This commit introduces improvements to session management by implementing a new check for super admin sessions, allowing them to bypass certain access restrictions. It updates the logout function to retain super admin session data and modifies event access functions to grant permissions based on super admin status. Additionally, the session timeout duration is adjusted for better alignment with site requirements. The version code is updated to reflect these changes.
27 lines
754 B
PHP
27 lines
754 B
PHP
<?php
|
|
session_start();
|
|
|
|
// Meme duree que le site public (MSIN-CON-259)
|
|
$inactive = 10800;
|
|
|
|
if (!empty($_SESSION['usa_id'])) {
|
|
$intLastActivity = intval($_SESSION['logged'] ?? 0);
|
|
if (!empty($_SESSION['date_maj'])) {
|
|
$intLastActivity = max($intLastActivity, intval($_SESSION['date_maj']));
|
|
}
|
|
|
|
if ($intLastActivity <= 0) {
|
|
$_SESSION['logged'] = time();
|
|
} elseif ((time() - $intLastActivity) > $inactive) {
|
|
header('Location: logout.php');
|
|
exit;
|
|
}
|
|
|
|
$_SESSION['logged'] = time();
|
|
} elseif (!empty($_SESSION['logged']) && (time() - intval($_SESSION['logged'])) > $inactive) {
|
|
header('Location: logout.php');
|
|
exit;
|
|
} elseif (!empty($_SESSION['logged'])) {
|
|
$_SESSION['logged'] = time();
|
|
}
|