routeExists($path)) { echo $renderer->render403(); die(); } // If the user does not have a session cookie, 403. // now we dont have to do this in every controller. // Still allow login on homepage. $request = new Request(); $allowed_paths = ['/', '/user-login']; if ( !$request->getCookie('ORIGOSESS') && !in_array($path, $allowed_paths) ) { echo $renderer->render403(); die(); } $controller = $router->getRouteController($path); $controller_cl = new $controller(); $response = $controller_cl->getResponse(); echo $response; ?>