Fix some issues with secure cookies being overwritten by insecure site.

Now, /publish/{edit,addeditor,login,logout} must be accessed via
https://; other pages should not be (but can be).

bottombar.inc.php

@@ -1,4 +1,5 @@
 <div id="bottom"><p>
 All stories and submissions <a class="whitefont" href="about">&copy;</a> 2003&ndash;<? echo gmdate("Y"); ?> their respective authors. 
 </p></div>
+<? $_SESSION['referrer'] = $_SERVER['REQUEST_URI']; ?>
 <? include_once('google.inc.php'); ?>

publish/addeditor.php

@@ -1,4 +1,7 @@
 <? 
+if ( ! isset($_SERVER['HTTPS'])) {
+   header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+}
 require_once("../session.lib.php"); 
 $added = FALSE;
 if (!isset($_SESSION['editor'])) {

publish/edit.php

@@ -1,7 +1,11 @@
 <?
+if ( ! isset($_SERVER['HTTPS'])) {
+   header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+}
 require_once("../session.lib.php"); 
 if (!isset($_SESSION['editor'])) {
   $is_admin = FALSE;
+  session_write_close();
   header("Location: https://xxx.org.za/publish/login");
   return;
 }
@@ -28,7 +32,6 @@ if (!isset($_SESSION['editor'])) {
   $editable = TRUE;
   $id = get_id();
 ?>
-
 <body>
 
 <div id='container'>

publish/login.php

@@ -1,11 +1,15 @@
 <?
+if ( ! isset($_SERVER['HTTPS'])) {
+   header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+}
 require_once("../session.lib.php");
 $denied = NULL;
 $is_admin = NULL;
 if (isset($_SESSION['editor'])) {
-  header("Location: http://xxx.org.za/publish/edit");
+  session_write_close();
+  header("Location: https://xxx.org.za/publish/edit");
+  return;
 } else if (isset($_POST['login'])) {
-
   include_once('../open_db.lib.php');
   $table = "editors";
   open_db('open');
@@ -17,7 +21,8 @@ if (isset($_SESSION['editor'])) {
   $getid = $db->query($query) or die("Query failed: ".$db->error());
   $row = $getid->fetch_assoc();
 
-  if (isset($row)) $stored_password = $row['password'];
+  if (isset($row)) 
+    $stored_password = $row['password'];
   else  $denied = TRUE;
   $getid->close();
   open_db('close');
@@ -35,10 +40,13 @@ if (isset($_SESSION['editor'])) {
       $url .= $_SERVER['HTTP_HOST'];
       $url .= $_SESSION['referrer'];
       unset($_SESSION['referrer']);
+      session_write_close();
       header("Location: $url");
       return;
     } else {
-      header("Location: http://xxx.org.za/publish/edit");
+      session_write_close();
+      header("Location: https://xxx.org.za/publish/edit");
+      return;
     }
   }
 } 

publish/logout.php

@@ -1,4 +1,7 @@
 <?
+if ( ! isset($_SERVER['HTTPS'])) {
+   header('Location: https://' . $_SERVER["SERVER_NAME"] . $_SERVER['REQUEST_URI']);
+}
 require_once("../session.lib.php");
 if (isset($_SESSION['editor'])) {
   if (isset($_COOKIE[session_name()])) {
@@ -18,7 +21,7 @@ if (isset($_SESSION['referrer'])) {
   header("Location: $url");
   return;
 } else {
-  header("Location: /");
+  header("Location: http://xxx.org.za/");
   return;
 }
 ?>

publish/style.css

@@ -10,6 +10,7 @@
 input#remember {
   margin-left: -2px;
   margin-top: 7px;
+  width: inherit;
 }
 
 #story {

session.lib.php

@@ -1,18 +1,22 @@
 <?
 require_once(realpath(dirname(__FILE__) . '/open_db.lib.php'));
-session_cache_limiter('none');
+
+if (isset($_SERVER['HTTPS'])) {
+  session_cache_limiter('private');
   session_set_cookie_params(strtotime('+1 year'), '/', '.xxx.org.za', TRUE, TRUE);
   session_start();
-$_SESSION['referrer'] = $_SERVER['REQUEST_URI'];
+
   if (isset($_SESSION['editor'])) {
     $is_admin = TRUE;
     $username = $_SESSION['editor'];
   } elseif (check_persistent_login()) {
+    // check_persistent_login() sets $_SESSION['editor']
     $is_admin = TRUE;
     $username = $_SESSION['editor'];
   } else {
     $is_admin = FALSE;
   }
+}
 
 function check_persistent_login() {
   if (!array_key_exists('PersistentAuth', $_COOKIE)) {