return true;

+    }

+

+    if ($openid->mode) {

+        $attr = $openid->getAttributes();

+        if ($attr['contact/email'] != 'maxious@gmail.com') {

+            die('Access Denied');

+        } else {

+            $_SESSION['authed'] = true;

+        }

+    } else {

+        login();

+    }

 }

 

 //   $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

@@ -104,14 +139,14 @@
                 @import "media/css/demo_table.css";

             </style> 

             <script type="text/javascript" language="javascript" src="media/js/jquery.dataTables.js"></script> 

-           <script type="text/javascript" language="javascript" src="lib/bootstrap-dropdown.js"></script>

+            <script type="text/javascript" language="javascript" src="lib/bootstrap-dropdown.js"></script>

             <script type="text/javascript" charset="utf-8"> 

                 jQuery.fn.dataTableExt.aTypes.unshift(  

                 function ( sData )  

                 {  

                     var sValidChars = "0123456789.-,";  

                     var Char;  

-                      

+                          

                     /* Check the numeric part */  

                     for ( i=1 ; i<sData.length ; i++ )   

                     {   

@@ -121,7 +156,7 @@
                             return null;  

                         }  

                     }  

-                      

+                          

                     /* Check prefixed by currency */  

                     if ( sData.charAt(0) == '$' || sData.charAt(0) == '£' )  

                     {  

@@ -134,11 +169,11 @@
                     /* Remove any commas (assumes that if present all strings will have a fixed number of d.p) */

                     var x = a == "-" ? 0 : a.replace( /,/g, "" );

                     var y = b == "-" ? 0 : b.replace( /,/g, "" );

-            	

+                	

                     /* Remove the currency sign */

                     x = x.substring( 1 );

                     y = y.substring( 1 );

-            	

+                	

                     /* Parse and return */

                     x = parseFloat( x );

                     y = parseFloat( y );

@@ -149,11 +184,11 @@
                     /* Remove any commas (assumes that if present all strings will have a fixed number of d.p) */

                     var x = a == "-" ? 0 : a.replace( /,/g, "" );

                     var y = b == "-" ? 0 : b.replace( /,/g, "" );

-            	

+                	

                     /* Remove the currency sign */

                     x = x.substring( 1 );

                     y = y.substring( 1 );

-            	

+                	

                     /* Parse and return */

                     x = parseFloat( x );

                     y = parseFloat( y );

@@ -175,30 +210,30 @@
                             <li><a href="displaySupplier.php">suppliers</a></li>

                             <li><a href="displayCategory.php">categories</a></li>

                             <li><a href="displayCalendar.php">time periods</a></li>

-                          <!--  <li class="dropdown">

-                                <a href="#" class="dropdown-toggle">metrics</a>

-                                <ul class="dropdown-menu">-->

-                                    <li><a href="displayProcurementMethod.php">tenderm</a></li>

-                                    <li><a href="displayConfidentialities.php">confidentiality</a></li>

-                                    <li><a href="displayConsultancies.php">consultancies</a></li>

-                                    <li><a href="displayAmendments.php">amendments</a></li>

-                                    <li><a href="displayMap.php">geo</a></li>

-                              <!--  </ul>

-                            </li>-->

+                            <!--  <li class="dropdown">

+                                  <a href="#" class="dropdown-toggle">metrics</a>

+                                  <ul class="dropdown-menu">-->

+                            <li><a href="displayProcurementMethod.php">tenderm</a></li>

+                            <li><a href="displayConfidentialities.php">confidentiality</a></li>

+                            <li><a href="displayConsultancies.php">consultancies</a></li>

+                            <li><a href="displayAmendments.php">amendments</a></li>

+                            <li><a href="displayMap.php">geo</a></li>

+                            <!--  </ul>

+                          </li>-->

                         </ul>  

-                       

-

-                            <form method="post" action="search.php" class="pull-right">

-                                <input type="text" id="searchKeyword" name="searchKeyword"  value="" placeholder="Search" />

-                                <input type="hidden" id="searchID" name="searchID" value=""/>

-                            </form>

-                        

+

+

+                        <form method="post" action="search.php" class="pull-right">

+                            <input type="text" id="searchKeyword" name="searchKeyword"  value="" placeholder="Search" />

+                            <input type="hidden" id="searchID" name="searchID" value=""/>

+                        </form>

+

                     </div>

                 </div><!-- /topbar-inner -->

             </div><!-- /topbar -->

         </div><!-- /topbar-wrapper -->

         <script type="text/javascript">

-            	

+                	

             var options_xml = {

                 script: function (input) { return "search_autosuggest.php?input="+input; },

                 varname:"input",

@@ -210,25 +245,25 @@
             <div class="sidebar">

                 <div class="well">

                     Filter by:<li>

-                        <li>year

-                            <li><li>2008</li>

-                            </li>

-                        </li>

+                    <li>year

+                    <li><li>2008</li>

+                    </li>

+                    </li>

                     </li> <br>       

                 </div> </div>

-        <div class="content">

-            <?php

-            $start = (float) array_sum(explode(' ', microtime()));

-        }

-

-        function include_footer() {

-            global $start;

-            $end = (float) array_sum(explode(' ', microtime()));

-

-            echo '  <footer>' . "Processing time: " . sprintf("%.4f", ($end - $start)) . " seconds" . '  <footer>';

-            echo '</div> </div></body> </html>';

-        }

-

-        include ("graphs.inc.php");

-        ?>

+            <div class="content">

+                <?php

+                $start = (float) array_sum(explode(' ', microtime()));

+            }

+

+            function include_footer() {

+                global $start;

+                $end = (float) array_sum(explode(' ', microtime()));

+

+                echo '  <footer>' . "Processing time: " . sprintf("%.4f", ($end - $start)) . " seconds" . '  <footer>';

+                echo '</div> </div></body> </html>';

+            }

+

+            include ("graphs.inc.php");

+            ?>