<?php 
//INICIO LA SESION-----------------------------------------------------------
session_start();
//CONEXION-------------------------------------------------------------------
require_once '../conn/conexion.php';
$bd = new connexion();
$bd->query("SET NAMES 'utf8'");
//VARIABLES==================================================================
$user = $_SESSION['user'];
//CARGO LA VARIABLE DE LA SESSION ID=========================================
$sesion_id = sesionID($bd, $user);
//===========================================================================
//COMPRUEBA QUE EL USUARIO ESTA AUTENTICADO Y SEA LA MISMA ID================
if ($_SESSION["id_sesion"] != $sesion_id) {
	//redirecciono a la ventana de error de ingreso
	$url_redir = 'location: ../../../access_adm.php?soff=2&lang='.$_SESSION['lenguaje'];
	//DE NO ESTAR LOGUEADO O SER DISTINTAS LAS ID SE REDIRECCIONA------------
	session_destroy();
	@header($url_redir);
}
//COMPRUEBO SI LO SDESLOGUOE POR INACTIVIDAD==================================
//VARIABLES------------------------------------------------------------------
$fechaGuardada = $_SESSION["ultimo_acceso"];
$ahora = date("Y-n-j H:i:s");
$tiempo_transcurrido = (strtotime($ahora)-strtotime($fechaGuardada));
//VALIDO LA SESION------------------------------------------------------------
if($tiempo_transcurrido >= 43200){ // 1 = 1 seg
	//Valido el idioma a utilizar--------------------------------------------
	//redirecciono a la ventana de error de ingreso
	$url_redir = 'location: ../../../access_adm.php?soff=1&lang='.$_SESSION['lenguaje'];
	session_destroy();
	@header($url_redir);
}else{
	$_SESSION["ultimo_acceso"] = $ahora;
}
//COMPRUEBO SI POSEE PERMISOS PARA EL APARTADO===============================
$has_modulo = accesoModulo($bd);
if ( $_SESSION["mod_access_adm"] != 1  ) {
	$url_redir = 'location: ../../../home.php';
}elseif ( $has_modulo == 0 ) {
	$url_redir = 'location: ../../../home.php';
}
//VARIABLES------------------------------------------------------------------
//============================================================================
//=====================FUNCIONES==============================================
//============================================================================
//OBTENGO EL ID DE LA SESION--------------------------------------------------
function sesionID($bd, $user)
{
	$sql = "SELECT U.AWA_SESION_ID
			FROM USUARIOS U
			WHERE U.USUARIO = '$user'";
	$result = $bd->query($sql);
	$row = mysqli_fetch_array($result);
	$sesion_id = $row['AWA_SESION_ID'];
	return $sesion_id;
}
// FUNCION PARA OBTENER LOS BOTONES DE LAS APPS INSTALADAS------------------------------------------------------
function accesoModulo($bd) {
  $sql =  "   SELECT COUNT(A.CLAVE) AS TOTAL
              FROM APPS A
              WHERE A.ACTIVO = 1 AND CLAVE = 'ACCESS_ADM' ";
  $base = $bd->query($sql);
  $row = mysqli_fetch_array($base);
  $result = $row['TOTAL'];
  return $result;
  $base->close();
}
 ?>