fhiiqm/vertrag_search.php
changeset 13 741b35e9ebbe
parent 10 f538f73ebc37
child 28 8d8bce56918f
--- a/fhiiqm/vertrag_search.php	Tue Sep 27 14:59:40 2011 +0200
+++ b/fhiiqm/vertrag_search.php	Wed Oct 05 16:46:09 2011 +0200
@@ -9,6 +9,20 @@
 
     error_reporting(E_ALL ^ E_NOTICE);
     
+    session_start();
+    if (! isset($_SESSION["userid"]))
+    { 
+        include_once ("inc/func_lib.inc.php");	
+        login("vertrag_search.php");
+        exit;
+    }
+    
+    if (is_null($_SESSION["recht"]) || (!is_null($_SESSION["recht"]) && !in_array("vr",$_SESSION["recht"]) && !in_array("ve",$_SESSION["recht"])))
+    {
+        header("Location: start.php");
+        exit;
+    }    
+
 	include_once($_SERVER['DOCUMENT_ROOT'] ."/fhiiqm/inc/dbconnect.inc.php");
 	$dbc = new dbconnection();
 
@@ -17,7 +31,7 @@
     $cid = trim(substr($cname,0,strpos($cname,"-")));
 //    echo "cname = $cname, cid = $cid<br />\n";
     if (isset($cid) && $cid) 
-        header("Location: http://achilleus/fhiiqm/vertrag_upd.php?uid=$cid");
+        header("Location: vertrag_upd.php?uid=$cid");
     else
     {
 ?>
@@ -35,7 +49,13 @@
         </head>
         
         <body>
-        <div class="float-r"><img src="/fhiiqm/img/document_mark_as_final.png" border="0" alt="Vertragssuche" title="Vertragssuche"/></div>
+        <?php
+        echo "&nbsp;";  
+        echo "<div class=\"float-br smaller\" valign='top'>";
+        echo "&nbsp;&nbsp;&nbsp;user: " . $_SESSION["userid"];
+        echo "&nbsp;&nbsp;&nbsp;<a class='sc' href='/fhiiqm/logout.php' title='Session beenden'>logout</a></div>\n";
+        echo "<div class=\"float-r\"><img src=\"img/document_mark_as_final.png\" border=\"0\" alt=\"Vertragssuche\" title=\"Vertragssuche\"/></div>\n";
+        ?>
         <script>
           $(document).ready(function() {
             $("#conbez").focus();