3600, 'path' => '/', 'domain' => '.unileverjatek.hu', 'secure' => true, 'httponly' => true ]);*/ session_start(); include('redirects.php'); date_default_timezone_set("Europe/Budapest"); if(time()>=strtotime('2026-04-10 18:00:00') && time()<=strtotime('2026-04-11 06:00:00')){ header('Location: https://www.unileverjatek.hu/karbantartas.html'); exit(); } $_SESSION['PROMO_DATA'] = array(); require_once('inc/inc-controller.php'); require_once('inc/inc-main.php'); processCall($dbConn); getMetas($dbConn); $ver = '1.5.1.'.date('s'); if(isset($_GET['demo']) && $_GET['demo']=='ON'){ $_SESSION['DEMO_MODE'] = 'ON'; } /*Content-Security-Policy ------------------------------------------------------------>*/ /*|*/ $csp = "Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' "; /*|*/ /*|*/ if(isset($_SESSION['CSP_ALLOWED_DOMAINS']) && strlen($_SESSION['CSP_ALLOWED_DOMAINS'])>0){ /*|*/ foreach(explode(';',$_SESSION['CSP_ALLOWED_DOMAINS']) as $dk => $d){ $csp .= " ".$d; } /*|*/ } $csp .= ";"; /*|*/ /*|*/ $csp = "Content-Security-Policy: "; /*|*/ /*|*/ $csp .= " frame-ancestors 'self' "; /*|*/ /* if(isset($_SESSION['PROMO_DATA']['WWWSETTINGS']['framedSite']) && strlen($_SESSION['PROMO_DATA']['WWWSETTINGS']['framedSite'])>1){ $csp .= " frame-ancestors 'self' "; foreach(explode(';',$_SESSION['PROMO_DATA']['WWWSETTINGS']['framedSite']) as $dk => $d){ $csp .= " ".$d; } } */ $csp .= ";"; /*|*/ /*|*/ $_SESSION['COLLECTED_CSP_RULES'] = $csp; /*|*/ header($_SESSION['COLLECTED_CSP_RULES']); /*<------------------------------------------------------------ Content-Security-Policy*/ if( isset($_SESSION['URLCALL'][0]) && ($_SESSION['URLCALL'][0]=='jsz' || $_SESSION['URLCALL'][0]=='upl') && isset($_SESSION['URLCALL'][1]) && strlen($_SESSION['URLCALL'][1])>0 ){ $promoSt = 'SELECT * FROM `www_promotions` WHERE URL = "'.addslashes(str_replace(array('"',"'",")","("),"",strip_tags($_SESSION['URLCALL'][1]))).'" LIMIT 1;'; $promoQ = $dbConn->executeSQL($promoSt); if($dbConn->nr($promoQ)==1){ $promoD = mysqli_fetch_assoc($promoQ); $pid = $promoD['PID']; if(is_numeric($pid) && $pid>0){ if($_SESSION['URLCALL'][0]=='jsz'){ $jszSt = 'SELECT * FROM `www_promotions_settings` WHERE `PID` = "'.$pid.'" AND `VARNAME` = "jszfile";'; $jszQ = $dbConn->executeSQL($jszSt); if($dbConn->nr($jszQ)==1){ $jszD = mysqli_fetch_assoc($jszQ); $filePath = $jszD['VARVALUE']; $fileInfo = pathinfo($filePath); $fileName = $fileInfo['basename']; header("Content-Type: application/pdf"); header("Content-Disposition: inline; filename=".$fileName); readfile($filePath); } else { header("HTTP/1.0 404 Not Found"); echo "File Not Found!"; } } if($_SESSION['URLCALL'][0]=='upl'){ if(isset($_SESSION['URLCALL'][2]) && strlen($_SESSION['URLCALL'][2])>4){ $fileName = str_replace(array('/','..'),'',basename($_SESSION['URLCALL'][2])); $filePath = $_SERVER['DOCUMENT_ROOT'].'/files/promotions/'.$pid.'/app_uploads/'.$fileName; if(file_exists($filePath)){ header('Content-Type: application/octet-stream'); header("Content-Transfer-Encoding: Binary"); header("Content-Disposition: inline; filename=".$fileName); readfile($filePath); } } } } else { header("HTTP/1.0 404 Not Found"); echo "File Not Found!"; } } else { header("HTTP/1.0 404 Not Found"); echo "File Not Found!"; } } else { ?> executeSQL($st); $onlyFramedVersion = false; if(isset($_SESSION['PROMO_DATA']['WWWSETTINGS']['framedVersion']) && $_SESSION['PROMO_DATA']['WWWSETTINGS']['framedVersion']=='yes'){ $onlyFramedVersion = true; } if(!$onlyFramedVersion){ include('inc/inc-sidemenu.php'); include('inc/inc-topmenu.php'); } include('inc/inc_body_top.php'); include('inc/inc_body_content.php'); if(!$onlyFramedVersion){ include('inc/inc_footer.php'); } include('inc/inc_body_end.php'); ?> */ ?>