<?php
class Auth {
public $username;
public $password;
public static function issetUser
($username) {
return Mysql::num_rows(Mysql::select("SELECT * FROM ".PREFIX
."users WHERE username='".$username."'")); }
public static function issetSessionUser
($username) {
return Mysql::num_rows(Mysql::select("SELECT * FROM ".PREFIX
."sessions WHERE user_id='".Mysql::resultAdapter("users", 'username', $username, 'id')."'")); }
public static function issetSessionSes
($session) {
return Mysql::num_rows(Mysql::select("SELECT * FROM ".PREFIX
."sessions WHERE session_id='".$session."'")); }
public static function SessionUpdate
() {
Mysql::update("UPDATE ".PREFIX
."sessions SET time='".time()."' WHERE session_id='".session_id()."'"); define("AUTH" , Mysql::resultAdapter("users", 'id', Mysql::resultAdapter("sessions", 'session_id', session_id(), 'user_id'), 'access')); }
public static function Session
() {
{
return 1;
}
else
{
$query = Mysql::select("SELECT * FROM ".PREFIX
."sessions WHERE session_id='".session_id()."'"); while($dane = Mysql::fetass($query)) {
if(($dane['time'] + SESSION
) < time()) {
Mysql::delete("DELETE FROM ".PREFIX
."sessions WHERE id='".$dane['id']."'"); return 1;
$_SESSION['error'] = PText('session-break',"auth");
}
else
{
Auth::SessionUpdate();
return 0;
}
}
}
}
public static function identification
($username, $password) {
return Mysql::num_rows(Mysql::select("SELECT * FROM ".PREFIX
."users WHERE username='".$username."' AND password='".md5($password)."'")); }
public static function authorization
($username, $password) {
if(Auth::issetUser($username))
{
if(Auth::identification($username, $password))
{
if(Auth::issetSessionUser($username))
{
Mysql::delete("DELETE FROM ".PREFIX
."sessions WHERE user_id='".Mysql::resultAdapter("users", 'username', $username, 'id')."'"); }
define("AUTH" , Mysql::resultAdapter("users", 'username', $username, 'access')); Mysql::insert("INSERT INTO ".PREFIX
."sessions (`id`,`user_id`,`session_id`,`time`) VALUES (NULL,'".Mysql::resultAdapter("users", 'username', $username, 'id')."','".session_id()."','".time()."')"); }
else
{
$_SESSION['error'] = PText('bad_pass', 'auth');
}
}
else
{
$_SESSION['error'] = PText('no_user', 'auth');
}
}
}
?>