From 262bd8ea53c3e96bfeb1d82d952ab7cc2f67e8e4 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <fox@bah.spb.su>
Date: Sat, 19 Nov 2005 15:46:23 +0100
Subject: automatically logout user when session expires

---
 backend.php | 24 ++++++++++++++++--------
 1 file changed, 16 insertions(+), 8 deletions(-)

(limited to 'backend.php')

diff --git a/backend.php b/backend.php
index 5cb58fb60..4b9d3a7f3 100644
--- a/backend.php
+++ b/backend.php
@@ -1,7 +1,21 @@
 <?
 	session_start();
 
-	if (!$_SESSION["uid"]) { exit; }
+	$op = $_REQUEST["op"];
+
+	if (($op == "rpc" || $op == "updateAllFeeds" || 
+			$op == "forceUpdateAllFeeds") && !$_REQUEST["noxml"]) {
+		header("Content-Type: application/xml");
+	}
+
+	if (!$_SESSION["uid"]) {
+
+		if (($op == "rpc" || $op == "updateAllFeeds" || 
+			$op == "forceUpdateAllFeeds")) {
+			print "<error error-code=\"6\"/>";
+		}
+		exit;
+	}
 
 	define(SCHEMA_VERSION, 2);
 
@@ -11,12 +25,6 @@
 	require_once "functions.php";
 	require_once "magpierss/rss_fetch.inc";
 
-	$op = $_REQUEST["op"];
-
-	if (($op == "rpc" || $op == "updateAllFeeds") && !$_REQUEST["noxml"]) {
-		header("Content-Type: application/xml");
-	}
-
 	$script_started = getmicrotime();
 
 	$link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);	
@@ -417,7 +425,7 @@
 				$error_code = 5;
 			}
 
-			print "<error code='$error_code'/>";
+			print "<error error-code='$error_code'/>";
 		}
 
 		if ($subop == "globalPurge") {
-- 
cgit v1.2.3-54-g00ecf