1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
|
<?php
require_once('inc/session.inc.php');
class User
{
private static $user = false;
public static function isLoggedIn()
{
return self::$user !== false;
}
public static function getId()
{
if (!self::isLoggedIn())
return false;
return self::$user['userid'];
}
public static function getName()
{
if (!self::isLoggedIn())
return false;
return self::$user['fullname'];
}
public static function hasPermission($permission, $locationid = NULL)
{
if (!self::isLoggedIn())
return false;
if (Module::isAvailable("permissionmanager")) {
$module = Page::getModule();
$permission = $module ? $module->getIdentifier().".".$permission : $permission;
return PermissionUtil::userHasPermission(self::$user['userid'], $permission, $locationid);
}
if (self::$user['permissions'] & Permission::get('superadmin'))
return true;
return (self::$user['permissions'] & Permission::get($permission)) != 0;
}
public static function getAllowedLocations($permission)
{
if (Module::isAvailable("permissionmanager")) {
$module = Page::getModule();
$permission = $module ? $module->getIdentifier().".".$permission : $permission;
return PermissionUtil::getAllowedLocations(self::$user['userid'], $permission);
}
if (self::$user['permissions'] & Permission::get('superadmin'))
return array_keys(Location::getLocationsAssoc());
return array();
}
public static function load()
{
if (self::isLoggedIn())
return true;
if (Session::load()) {
$uid = Session::get('uid');
if ($uid === false || $uid < 1)
self::logout();
self::$user = Database::queryFirst('SELECT * FROM user WHERE userid = :uid LIMIT 1', array(':uid' => $uid));
if (self::$user === false)
self::logout();
return true;
}
return false;
}
public static function testPassword($userid, $password)
{
$ret = Database::queryFirst('SELECT passwd FROM user WHERE userid = :userid LIMIT 1', compact('userid'));
if ($ret === false)
return false;
return Crypto::verify($password, $ret['passwd']);
}
public static function updatePassword($password)
{
if (!self::isLoggedIn())
return false;
$passwd = Crypto::hash6($password);
$userid = self::getId();
return Database::exec('UPDATE user SET passwd = :passwd WHERE userid = :userid LIMIT 1', compact('userid', 'passwd')) > 0;
}
public static function login($user, $pass)
{
$ret = Database::queryFirst('SELECT userid, passwd FROM user WHERE login = :user LIMIT 1', array(':user' => $user));
if ($ret === false)
return false;
if (!Crypto::verify($pass, $ret['passwd']))
return false;
Session::create($ret['passwd']);
Session::set('uid', $ret['userid']);
Session::set('token', md5($ret['passwd'] . ','
. rand() . ','
. time() . ','
. rand() . ','
. $_SERVER['REMOTE_ADDR'] . ','
. rand() . ','
. $_SERVER['REMOTE_PORT'] . ','
. rand() . ','
. $_SERVER['HTTP_USER_AGENT']));
Session::save();
return true;
}
public static function logout()
{
Session::delete();
Header('Location: ?do=Main&fromlogout');
exit(0);
}
public static function setLastSeenEvent($eventid)
{
if (!self::isLoggedIn())
return;
Database::exec("UPDATE user SET lasteventid = :eventid WHERE userid = :userid LIMIT 1", array(
'eventid' => $eventid,
'userid' => self::$user['userid']
));
self::$user['lasteventid'] = $eventid;
}
public static function getLastSeenEvent()
{
if (!self::isLoggedIn())
return false;
return self::$user['lasteventid'];
}
}
|
