config/kernel/auth_check.php


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

<?php
// Minimal session check - no framework bootstrap
include 'auth_config.php';

if( !empty( $_SESSION['user_role'] ) && $_SESSION['user_role'] > 0 ) {
    http_response_code(200);
	exit;
}

// anonymous - check content_id from URI
preg_match( '|/attachments/\d+/(\d+)/|', $_SERVER['REQUEST_URI'], $matches );

if( !empty( $matches[1] ) ) {
    $contentId = (int)$matches[1];
    try {
        $pdo = new PDO( $gBitDbHost, $gBitDbUser, $gBitDbPassword );
        $stmt = $pdo->prepare(
            "SELECT COUNT(*) FROM LIBERTY_CONTENT_ROLE_MAP 
             WHERE content_id = ?"
        );
        $stmt->execute( [$contentId] );
        if( $stmt->fetchColumn() == 0 ) {
            http_response_code( 200 );
		} else {
			http_response_code( 403 );
		}
    } catch( PDOException $e ) {
        // db failure - deny access safely
        http_response_code( 403 );
        exit;
    }
    exit;
}