sending lib to the repos

2008-04-20 13:31:29 +00:00
parent c313cfa40b
commit 03dca2fcae
7 changed files with 937 additions and 0 deletions
--- a/lib/auth.php
+++ b/lib/auth.php
@@ -0,0 +1,154 @@
+<?php
+
+class auth {
+
+	var $username = '';
+	var $password = '';
+
+	function auth () {
+		if (!session_id ()){
+			session_start();
+		}
+
+		if ($this->check_auth ()) {
+			$_SESSION['logged_in'] = true;
+		}
+		else {
+			$_SESSION['logged_in'] = false;
+		}
+	}
+
+	function check_auth () {
+		if (session_id ()
+			&& isset ($_SESSION['challengekey'])
+			&& strlen ($_SESSION['challengekey']) === 32
+			&& isset ($_SESSION['username'])
+			&& $_SESSION['username'] != ''
+			&& isset ($_SESSION['logged_in'])
+			&& $_SESSION['logged_in']) {
+			return true;
+		}
+		else if ($this->check_cookie ()) {
+			return true;
+		}
+		return false;
+	}
+
+	function assign_data () {
+		if (   isset($_POST['username'])
+			&& isset($_POST['password'])
+			&& $_POST['username'] != ''
+			&& $_POST['password'] != '') {
+				$this->username = $_POST['username'];
+				$this->password = $_POST['password'];
+				return true;
+		}
+		return false;
+	}
+
+	function login () {
+		$_SESSION['logged_in'] = false;
+		if ($this->assign_data ()) {
+			global $mysql;
+			$query = sprintf("SELECT COUNT(*) FROM user WHERE md5(username)=md5('%s') AND password=md5('%s')",
+				$mysql->escape ($this->username),
+				$mysql->escape ($this->password));
+			if ($mysql->query ($query) && mysql_result ($mysql->result, 0) === "1") {
+				if (isset ($_POST['remember'])) {
+					global $cookie;
+					$cookie['data'] = serialize (array ($this->username, md5 ($cookie['seed'] . md5 ($this->password))));
+					@setcookie ($cookie['name'],
+								$cookie['data'],
+								$cookie['expire'],
+								$cookie['path'],
+								$cookie['domain']);
+				}
+				$this->set_login_data ($this->username);
+			}
+			else {
+				$this->logout ();
+			}
+		}
+		unset ($_POST['password']);
+		unset ($this->password);
+	}
+
+	function logout () {
+		global $cookie;
+		unset ($_SESSION['challengekey']);
+		unset ($_SESSION['username']);
+		@setcookie ($cookie['name'], "", time() - 1, $cookie['path'], $cookie['domain']);
+		$_SESSION['logged_in'] = false;
+	}
+
+	function set_login_data ($username) {
+		$_SESSION['challengekey'] = md5 ($username . microtime ());
+		$_SESSION['username'] = $username;
+		$_SESSION['logged_in'] = true;
+	}
+
+	function check_cookie () {
+		global $cookie, $mysql;
+		if (   isset ($cookie['name'])
+			&& $cookie['name'] != ''
+			&& isset ($_COOKIE[$cookie['name']])) {
+			list ($cookie['username'], $cookie['password_hash']) = @unserialize ($_COOKIE[$cookie['name']]);
+			$query = sprintf("SELECT COUNT(*) FROM user WHERE username='%s' AND MD5(CONCAT('%s', password))='%s'",
+				$mysql->escape ($cookie['username']),
+				$mysql->escape ($cookie['seed']),
+				$mysql->escape ($cookie['password_hash']));
+			if ($mysql->query ($query) && mysql_result ($mysql->result, 0) === "1") {
+				$this->set_login_data ($cookie['username']);
+				return true;
+			}
+			else {
+				$this->logout ();
+				return false;
+			}
+		}
+		return false;
+	}
+
+	function display_login_form () {
+		?>
+
+			<form name="loginform" method="POST" action="<?php echo $_SERVER['SCRIPT_NAME']; ?>">
+			<center>
+				<table border="0"  style="text-align:left;">
+					<tr>
+						<td>Username:</td>
+						<td><input name="username" type="text" value="" tabindex="1"></td>
+					</tr>
+					<tr>
+						<td>Password:</td>
+						<td><input name="password" type="password" value="" tabindex="2"></td>
+					</tr>
+					<tr>
+						<td>Remember login:</td>
+						<td><input type="checkbox" name="remember" tabindex="3"></td>
+					</tr>
+					<tr>
+						<td></td>
+						<td><input type="submit" value="Login" tabindex="4"></td>
+					</tr>
+				</table>
+
+				<?php
+				if (strtolower (basename ($_SERVER['SCRIPT_NAME'])) == "index.php") {
+					echo '<br><div><a href="./shared.php">Users Sharing Bookmarks</a></div>';
+				}
+				?>
+
+			</center>
+			</form>
+
+
+		<script type="text/javascript">
+		document.loginform.username.focus();
+		</script>
+
+		<?php
+	}
+}
+
+?>