include/xnet/session.inc.php

   1 <?php
   2 /***************************************************************************
   3  *  Copyright (C) 2003-2006 Polytechnique.org                              *
   4  *  http://opensource.polytechnique.org/                                   *
   5  *                                                                         *
   6  *  This program is free software; you can redistribute it and/or modify   *
   7  *  it under the terms of the GNU General Public License as published by   *
   8  *  the Free Software Foundation; either version 2 of the License, or      *
   9  *  (at your option) any later version.                                    *
  10  *                                                                         *
  11  *  This program is distributed in the hope that it will be useful,        *
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
  14  *  GNU General Public License for more details.                           *
  15  *                                                                         *
  16  *  You should have received a copy of the GNU General Public License      *
  17  *  along with this program; if not, write to the Free Software            *
  18  *  Foundation, Inc.,                                                      *
  19  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  20  ***************************************************************************/
  21
  22 require_once('platal/session.inc.php');
  23
  24 // {{{ class XorgSession
  25
  26 class XnetSession
  27 {
  28     // {{{ function init
  29
  30     function init() {
  31         global $globals;
  32
  33         S::init();
  34
  35         $_SESSION['session'] = new XnetSession;
  36
  37         if (!S::logged()) {
  38             // prevent connexion to be linked to deconnexion
  39             if (($i = strpos($_SERVER['REQUEST_URI'], 'exit')) !== false)
  40                 $returl = "http://{$_SERVER['SERVER_NAME']}".substr($_SERVER['REQUEST_URI'], 0, $i);
  41             else
  42                 $returl = "http://{$_SERVER['SERVER_NAME']}{$_SERVER['REQUEST_URI']}";
  43             $url  = "https://www.polytechnique.org/auth-groupex.php";
  44             $url .= "?session=" . session_id();
  45             $url .= "&challenge=" . S::v('challenge');
  46             $url .= "&pass=" . md5(S::v('challenge') . $globals->xnet->secret);
  47             $url .= "&url=".urlencode($returl);
  48             $_SESSION['loginX'] = $url;
  49         }
  50     }
  51
  52     // }}}
  53     // {{{ function destroy()
  54
  55     function destroy() {
  56         S::destroy();
  57         XnetSession::init();
  58     }
  59
  60     // }}}
  61     // {{{ function doAuth()
  62
  63     /** Try to do an authentication.
  64      *
  65      * @param page the calling page (by reference)
  66      */
  67     function doAuth(&$page)
  68     {
  69         if (S::identified()) { // ok, c'est bon, on n'a rien à faire
  70             return true;
  71         }
  72
  73         if (Get::has('auth')) {
  74             return XnetSession::doAuthX($page);
  75         } else {
  76             XnetSession::doLogin($page);
  77         }
  78     }
  79
  80     // }}}
  81     // {{{ doAuthX
  82
  83     function doAuthX(&$page) {
  84         global $globals;
  85
  86         if (md5('1'.S::v('challenge').$globals->xnet->secret.Get::getInt('uid').'1') != Get::get('auth')) {
  87             $page->kill("Erreur d'authentification avec polytechnique.org !");
  88         }
  89
  90         $res  = XDB::query("
  91             SELECT  u.user_id AS uid, prenom, nom, perms, promo, password, FIND_IN_SET('femme', u.flags) AS femme,
  92                     a.alias AS forlife, a2.alias AS bestalias, q.core_mail_fmt AS mail_fmt, q.core_rss_hash
  93               FROM  auth_user_md5   AS u
  94         INNER JOIN  auth_user_quick AS q  USING(user_id)
  95         INNER JOIN  aliases         AS a  ON (u.user_id = a.id AND a.type='a_vie')
  96         INNER JOIN  aliases         AS a2 ON (u.user_id = a2.id AND FIND_IN_SET('bestalias',a2.flags))
  97              WHERE  u.user_id = {?} AND u.perms IN('admin','user')
  98              LIMIT  1", Get::getInt('uid'));
  99         $_SESSION = array_merge($_SESSION, $res->fetchOneAssoc());
 100         $_SESSION['auth'] = AUTH_MDP;
 101         S::kill('challenge');
 102         S::kill('loginX');
 103         Get::kill('auth');
 104         Get::kill('uid');
 105         $args = array();
 106         foreach($_GET as $key=>$val) {
 107             $args[] = urlencode($key).'='.urlencode($val);
 108         }
 109         redirect($_SERVER['PHP_SELF'] . '?' . join('&', $args));
 110     }
 111
 112     // }}}
 113     // {{{ doLogin
 114
 115     function doLogin(&$page) {
 116         redirect(S::v('loginX'));
 117     }
 118
 119     // }}}
 120 }
 121
 122 // }}}
 123 // {{{ may_update
 124
 125 function may_update() {
 126     global $globals;
 127     if (!$globals->asso('id')) { return false; }
 128     if (S::has_perms()) { return true; }
 129     $res = XDB::query(
 130             "SELECT  perms
 131                FROM  groupex.membres
 132               WHERE  uid={?} AND asso_id={?}", S::v('uid'), $globals->asso('id'));
 133     return $res->fetchOneCell() == 'admin';
 134 }
 135
 136 // }}}
 137 // {{{ is_member
 138
 139 function is_member() {
 140     global $globals;
 141     $asso_id = $globals->asso('id');
 142     if (!$asso_id) { return false; }
 143     static $is_member;
 144     if (!$is_member) $is_member = array();
 145     if (!isset($is_member[$asso_id]))
 146     {
 147         $res = XDB::query(
 148             "SELECT  COUNT(*)
 149                FROM  groupex.membres
 150               WHERE  uid={?} AND asso_id={?}",
 151                 S::v('uid'), $asso_id);
 152         $is_member[$asso_id] = $res->fetchOneCell() == 1;
 153     }
 154     return $is_member[$asso_id];
 155 }
 156
 157 // }}}
 158 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker:
 159 ?>