18469fe958
- Updated authorization checks in product management, product attributes, configurations, software, and user management files to use 'permissions' for consistency. - Ensured that all relevant pages correctly check user permissions for read, update, delete, and create actions. - Adjusted session variable references to align with the new permissions structure across various modules.
40 lines
1.3 KiB
PHP
40 lines
1.3 KiB
PHP
<?php
|
|
defined($security_key) or exit;
|
|
|
|
//------------------------------------------
|
|
// Get user_details based on securitykey
|
|
//------------------------------------------
|
|
//Connect to DB
|
|
$pdo = dbConnect($dbname);
|
|
//Define Query
|
|
$stmt = $pdo->prepare('SELECT * FROM users WHERE service = ? OR userkey = ?');
|
|
//Translate userkey to cliensecret
|
|
$clientsecret = $userkey;
|
|
//Excute Query
|
|
$stmt->execute([$clientsecret, $clientsecret]);
|
|
// Check if username exists.
|
|
if ($stmt->rowCount() == 1) {
|
|
//Get results
|
|
$user_data = $stmt->fetch();
|
|
//Define User data
|
|
$partnerhierarchy = $user_data['partnerhierarchy'];
|
|
$permission = userRights($user_data['view']);
|
|
$profile= getUserPermissions($pdo, $user_data['id']); //getProfile($user_data['settings'],$permission);
|
|
$username = $user_data['username'];
|
|
$useremail = $user_data['email'];
|
|
$servicekey = $user_data['service'];
|
|
$language = $user_data['language'];
|
|
$partner = json_decode($partnerhierarchy);
|
|
$clientsecret = $user_data['userkey'];
|
|
|
|
//Update Lastlogin
|
|
$logindate = date('Y-m-d H:i:s');
|
|
$stmt = $pdo->prepare('UPDATE users SET lastlogin = ? WHERE id = ?');
|
|
//Excute Query
|
|
$stmt->execute([$logindate, $user_data['id']]);
|
|
} else
|
|
{
|
|
http_response_code(403);//Not authorized
|
|
}
|
|
|
|
?>
|