* * and Joseph Engo * * Authentication based on SQL table * * Copyright (C) 2000, 2001 Dan Kuykendall * * -------------------------------------------------------------------------* * This library is part of phpGroupWare (http://www.phpgroupware.org) * * This library is free software; you can redistribute it and/or modify it * * under the terms of the GNU Lesser General Public License as published by * * the Free Software Foundation; either version 2.1 of the License, * * or any later version. * * This library is distributed in the hope that it will be useful, but * * WITHOUT ANY WARRANTY; without even the implied warranty of * * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. * * See the GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * * along with this library; if not, write to the Free Software Foundation, * * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA * \**************************************************************************/ /* $Id$ */ class auth { function authenticate($username, $passwd) { global $phpgw_info, $phpgw; $db = $phpgw->db; $local_debug = false; if ($local_debug) { echo "Debug SQL: uid - $username passwd - $passwd"; } $db->query("SELECT * FROM accounts WHERE account_lid = '$username' AND " . "account_pwd='" . md5($passwd) . "' AND account_status ='A'",__LINE__,__FILE__); $db->next_record(); if ($db->f("account_lid")) { return True; } else { return False; } } function change_password($old_passwd, $new_passwd) { global $phpgw_info, $phpgw; $encrypted_passwd = md5($new_passwd); $phpgw->db->query("update accounts set account_pwd='" . md5($new_passwd) . "' " . "where account_lid='" . $phpgw_info["user"]["userid"] . "'",__LINE__,__FILE__); $phpgw->db->query("update accounts set account_lastpwd_change='" . time() . "' where account_id='" . $phpgw_info["user"]["account_id"] . "'",__LINE__,__FILE__); return $encrypted_passwd; } } ?>