mirror of
https://git.code.sf.net/p/seeddms/code
synced 2025-10-31 05:11:27 +00:00
130 lines
3.4 KiB
PHP
130 lines
3.4 KiB
PHP
<?php
|
|
/**
|
|
* Implementation of a simple session management.
|
|
*
|
|
* LetoDMS uses its own simple session management, storing sessions
|
|
* into the database. A session holds the currently logged in user,
|
|
* the theme and the language.
|
|
*
|
|
* @category DMS
|
|
* @package LetoDMS
|
|
* @license GPL 2
|
|
* @version @version@
|
|
* @author Uwe Steinmann <uwe@steinmann.cx>
|
|
* @copyright 2011 Uwe Steinmann
|
|
* @version Release: @package_version@
|
|
*/
|
|
|
|
/**
|
|
* Class to represent a session
|
|
*
|
|
* This class provides some very basic methods to load, save and delete
|
|
* sessions. It does not set or retrieve a cockie. This is up to the
|
|
* application. The class basically provides access to the session database
|
|
* table.
|
|
*
|
|
* @category DMS
|
|
* @package LetoDMS
|
|
* @author Markus Westphal, Malcolm Cowe, Uwe Steinmann <uwe@steinmann.cx>
|
|
* @copyright 2011 Uwe Steinmann
|
|
* @version Release: @package_version@
|
|
*/
|
|
class LetoDMS_Session {
|
|
/**
|
|
* @var object $db reference to database object. This must be an instance
|
|
* of {@link LetoDMS_DatabaseAccess}.
|
|
* @access protected
|
|
*/
|
|
protected $db;
|
|
|
|
/**
|
|
* @var array $data session data
|
|
* @access protected
|
|
*/
|
|
protected $data;
|
|
|
|
/**
|
|
* @var string $id session id
|
|
* @access protected
|
|
*/
|
|
protected $id;
|
|
|
|
/**
|
|
* Create a new instance of the session handler
|
|
*
|
|
* @param object $db object to access the underlying database
|
|
* @return object instance of LetoDMS_Session
|
|
*/
|
|
function __construct($db) { /* {{{ */
|
|
$this->db = $db;
|
|
} /* }}} */
|
|
|
|
/**
|
|
* Load session by its id from database
|
|
*
|
|
* @param string $id id of session
|
|
* @return boolean true if successful otherwise false
|
|
*/
|
|
function load($id) { /* {{{ */
|
|
$queryStr = "SELECT * FROM tblSessions WHERE id = '".$id."'";
|
|
$resArr = $this->db->getResultArray($queryStr);
|
|
if (is_bool($resArr) && $resArr == false)
|
|
return false;
|
|
if (count($resArr) == 0)
|
|
return false;
|
|
$queryStr = "UPDATE tblSessions SET lastAccess = " . mktime() . " WHERE id = '" . $id . "'";
|
|
if (!$this->db->getResult($queryStr))
|
|
return false;
|
|
return $resArr[0];
|
|
} /* }}} */
|
|
|
|
/**
|
|
* Create a new session and saving the given data into the database
|
|
*
|
|
* @param array $data data saved in session (the only fields supported
|
|
* are userid, theme, language)
|
|
* @return string/boolean id of session of false in case of an error
|
|
*/
|
|
function create($data) { /* {{{ */
|
|
$id = "" . rand() . mktime() . rand() . "";
|
|
$id = md5($id);
|
|
$queryStr = "INSERT INTO tblSessions (id, userID, lastAccess, theme, language) ".
|
|
"VALUES ('".$id."', ".$data['userid'].", ".mktime().", '".$data['theme']."', '".$data['lang']."')";
|
|
if (!$this->db->getResult($queryStr)) {
|
|
return false;
|
|
}
|
|
$this->id = $id;
|
|
$this->data = $data;
|
|
return $id;
|
|
} /* }}} */
|
|
|
|
/**
|
|
* Delete sessions older than a given time from the database
|
|
*
|
|
* @param integer $sec maximum number of seconds a session may live
|
|
* @return boolean true if successful otherwise false
|
|
*/
|
|
function deleteByTime($sec) { /* {{{ */
|
|
$queryStr = "DELETE FROM tblSessions WHERE " . mktime() . " - lastAccess > ".$sec;
|
|
if (!$this->db->getResult($queryStr)) {
|
|
return false;
|
|
}
|
|
return true;
|
|
} /* }}} */
|
|
|
|
/**
|
|
* Delete session by its id
|
|
*
|
|
* @param string $id id of session
|
|
* @return boolean true if successful otherwise false
|
|
*/
|
|
function delete($id) { /* {{{ */
|
|
$queryStr = "DELETE FROM tblSessions WHERE id = '$id'";
|
|
if (!$this->db->getResult($queryStr)) {
|
|
return false;
|
|
}
|
|
return true;
|
|
} /* }}} */
|
|
}
|
|
?>
|