units/users/function_access_level_check.php

   1 <?php
   2
   3 // Given the access level of a particular object, returns TRUE if the current user
   4 // can access it, and FALSE if they can't
   5
   6 if (isset($parameter) && $parameter != "") {
   7     if ($parameter == "PUBLIC") {
   8         $run_result = true;
   9     } else if ($parameter == "LOGGED_IN" && isset($_SESSION['userid']) && $_SESSION['userid'] != "" && $_SESSION['userid'] != -1) {
  10         $run_result = true;
  11     } else if (substr_count($parameter, "user") > 0 && isset($_SESSION['userid'])) {
  12         $usernum = substr($parameter, 4, 15);
  13         if ($usernum == $_SESSION['userid']) {
  14             $run_result = true;
  15         }
  16     }
  17 } else {
  18     $run_result = false;
  19 }
  20
  21 ?>