egroupware/phpgwapi/inc/class.sessions_db.inc.php

237 lines
7.2 KiB
PHP
Raw Normal View History

<?php
/**************************************************************************\
* eGroupWare API - Session management *
* This file written by Dan Kuykendall <seek3r@phpgroupware.org> *
* and Joseph Engo <jengo@phpgroupware.org> *
* Copyright (C) 2000, 2001 Dan Kuykendall *
* -------------------------------------------------------------------------*
* This library is part of the eGroupWare API *
* http://www.egroupware.org/api *
* ------------------------------------------------------------------------ *
* This library is free software; you can redistribute it and/or modify it *
* under the terms of the GNU Lesser General Public License as published by *
* the Free Software Foundation; either version 2.1 of the License, *
* or any later version. *
* This library is distributed in the hope that it will be useful, but *
* WITHOUT ANY WARRANTY; without even the implied warranty of *
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. *
* See the GNU Lesser General Public License for more details. *
* You should have received a copy of the GNU Lesser General Public License *
* along with this library; if not, write to the Free Software Foundation, *
* Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
\**************************************************************************/
/* $Id$ */
/**
* Session Management via database (based on phplib sessions)
*
* @package api
* @subpackage sessions
* @author NetUSE AG Boris Erdmann, Kristian Koehntopp <br> hacked on by phpGW
* @copyright &copy; 1998-2000 NetUSE AG Boris Erdmann, Kristian Koehntopp <br> &copy; 2003 FreeSoftware Foundation
* @license LGPL
* @link http://www.sanisoft.com/phplib/manual/DB_sql.php
*/
class sessions extends sessions_
{
var $sessions_table = 'egw_sessions';
var $app_sessions_table = 'egw_app_sessions';
function sessions($domain_names=null)
{
$this->sessions_($domain_names);
}
function read_session()
{
$this->db->select($this->sessions_table,'*',array('session_id' => $this->sessionid),__LINE__,__FILE__);
return $this->db->row(true);
}
/**
* remove stale sessions out of the database
*/
function clean_sessions()
{
$this->db->delete($this->sessions_table,array(
'session_dla <= ' . (time() - $GLOBALS['egw_info']['server']['sessions_timeout']),
"session_flags != 'A'",
),__LINE__,__FILE__);
// This is set a little higher, we don't want to kill session data for anonymous sessions.
$GLOBALS['egw']->db->delete($this->app_sessions_table,array(
'session_dla <= ' . (time() - $GLOBALS['egw_info']['server']['sessions_timeout']),
),__LINE__,__FILE__);
}
function new_session_id()
{
return md5($GLOBALS['egw']->common->randomstring(15));
}
function register_session($login,$user_ip,$now,$session_flags)
{
$GLOBALS['egw']->db->insert($this->sessions_table,array(
'session_lid' => $login,
'session_ip' => $user_ip,
'session_logintime' => $now,
'session_dla' => $now,
'session_action' => $_SERVER['PHP_SELF'],
'session_flags' => $session_flags,
),array(
'session_id' => $this->sessionid,
),__LINE__,__FILE__);
}
/**
* update the DateLastActive column, so the login does not expire
*/
function update_dla()
{
if (@isset($_GET['menuaction']))
{
$action = $_GET['menuaction'];
}
else
{
$action = $_SERVER['PHP_SELF'];
}
// This way XML-RPC users aren't always listed as
// xmlrpc.php
if ($this->xmlrpc_method_called)
{
$action = $this->xmlrpc_method_called;
}
$GLOBALS['egw']->db->update($this->sessions_table,array(
'session_dla' => time(),
'session_action' => $action,
),array(
'session_id' => $this->sessionid,
),__LINE__,__FILE__);
$GLOBALS['egw']->db->update($this->app_sessions_table,array(
'session_dla' => time(),
),array(
'sessionid' => $this->sessionid,
),__LINE__,__FILE__);
return True;
}
function destroy($sessionid, $kp3)
{
if (!$sessionid && $kp3)
{
return False;
}
$GLOBALS['egw']->db->transaction_begin();
$GLOBALS['egw']->db->delete($this->sessions_table,array('session_id' => $sessionid),__LINE__,__FILE__);
$GLOBALS['egw']->db->delete($this->app_sessions_table,array('sessionid' => $sessionid),__LINE__,__FILE__);
$this->log_access($this->sessionid); // log logout-time
// Only do the following, if where working with the current user
if ($sessionid == $GLOBALS['egw_info']['user']['sessionid'])
{
$this->clean_sessions();
}
$GLOBALS['egw']->db->transaction_commit();
return True;
}
/*************************************************************************\
* Functions for appsession data and session cache *
\*************************************************************************/
/**
* delete the old phpgw_info cache
*
* @deprecated not longer used
*/
function delete_cache($accountid='')
{
}
function appsession($location = 'default', $appname = '', $data = '##NOTHING##')
{
if (!$this->account_id || !$this->sessionid)
{
return False; // this can happen during login or logout
}
if (!$appname)
{
$appname = $GLOBALS['egw_info']['flags']['currentapp'];
}
/* This allows the user to put '' as the value. */
if ($data == '##NOTHING##')
{
$GLOBALS['egw']->db->select($this->app_sessions_table,'content',array(
'sessionid' => $this->sessionid,
'loginid' => $this->account_id,
'app' => $appname,
'location' => $location,
),__LINE__,__FILE__);
$GLOBALS['egw']->db->next_record();
// do not decrypt and return if no data (decrypt returning garbage)
if(($data = $GLOBALS['egw']->db->f('content')))
{
return $GLOBALS['egw']->crypto->decrypt($data);
}
return null;
}
$GLOBALS['egw']->db->insert($this->app_sessions_table,array(
'content' => $GLOBALS['egw']->crypto->encrypt($data),
),array(
'sessionid' => $this->sessionid,
'loginid' => $this->account_id,
'app' => $appname,
'location' => $location,
),__LINE__,__FILE__);
return $data;
}
/**
* list all sessions
*/
function list_sessions($start, $order, $sort, $all_no_sort = False)
{
$values = array();
$order_by = 'ORDER BY '.$sort.' '.$order;
if (!preg_match('/^[a-z_0-9, ]+$/i',$sort) || !preg_match('/^(asc|desc)?$/i',$sort))
{
$order_by = 'ORDER BY session_dla asc';
}
$this->db->select($this->sessions_table,'*',"session_flags != 'A'",__LINE__,__FILE__,(int)$start,$order_by);
while (($row = $this->db->row(true)))
{
$values[] = $row;
}
return $values;
}
/**
* get number of regular / non-anonymous sessions
*
* @return int
*/
function total()
{
$this->db->select($this->sessions_table,'COUNT(*)',"session_flags != 'A'",__LINE__,__FILE__);
return $this->db->next_record() ? $this->db->f(0) : 0;
}
}
?>