webinterface.git

@@ -46,6 +46,13 @@ a img {

   border: 0px;

 }

+p.admininfo {

+  margin: 3px;

+  margin-bottom: 1.5em;

+  padding: 0.5em;

+  border: 1px solid red;

+  background-color: #fdd;

+}

 p.userinfo {

   margin: 3px;

@@ -151,6 +151,12 @@ echo '<p class="userinfo">Angemeldet als:<br />';

   }

   echo '</p>';

 }

+

+if (isset($_SESSION['admin_user'])) {

+  echo '<p class="admininfo">';

+  echo '<a href="'.$prefix.'go/su/back_to_admin">Zurück zu »'.$_SESSION['admin_user'].'«</a>';

+  echo '</p>';

+}

 ?>

 </div>

@@ -0,0 +1,17 @@

+<?php

+

+require_once('inc/debug.php');

+

+if (isset($_SESSION['admin_user']) ) {

+  $admin_user = $_SESSION['admin_user'];

+  $role = find_role($admin_user, '', True);

+  if ($role & ROLE_SYSADMIN) {

+    setup_session($role, $admin_user);

+    unset($_SESSION['admin_user']);

+    header('Location: '.$prefix.'go/su/su');

+    die();

+  }

+}

+system_failure('Unprivilleged action');

+

+

@@ -12,6 +12,7 @@ if (isset($_GET['type']))

 {

   check_form_token('su_su_ajax', $_GET['formtoken']);

   $role = NULL;

+  $admin_user = $_SESSION['userinfo']['username'];

   if ($_GET['type'] == 'customer') {

     $role = find_role($_GET['id'], '', True);

     setup_session($role, $_GET['id']);

@@ -21,6 +22,7 @@ if (isset($_GET['type']))

   } else {

     system_failure('unknown type');

   }

+  $_SESSION['admin_user'] = $admin_user;

   header('Location: ../../go/index/index');

   die();