package Apache2::TicketAccess;

use strict;
use Apache2::Const qw(:common);
use Apache2::TicketTool ();

sub handler 
	{
	my $r = shift;
	my $ticketTool = Apache2::TicketTool->new($r);
	my($result, $msg) = $ticketTool->verify_ticket($r);
	unless ($result) 
		{
		$r->log_reason($msg, $r->filename);
		my $cookie = $ticketTool->make_return_address($r);
		$r->err_headers_out->add('Set-Cookie' => $cookie);
		return FORBIDDEN;
		}
	return OK;
	}

1;
__END__