<?php

if (file_exists('auth.php')) {
    return;
}

if (isset($_GET['logout'])) {
    $_SESSION = array();

    if (isset($_COOKIE[session_name()])) {
       setcookie(session_name(), '', time() - 42000, '/');
    }
    session_destroy();

    loc('/admincp');
}

$_core_authentificated = false;

if (!isset($_SESSION['_core_username']) || !isset($_SESSION['_core_password'])) {
    $_SESSION['_core_username'] = '';
    $_SESSION['_core_password'] = '';
}

if (!empty($_REQUEST['_core_username']) && !empty($_REQUEST['_core_password'])) {
    $_SESSION['_core_username'] = $_REQUEST['_core_username'];
    $_SESSION['_core_password'] = $_REQUEST['_core_password'];
}

if ((empty($_SESSION['_core_username']) || empty($_SESSION['_core_password'])) && basename(PS) != 'index.php') {
    loc('/admincp');
}

$users = $_config->admincp->toArray();

$username = $_SESSION['_core_username'];
$password = $_SESSION['_core_password'];

if (isset($users[$username]) && $users[$username] == $password) {
    $_core_authentificated = true;
} else {
    if (basename(PS) != 'index.php') {
        loc('/admincp');
    }
}

?>

## loc function

<?php

function loc($uri = true, $params = array()) {
    if ($uri === true) {
        header('Location: ' . $_SERVER['HTTP_REFERER']);
    }

    if (count($params) > 0) {
        $computed = array();
        foreach ($params as $name => $value) {
            $computed[] = $name . '=' . rawurlencode($value);
        }

        $uri .= '?' . join('&', $computed);
    }

    header('Location: ' . $uri);
    exit;
}

?>