index.php

<?php
/*Used to suppress Notices*/
//error_reporting(E_ALL & ~E_NOTICE);
error_reporting(E_ERROR);
// Added to eliminate special characters
header('Content-type: text/html; charset=utf-8');
/* check if lock file exists if not we need to install */
session_start();
require('conf.php');
//http_redirect("install2", array("name" => "value"), true, HTTP_REDIRECT_PERM);

$VAR = array_merge($_GET,$_POST);
$wo_id = $VAR['wo_id'];
$customer_id = $VAR['customer_id'];
$id = $login_id;
$smarty->assign('id', $id);



if(!is_file('cache/lock') ) {
	echo("
		<script type=\"text/javascript\">
			<!--
			window.location = \"install\"
			//-->
		</script>");
} else if(is_dir('install') ) {
	echo("<a style=\"color:red;\">The install Directory Exists!! Please Rename or remove the install directory.</a>");
	die;
}


$page_title = $VAR['page_title'];

$auth = new Auth($db, 'login.php', 'secret');
require(INCLUDE_URL.SEP.'acl.php');

require('modules/core/translate.php');
############################
#		Debuging					#
############################

function getMicroTime() {
  list($usec, $sec) = explode(" ", microtime()); 
	return (float)$usec + (float)$sec;
} 

$start = getMicroTime();



// If log off is set then we log off
if (isset($VAR['action']) && $VAR['action'] == 'logout') {
  $auth->logout('login.php');
}

/* get company info for defaults */
$q = 'SELECT * FROM '.PRFX.'TABLE_COMPANY, '.PRFX.'VERSION ORDER BY  '.PRFX.'VERSION.`VERSION_INSTALLED` DESC LIMIT 1';
	if(!$rs = $db->execute($q)) {
		force_page('core', 'error&error_msg=MySQL Error: '.$db->ErrorMsg().'&menu=1&type=database');
		exit;
	}


$smarty->assign('version', $rs->fields['VERSION_NAME']);
$smarty->assign('company_name', $rs->fields['COMPANY_NAME']);
$smarty->assign('company_address', $rs->fields['COMPANY_ADDRESS']);
$smarty->assign('company_city', $rs->fields['COMPANY_CITY']);
$smarty->assign('company_state', $rs->fields['COMPANY_STATE']);
$smarty->assign('company_zip', $rs->fields['COMPANY_ZIP']);
$smarty->assign('company_country', $rs->fields['COMPANY_COUNTRY']);
$smarty->assign('company_phone',$rs->fields['COMPANY_PHONE']);
$smarty->assign('company_email',$rs->fields['COMPANY_EMAIL']);
$smarty->assign('company_mobile',$rs->fields['COMPANY_MOBILE']);
$smarty->assign('company_toll_free',$rs->fields['COMPANY_TOLL_FREE']);
$smarty->assign('company_logo',$rs->fields['COMPANY_LOGO']);
$smarty->assign('currency_sym',$rs->fields['COMPANY_CURRENCY_SYMBOL']);
$smarty->assign('currency_code',$rs->fields['COMPANY_CURRENCY_CODE']);
$smarty->assign('date_format',$rs->fields['COMPANY_DATE_FORMAT']);
$smarty->assign('company_email_from',$rs->fields['COMPANY_EMAIL_FROM']);
$smarty->assign('email_server',$rs->fields['COMPANY_EMAIL_SERVER']);
$smarty->assign('email_server_port',$rs->fields['COMPANY_EMAIL_PORT']);
$smarty->assign('email_username',$rs->fields['COMPANY_SMTP_USERNAME']);
$smarty->assign('email_password',$rs->fields['COMPANY_SMTP_PASSWORD']);


#############################################################
#	Url Builder This grabs gets and post and builds the url	# 
#	conection strings										#
#############################################################
if(!isset($_POST['page'])) {
        if ( $_GET['page']) {
                // Explode the url so we can get the module and page
                list($module, $page) = explode(":", $_GET['page']);
                $the_page = 'modules'.SEP.$module.SEP.$page.'.php';

                // remove page from the $_GET array we dont want it to pass the options
                unset($_GET['page']);

                // Define the global options for each page
                foreach($_GET as $key=>$val){
                        @define($key, $val);
                }

                // Check to see if the page is real other wise send em a 404
                if ( file_exists ($the_page) ) {
                        $the_page= 'modules'.SEP.$module.SEP.$page.'.php';
                } else {
                        $the_page= 'modules'.SEP.'core'.SEP.'404.php';
                }
        } else {
                // If no page is supplied then go to the main page
                $the_page= 'modules'.SEP.'core'.SEP.'main.php';
        }
} else {
        // Explode the url so we can get the module and page
                list($module, $page) = explode(":", $_POST['page']);
                $the_page = $the_page= 'modules'.SEP.$module.SEP.$page.'.php';

                // remove page from the $_GET array we dont want it to pass the options
                unset($_POST['page']);

                // Define the global options for each page
                foreach($_POST as $key=>$val){
                        @define($key, $val);
                }

                // Check to see if the page is real other wise send em a 404
                if ( file_exists ($the_page) ) {
                        $the_page= 'modules'.SEP.$module.SEP.$page.'.php';
                } else {
                        $the_page= 'modules'.SEP.'core'.SEP.'404.php';
                }
}


$tracker_page = "$module:$page";


#####################################
#	Display the pages				#
#####################################  

if(isset($_GET['wo_id'])) {
	$smarty->assign('wo_id', $_GET['wo_id']);
	global $wo_id;
} else {
	$smarty->assign('wo_id','0');
}
if(isset($_GET['customer_id'])) {
	$smarty->assign('wo_id', $_GET['customer_id']);
	global $customer_id;
} else {
	$smarty->assign('customer','0');
}
require('modules'.SEP.'core'.SEP.'error.php');

if(isset($page_title)) {
	$smarty->assign('page_title', $page_title); 
} else {
	$page_title ="Home";
	$smarty->assign('page_title', $page_title);
}  

if(isset($VAR['msg'])) {

	$smarty->assign('msg', $VAR['msg']);
}

if($VAR['escape'] != 1 ) {
	require('modules'.SEP.'core'.SEP.'header.php');
	require('modules'.SEP.'core'.SEP.'navagation.php');
	require('modules'.SEP.'core'.SEP.'company.php');
}

if($menu == 1 ) {

	$smarty->assign('menu', '1');
	$smarty->display('core'.SEP.'error.tpl');

} else {
	
	/* check acl for page request */
	if(!check_acl($db,$module,$page)) {
		force_page('core','error&error_msg=You do not have permission to access this '.$module.':'.$page.'&menu=1');
	} else { 
		require($the_page);
	}
}

if($VAR['escape'] != 1 ) {
	require('modules'.SEP.'core'.SEP.'footer.php');
}

/* Tracker code */
function getIP() {
//	$ip;
	if (getenv("HTTP_CLIENT_IP")) $ip = getenv("HTTP_CLIENT_IP");
	else if(getenv("HTTP_X_FORWARDED_FOR")) $ip = getenv("HTTP_X_FORWARDED_FOR");
	else if(getenv("REMOTE_ADDR")) $ip = getenv("REMOTE_ADDR");
	else $ip = "UNKNOWN";
	return $ip;
}



$logtime = time();
$q = 'INSERT into '.PRFX.'TRACKER SET
   date			='. $db->qstr( $logtime	).',
   ip			='. $db->qstr( getIP() ).',
   uagent		='. $db->qstr( getenv(HTTP_USER_AGENT) ).',
   full_page		='. $db->qstr( $the_page ).',
   module		='. $db->qstr( $module ).',
   page			='. $db->qstr( $page ).',
   referer		='. $db->qstr( getenv(HTTP_REFERER) );

   if(!$rs = $db->Execute($q)) {
      echo 'Error inserting tracker :'. $db->ErrorMsg();
   }



?>