<?php
static public function login
($_login = null, $_password = null) {
log::write("AUTH:: Start systemu autoryzacji...", __LOG_DEBUG);
//sprawdz czy nie zalogowany
if (empty($_login) && empty($_password) && session
::getVar("logged_user", null) === null) {
log
::write("AUTH:
user nie zalogowany, ustawiam usera: nobody", __LOG_DEBUG
); session::setVar("logged_user","nobody");
self::$objUser = new user('nobody');
return true;
}
//sprawdz czy zalogowany
elseif (session
::getVar("logged_user", null) !== null && empty($_login) && empty($_password)) {
log
::write("AUTH:
user zalogowany, ustawiam usera: " . session
::getVar("logged_user"), __LOG_DEBUG
); self::$objUser = new user(session::getVar("logged_user"));
return true;
}
//zaloguj
else
{
log
::write("AUTH:
próba logowania, login: " . $_login . "; hasło: " . $_password, __LOG_DEBUG
); //wczytaj z bd usera o takich danych
$hDb = database::connection();
$select = $hDb -> select();
$select -> from(database::getTablePrefix() . "user");
//$where[] = $hDb -> quoteInto("login = ?", $_login);
//$where[] = $hDb -> quoteInto("password = ?", md5($_password));
$select -> where
("login = '" . $_login . "' AND password = '" . md5($_password) . "' "); //echo $select -> __toString();
$res = $hDb -> query($select);
$arrWynik = $res -> fetchAll();
//var_dump($arrWynik);
if (count($arrWynik) === 0) {
log
::write("AUTH:
próba logowania nieudana, ustawiam usera: nobody", __LOG_DEBUG
); session::setVar("logged_user",null);
self::$objUser = new user('nobody');
return false;
}
else
{
log
::write("AUTH:
próba logowania usera, ustawiam usera: " . $arrWynik[0]['login'], __LOG_DEBUG
); session::setVar("logged_user", $arrWynik[0]['login']);
self::$objUser = new user($arrWynik[0]['id']);
return true;
}
}
}
?>