<?php
-
/**
- * @file src/Core/Session.php
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ *
*/
+
namespace Friendica\Core;
-use Friendica\Core\Session\DatabaseSessionHandler;
-use Friendica\Core\Session\MemcacheSessionHandler;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\Contact;
+use Friendica\Util\Strings;
/**
* High-level Session service class
- *
- * @author Hypolite Petovan <mrpetovan@gmail.com>
*/
class Session
{
public static $exists = false;
public static $expire = 180000;
- public static function init()
+ public static function exists($name)
+ {
+ return DI::session()->exists($name);
+ }
+
+ public static function get($name, $defaults = null)
{
- ini_set('session.gc_probability', 50);
- ini_set('session.use_only_cookies', 1);
- ini_set('session.cookie_httponly', 1);
+ return DI::session()->get($name, $defaults);
+ }
- if (Config::get('system', 'ssl_policy') == SSL_POLICY_FULL) {
- ini_set('session.cookie_secure', 1);
- }
+ public static function set($name, $value)
+ {
+ DI::session()->set($name, $value);
+ }
- if (!Config::get('system', 'disable_database_session')) {
- $memcache = Cache::memcache();
- if (is_object($memcache)) {
- $SessionHandler = new MemcacheSessionHandler($memcache);
- } else {
- $SessionHandler = new DatabaseSessionHandler();
- }
+ public static function setMultiple(array $values)
+ {
+ DI::session()->setMultiple($values);
+ }
- session_set_save_handler($SessionHandler);
+ public static function remove($name)
+ {
+ DI::session()->remove($name);
+ }
+
+ public static function clear()
+ {
+ DI::session()->clear();
+ }
+
+ /**
+ * Return the user contact ID of a visitor for the given user ID they are visiting
+ *
+ * @param integer $uid User ID
+ * @return integer
+ */
+ public static function getRemoteContactID($uid)
+ {
+ $session = DI::session();
+
+ if (empty($session->get('remote')[$uid])) {
+ return 0;
}
+
+ return $session->get('remote')[$uid];
}
- public static function exists($name)
+ /**
+ * Returns User ID for given contact ID of the visitor
+ *
+ * @param integer $cid Contact ID
+ * @return integer User ID for given contact ID of the visitor
+ */
+ public static function getUserIDForVisitorContactID($cid)
{
- return isset($_SESSION[$name]);
+ $session = DI::session();
+
+ if (empty($session->get('remote'))) {
+ return false;
+ }
+
+ return array_search($cid, $session->get('remote'));
}
- public static function get($name)
+ /**
+ * Set the session variable that contains the contact IDs for the visitor's contact URL
+ *
+ * @param string $url Contact URL
+ */
+ public static function setVisitorsContacts()
{
- return defaults($_SESSION, $name, null);
+ $session = DI::session();
+
+ $session->set('remote', []);
+
+ $remote_contacts = DBA::select('contact', ['id', 'uid'], ['nurl' => Strings::normaliseLink($session->get('my_url')), 'rel' => [Contact::FOLLOWER, Contact::FRIEND], 'self' => false]);
+ while ($contact = DBA::fetch($remote_contacts)) {
+ if (($contact['uid'] == 0) || Contact\User::isBlocked($contact['id'], $contact['uid'])) {
+ continue;
+ }
+
+ $session->set('remote', [$contact['uid'] => $contact['id']]);
+ }
+ DBA::close($remote_contacts);
}
- public static function set($name, $value)
+ /**
+ * Returns if the current visitor is authenticated
+ *
+ * @return boolean "true" when visitor is either a local or remote user
+ */
+ public static function isAuthenticated()
{
- $_SESSION[$name] = $value;
+ $session = DI::session();
+
+ return $session->get('authenticated', false);
}
}