include/auth.php

   1 <?php
   2
   3 // login/logout
   4
   5 if((x($_SESSION,'authenticated')) && (! ($_POST['auth-params'] == 'login'))) {
   6         if($_POST['auth-params'] == 'logout' || $a->module == "logout") {
   7                 unset($_SESSION['authenticated']);
   8                 unset($_SESSION['uid']);
   9                 unset($_SESSION['visitor_id']);
  10                 unset($_SESSION['is_visitor']);
  11                 unset($_SESSION['administrator']);
  12                 unset($_SESSION['cid']);
  13                 $_SESSION['sysmsg'] = "Logged out." . EOL;
  14                 goaway($a->get_baseurl());
  15         }
  16         if(x($_SESSION,'uid')) {
  17                 $r = q("SELECT * FROM `user` WHERE `uid` = %d LIMIT 1",
  18                         intval($_SESSION['uid']));
  19                 if($r === NULL || (! count($r))) {
  20                         goaway($a->get_baseurl());
  21                 }
  22                 $a->user = $r[0];
  23                 if(strlen($a->user['timezone']))
  24                         date_default_timezone_set($a->user['timezone']);
  25
  26                 if(x($a->user,'nickname'))
  27                         $_SESSION['my_url'] = $a->get_baseurl() . '/profile/' . $r[0]['nickname'];
  28                 else
  29                         $_SESSION['my_url'] = $a->get_baseurl() . '/profile/' . $r[0]['uid'];
  30
  31
  32
  33                 $r = q("SELECT * FROM `contact` WHERE `uid` = %s AND `self` = 1 LIMIT 1",
  34                         intval($_SESSION['uid']));
  35                 if(count($r)) {
  36                         $a->contact = $r[0];
  37                         $a->cid = $r[0]['id'];
  38                         $_SESSION['cid'] = $a->cid;
  39
  40                 }
  41         }
  42 }
  43 else {
  44         unset($_SESSION['authenticated']);
  45         unset($_SESSION['uid']);
  46         unset($_SESSION['visitor_id']);
  47         unset($_SESSION['is_visitor']);
  48         unset($_SESSION['administrator']);
  49         unset($_SESSION['cid']);
  50         $encrypted = hash('whirlpool',trim($_POST['password']));
  51
  52         if((x($_POST,'auth-params')) && $_POST['auth-params'] == 'login') {
  53                 $r = q("SELECT * FROM `user`
  54                         WHERE `email` = '%s' AND `password` = '%s' LIMIT 1",
  55                         dbesc(trim($_POST['login-name'])),
  56                         dbesc($encrypted));
  57                 if(($r === false) || (! count($r))) {
  58                         $_SESSION['sysmsg'] = 'Login failed.' . EOL ;
  59                         goaway($a->get_baseurl());
  60                 }
  61                 $_SESSION['uid'] = $r[0]['uid'];
  62                 $_SESSION['admin'] = $r[0]['admin'];
  63                 $_SESSION['authenticated'] = 1;
  64                 if(x($r[0],'nickname'))
  65                         $_SESSION['my_url'] = $a->get_baseurl() . '/profile/' . $r[0]['nickname'];
  66                 else
  67                         $_SESSION['my_url'] = $a->get_baseurl() . '/profile/' . $r[0]['uid'];
  68
  69                 $_SESSION['sysmsg'] = "Welcome back " . $r[0]['username'] . EOL;
  70                 $a->user = $r[0];
  71                 if(strlen($a->user['timezone']))
  72                         date_default_timezone_set($a->user['timezone']);
  73
  74                 $r = q("SELECT * FROM `contact` WHERE `uid` = %s AND `self` = 1 LIMIT 1",
  75                         intval($_SESSION['uid']));
  76                 if(count($r)) {
  77                         $a->cid = $r[0]['id'];
  78                         $_SESSION['cid'] = $a->cid;
  79                 }
  80
  81
  82         }
  83 }
  84
  85 // Returns an array of group id's this contact is a member of.
  86 // This array will only contain group id's related to the uid of this
  87 // DFRN contact. They are *not* neccessarily unique across the entire site.
  88
  89
  90 if(! function_exists('init_groups_visitor')) {
  91 function init_groups_visitor($contact_id) {
  92         $groups = array();
  93         $r = q("SELECT `gid` FROM `group_member`
  94                 WHERE `contact-id` = %d ",
  95                 intval($contact_id)
  96         );
  97         if(count($r)) {
  98                 foreach($r as $rr)
  99                         $groups[] = $rr['gid'];
 100         }
 101         return $groups;
 102 }}
 103
 104