00001 <?php 00002 /** 00003 * Magento 00004 * 00005 * NOTICE OF LICENSE 00006 * 00007 * This source file is subject to the Open Software License (OSL 3.0) 00008 * that is bundled with this package in the file LICENSE.txt. 00009 * It is also available through the world-wide-web at this URL: 00010 * http://opensource.org/licenses/osl-3.0.php 00011 * If you did not receive a copy of the license and are unable to 00012 * obtain it through the world-wide-web, please send an email 00013 * to license@magentocommerce.com so we can send you a copy immediately. 00014 * 00015 * DISCLAIMER 00016 * 00017 * Do not edit or add to this file if you wish to upgrade Magento to newer 00018 * versions in the future. If you wish to customize Magento for your 00019 * needs please refer to http://www.magentocommerce.com for more information. 00020 * 00021 * @category Mage 00022 * @package Mage_Rss 00023 * @copyright Copyright (c) 2008 Irubin Consulting Inc. DBA Varien (http://www.varien.com) 00024 * @license http://opensource.org/licenses/osl-3.0.php Open Software License (OSL 3.0) 00025 */ 00026 00027 /** 00028 * Default rss helper 00029 * 00030 * @author Magento Core Team <core@magentocommerce.com> 00031 */ 00032 class Mage_Adminhtml_Helper_Rss extends Mage_Core_Helper_Abstract 00033 { 00034 public function authAdmin($path) 00035 { 00036 $session = Mage::getSingleton('rss/session'); 00037 if ($session->isAdminLoggedIn()) { 00038 return; 00039 } 00040 list($username, $password) = Mage::helper('core/http')->authValidate(); 00041 $adminSession = Mage::getModel('admin/session'); 00042 $user = $adminSession->login($username, $password); 00043 //$user = Mage::getModel('admin/user')->login($username, $password); 00044 if($user && $user->getId() && $user->getIsActive() == '1' && $adminSession->isAllowed($path)){ 00045 $session->setAdmin($user); 00046 } else { 00047 Mage::helper('core/http')->authFailed(); 00048 } 00049 } 00050 }