first commit

admininistrator/controller/startup/login.php

@@ -0,0 +1,54 @@
+<?php
+namespace Opencart\Admin\Controller\Startup;
+/**
+ * Class Login
+ *
+ * @package Opencart\Admin\Controller\Startup
+ */
+class Login extends \Opencart\System\Engine\Controller {
+	/**
+	 * @return object|\Opencart\System\Engine\Action|null
+	 */
+	public function index(): object|null {
+		if (isset($this->request->get['route'])) {
+			$route = (string)$this->request->get['route'];
+		} else {
+			$route = '';
+		}
+
+		// Remove any method call for checking ignore pages.
+		$pos = strrpos($route, '.');
+
+		if ($pos !== false) {
+			$route = substr($route, 0, $pos);
+		}
+
+		$ignore = [
+			'common/login',
+			'common/forgotten',
+			'common/language'
+		];
+
+		// User
+		$this->registry->set('user', new \Opencart\System\Library\Cart\User($this->registry));
+
+		if (!$this->user->isLogged() && !in_array($route, $ignore)) {
+			return new \Opencart\System\Engine\Action('common/login');
+		}
+
+		$ignore = [
+			'common/login',
+			'common/logout',
+			'common/forgotten',
+			'common/language',
+			'error/not_found',
+			'error/permission'
+		];
+
+		if (!in_array($route, $ignore) && (!isset($this->request->get['user_token']) || !isset($this->session->data['user_token']) || ($this->request->get['user_token'] != $this->session->data['user_token']))) {
+			return new \Opencart\System\Engine\Action('common/login');
+		}
+
+		return null;
+	}
+}