cu_fun.i

<?php

function CheckPerm($pLink, $pUserName, $pScriptName, $pIPAddr) {
    $PermPass = false;          // Start with a FALSE assumption
    $IPPass = false;
    // ** RETURNS -- False if no permission -- True if user has permission
    // ** Look up the Script with the user name and ensure they have permissions
    $sql = "SELECT allowed_scripts, ip_range, altipaddress
                    FROM dmsmonitorusers
                    WHERE user_name = '" . prep_save($pUserName, 12) . "' ";

    $perm_rs = db_query($sql, $pLink);
    $allowed_scripts = array();

    if ($perm_row = db_fetch_array($perm_rs)) {
        // ** Validate the Script is allowed
        $allowed_scripts = explode("\n", $perm_row['allowed_scripts']);
        if (is_array($allowed_scripts)) {
            foreach($allowed_scripts as $value) {
                if ("$value" == "*") {
                    // ** They have a wildcard -- all forms pass -- return true
                    $PermPass = true;
                    break;
                } elseif (trim($value) == trim($pScriptName) || trim($value) == str_replace(".prg", "", trim($pScriptName))) { // In Odyssey .prg endings are added to script names
                    // ** The form name matches -- return true
                    $PermPass = true;
                    break;
                }
            }

            // ** Validate the IP Range
            $ip_range = array();
            // ** MWS -- REMOVED the \r ^M character from the field, it may be causing intermediate issues
            $perm_row['ip_range'] = str_replace(chr(13), "", $perm_row['ip_range']);
            $ip_range = explode("\n", $perm_row['ip_range']);

            if (trim($perm_row['altipaddress']) != "") {
                // ** If alternate IP Address is found, then add it here
                array_push($ip_range, trim($perm_row['altipaddress']));
            }
            if (is_array($ip_range)) {
                foreach ($ip_range as $value) {
                    if (substr($pIPAddr, 0, strlen(trim($value))) == trim($value)) {
                        $IPPass = true;
                        break;
                    }
                }
            }

        }
        db_free_result($perm_rs);
    }

    if (!($PermPass && $IPPass)) {
        $sysenv = $GLOBALS['SYSENV'];

        if (HCU_array_key_exists("logger", $sysenv)) {
            $logger = $sysenv['logger'];
            // ** I am presuming this is the SYSENV object
            $ERR_MSG = "\n-------------------------\n";
            $ERR_MSG .= "Date: " . date('m/d/Y H:i:s') . "\n";
            $ERR_MSG .= "Cookie: " . implode(",", $_COOKIE) . "\n";
            $ERR_MSG .= "User: $pUserName\n";
            $ERR_MSG .= "Access Script: $pScriptName\n";
            $ERR_MSG .= "Access IP: $pIPAddr\n";
            $ERR_MSG .= "Perm File: " . ($PermPass ? "True" : "False") . "\n";
            $ERR_MSG .= "Perm IP: " . ($IPPass ? "True" : "False") . "\n";
            $ERR_MSG .= "HAYSTACK\n";

            $ERR_MSG .= "-------------------------\n";

            $logger->debug($ERR_MSG);
        }


    }

    return ($PermPass && $IPPass);
}

function int($val) {
    // Purpose:  to accept a numeric value and return the whole number portion

    for ($i=0; $i < strlen($val); $i++) {
        $piece = substr($val,$i,1);
        if ($piece >=0 && $piece <=9) {
            //This is a number so add to concantenate on a string
            $new_val .= $piece;
        } else {
            //Found a not integer so exit function
            break;
        }
    }
    if (strlen($new_val) == 0) $new_val = "0";
    return (int) $new_val;
}

function set_string($val) {
    $val = htmlspecialchars(trim($val));
    return $val;
}

// save_date will format the date string (including surrounding "'"), but if the date string is empty it will return null
function save_date($date) {
    if (strlen(trim($date)) == 0)
        return "null";
    else
        return "'" . dateformat("Y-m-d", $date) . "'";
}

// This function will strip all money formatting from the passed in string and return the result
function strip_money($money) {
    $pat = "([\$, ])";
    $repl = "";

    $ret_money = preg_replace("/$pat/", $repl, $money);

    return $ret_money;
}

function printError($errormsg) {
    printf("<br> %s <br>\n", $errormsg);
}

function isMammothServer($wwwServer) {
    $wwwList = array("www3", "www4", "www5", "www6");
    return in_array($wwwServer, $wwwList);
}

?>