class.ilPDOAuthentication.php

Go to the documentation of this file.

<?php

require_once 'Services/Authentication/classes/PDO/interface.ilAuthPDOInterface.php';

class ilPDOAuthentication implements ilAuthPDOInterface
{
    protected $_sessionName = '_authsession';
    protected $allowLogin = true;
    protected $_postUsername = 'username';
    protected $_postPassword = 'password';
    protected $advancedsecurity;
    protected $enableLogging;
    protected $regenerateSessionId;
    protected $status = '';
    protected $username = null;
    protected $password;
    protected $session;
    protected $server;
    protected $post;
    protected $cookie;


    public function __construct()
    {
        //        $started = session_start();
        //        $sess = session_id();
        //        $db_session_handler = new ilSessionDBHandler();
        //        if (!$db_session_handler->setSaveHandler())
        //        {
        //            throw new Exception("Disable save mode or set session_hanlder to \"user\"");
        //        }
        @session_start(); // Due to UnitTests we have to silence this...

        $this->session = $_SESSION[$this->_sessionName];
        $this->server = $_SERVER;
        $this->post = $_POST;
        $this->cookie = $_COOKIE;
    }


    public function setIdle($time, $add = false)
    {
        // TODO: Implement setIdle() method.
    }


    public function setExpire($time, $add = false)
    {
        // TODO: Implement setExpire() method.
    }


    public function start()
    {
        // TODO SAME AS old AUTH
        $this->assignData();
        if (!$this->checkAuth() && $this->allowLogin) {
            $this->login();
        }
    }


    protected function checkAuth()
    {
        return isset($_SESSION['_authsession']['username']);
    }


    protected function login()
    {
        if (!empty($this->username) && $this->verifyPassword($this->username, $this->password)) {
            $this->setAuth($this->username);
        } else {
            $this->status = AUTH_WRONG_LOGIN;
        }
    }


    public function getAuth()
    {
        return $this->checkAuth();
    }


    public function getStatus()
    {
        return $this->status;
    }


    public function getUsername()
    {
        return $_SESSION['_authsession']['username'];
    }


    public function sessionValidThru()
    {
        return time() + 1000000;
    }


    public function logout()
    {
        $_SESSION['_authsession'] = null;
    }

    protected function assignData()
    {
        if (isset($this->post[$this->_postUsername])
            && $this->post[$this->_postUsername] != ''
        ) {
            $this->username = (get_magic_quotes_gpc() == 1 ? stripslashes($this->post[$this->_postUsername]) : $this->post[$this->_postUsername]);
        }
        if (isset($this->post[$this->_postPassword])
            && $this->post[$this->_postPassword] != ''
        ) {
            $this->password = (get_magic_quotes_gpc() == 1 ? stripslashes($this->post[$this->_postPassword]) : $this->post[$this->_postPassword]);
        }
    }


    private function setAuth($username)
    {
        //        session_regenerate_id(true); doesn't seem to work on PHP7

        if (!isset($_SESSION['_authsession'])) {
            $_SESSION['_authsession'] = array();
        }

        $_SESSION['_authsession']['username'] = $username;
    }


    private function verifyPassword($username, $password)
    {
        require_once 'Services/User/classes/class.ilUserPasswordManager.php';

        $user = ilObjectFactory::getInstanceByObjId(ilObjUser::_loginExists($username));
        return ilUserPasswordManager::getInstance()->verifyPassword($user, $password);
    }
}