auth.php

Go to the documentation of this file.

<?php
class Auth {
    var $_session;

    function __construct() {
        global $session;

        $this->_session = &$session;
//
//      /* if isGod and area previously set, then set area */
//      /* perform overriding */
//      $areaid = $session->getValue("areaid");
//      if ($this->isGod() && isset($areaid)) {
//          global $cfg;
//          $cfg->initConfig($areaid);
//      }
    }

    function isLoggedIn() {
        return ($this->_session->getValue("uid") <> "");
    }

    function isAdmin() {
        return ($this->isLoggedIn() && $this->_session->getValue("isadmin"));
    }

    function isGod() {
        return ($this->isAdmin() && $this->_session->getValue("isgod"));
    }

//  function getUserLevel() {
//      if ($this->isAdmin()) {
//          return 3;
//      } elseif ($this->isLoggedIn()) {
//          return ((strpos($this->_session->getValue("groups"), "1") === FALSE) ? 1 : 2);
//      } else {
//          return 0;
//      }
//  }

    function validateUser() {
        global $log;

        if (!$_POST['uid']) {
            $log->write("USERBADLOGIN", "userid = ``");
            Content::setSysMessage(Content::SYSMSG_ERROR, "LANG_SYSMSG_BADLOGIN");
            return "?login=1";
        }

        $sql =  "SELECT id, userid, pwd, admin, groups " .
                "FROM users " .
                "WHERE (userid = '" . $_POST['uid'] . "') " .
                "AND enabled";
        $res = mysql_query($sql);
        if (mysql_num_rows($res) > 0) {
            $line = mysql_fetch_assoc($res);
            mysql_free_result($res);
            if (md5($_POST['pwd']) == $line['pwd']) {
                $this->_session->setValue("uid", $line['id']);
                $this->_session->setValue("userid", $line['userid']);
                $this->_session->setValue("isadmin", $line['admin']);
                $this->_session->setValue("isgod", $line['admin'] && ($line['id_area'] == 0));
                $this->_session->setValue("groups", $line['groups']);
                $this->_session->setUseridInSession($line['id']);

                $log->write("USERLOGIN", $line['userid']);
                Content::setSysMessage(Content::SYSMSG_NOTIFY, "LANG_SYSMSG_LOGGEDIN");
            } else {
                $log->write("USERBADLOGIN", "userid = `" . $_POST['uid'] . "`");
                Content::setSysMessage(Content::SYSMSG_ERROR, "LANG_SYSMSG_BADLOGIN");
                return "?login=1";
            }
        } else {
            $log->write("USERBADLOGIN", "userid = `" . $_POST['uid'] . "`");
            Content::setSysMessage(Content::SYSMSG_ERROR, "LANG_SYSMSG_BADLOGIN");
            return "?login=1";
        }
    }

//  function validatePlugin($plugin, $mode) {
//      if (file_exists("include/plugins/" . $plugin . "/index.php")) {
//          $res = mysql_query("SELECT " . $mode . "perm, group_" . $mode . "perm FROM plugins WHERE (id = '" . $plugin . "') AND enabled");
//          if (mysql_num_rows($res) > 0) {
//              $line = mysql_fetch_assoc($res);
//              mysql_free_result($res);
//              return $this->_userCanAccessPlugin($line[$mode . 'perm'], $line['group_' . $mode . 'perm']);
//          } else {
//              return FALSE;
//          }
//      } else {
//          return FALSE;
//      }
//  }

//  function userCanWriteContent($id_owner, $writeperm, $group_writeperm, $visible = TRUE) {
//      if ($this->isAdmin()) { return TRUE; }
//
//      $uid = $this->_session->getValue("uid");
//      if (is_null($uid)) { $uid = 0; }
//      if ($uid == $id_owner) { return TRUE; }
//
//      if (!$visible) { return FALSE; }
//      $userlevel = $this->getUserLevel();
//      $usergroups = $this->_session->getValue("groups");
//      if ($userlevel == 2) {
//          /* in the following condition, we enforce with ($writeperm == 2) since the field `group_writeperm` */
//          /* in the table `content` can contain a value, although if writeperm <> 2 */
//          return (($userlevel > $writeperm) || (intval($usergroups & $group_writeperm) && ($writeperm == 2)));
//      } else {
//          return ($userlevel >= $writeperm);
//      }
//  }

//  function userCanReadContent($id_owner, $readperm, $group_readperm, $visible = TRUE) {
//      return $this->userCanWriteContent($id_owner, $readperm, $group_readperm, $visible);     //FIXME ok... ok... :)
//  }

//  function userCanWriteContentGivenId($id) {
//      /* TODO check write permissions before */
//      $sql = "SELECT id_owner, writeperm, group_writeperm FROM content WHERE id = " . $id;
//      $res = mysql_query($sql);
//      if (mysql_num_rows($res) > 0) {
//          $line = mysql_fetch_assoc($res);
//          mysql_free_result($res);
//          return $this->userCanWriteContent($line['id_owner'], $line['writeperm'], $line['group_writeperm']);
//      } else {
//          return FALSE;
//      }
//  }

//  function _userCanAccessPlugin($perm, $group_perm) {
//      if ($this->isAdmin()) { return TRUE; }
//
//      $userlevel = $this->getUserLevel();
//      $usergroups = $this->_session->getValue("groups");
//      if ($userlevel == 2) {
//          return (($userlevel > $perm) || (intval($usergroups & $group_perm) && ($perm == 2)));
//      } else {
//          return ($userlevel >= $perm);
//      }
//  }
}
?>

---