cfd03efc01
Check if a requested database can be selected. Error out if not. This prevents automatic fallbacks to the default database. Remove the authorized information from the session if a new database gets selected. Factor out logout function to reuse existing code.
75 lines
1.8 KiB
PHP
75 lines
1.8 KiB
PHP
<?php
|
|
|
|
namespace Model\User;
|
|
|
|
use SimpleValidator\Validator;
|
|
use SimpleValidator\Validators;
|
|
use PicoDb\Database;
|
|
use Model\Config;
|
|
use Model\RememberMe;
|
|
use Model\Database as DatabaseModel;
|
|
|
|
// Check if the user is logged
|
|
function is_loggedin()
|
|
{
|
|
return ! empty($_SESSION['user']);
|
|
}
|
|
|
|
function logout()
|
|
{
|
|
\Model\RememberMe\destroy();
|
|
\PicoFarad\Session\close();
|
|
}
|
|
|
|
// Get a user by username
|
|
function get($username)
|
|
{
|
|
return Database::get('db')
|
|
->table('config')
|
|
->columns('username', 'password', 'language')
|
|
->eq('username', $username)
|
|
->findOne();
|
|
}
|
|
|
|
// Validate authentication
|
|
function validate_login(array $values)
|
|
{
|
|
$v = new Validator($values, array(
|
|
new Validators\Required('username', t('The user name is required')),
|
|
new Validators\MaxLength('username', t('The maximum length is 50 characters'), 50),
|
|
new Validators\Required('password', t('The password is required'))
|
|
));
|
|
|
|
$result = $v->execute();
|
|
$errors = $v->getErrors();
|
|
|
|
if ($result) {
|
|
|
|
$user = get($values['username']);
|
|
|
|
if ($user && \password_verify($values['password'], $user['password'])) {
|
|
|
|
unset($user['password']);
|
|
|
|
$_SESSION['user'] = $user;
|
|
$_SESSION['config'] = Config\get_all();
|
|
|
|
// Setup the remember me feature
|
|
if (! empty($values['remember_me'])) {
|
|
$credentials = RememberMe\create(DatabaseModel\select(), $values['username'], Config\get_ip_address(), Config\get_user_agent());
|
|
RememberMe\write_cookie($credentials['token'], $credentials['sequence'], $credentials['expiration']);
|
|
}
|
|
}
|
|
else {
|
|
|
|
$result = false;
|
|
$errors['login'] = t('Bad username or password');
|
|
}
|
|
}
|
|
|
|
return array(
|
|
$result,
|
|
$errors
|
|
);
|
|
}
|