source: trunk/admin/admin.php@ 360

Last change on this file since 360 was 360, checked in by roby, 2 years ago

ATTENZIONE: con questa rev viene cambiato il charset che da ora viene impostato su utf8. Fate tutte le vostre verifiche prima di installarla.
Seconda fase di rivisitazione e completamento delle funzioni necessarie per l'accesso al servizio tramite cellulare.
Effettuate alcune sistemazioni per gli avvisi di incongruenza.
File size: 22.5 KB
Line 
1<?php
2
3/************************************************************************/
4/* Eleonline - Raccolta e diffusione dei dati elettorali */
5/* by Roberto Gigli & Luciano Apolito */
6/* http://www.eleonline.it */
7/* info@eleonline.it luciano@aniene.net rgigli@libero.it */
8/************************************************************************/
9/* Admin */
10/* Amministrazione */
11/************************************************************************/
12
13/* Descrizione file admin.php =
14effettua il login o il rilancio alla gestione */
15
16define('ADMIN_FILE', true);
17#$LIMITE=3; //fascia di separazione del maggioritario (15.000 abitanti)
18# tempo di sessione: ini_set('session.gc_maxlifetime','3600');
19global $multicomune,$msglogout,$language;
20
21// Adattamento variabili superglobal
22// Versione di php
23$phpver = phpversion();
24global $dbi;
25// converte superglobal se php e' < 4.1.0
26
27if ($phpver < '4.1.0') {
28 $_GET = $HTTP_GET_VARS;
29 $_POST = $HTTP_POST_VARS;
30 $_SERVER = $HTTP_SERVER_VARS;
31 $_FILES = $HTTP_POST_FILES;
32 $_ENV = $HTTP_ENV_VARS;
33 if($_SERVER['REQUEST_METHOD'] == "POST") {
34 $_REQUEST = $_POST;
35 } elseif($_SERVER['REQUEST_METHOD'] == "GET") {
36 $_REQUEST = $_GET;
37 }
38 if(isset($HTTP_COOKIE_VARS)) {
39 $_COOKIE = $HTTP_COOKIE_VARS;
40 }
41 if(isset($HTTP_SESSION_VARS)) {
42 $_SESSION = $HTTP_SESSION_VARS;
43 }
44}
45
46$param=strtolower($_SERVER['REQUEST_METHOD']) == 'get' ? $_GET : $_POST;
47if (isset($param['aid'])) $aid=addslashes($param['aid']); else $aid='';
48if (isset($param['pwd'])) $pwd2=addslashes($param['pwd']); else $pwd2='';
49if(isset($param['msglogout'])) $msglogout=intval($param['msglogout']); else $msglogout=0;
50
51// Additional security (Union, CLike, XSS)
52
53// We want to use the function stripos,
54// but thats only available since PHP5.
55// So we cloned the function...
56if(!function_exists('stripos')) {
57 function stripos_clone($haystack, $needle, $offset=0) {
58 return strpos(strtoupper($haystack), strtoupper($needle), $offset);
59 }
60} else {
61// But when this is PHP5, we use the original function
62 function stripos_clone($haystack, $needle, $offset=0) {
63 return stripos($haystack, $needle, $offset=0);
64 }
65}
66
67 if(isset($_SERVER['QUERY_STRING']) && (!stripos_clone($_SERVER['QUERY_STRING'], "ad_click") || !stripos_clone($_SERVER['QUERY_STRING'], "url"))) {
68 $queryString = $_SERVER['QUERY_STRING'];
69 if (stripos_clone($queryString,'%20union%20') OR stripos_clone($queryString,'/*') OR stripos_clone($queryString,'*/union/*') OR stripos_clone($queryString,'c2nyaxb0') OR stripos_clone($queryString,'+union+') OR stripos_clone($queryString,'http://') OR (stripos_clone($queryString,'cmd=') AND !stripos_clone($queryString,'&cmd')) OR (stripos_clone($queryString,'exec') AND !stripos_clone($queryString,'execu')) OR stripos_clone($queryString,'concat')) {
70 die('Operazione non consentita');
71 }
72 }
73
74
75foreach ($_GET as $sec_key => $secvalue) {
76 if ((preg_match("/<[^>]*script*\"?[^>]*>/i",$secvalue)) ||
77 (preg_match("/<[^>]*object*\"?[^>]*>/i", $secvalue)) ||
78 (preg_match("/<[^>]*iframe*\"?[^>]*>/i", $secvalue)) ||
79 (preg_match("/<[^>]*applet*\"?[^>]*>/i", $secvalue)) ||
80 (preg_match("/<[^>]*meta*\"?[^>]*>/i", $secvalue)) ||
81 (preg_match("/<[^>]*style*\"?[^>]*>/i", $secvalue)) ||
82 (preg_match("/<[^>]*form*\"?[^>]*>/i", $secvalue)) ||
83 (preg_match("/<[^>]*img*\"?[^>]*>/i", $secvalue)) ||
84 (preg_match("/<[^>]*onmouseover*\"?[^>]*>/i", $secvalue)) ||
85 (preg_match("/<[^>]*body*\"?[^>]*>/i", $secvalue)) ||
86 (preg_match("/\"/", $secvalue)) ||
87 (preg_match("/inside_mod/i", $sec_key))) {
88 die ("Operazione non consentita");
89 }
90 }
91
92 foreach ($_POST as $secvalue) {
93 if ((preg_match("/<[^>]*onmouseover*\"?[^>]*>/i", $secvalue)) || (preg_match("/<[^>]script*\"?[^>]*>/i", $secvalue)) || (preg_match("/<[^>]*body*\"?[^>]*>/i", $secvalue)) || (preg_match("/<[^>]style*\"?[^>]*>/i", $secvalue))) {
94 die ('Operazione non consentita');
95 }
96 }
97
98// Posting from other servers in not allowed
99// Fix by Quake
100// Bug found by PeNdEjO
101
102if ($_SERVER['REQUEST_METHOD'] == "POST") {
103 if (isset($_SERVER['HTTP_REFERER'])) {
104 if (!stripos_clone($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST'])) {
105 die('Posting da un altro server non consentito!');
106 }
107 } else {
108# die('<b>Attenzione:</b> il tuo browser non puo inviare gli header HTTP_REFERER al website.<br>'.$_SERVER['HTTP_REFERER']);
109 }
110}
111
112
113
114
115
116
117
118//===================================================================
119session_name('sesadmin');
120#session_start();//MODIFICHE PER GESTIONE SESSIONI
121 // gestione sessione
122$a = session_id();
123if(empty($a)) session_start();
124#echo "SID: ".SID."<br>session_id(): ".session_id()."<br>COOKIE: ".$_COOKIE["PHPSESSID"];
125
126if (file_exists("config.php")){
127 $install="0"; @require_once("config.php");
128}else{
129 $install="1";
130}
131
132# verifica se effettuata la configurazione
133if(empty($dbname) || $install=="1") {
134 die("<html><body><div style=\"text-align:center\"><br /><br /><img src=\"modules/Elezioni/images/logo.jpg\" alt=\"Eleonline\" title=\"Eleonline\"><br /><br /><strong>Sembra che <a href='http://www.eleonline.it' title='Eleonline'>Eleonline</a> non sia stato ancora installato.<br /><br />Puoi procedere <a href='../install/index.php'>cliccando qui</a> per iniziare l'installazione</strong></div></body></html>");
135}
136
137
138
139
140 try{
141 $dbi = new PDO("mysql:host=$dbhost;charset=utf8", $dbuname, $dbpass, array(PDO::ATTR_EMULATE_PREPARES => false, PDO::ATTR_ERRMODE=>PDO::ERRMODE_EXCEPTION));
142 $sql = "use $dbname";
143 $dbi->exec($sql);
144 }
145 catch(PDOException $e)
146 {
147 echo $sql . "<br>" . $e->getMessage();
148 }
149 $sth = $dbi->prepare("SET SESSION character_set_connection = 'utf8' ");
150 $sth->execute();
151 $sth = $dbi->prepare("SET SESSION character_set_client = 'utf8' ");
152 $sth->execute();
153 $sth = $dbi->prepare("SET SESSION character_set_database = 'utf8' ");
154 $sth->execute();
155 $sth = $dbi->prepare("SET CHARACTER SET utf8");
156 $sth->execute();
157
158 $sth = $dbi->prepare("SET NAMES 'utf8'");
159 $sth->execute();
160 $sth = $dbi->prepare("select * from ".$prefix."_config");
161 $sth->execute();
162
163# $dbi=mysql_connect($dbhost, $dbuname, $dbpass) or die("Connessione non riuscita: " . mysql_error());
164# mysql_select_db($dbname)or die("Connessione non riuscita:" . mysql_error());
165## mysql_query("SET NAMES 'utf8'", $dbi);
166//---10/05/2009 gestione consultazione predefinita
167 $sth = $dbi->prepare("select * from ".$prefix."_config");
168 $sth->execute();
169 $row = $sth->fetch(PDO::FETCH_ASSOC);
170 #$row = $sth->fetchAll();
171 $siteistat=$row['siteistat'];
172if (!isset($_SESSION['id_comune'])){
173 $_SESSION['sitename']=$row['sitename'];
174 $_SESSION['siteurl']=$row['siteurl'];
175 $_SESSION['site_logo']=$row['site_logo'];
176 $_SESSION['slogan']=$row['slogan'];
177 $_SESSION['startdate']=$row['startdate'];
178 $_SESSION['adminmail']=$row['adminmail'];
179# if (isset($tema) and $tema=='facebook')
180# $_SESSION['tema']=$row['tema'];
181 $_SESSION['foot']=$row['foot'];
182 $_SESSION['lang']=$row['language'];
183 $_SESSION['blocco']=$row['blocco'];
184 $_SESSION['testata']=$row['testata'];
185# $_SESSION['logo']=$row['logo'];
186 $_SESSION['fileout']=$row['fileout'];
187 $_SESSION['copyright']=$row['copyright'];
188 $_SESSION['versione']=$row['versione'];
189 $_SESSION['patch']=$row['patch'];
190 $_SESSION['id_comune']=$row['siteistat'];
191 $_SESSION['multicomune']=$row['multicomune'];
192 $_SESSION['flash']=$row['flash'];
193 $_SESSION['displayerrors']=$row['displayerrors'];
194 $_SESSION['editor']=$row['editor'];
195 $_SESSION['tema_on']=$row['tema_on'];
196 $_SESSION['ed_user']=$row['ed_user'];
197 $multicomune=$row['multicomune'];
198}
199//fine
200 if (isset($param['tema'])) $_SESSION['tema']=$param['tema'];
201 if (!isset($_SESSION['tema']))
202 $_SESSION['tema']='default';
203 $tema=$_SESSION['tema'];
204
205if (isset($param['aid'])) {
206 if (strlen($aid)>25 ) { die ("Nome utente troppo lungo: $aid"); }
207 if (!isset($param['id_ses']) or $param['id_ses'] != session_id()) logout();
208 if (strstr( $aid," ")) { die ("Gli spazi non sono ammessi nel nome utente: $aid"); }
209 if (isset($_SESSION['aid'])){
210 logout();//se hai gia' una sessione aperta non puoi postare 'aid'
211 }else{
212
213 // $pwd2=$param['pwd'];
214 $mpwd=md5($pwd2);
215
216 // se superUserAdmin
217 ########
218 # $sth = $dbi->prepare("select adminsuper from ".$prefix."_authors where aid='$aid' and pwd='$mpwd'");
219 # $sth->execute();
220 # $row = $sth->fetch(PDO::FETCH_ASSOC);
221 if (isset($param['id_comune']) and intval($param['id_comune'])>0) $id_comune=intval($param['id_comune']); else $id_comune=0;;
222 # if ($adminsuper==1) $id_comune2=0; else
223 $id_comune2=$id_comune;
224 $sth = $dbi->prepare("select pwd,adminop,adminsuper,counter,admlanguage from ".$prefix."_authors where aid='$aid' and (id_comune='$id_comune2' or adminsuper='1')");
225 $sth->execute();
226 $esiste=$sth->rowCount();
227 # $adminsuper=$row['adminsuper'];
228 $row = $sth->fetch(PDO::FETCH_ASSOC);
229 if(!$esiste) {
230 $msglogout=2;
231 logout();
232 }else{
233 if ($row['pwd']!=$mpwd) {
234 $msglogout=3;
235 logout();
236 }elseif($row['adminop']==1) {
237 $msglogout=1;
238 logout();
239 }
240 $counter=$row['counter'];
241 $tmplang=$row['admlanguage'];
242 if(strlen($tmplang)==2) $language=$tmplang;
243 $sth = $dbi->prepare("update ".$prefix."_authors set counter=$counter where aid='$aid' and pwd='$mpwd' and id_comune='$id_comune2'");
244 $sth->execute();
245# $row = $sth->fetch(PDO::FETCH_ASSOC);
246 if ($esiste==1) {
247# $_SESSION['dbi']=$dbi;
248 $_SESSION['aid']="$aid";
249 $_SESSION['pwd']="$mpwd";
250 $_SESSION['lang']="$language";
251 $_SESSION['id_comune']="$id_comune";
252 $_SESSION['prefix']="soraldo";
253 $_SESSION['remote']=$_SERVER['REMOTE_ADDR'];
254 $_SESSION['bgcolor1']='#ffffff';
255 $_SESSION['bgcolor2']='#c5c5c5';
256 if (!isset($op)) $op='consultazione';
257 session_regenerate_id();
258 }
259 }
260 }
261}else{
262#$_SESSION['dbi']=$dbi;
263
264}
265if(!isset($_SESSION['BASE'])) $_SESSION['BASE']=substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['REQUEST_URI'], "/")-16);
266if(!isset($language)) $language=$_SESSION['lang'];
267if (! isset($_SESSION['lang'])) $_SESSION['lang']=$language;
268$currentlang=strlen($_SESSION['lang'])==2 ? $_SESSION['lang']: $language;
269
270if (isset($_SESSION['aid']))
271{
272//lettura sessione
273$aid=$_SESSION['aid'];
274#$dbi=$_SESSION['dbi'];
275$prefix=$_SESSION['prefix'];
276$id_comune=$_SESSION['id_comune'];
277if($id_comune==0) $rifcomune='58047'; else $rifcomune=$id_comune;
278if (isset($_GET['id_cons_gen'])) {$id_cons_gen=intval($_GET['id_cons_gen']);}
279else {
280 $oggi=date("Y-m-d",mktime(0,0,0,date("m"),date("d")-3,date("Y")));
281 $sql="select t1.id_cons_gen from ".$prefix."_ele_consultazione as t1, ".$prefix."_ele_cons_comune as t2 where t1.id_cons_gen=t2.id_cons_gen and t2.id_comune=$id_comune and t1.data_fine>'$oggi' and t2.id_cons in (select id_cons from ".$prefix."_ele_operatori where aid='$aid' and id_sez>0 and permessi>0) limit 0,1";
282 $rese = $dbi->prepare("$sql");
283 $rese->execute();
284 if($rese->rowCount())
285 {list($id_cons_gen)=$rese->fetch(PDO::FETCH_NUM); }
286 else {
287 $sql="SELECT t1.id_cons_gen FROM ".$prefix."_ele_cons_comune as t1, ".$prefix."_ele_comuni as t2 where t1.id_cons=t2.id_cons and t2.id_comune='$id_comune'";
288 $sth = $dbi->prepare($sql);
289 $sth->execute();
290 $row = $sth->fetch(PDO::FETCH_BOTH);
291 if($sth->rowCount())
292 $id_cons_gen=$row[0];
293 else
294 $id_cons_gen=0; #die("TEST IN CORSO : idconsgen: $id_cons_gen -- sql:$sql");
295 }
296}
297$currentlang=$_SESSION['lang'];
298#$bgcolor1=$_SESSION['bgcolor1'];
299$bgcolor2=$_SESSION['bgcolor2'];
300$bgcolor1='#e7e7e7';
301$session=$_SESSION['remote'];
302
303$perms=ChiSei($id_cons_gen); #die("qui".$_SESSION['aid']);
304if($perms==0) {logout();}
305}
306
307
308/*********************************************************/
309/* Login Function */
310/*********************************************************/
311function ChiSei($id_cons_gen){
312global $dbi, $msglogout;
313
314$aid=$_SESSION['aid'];
315$prefix=$_SESSION['prefix'];
316$pwd=$_SESSION['pwd'];
317$id_comune=$_SESSION['id_comune'];
318
319$perms=0;
320$sql="select adminsuper, admincomune, adminop from ".$prefix."_authors where aid='$aid' and pwd='$pwd' and (id_comune='$id_comune' or id_comune=0)";
321$sth = $dbi->prepare("$sql");
322$sth->execute();
323$row = $sth->fetch(PDO::FETCH_BOTH);
324
325$adminsuper=$row[0];
326$admincomune=$row[1];
327$adminop=$row[2];
328
329#if (($adminsuper==1 || $admincomune==1 || $adminop==1)) {
330 if ($adminsuper==1)
331 return 256;
332 elseif ($admincomune==1)
333 return 64;
334# $sth = $dbi->prepare("select permessi from ".$prefix."_ele_operatori where id_cons='0' and aid='$aid' and id_comune='$id_comune'");
335
336 $sth = $dbi->prepare("select id_cons from ".$prefix."_ele_cons_comune where id_comune='$id_comune' and id_cons_gen='$id_cons_gen'");
337 $sth->execute();
338 $row = $sth->fetch(PDO::FETCH_BOTH);
339 $id_cons=$row[0];
340 $sth = $dbi->prepare("select permessi from ".$prefix."_ele_operatori where id_cons='$id_cons' and aid='$aid' and id_comune='$id_comune'");
341
342 $sth->execute();
343 $row = $sth->fetch(PDO::FETCH_BOTH);
344 if($row[0]==0) $msglogout=1;
345 if ($sth->rowCount()==1) $perms=$row[0]; else { $msglogout=1; $perms=0; }
346
347 return $perms;
348#} else return 0;
349}
350
351function OpenTable(){
352echo "<table width=\"100%\" cellpadding=\"0\" cellspacing=\"2\" BORDER=\"0\">";
353}
354
355function CloseTable(){
356echo "</table>";
357}
358
359function login() {
360 global $param,$prefix,$dbi,$multicomune,$siteistat,$language,$tema, $id_cons_gen, $perms, $msglogout;
361 if (isset($param['id_comune'])) $id_comune=intval($param['id_comune']);
362 if (!isset($id_comune)) $id_comune=0;
363 if(isset($_SESSION['aid'])){
364 session_regenerate_id();
365 }
366 $lang=(isset($_SESSION['lang']) and strlen($_SESSION['lang'])==2) ? $_SESSION['lang']: $language;
367 $id_ses=session_id();
368
369 //include("modules/Elezioni/language/lang-$lang.php");
370 if($multicomune==''){
371 $sth = $dbi->prepare("select multicomune from ".$prefix."_config");
372 $sth->execute();
373 list($multicomune) = $sth->fetch(PDO::FETCH_NUM);
374 }
375 include ("header.php");
376 echo "<div align=\"middle\"><font class=\"title\"><b>"._GESTIONE."</b></font></center>";
377 echo "<br>"; # method=\"post\"
378 if ($msglogout==1) echo "<h1 style=\"color:red;\">Utente non autorizzato</h1><br>";
379 elseif ($msglogout==2) echo "<h1 style=\"color:red;\">Nome Utente non presente in archivio</h1><br>";
380 elseif ($msglogout==3) echo "<h1 style=\"color:red;\">Password Errata</h1><br>";
381 echo "<form name=\"login\" data-ajax=\"false\" method=\"post\" action=\"admin.php\">"
382 ."<table class=\"table-menu\">"
383 ."<tr><td>"._ADMINID."</td>"
384 ."<td><input type=\"text\" NAME=\"aid\" SIZE=\"20\" MAXLENGTH=\"25\"></td></tr>"
385 ."<tr><td>"._PASSWORD."</td>"
386 ."<td><input type=\"password\" NAME=\"pwd\" SIZE=\"20\" MAXLENGTH=\"18\"></td></tr>"
387 ."<tr><td>";
388 // scelta comune
389 if($multicomune=='1'){
390 echo ""._COMUNE."</td><td>";
391 $sql="select * from ".$prefix."_ele_comuni order by descrizione asc";
392 $sth = $dbi->prepare("$sql");
393 $sth->execute();
394 $row = $sth->fetchAll();
395 echo "<select name=\"id_comune\">";
396 foreach($row as $comuni)
397 {$id=$comuni[0];$descrizione=$comuni[1];
398 $sel=($id == $id_comune) ? "selected":"";
399 echo "<option value=\"$id\" $sel>$descrizione";
400 }
401 }else{
402 echo "<input type=\"hidden\" name=\"id_comune\" value=\"$siteistat\">";
403 }
404// echo "<input type=\"hidden\" name=\"id_comune\" value=\"$id_comune\">";
405 if(strlen($lang)==2) echo "<input type=\"hidden\" name=\"language\" value=\"$lang\">";
406 echo "</td></tr><tr><td>";
407 echo "<input type=\"hidden\" name=\"id_ses\" value=\"$id_ses\">";
408 echo "<input type=\"submit\" VALUE=\""._OK."\">"
409 ."</td></tr></table>"
410 ."</form></div>";
411
412 include ("footer.php");
413}
414
415function logout()
416{
417/* $lang=$_SESSION['lang'];
418$id_comune=$_SESSION['id_comune'];
419// setcookie ("PHPSESSID", "", time() - 3600);
420 session_cache_expire (0);
421 $_SESSION=array(); //MODIFICHE PER GESTIONE SESSIONI
422 session_unset();
423 session_destroy();
424 Header("Location: admin.php?id_comune=$id_comune&language=$lang");
425*/
426
427global $siteistat,$perms,$msglogout;
428$language=$_SESSION['lang'];
429$ref="Location: admin.php?";
430#$ref="Location: https://www.eleonline.it/adminmob/admin.php?";
431if (isset($_SESSION['id_comune']))
432$id_comune=$_SESSION['id_comune'];
433else
434$id_comune=$siteistat;
435$ref=$ref."id_comune=".$id_comune;
436
437if (isset($_SESSION['lang']))
438$ref=$ref."&language=$language";
439$ref.="&msglogout=$msglogout";
440$_SESSION=array();
441session_unset();
442session_destroy();
443session_cache_expire (0);
444Header($ref);
445
446}
447#include("TEST tema: $tema--");
448#include("modules/Elezioni/language/lang-".$_SESSION['lang'].".php");
449if(isset($id_cons_gen) and isset($id_comune)){
450 if(!isset($id_cons)){
451# $sql = "SELECT t2.id_cons FROM ".$prefix."_ele_consultazione as t1, ".$prefix."_ele_cons_comune as t2 where t1.id_cons_gen=t2.id_cons_gen and t2.id_cons_gen='$id_cons_gen' and t2.id_comune='$id_comune'";
452 $sql = "SELECT id_cons from ".$prefix."_ele_comuni where id_comune='$id_comune'";
453 $sth = $dbi->prepare("$sql");
454 $sth->execute();
455 if ($sth->rowCount()) {
456 list($id_cons) = $sth->fetch(PDO::FETCH_NUM);
457 $_SESSION['id_cons']=$id_cons;
458 }
459 }
460 if(isset($id_cons)) {
461 $sql="SELECT id_sez FROM ".$prefix."_ele_operatori where id_sez>0 and aid='$aid' and id_comune=$id_comune";
462 $resmod = $dbi->prepare("$sql");
463 $resmod->execute();
464 list($id_sez) = $resmod->fetch(PDO::FETCH_NUM); #die("qui:$id_sez:$sql");
465 if($id_sez) {
466 $oggi=date("Y-m-d",mktime(0,0,0,date("m"),date("d")-3,date("Y")));
467 $sql="select t1.id_cons_gen,t1.descrizione,t2.id_cons from ".$prefix."_ele_consultazione as t1, ".$prefix."_ele_cons_comune as t2 where t1.id_cons_gen=t2.id_cons_gen and t2.id_comune=$id_comune and t1.data_fine>'$oggi' and t2.id_cons in (select id_cons from ".$prefix."_ele_operatori where aid='$aid' and id_sez>0 and permessi>0)";
468 $resmod = $dbi->prepare("$sql");
469 $resmod->execute();
470 if ($resmod->rowCount()>0) {
471 $tema='Futura2'; #die( "TEST id_cons:$id_cons:".$_SESSION['aid']);
472 $_SESSION['tema']=$tema;
473 } else logout();
474 }
475 }
476}
477
478
479#echo "op:".$param['op']." -- aid:".$_SESSION['aid']."remote:".$_SESSION['remote']."REMOTE:".$_SERVER['REMOTE_ADDR'];
480if (isset($param['op'])) $op=addslashes($param['op']); else $op='ele';
481//if (isset($param['op'])) $op=$param['op']; else $op='ele';
482#
483#die("TEST: qui $aid $id_cons $id_sez ".$_SESSION['aid']);
484if (isset($_SESSION['aid']) AND $_SESSION['remote']==$_SERVER['REMOTE_ADDR']) {
485 if($tema=='Futura2' and $op!='logout')
486 {
487 include("temi/$tema/index.php");
488 }else
489switch($op) {
490 case "tipo":
491 include("modules/Elezioni/ele_tipi.php");
492 break;
493 case "constipi":
494 include("modules/Elezioni/ele_consultazionitipi.php");
495 break;
496 case "aggiorna":
497 include("modules/Elezioni/aggiorna.php");
498 break;
499 case "parziali":
500 include("modules/Elezioni/ele_parziali.php");
501 break;
502 case "ele":
503 include("modules/Elezioni/ele.php");
504 break;
505 case "consultazione":
506 include("modules/Elezioni/ele_consultazioni.php");
507 break;
508 case "configurazione":
509 include("modules/Elezioni/ele_configurazione.php");
510 break;
511 case "cons_comuni":
512 include("modules/Elezioni/ele_cons_comuni.php");
513 break;
514 case "confconsiglio":
515 include("modules/Elezioni/ele_confcons.php");
516 break;
517 case "inscomuni":
518 include("modules/Elezioni/ele_comuni.php");
519 break;
520 case "oper_admin":
521 include("modules/Elezioni/ele_operatori.php");
522 break;
523 case "inscollegi":
524 include("modules/Elezioni/ele_collegi.php");
525 break;
526 case "associazioni":
527 include("modules/Elezioni/ele_associazioni.php");
528 break;
529 case "operatori":
530 include("modules/Elezioni/ele_operatori.php");
531 break;
532 case "permessi":
533 include("modules/Elezioni/ele_permessi.php");
534 break;
535 case "circo":
536 include("modules/Elezioni/ele_circo.php");
537 break;
538 case "sede":
539 include("modules/Elezioni/ele_sede.php");
540 break;
541case "sezione":
542 include("modules/Elezioni/ele_sezione.php");
543 break;
544case "gruppo":
545 include("modules/Elezioni/ele_gruppo.php");
546 break;
547case "rec_add_aff":
548 include("modules/Elezioni/ele_affluenze.php");
549 break;
550case "rec_add_mod":
551 include("modules/Elezioni/ele_modelli.php");
552 break;
553case "upgruppo":
554 include("modules/Elezioni/ele_gruppo.php");
555 break;
556case "delimggruppo":
557 include("modules/Elezioni/ele_gruppo.php");
558 break;
559case "lista":
560 include("modules/Elezioni/ele_lista.php");
561 break;
562case "uplista":
563 include("modules/Elezioni/ele_lista.php");
564 break;
565case "delimglista":
566 include("modules/Elezioni/ele_lista.php");
567 break;
568case "candidato":
569 include("modules/Elezioni/ele_candidato.php");
570 break;
571case "upcandidato":
572 include("modules/Elezioni/ele_candidato.php");
573 break;
574case "delimgcandidato":
575 include("modules/Elezioni/ele_candidato.php");
576 break;
577
578case "voti":
579 include("modules/Elezioni/ele_voti.php");
580 break;
581case "sezioni_voti":
582 include("modules/Elezioni/ele_voti.php");
583 break;
584case "rec_voti":
585 include("modules/Elezioni/ele_voti.php");
586 break;
587case "rec_voti_gruppi":
588 include("modules/Elezioni/ele_voti.php");
589 break;
590case "rec_add_votanti":
591 include("modules/Elezioni/ele_voti.php");
592 break;
593case "rec_finale":
594 include("modules/Elezioni/ele_voti.php");
595 break;
596case "controllo_voti":
597 include("modules/Elezioni/controllo_voti.php");
598 break;
599case "controllo_votanti":
600 include("modules/Elezioni/controllo_votanti.php");
601 break;
602case "come":
603 include("modules/Elezioni/ele_come.php");
604 break;
605case "numeri":
606 include("modules/Elezioni/ele_come.php");
607 break;
608case "servizi":
609 include("modules/Elezioni/ele_come.php");
610 break;
611case "link":
612 include("modules/Elezioni/ele_come.php");
613 break;
614case "conf":
615 include("modules/Elezioni/ele_conf.php");
616 break;
617case "stampa":
618 include("modules/Elezioni/ele_stampe.php");
619 break;
620case "cambiopwd":
621 include("modules/Elezioni/ele_pwd.php");
622 break;
623case "eletti":
624 include("modules/Elezioni/ele_eletti.php");
625 break;
626case "foto":
627 include("modules/Elezioni/foto.php");
628 break;
629case "consiglieri":
630 include("modules/Elezioni/ele_consiglieri.php");
631 break;
632case "backup":
633 include("modules/Elezioni/backup.php");
634 break;
635case "restore":
636 include("modules/Elezioni/restore.php");
637 break;
638case "scarica":
639 include("modules/Elezioni/scarica.php");
640 break;
641case "importa":
642 include("modules/Elezioni/importa.php");
643 break;
644case "widget":
645 include("modules/Elezioni/ele_widget.php");
646 break;
647case "riepilogo":
648 include("modules/Elezioni/ele_riepilogo.php");
649 break;
650case "riepilogovoti":
651 include("modules/Elezioni/ele_riepilogovoti.php");
652 break;
653case "logout":
654 logout();
655 break;
656}
657
658}else {
659
660 login();
661
662}
663
664?>
Note: See TracBrowser for help on using the repository browser.