$value) { // Allow only alphanumeric keys if (!preg_match('/^[a-zA-Z0-9_]+$/', $key)) { continue; } // Trim and sanitize value $value = filter_var($value, FILTER_SANITIZE_SPECIAL_CHARS); //echo "
  • $key : $value
    • "; } $functionCalled = []; $SCRIPT_1 = $SCRIPT_2 = $SCRIPT_3 = ''; if ($_SERVER['SCRIPT_URL'] == '/') { $SCRIPT_URL = "/"; } else if (!empty($_SERVER['SCRIPT_URL'])) { $u = substr($_SERVER['SCRIPT_URL'], -1) == '/' ? substr($_SERVER['SCRIPT_URL'], 0, -1) : $_SERVER['SCRIPT_URL']; $parts = explode('/', $u); $SCRIPT_URL = $parts[1]; $SCRIPT_1 = !empty($parts[1]) ? $parts[1] : ''; $SCRIPT_2 = !empty($parts[2]) ? $parts[2] : ''; $SCRIPT_3 = !empty($parts[3]) ? $parts[3] : ''; // join referral redirect if ($parts[1] == "join" && !empty($parts[2])) { if (intval($parts[2]) > 0) { if (isMember('cc', intval($parts[2]))) { DEFINE("REFERRER", $parts[2]); $SCRIPT_2 = ""; $u = $parts[1]; $invited = '/invited?cc=' . $parts[2] . '&nm=' . ($_GET['nm'] ?? ''); header("Location: $invited"); exit(); } } } } else { $SCRIPT_URL = "/"; } $HOST = $_SERVER['HTTP_HOST']; $ct = 'US'; DEFINE("HTTP_HOST", $HOST); DEFINE("SCRIPT_URL", $SCRIPT_URL); DEFINE("SCRIPT_2", $SCRIPT_2); DEFINE("SCRIPT_3", $SCRIPT_3); DEFINE("QUERY_STRING", $_SERVER['QUERY_STRING']); // Build $pgid (slug-ish) like before if ($SCRIPT_1 == 'dashboard') { if (!empty($SCRIPT_4)) $pgid = $SCRIPT_2 . '-' . $SCRIPT_3 . '-' . $SCRIPT_4; else if (!empty($SCRIPT_3)) $pgid = $SCRIPT_2 . '-' . $SCRIPT_3; else if (!empty($SCRIPT_2)) $pgid = $SCRIPT_2; else $pgid = 'dashboard'; } else { if (!empty($SCRIPT_3)) $pgid = $SCRIPT_1 . '-' . $SCRIPT_2 . '-' . $SCRIPT_3; else if (!empty($SCRIPT_2)) $pgid = $SCRIPT_1 . '-' . $SCRIPT_2; else if (!empty($SCRIPT_1)) $pgid = $SCRIPT_1; else $pgid = 'home'; } // Filesystem fallbacks (original behavior) if ($pgid == 'apps-sendgrid') { $xurl = "/apps/sendgrid/sdg.php"; $xhtml = $_SERVER['DOCUMENT_ROOT'] . "/apps/sendgrid/sdg.php"; } else { $xurl = "/includes/" . $pgid . ".inc"; $xhtml = $_SERVER['DOCUMENT_ROOT'] . "/includes/" . $pgid . ".inc"; } // ---------- OPTIONAL INVITER COOKIE ---------- if (!empty($_GET['_UID'])) { setInviterCookie($_GET['_UID']); } // Prepare defaults (legacy) $head = $pgid . '-' . 'head'; $photo = $pgid . '-' . 'photo'; $p = !empty($server_pages[$photo]) ? $server_pages[$photo] : ''; $h = !empty($server_pages[$head]) ? $server_pages[$head] : ''; $index = ''; DEFINE("PGID", $pgid); DEFINE("PHOTO", $p); DEFINE("HEAD", $h); // ---------- AUTH / LOGGING ---------- if (!empty($_GET['language']) || !empty($_GET['currency'])) { include ($_SERVER['DOCUMENT_ROOT'] . "/admin/save_language.inc"); } if ($pgid == 'logout') { $message = getLogout(); } if (!empty($_COOKIE["SIM_id"])) { include ($_SERVER['DOCUMENT_ROOT'] . "/admin/decode.inc"); $SIMinfo = decodeString($_COOKIE['SIM_id']); } include ($_SERVER['DOCUMENT_ROOT'] . "/admin/user-logs.php"); // ====================================================================== // DB PAGE LOOKUP (simeya_pages) // ====================================================================== // Try to resolve the page from DB first; fallback to filesystem mapping. $page = null; try { $stm = $pdo->prepare("SELECT * FROM simeya_pages WHERE slug=? AND status='active' LIMIT 1"); $stm->execute([$pgid]); $page = $stm->fetch(PDO::FETCH_ASSOC); } catch (Throwable $e) { // If DB not available for some reason, we just fall back silently $page = null; } if ($page) { // DB-based route $purl = $page['include_file']; // e.g. /includes/business.inc } else { // Filesystem fallback (original) if ($SCRIPT_1 == 'dashboard') { $purl = "/dashboard/includes/" . $pgid . ".inc"; } else if (file_exists($xhtml) && !empty($pgid)) { $purl = $xurl; } else { $purl = $server_pages[404]; } // Construct a synthetic $page with sensible defaults so templates can use it $page = [ 'page_id' => 0, 'slug' => $pgid, 'url_path' => '/' . $pgid, 'include_file' => $purl, 'title' => null, 'display_type' => 1, // default 1 column 'visibility' => 'public', 'modal_enabled' => 0, 'modal_include_file' => null, 'left_ads_mode' => 'auto', 'left_ads_max' => 2, 'left_ads_order' => 'ordered', 'status' => 'active' ]; } //if($pg == "shop") { $purl = "/includes/" . $pg; //} DEFINE("PURL", $purl); //print "

    PURL $purl

    "; // Make $page available to included templates $GLOBALS['page'] = $page; // ====================================================================== // ACCESS CONTROL (DB visibility + optional allow list) // ====================================================================== $deny = false; $userType = $SIMinfo['user_type'] ?? null; if (!empty($page['visibility'])) { if ($page['visibility'] === 'admin') { // Adjust your admin roles as needed $deny = !in_array($userType, ['A','M'], true); } elseif ($page['visibility'] === 'restricted') { $deny = true; // default deny until allowed try { $qa = $pdo->prepare("SELECT 1 FROM simeya_page_access WHERE page_id=? AND user_type=? LIMIT 1"); $qa->execute([$page['page_id'], $userType]); if ($qa->fetchColumn()) $deny = false; } catch (Throwable $e) { // If table not present yet, remain denied for restricted pages $deny = true; } } } if ($deny) { // Render a friendly denial page (same style as your block in 2-col template) $index .= '
    '; include ($_SERVER['DOCUMENT_ROOT'] . "/includes/header-win.inc"); $index .= $header; $index .= '
    Access Denied

    🚫 Access Denied

    You are not authorized to access this page.

    Login or Join the Simeya Network

    '; // Footer & close will be added later below as usual } else { // ==================================================================== // DISPATCH to main templates (original behavior preserved) // ==================================================================== /* if ($SCRIPT_1 == 'dashboard') { include ($_SERVER['DOCUMENT_ROOT'] . "/dashboard/html/index.php"); } else if (PGID == 'home') { include ($_SERVER['DOCUMENT_ROOT'] . "/includes/index-win-new.inc"); } else if (in_array($pgid, $server_social)) { include ($_SERVER['DOCUMENT_ROOT'] . "/includes/index-win-new.inc"); } else if (in_array($pgid, $server_includes)) { include ($_SERVER['DOCUMENT_ROOT'] . "/includes/index-includes.inc"); } else { include ($_SERVER['DOCUMENT_ROOT'] . "/includes/index-win-new.inc"); } */ include ($_SERVER['DOCUMENT_ROOT'] . "/includes/index-win-new.inc"); } // Page composed by included template(s) $page_html = $index; echo $page_html; ?> '; include ($_SERVER['DOCUMENT_ROOT'] . "/includes/footer-win.inc"); echo $footer; echo '
    '; include ($_SERVER['DOCUMENT_ROOT'] . "/includes/foot-win.inc"); echo $foot; // include ($_SERVER['DOCUMENT_ROOT'] . "/includes/contrast2.inc"); echo $contrast2; ?> = :now) AND a.status='active'"; if ($mode === 'manual' && !empty($page['page_id'])) { // ORDER BY for manual mode if ($order === 'random') { $orderSql = ' ORDER BY RAND() '; } elseif ($order === 'weighted') { $orderSql = ' ORDER BY spa.weight DESC, spa.slot_order ASC '; } else { $orderSql = ' ORDER BY spa.slot_order ASC '; } $sql = " SELECT a.*, COALESCE(spa.weight, a.weight) AS eff_weight FROM simeya_page_ads spa JOIN simeya_ads a ON a.ad_id = spa.ad_id WHERE spa.page_id = :pid AND $timeClause $orderSql LIMIT $limit"; $st = $pdo->prepare($sql); $st->execute([':pid' => $page['page_id'], ':now' => $now]); return $st->fetchAll(PDO::FETCH_ASSOC); } if (!function_exists('render_ad')) { function render_ad($ad) { switch ($ad['ad_type']) { case 'image': if (!empty($ad['image_url'])) { $img = htmlspecialchars($ad['image_url'], ENT_QUOTES); $href = !empty($ad['link_url']) ? htmlspecialchars($ad['link_url'], ENT_QUOTES) : '#'; echo '
    '; } break; case 'html': echo '
    '.$ad['html_snippet'].'
    '; break; case 'include': if (!empty($ad['include_file'])) { $file = $_SERVER['DOCUMENT_ROOT'].$ad['include_file']; if (is_file($file)) include $file; } break; } } } // AUTO mode if ($order === 'random') { $orderSql = ' ORDER BY RAND() '; } elseif ($order === 'weighted') { $orderSql = ' ORDER BY a.weight DESC, a.ad_id DESC '; } else { $orderSql = ' ORDER BY a.ad_id DESC '; } $sql = "SELECT a.*, a.weight AS eff_weight FROM simeya_ads a WHERE $timeClause $orderSql LIMIT $limit"; $st = $pdo->prepare($sql); $st->execute([':now' => $now]); return $st->fetchAll(PDO::FETCH_ASSOC); } }