Could I do the redirect in this code to avoid any core changes?
<?php
/*
$Id$
osCommerce, Open Source E-Commerce Solutions
http://www.oscommerce.com
Copyright (c) 2020 osCommerce
Released under the GNU General Public License
*/
function check_admin_group($administrator_group_access_file){
global $PHP_SELF, $language, $cfgModules, $admin;
$is_valid_access = true;
$exclude_pages = array(
'index.php', 'login.php', 'invoice.php', 'packingslip.php', 'popup_image.php'
);
$administrator_group_id = (int)$admin['user_group_id'];
if($administrator_group_id != '' && $administrator_group_id > 0 && !in_array($administrator_group_access_file, $exclude_pages)){
$check_file_access = tep_db_query("select ag.administrator_group_id from administrator_groups ag, administrator_group_access aga where aga.administrator_group_id = ag.administrator_group_id and ag.administrator_group_id = '" . (int)$administrator_group_id . "' and aga.administrator_group_access_file = '" . $administrator_group_access_file . "'");
if(!tep_db_num_rows($check_file_access))$is_valid_access = false;
}
return $is_valid_access;
}
function display_block_to_admin_group($administrator_group_block){
global $PHP_SELF, $language, $cfgModules, $admin;
$display_block_to_admin_group = false;
$administrator_group_id = (int)$admin['user_group_id'];
if($administrator_group_id <= 0){
$display_block_to_admin_group = true;
}
if($administrator_group_block != '' && $administrator_group_id > 0){
$check_file_access = tep_db_query("select ag.administrator_group_id from administrator_groups ag, administrator_group_access aga where aga.administrator_group_id = ag.administrator_group_id and ag.administrator_group_id = '" . (int)$administrator_group_id . "'");
if(tep_db_num_rows($check_file_access))$display_block_to_admin_group = true;
}
return $display_block_to_admin_group;
}
if ( file_exists(DIR_FS_ADMIN . 'includes/languages/english/hooks/iMenu.php') ) {
include_once(DIR_FS_ADMIN . 'includes/languages/english/hooks/iMenu.php') ;
}
class hook_admin_siteWide_aMenu {
var $version = '1.0.0';
var $siteend = null;
function listen_injectSiteStart() {
global $PHP_SELF, $language, $cfgModules, $admin , $current_page;
$administrator_group_id = isset($_SESSION['admin']['user_group_id']);
if( $administrator_group_id <=0)
{
$check_query = tep_db_query("SELECT id, user_name, user_password, user_group_id, default_page FROM administrators as a join administrator_groups as ag on a.user_group_id = ag.administrator_group_id WHERE id = '" .(int)$admin['id'] . "'");
if (tep_db_num_rows($check_query) == 1) {
$check = tep_db_fetch_array($check_query);
// unset($_SESSION['admin']);
$_SESSION['admin'] = [
'id' => $check['id'],
'username' => $check['user_name'],
'user_group_id' => $check['user_group_id'],
'default_page' => $check['default_page']
];
}
}
if(!check_admin_group($current_page)){
// tep_redirect(tep_href_link('index.php'));
echo '<script>
window.location.replace("'.DIR_WS_HTTPS_ADMIN.'/index.php");
</script>';
}
}
function listen_injectBodyStart() {
global $PHP_SELF, $language, $cfgModules, $admin;
$output = null;
if (basename($PHP_SELF) != 'login.php') {
$cl_box_groups = array();
if ($dir = @dir(DIR_FS_ADMIN . 'includes/boxes')) {
$files = array();
while ($file = $dir->read()) {
if (!is_dir($dir->path . '/' . $file)) {
if (substr($file, strrpos($file, '.')) == '.php') {
if ((strpos($file, 'paypal2') === false) &&($file!='configuration_administrators.php')) $files[] = $file;
}
}
}
$dir->close();
natcasesort($files);
foreach ( $files as $file ) {
if ( file_exists(DIR_FS_ADMIN . 'includes/languages/' . $language . '/modules/boxes/' . $file) ) {
include_once(DIR_FS_ADMIN . 'includes/languages/' . $language . '/modules/boxes/' . $file);
}
include_once($dir->path . '/' . $file);
}
}
function tep_sort_a_boxes($a, $b) {
return strcasecmp(strip_tags($a['heading']), strip_tags($b['heading']));
}
usort($cl_box_groups, 'tep_sort_a_boxes');
function tep_sort_a_boxes_links($a, $b) {
return strcasecmp($a['title'], $b['title']);
}
foreach ( $cl_box_groups as &$group ) {
usort($group['apps'], 'tep_sort_a_boxes_links');
}
$n = 1; $mr = null;
foreach ($cl_box_groups as $groups) {
if(display_block_to_admin_group($groups['heading'])) {
$mr .= '<li class="nav-item dropdown">';
$mr .= '<a class="nav-link dropdown-toggle" href="#" id="navbar_' . $n . '" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">' . $groups['heading'] . '</a>';
$al = ($n > 6) ? ' dropdown-menu-right' : '';
$mr .= '<div class="dropdown-menu' . $al . '" aria-labelledby="navbar_' . $n . '">';
foreach ($groups['apps'] as $app) {
if(check_admin_group($app['code']))
$mr .= '<a class="dropdown-item" href="' . $app['link'] . '">' . $app['title'] . '</a>';
}
$mr .= '</div>';
$mr .= '</li>' . PHP_EOL;
$n++;
}
}
$output .= '<nav id="iMenu" class="navbar navbar-expand-md sticky-top navbar-dark bg-dark">';
$output .= '<a class="navbar-brand" href="' . tep_href_link('index.php') . '">' . tep_image('images/CE-Phoenix-30-30.png', 'OSCOM CE Phoenix v' . tep_get_version(), 30, 30, null, false) . '</a>';
$output .= '<button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarAdmin" aria-controls="navbarAdmin" aria-expanded="false" aria-label="Toggle navigation"><span class="navbar-toggler-icon"></span></button>';
$output .= '<div class="collapse navbar-collapse" id="navbarAdmin">';
$output .= '<ul class="navbar-nav mr-auto">' . $mr . '</ul>';
$output .= '</div>';
$output .= '</nav>';
$output .= '<div class="col bg-light">';
$output .= '<ul class="nav justify-content-end" id="a1">';
$output .= '<li class="nav-item"><a class="nav-link" target="_blank" href="https://forums.oscommerce.com/clubs/1-phoenix/">' .tep_image('images/icon_phoenix.png', 'Phoenix') . ' ' . HEADER_TITLE_PHOENIX_CLUB . '</a></li>';
$output .= '<li class="nav-item"><a class="nav-link" href="' . tep_href_link('certified_addons.php') . '">' . tep_image('images/icon_phoenix.png', 'Phoenix') . ' ' . HEADER_TITLE_CERTIFIED_ADDONS . '</a></li>';
$output .= '<li class="nav-item"><a class="nav-link" href="' . tep_catalog_href_link() . '">' . HEADER_TITLE_ONLINE_CATALOG . '</a></li>';
$output .= '<li class="nav-item"><a class="nav-link text-danger" href="' . tep_href_link('login.php', 'action=logoff') . '">' . sprintf(HEADER_TITLE_LOGOFF, $admin['username']) . '</a></li>';
$output .= '</ul>';
$output .= '</div>';
$output .= '<hr class="w-100 m-0 p-0 mb-0">';
//$output .= '<script>$(".navbar").hide(); $("#iMenu").show(); </script>';
//$output .= '<script>$(".justify-content-end").hide(); $("#a1").show(); </script>';
return $output;
}
}
function listen_injectSiteEnd() {
$this->siteend .= '<script>$(".navbar").hide(); $("#iMenu").show(); </script>';
$this->siteend .= '<script>$(".justify-content-end").hide(); $("#a1").show(); </script>';
return $this->siteend;
}
}
