1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
| <?php
class Auth {
var $user_id;
var $username;
var $password;
var $ok;
var $salt = "34asdf34";
var $domain = ".domain.com";
function Auth() {
global $db;
$this->user_id = 0;
$this->username = "Guest";
$this->ok = false;
if (!$this->check_session())
$this->check_cookie();
return $this->ok;
}
function check_session() {
if (!empty ($_SESSION['auth_username']) && !empty ($_SESSION['auth_password'])){
return $this->check($_SESSION['auth_username'], $_SESSION['auth_password']);
}
else{
return false;
}
}
function check_cookie() {
if (!empty ($_COOKIE['auth_username']) && !empty ($_COOKIE['auth_password'])){
return $this->check($_COOKIE['auth_username'], $_COOKIE['auth_password']);
}
else{
return false;
}
}
function login($username, $password) {
global $db;
$db->query("SELECT user_id
FROM users
WHERE username = '$username'
AND password = '$password'");
if (mysql_num_rows($db->result) == 1) {
$this->user_id = mysql_result($db->result, 0, 0);
$this->username = $username;
$this->ok = true;
$_SESSION['auth_username'] = $username;
$_SESSION['auth_password'] = md5($password . $this->salt);
setcookie(
"auth_username",
$username,
time() + 60 * 60 * 24 * 30,
"/",
$this->domain
);
setcookie(
"auth_password",
md5($password . $this->salt),
time() + 60 * 60 * 24 * 30,
"/", $this->domain
);
return true;
}
return false;
}
function check($username, $password) {
global $db;
$db->query("SELECT user_id, password
FROM users
WHERE username = '$username'");
if (mysql_num_rows($db->result) == 1) {
$db_password = mysql_result($db->result, 0, 1);
if (md5($db_password . $this->salt) == $password) {
$this->user_id = mysql_result($db->result, 0, 0);
$this->username = $username;
$this->ok = true;
return true;
}
}
return false;
}
function logout() {
$this->user_id = 0;
$this->username = "Guest";
$this->ok = false;
$_SESSION['auth_username'] = "";
$_SESSION['auth_password'] = "";
setcookie("auth_username", "", time() - 3600, "/", $this->domain);
setcookie("auth_password", "", time() - 3600, "/", $this->domain);
}
}
?> |
