first commit

2026-05-22 08:49:20 +07:00
commit 2884ce69f1
90 changed files with 13308 additions and 0 deletions
@@ -0,0 +1,80 @@
+<?php
+
+/*******************************************************************
+
+    Module        : /auth.php
+    Desc.         : PHP Page - Halaman Identifikasi Akses
+    Created By    : Siau Pheng ([email protected]).
+    Created Date  : November 20th, 2016.
+    Last Modified : March 26th, 2023.
+
+    (c) 2016 - 2023, 3FONIA Software; WWW.3FONIA.COM.
+
+*******************************************************************/
+
+require_once(__DIR__."/../../vendor/autoload.php");
+
+if (!isset($_SESSION['__WEB_APP'])) {
+    require_once(__DIR__."/apps/cfg/app.php");
+}
+
+use siaupheng\fonia3\DB\MySQL;
+use siaupheng\fonia3\Web\Auth;
+use siaupheng\fonia3\Web\Param;
+use siaupheng\fonia3\Web\Menu;
+
+$db = $db ?? new MySQL();
+$auth = new Auth($db);
+$ajson = [];
+$mode = Param::Get("mode", "");
+
+if ($mode == "auth") {
+    $data = Param::Get("data", "");
+    $ajson = ['status' => 0, 'pesan' => ""];
+
+    if ($data == "super-check") {
+        $bsuper = (Param::Get("SUPER","true") == "true") ? true : false;
+        $buover = (Param::Get("UOVER","false") == "true") ? true : false;
+        if (!$auth->user_check_level(Param::Get("UID"), $_SESSION['__WEB_APP']['AUTH_LEVEL']) && $bsuper == true) {
+            $ajson['status'] = 0;
+            $ajson['pesan'] = "Silakan hubungi Supervisor / Administrator Anda!";
+        } else {
+            if (!$auth->user_check(Param::Get("UID"), Param::Get("PWD"))) {
+                $ajson['status'] = 0;
+                $ajson['pesan'] = "User ID atau Password Anda Salah!<br>Anda tidak diijinkan melanjutkan proses!";
+            } else {
+                $ajson['status'] = 1;
+                if ($buover == true && $bsuper == false && Param::Get("UID") <> $_SESSION['__WEB_USER']['Username']) {
+                    $new_sess = $auth->user_data(Param::Get("UID"));
+                    foreach ($new_sess as $_key => $_val) {
+                        if ($_SESSION['__WEB_USER'][$_key]) $_SESSION['__WEB_USER'][$_key] = $_val;
+                    }
+                }
+            }
+        }
+
+    } elseif ($data == "super-request") {
+        $db->Query("DELETE FROM app_auth WHERE UserID='".user_id()."' AND Kode='".Param::Get("KODE")."' AND SID='".Param::Get("REQ_SID")."' AND REQ='".Param::Get("REQ")."' AND Auth=0");
+        $db->Query("INSERT INTO app_auth SET UserID='".user_id()."',Kode='".Param::Get("KODE")."',SID='".Param::Get("REQ_SID")."',REQ='".Param::Get("REQ")."',Catatan='".Param::Get("MSG")."',Tanggal=NOW()");
+
+    } elseif ($data == "super-cancel") {
+        $db->Query("DELETE FROM app_auth WHERE UserID='".user_id()."' AND Kode='".Param::Get("KODE")."' AND SID='".Param::Get("REQ_SID")."' AND REQ='".Param::Get("REQ")."'");
+
+    } elseif ($data == "request-check") {
+        $db->Query("SELECT Auth FROM app_auth WHERE UserID='".user_id()."' AND Kode='".Param::Get("KODE")."' AND SID='".Param::Get("REQ_SID")."' AND REQ='".Param::Get("REQ")."'");
+        if ($db->Next() && $db->Row("Auth",0) == 1) $ajson['status'] = 1;
+    }
+
+} else {
+    $page = Param::Get("p", "");
+    $query = Param::Get("q", "");
+    $ajson['login'] = false;
+
+    if (user_logged() && $page<>"") {
+        $ajson = Menu::MenuJSON($db, $page, $query);
+    }
+    $auth->token_update();
+}
+
+send_json($ajson);
+?>