index.php

<?php
/**
 * GaiaEHR (Electronic Health Records)
 * Copyright (C) 2013 Certun, LLC.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

session_cache_limiter('private');
session_cache_expire(1);
session_name('GaiaEHR');
session_start();
session_regenerate_id(false);
setcookie(session_name(),session_id(),time()+86400, '/', "gaiaphr.com", false, true);

header('Content-type: text/html; charset=utf-8');
header("Cache-Control: no-cache, no-store, must-revalidate"); // HTTP 1.1.
header("Pragma: no-cache"); // HTTP 1.0.
header("Expires: 0"); // Proxies.

ini_set('session.gc_probability', 1);
ini_set('session.gc_divisor', 100);

define('_GaiaEXEC', 1);

if(isset($_SESSION['hooks'])) unset($_SESSION['hooks']);

/**
 * Startup the registry
 * This contains SESSION Variables to use in the application
 * and mobile_detect class is used to detect mobile browsers.
 */
include_once('registry.php');

/**
 * Make the auth process
 * lets check for 4 things to allow the user in
 * 1. $_SESSION['user'] is set (this helps to app clean of PHP NOTICES)
 * 2. $_SESSION['user']['auth'] is true (check if the user is authorized)
 * 3. $_SESSION['user']['site'] is $site ($site == $_GET['site] or 'default')
 * 4. $_SESSION['inactive']['life'] is less than $_SESSION['inactive']['time']
 * (to make sure ths user hasn't been out for a long time)
 *
 */
if(isset($_SESSION['user']) &&
    isset($_SESSION['user']['auth']) && $_SESSION['user']['auth'] == true &&
    isset($_SESSION['user']['site']) && $_SESSION['user']['site'] == $site &&
    $_SESSION['inactive']['life'] < $_SESSION['inactive']['time'])
{
    /**
     * if mobile go to mobile app, else go to app
     */
    $_SESSION['install'] = false;
    if(isset($_SESSION['site']['checkInMode']) && $_SESSION['site']['checkInMode'])
    {
        include_once('checkin/checkin.php');
    }
    else
    {
        if(isset($_REQUEST['dual']) && $_REQUEST['dual'])
        {
            include_once('_dual.php');
        }
        else
        {
            include_once('_app.php');
        }
    }
}
else
{ // Make the logon process or Setup process
    /**
     * If no directory is found inside sites dir run the setup wizard,
     * if a directory is found inside sites dir run the logon screen
     */
    if(sites_count == 0)
    {
        unset($_SESSION['site']);
        $_SESSION['install'] = true;
        include_once('_install.php');
    }
    else
    {
        $_SESSION['user']['auth'] = false;
        $_SESSION['install'] = false;
        include_once('_login.php');
    }
}

$_SESSION['inactive']['timeout'] = time();