30 lines
678 B
PHP
30 lines
678 B
PHP
<?php
|
|
|
|
require_once("_db.php"); //("api/_db.php");
|
|
|
|
|
|
|
|
// Check if request was to specified file
|
|
function ThisFileIsRequested ($fullpath) {
|
|
return substr($fullpath, -strlen($_SERVER["SCRIPT_NAME"])) === $_SERVER["SCRIPT_NAME"];
|
|
}
|
|
|
|
session_start();
|
|
|
|
$LOGGED_IN = false;
|
|
|
|
if (isset($_SESSION["userid"])) {
|
|
// Check if user still exist
|
|
$s = $db->prepare("SELECT * FROM users WHERE id = ?");
|
|
$s->bind_param("s", $_SESSION["userid"]);
|
|
$s->execute();
|
|
if (!(bool)$s->get_result()->fetch_assoc()) { // If not, then destroy session
|
|
session_unset();
|
|
session_destroy();
|
|
echo "user id does not exist";
|
|
die("user id used in session does not exist");
|
|
}
|
|
$LOGGED_IN = true;
|
|
}
|
|
|
|
?>
|