<?PHP
/*
 * phpMyPurchasing
 * Jason Gerfen [hide@address.com]
 *
 * index.php - index or main page
 */

if(file_exists('scripts/inc.config.php')) {
 require 'scripts/inc.config.php';

 // ensure we are being called from our configured host
 if( $defined['hostname'] === $_SERVER['SERVER_NAME'] ) {

  // obtain default options
  $defined = array_merge($defined,$handles['misc']->getDefaults());
  $defined = array_merge($defined,$handles['misc']->getAuthentication());
  $accessList = $handles['misc']->getAccessList();

  // copy and filter incoming data
  $get = @array_map( $handles['val']->ValidateXSS, $_GET );
  $post = @array_map( $handles['val']->ValidateXSS, $_POST );
  $sess = @array_map( $handles['val']->ValidateXSS, $_SESSION );
  $serv = @array_map( $handles['val']->ValidateXSS, $_SERVER );

  // handle logging of requests, remote data
  $handles['logs']->process($serv);

  //define the template and cache directories
  $handles['tpl']->strTemplateDir = $defined['templates'];
  $handles['tpl']->strCacheDir    = '/tmp';
  if( !empty( $post ) ) { $flag = "TRUE"; } else { $flag = "FALSE"; }

		// gather up some information for the token
		if( ( !isset( $_SESSION['token'] ) ) || ( !is_resource( $handles['session'] ) ) ) {
		 $handles['session'] = new dbSession( $defined['timeout'] );
		}
  $_SESSION['referrer'] = $serv['HTTP_REFERER'];

  // perform authentication
  $authenticated = $handles['auth']->DecideAuth( $_SESSION['token'], $post['user'], $post['pass'], $serv );
  if($authenticated===0){ $class = "good"; } else { $class= "error"; }

  // include our header file
  $handles['tpl']->assign( 'TITLE', $defined['title'], NULL, NULL );
  $handles['tpl']->assign('ip',$serv['REMOTE_ADDR'],NULL,NULL);
  $handles['tpl']->assign('logo',$defined['logo'],NULL,NULL);
  $handles['tpl']->assign( 'templates', $defined['templates'], NULL, NULL );
  $handles['tpl']->assign('timeout',$defined['timeout'],NULL,NULL);
  $handles['tpl']->display( 'header.tpl', $flag, NULL );

  // process authentication and load appropriate template
  if($authenticated !== 0) {
   $ERROR = '<div class="'.$class.'">' . $handles['err']->detLoginErr($authenticated) . '</div>';
   $use = 'content-login.tpl';
  } else {
   // determine our template
   switch( $get['do'] ) {
    case '0x00a0':
     $ele = 'tabMain';
     $use = 'content-authenticated.tpl';
     break;
    case '0x00b0':
     $ele = 'tabPurchasing';
     $use = 'content-purchasing.tpl';
     break;
    case '0x00c0':
     $ele = 'tabReports';
     $use = 'content-reports.tpl';
     break;
    case '0x00d0':
     $ele = 'tabConfiguration';
     $use = 'content-configuration.tpl';
     break;
    case '0x00e0':
     $ele = 'tabPermissions';
     $use = 'content-permissions.tpl';
     break;
    case '0x00f0':
     $ele = 'tabExit';
     $use = 'content-exit.tpl';
     break;
    default:
     $ele = 'tabMain';
     $use = 'content-login.tpl';
     break;
   }
  }
  $handles['tpl']->assign('ERROR',$ERROR,NULL,NULL);
  $handles['tpl']->assign( $ele, $handles['tpl']->assign( NULL, NULL, $use, $flag ), NULL, NULL );

  $handles['tpl']->display( 'main.tpl', $flag, NULL );

  // call our footer file
  $handles['tpl']->assign('copyright', $defined['copyright'], NULL, NULL);
  $handles['tpl']->assign('FOOTER', $footer, NULL, NULL);
  $handles['tpl']->display('footer.tpl', $flag, NULL);

 } else {
  echo "Cannot be called from anywhere other then our defined host";
 }

} else {
 echo "Configuration file not found";
}

if($defined['debug']==="true"){ $handles['debug']->ShowDebug( $_GET, $post, $_REQUEST, $sess, $handles ); }

?>