From 2ea0ae8793e249af7c1dad122a20dec60737bcee Mon Sep 17 00:00:00 2001
From: Matt Pass <matt@mattpass.com>
Date: Sat, 18 Oct 2014 21:09:32 +0100
Subject: [PATCH] Die if not logged in to protect files

Avoids risk of them being run by visiting URL when not logged in
---
 processes/on-bug-check.php       | 3 +++
 processes/on-editor-load.php     | 5 +++++
 processes/on-file-save.php       | 3 +++
 processes/on-load.php            | 5 +++++
 processes/on-user-login-fail.php | 3 +++
 processes/on-user-login.php      | 3 +++
 processes/on-user-logout.php     | 3 +++
 processes/on-user-new.php        | 3 +++
 8 files changed, 28 insertions(+)

diff --git a/processes/on-bug-check.php b/processes/on-bug-check.php
index e75ec06..1d14fec 100644
--- a/processes/on-bug-check.php
+++ b/processes/on-bug-check.php
@@ -1,4 +1,7 @@
 <?php
+if (!isset($_SESSION['loggedIn'])) {
+	die('Sorry, not logged in.');
+}
 // Purpose:	This file is run after a bug check, has $result string and $status arrays available to it
 // Langs:	PHP only
 // Example:
diff --git a/processes/on-editor-load.php b/processes/on-editor-load.php
index 70ced39..a61465e 100644
--- a/processes/on-editor-load.php
+++ b/processes/on-editor-load.php
@@ -1,3 +1,8 @@
+<?php
+if (!isset($_SESSION['loggedIn'])) {
+	die('Sorry, not logged in.');
+}
+?>
 <!--
 Purpose:	This file is run when ICEcoder editor has loaded
 Langs:		Anything - PHP, JS etc
diff --git a/processes/on-file-save.php b/processes/on-file-save.php
index 51c7f98..37bdf5b 100644
--- a/processes/on-file-save.php
+++ b/processes/on-file-save.php
@@ -1,4 +1,7 @@
 <?php
+if (!isset($_SESSION['loggedIn'])) {
+	die('Sorry, not logged in.');
+}
 // Purpose:	This file is run when a user saves a file, has $file and $fileLoc strings available to it
 // Langs:	PHP only
 // Example:
diff --git a/processes/on-load.php b/processes/on-load.php
index 45521f4..9520ad1 100644
--- a/processes/on-load.php
+++ b/processes/on-load.php
@@ -1,3 +1,8 @@
+<?php
+if (!isset($_SESSION['loggedIn'])) {
+	die('Sorry, not logged in.');
+}
+?>
 <!--
 Purpose:	This file is run when ICEcoder has loaded
 Langs:		Anything - PHP, JS etc
diff --git a/processes/on-user-login-fail.php b/processes/on-user-login-fail.php
index ba86517..9289a8c 100644
--- a/processes/on-user-login-fail.php
+++ b/processes/on-user-login-fail.php
@@ -1,4 +1,7 @@
 <?php
+if (!isset($_SESSION['loggedIn'])) {
+	die('Sorry, not logged in.');
+}
 // Purpose:	This file is run when a login fail occurs
 // Langs:	PHP only
 // Example:
diff --git a/processes/on-user-login.php b/processes/on-user-login.php
index f9f00ed..0842dd5 100644
--- a/processes/on-user-login.php
+++ b/processes/on-user-login.php
@@ -1,4 +1,7 @@
 <?php
+if (!isset($_SESSION['loggedIn'])) {
+	die('Sorry, not logged in.');
+}
 // Purpose:	This file is run when a user logs in
 // Langs:	PHP only
 // Example:
diff --git a/processes/on-user-logout.php b/processes/on-user-logout.php
index 56f3fdc..ba176bf 100644
--- a/processes/on-user-logout.php
+++ b/processes/on-user-logout.php
@@ -1,4 +1,7 @@
 <?php
+if (!isset($_SESSION['loggedIn'])) {
+	die('Sorry, not logged in.');
+}
 // Purpose:	This file is run when a user logs out
 // Langs:	PHP only
 // Example:
diff --git a/processes/on-user-new.php b/processes/on-user-new.php
index 75ceea4..40c57d3 100644
--- a/processes/on-user-new.php
+++ b/processes/on-user-new.php
@@ -1,4 +1,7 @@
 <?php
+if (!isset($_SESSION['loggedIn'])) {
+	die('Sorry, not logged in.');
+}
 // Purpose:	This file is run when a new user sets up
 // Langs:	PHP only
 // Example: