~getdeb-web-developers/getdeb-web/main

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
<?php
/*
 * Created on Jun 3, 2007
 *
 * To change the template for this generated file go to
 * Window - Preferences - PHPeclipse - PHP - Code Templates
 */

class User
{	
	/* This function will check if the user is remembered on the cookie or on the session */
	function CheckRemember() {
		global $db;
		
		// First we check for a valid session
		if(isset($_SESSION['user'])){
			$userdata = $_SESSION['user'];
			$id = intval($userdata['id']);
			$lusername = $db->escapeSimple($userdata['username']);
			$lkey = $db->escapeSimple($userdata['lkey']);			
			$sql = "SELECT id FROM gd_user WHERE id=$id AND username='$lusername' AND lkey='$lkey'";
			$result = $db->GetOne($sql);
			if (PEAR::isError($result)) {
	    		die($data->getMessage()." ".$sql);
			}
			if($result) 
				return $_SESSION['user'];
			else
				unset($_SESSION['user']); // Invalidate session info
		} 
		// If there is no session we will check for the "remember" cookie
		else if(isset($_COOKIE['lkey']) && isset($_COOKIE['lusername'])) {
			$lusername = $db->escapeSimple($_COOKIE['lusername']);
			$lkey = $db->escapeSimple($_COOKIE['lkey']);			
			$sql = "SELECT id FROM gd_user WHERE username='$lusername' AND lkey='$lkey'";
			$result = $db->GetOne($sql);
			if (PEAR::isError($result)) {
	    		die($result->getMessage()." ".$sql);
			}
			if($result) {
				$userdata = array();
				$userdata['username'] = $_COOKIE['lusername'];
				$userdata['id'] = $result;
				$userdata['lkey'] = $_COOKIE['lkey'];			
				$_SESSION['user'] = $userdata;
				return $_SESSION['user'];
			} else setcookie("lkey",$lkey, time()-3600); // delete cookie
		}
		return null;
	}
}
	function IsMemberOf($group, $uid)
	{
		global $db;
		$group = $db->escapeSimple($group);
		$sql =  "SELECT uid FROM gd_group_member gm, gd_group g WHERE g.name='$group' ";
		$sql .= "AND gm.gid=g.id AND gm.uid=$uid";
		$result = $db->GetOne($sql);
		if (PEAR::isError($result)) {
    		die($result->getMessage()." ".$sql);
		}
		//die($sql);
		return $result;		
	}
	
?>