OnValidade:
[code]$slogin = sc_sql_injection({login});
$spswd = sc_sql_injection(md5({pswd}));
$sql = “SELECT
priv_admin,
active,
name,
email
FROM dbo.seguranca_users
WHERE login = $slogin
AND pswd = “.$spswd.””;
sc_lookup(rs, $sql);
if(count({rs}) == 0)
{
sc_log_add(‘login Fail’, {lang_login_fail} . {login});
sc_error_message({lang_error_login});
sc_error_exit();
}
else if({rs[0][1]} == ‘Y’)
{
$usr_login = {login};
$usr_priv_admin = ({rs[0][0]} == ‘Y’) ? TRUE : FALSE;
$usr_name = {rs[0][2]};
$usr_email = {rs[0][3]};
sc_set_global($usr_login);
sc_set_global($usr_priv_admin);
sc_set_global($usr_name);
sc_set_global($usr_email);
$glo_empresa = {empresa};
sc_set_global($glo_empresa);
}
else
{
sc_error_message({lang_error_not_active});
sc_error_exit();
}[/code]
OnValidadeSucess:
[code]sc_reset_apl_status();
sc_reset_apl_conf();
$sql = “SELECT
app_name,
priv_access,
priv_insert,
priv_delete,
priv_update,
priv_export,
priv_print
FROM dbo.seguranca_groups_apps
WHERE group_id IN
(SELECT
group_id
FROM
dbo.seguranca_users_groups
WHERE
login = '”. [usr_login] ."’)";
sc_select(rs, $sql);
if ({rs} !== false)
{
while (!$rs->EOF)
{
if($rs->fields[1] == ‘Y’)
{
sc_apl_status($rs->fields[0], ‘on’);
}
if(has_priv($rs->fields[2]) == "on"){
sc_apl_conf($rs->fields[0], 'insert', "on");
}
if(has_priv($rs->fields[3]) == "on"){
sc_apl_conf($rs->fields[0], 'delete', "on");
}
if(has_priv($rs->fields[4]) == "on"){
sc_apl_conf($rs->fields[0], 'update', "on");
}
//export
if(has_priv($rs->fields[5]) == "on"){
$export_permission = 'btn_display_'. has_priv($rs->fields[5]);
sc_apl_conf($rs->fields[0], $export_permission, 'xls');
sc_apl_conf($rs->fields[0], $export_permission, 'word');
sc_apl_conf($rs->fields[0], $export_permission, 'pdf');
sc_apl_conf($rs->fields[0], $export_permission, 'xml');
sc_apl_conf($rs->fields[0], $export_permission, 'csv');
sc_apl_conf($rs->fields[0], $export_permission, 'rtf');
}
//export
if(has_priv($rs->fields[6]) == "on"){
$export_permission = 'btn_display_'. has_priv($rs->fields[6]);
sc_apl_conf($rs->fields[0], $export_permission, 'print');
}
$rs->MoveNext();
}
$rs->Close();
if(sc_logged({login})):
sc_log_add(‘login’, {lang_login_ok});
sc_user_logout(‘logged_user’, ‘logout’, ‘login_compras’);
sc_redir(‘menu_compras’);
endif;
}[/code]