<?php
session_start();

// Meme duree que le site public (MSIN-CON-259)
require_once dirname(__FILE__) . '/inc_functions.php';

$intUsaId = fxSuperadmSessionValidate(true);

if ($intUsaId > 0) {
    // session superadm valide — logged rafraîchi
} elseif (!empty($_SESSION['usa_id'])) {
    header('Location: logout.php');
    exit;
} elseif (!empty($_SESSION['logged'])) {
    if ((time() - intval($_SESSION['logged'])) > fxSuperadmSessionInactiveSeconds()) {
        header('Location: logout.php');
        exit;
    }
    $_SESSION['logged'] = time();
}

// Session absente → login superadm (pas « Accès refusé »). Rapports legacy : com_info suffit.
$strScript = basename($_SERVER['SCRIPT_NAME'] ?? '');
$tabPublicScripts = array('login.php', 'perdu.php', 'logout.php');
$blnAllowCompteLegacy = ($strScript === 'rapport_new.php')
    || ($strScript === 'index.php' && (($_GET['a'] ?? '') === 'report'));

if (!in_array($strScript, $tabPublicScripts, true)) {
    fxSuperadmRedirectToLoginIfNeeded($blnAllowCompteLegacy);
}