<?php
	//ini_set('display_errors',1);
	error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
	//error_reporting(E_ALL);
	//error_reporting(0);
	//header("HTTP/1.1 202 Accepted");
	header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
	header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
	//header("Cache-Control: no-store, no-cache, proxy-revalidate, must-revalidate");
	//header("Cache-Control: post-check=0, pre-check=0", false);
	//header("Cache-Control: max-age=10000000, s-maxage=1000000");
	//header("Pragma: no-cache");
	header("Cache-Control: no-store, no-cache, proxy-revalidate, must-revalidate, max-age=0, s-maxage=0");
	header("Pragma: no-cache");
	include_once('config.php');
	date_default_timezone_set(APP_TIMEZONE);
	try {
		$db = new PDO(DB_CONNECT_STRING, DB_USER, DB_PWD);
	} catch (Exception $e) {
		die('Could not connect: ' . 'Database Error!');
	}
	$sql_tz = "SET time_zone = '".APP_TIMEZONE."'";
	$db->query($sql_tz);
	$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
	require_once('mod/_functions.php'); 
	//var_dump($_SESSION);
	//echo 'Location: http://'.$_SERVER['SERVER_NAME'].$_SERVER['SCRIPT_NAME'].'?IX=login';
	$_GET['IX'] = parse_uri();
	if (empty($_GET['IX'])) :
		$_GET['IX'] = 'home';
	endif;
	if (!empty($_GET['mslink']) && $_GET['mslink'] == 'true') :
		unset($_GET['mslink']);
		$url = http_build_query($_GET);
		echo '<script>';
		echo 'window.location.href = "index.php?'.$url.'"';
		echo '</script>';
		exit();
	endif;
	//error_log('This is the IX: '.$_GET['IX'].' SESSION Logged In: '.$_SESSION['logged_in'].' SESSION dump: '.print_r($_SESSION, true));
	if (!page_allowed($_GET['IX'])) :
		//error_log('Page not allowed: '.$_GET['IX']);
		if (($_SESSION['logged_in'] ?? NULL) == true) :
			$redirect_url = APP_PREFIX_STANDARD.$_SERVER['SERVER_NAME'].$_SERVER['SCRIPT_NAME']."?IX=authorization";
		else:
			$redirect_url = APP_PREFIX_STANDARD.$_SERVER['SERVER_NAME'].$_SERVER['SCRIPT_NAME']."?IX=home";
		endif;
		if (strtoupper(curr_page_url()) != strtoupper($redirect_url)) :
			//error_log('Redirecting from Point 0: cur url: '.curr_page_url().' red url '.$redirect_url);
			header("Location: ".$redirect_url);
			exit();
		endif;
	else :
		if ($_GET['IX'] != 'logout') :
			if (($_SESSION['logged_in'] ?? NULL) == true && $_SESSION['password_expired'] && $_GET['IX'] != 'password_form') :
				$redirect_url = APP_PREFIX_STANDARD.$_SERVER['SERVER_NAME'].$_SERVER['SCRIPT_NAME']."?IX=password_form";
				header("Location: ".$redirect_url);
				exit();
			endif;
			$curr_page_url = curr_page_url();
			if (page_secure($_GET['IX']) && substr($curr_page_url,0,strlen(APP_PREFIX_SECURE)) != APP_PREFIX_SECURE) :
				$redirect_url = str_replace(APP_PREFIX_STANDARD,APP_PREFIX_SECURE,$curr_page_url);
				//error_log('Redirecting from Point 1: cur url: '.$curr_page_url.' red url '.$redirect_url);
				header("Location: ".$redirect_url);
				exit();
			endif;
			if (!page_secure($_GET['IX']) && substr($curr_page_url,0,strlen(APP_PREFIX_STANDARD)) != APP_PREFIX_STANDARD) :
				$redirect_url = str_replace(APP_PREFIX_SECURE,APP_PREFIX_STANDARD,$curr_page_url);
				//error_log('Redirecting from Point 2: cur url: '.$curr_page_url.' red url '.$redirect_url);
				header("Location: ".$redirect_url);
				exit();
			endif;
			if (!role_match($ar_pagecontrol[$_GET['IX']]['update_roles'], get_roles()) && !empty($ar_pagecontrol[$_GET['IX']]['update_roles'])) :
				unset($_POST);
			endif;
		endif;
	endif;
?>