<?php
/* Reminder: always indent with 4 spaces (no tabs). */
// +---------------------------------------------------------------------------+
// | Copyright (c) 2008, Demian Turner |
// | All rights reserved. |
// | |
// | Redistribution and use in source and binary forms, with or without |
// | modification, are permitted provided that the following conditions |
// | are met: |
// | |
// | o Redistributions of source code must retain the above copyright |
// | notice, this list of conditions and the following disclaimer. |
// | o Redistributions in binary form must reproduce the above copyright |
// | notice, this list of conditions and the following disclaimer in the |
// | documentation and/or other materials provided with the distribution. |
// | o The names of the authors may not be used to endorse or promote |
// | products derived from this software without specific prior written |
// | permission. |
// | |
// | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
// | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
// | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
// | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
// | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
// | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
// | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
// | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
// | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
// | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
// | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
// | |
// +---------------------------------------------------------------------------+
// | Seagull 0.6 |
// +---------------------------------------------------------------------------+
// | LoginMgr.php |
// +---------------------------------------------------------------------------+
// | Author: Demian Turner <demian@phpkitchen.com> |
// +---------------------------------------------------------------------------+
// $Id: LoginMgr.php,v 1.34 2005/06/15 00:50:40 demian Exp $
require_once SGL_CORE_DIR . '/Observer.php';
require_once SGL_MOD_DIR . '/user/classes/UserDAO.php';
require_once SGL_MOD_DIR . '/user/classes/encrype.php';
require_once SGL_MOD_DIR . '/user/classes/LoginMgr.php';
require_once SGL_MOD_DIR . '/user/classes/UserMgr.php';
/**
* Handles user logins.
*
* @package User
* @author Demian Turner <demian@phpkitchen.com>
* @copyright Demian Turner 2004
* @version $Revision: 1.34 $
*/
class UserXferMgr extends SGL_Manager
{
function UserXferMgr()
{
SGL::logMessage(null, PEAR_LOG_DEBUG);
parent::SGL_Manager();
$this->da = UserDAO::singleton();
$this->_aActionsMapping = array(
'userxfer' => array('userxfer'),
'adminxfer' => array('adminxfer'),
);
}
function validate($req, &$input)
{
SGL::logMessage(null, PEAR_LOG_DEBUG);
$this->validated = true;
$input->error = array();;
$input->masterTemplate = $this->masterTemplate;
$input->action = ($req->get('action')) ? $req->get('action') : 'userxfer';
$input->userId = $req->get('frmUserID');
$input->xfer = $req->get('xfer');
}
function display(&$output)
{
SGL::logMessage(null, PEAR_LOG_DEBUG);
$output->addOnLoadEvent("document.getElementById('frmLogin').frmUsername.focus()");
}
function _cmd_userxfer(&$input, &$output)
{
SGL::logMessage(null, PEAR_LOG_DEBUG);
if (SGL_Session::getRoleId() == 1) {
$crypt = new encryption_class;
$oUser = $this->da->getUserTmpByUserId($input->userId);
$input->action = 'login';
$input->password = $crypt->decrypt($input->userId, $oUser->passwd);
$input->username = $oUser->username;
$oUserData = $this->da->getUserById($input->userId);
$userAuthHash = $this->da->getUserAuthHashByUserName($input->username);
// check user ยังไม่ยืนยันตัวตน xfer ไม่ได้
// ถ้ามีใน table user_auth_hash คือ ยังไม่ยืนยันตัวตน
if (isset($userAuthHash) && ($userAuthHash)) {
SGL::raiseMsg('Sorry, the account is not activated yet.', SGL_MESSAGE_INFO);
$aParams = array('moduleName' => 'user'
, 'managerName' => 'user');
SGL_HTTP::redirect($aParams);
}
//check is account active
if (isset($oUserData->is_acct_active) && $oUserData->is_acct_active == 1) {
$admin = base64_encode(serialize($_SESSION));
setcookie("AdmingotoAdmin", $admin, time()+3600 , "/" );
$loginMgr = new LoginMgr();
$loginMgr->_cmd_login($input, $output);
}else{
SGL::raiseMsg('Sorry, you account is unactive', SGL_MESSAGE_INFO);
$aParams = array('moduleName' => 'user'
, 'managerName' => 'user');
SGL_HTTP::redirect($aParams);
}
} else {
return true;
}
}
function _cmd_adminxfer(&$input, &$output)
{
SGL::logMessage(null, PEAR_LOG_DEBUG);
if(isset($_COOKIE['AdminXfer']) && $_COOKIE['AdminXfer']) {
setcookie("AdminXfer", "", time()-3600 , "/" );
SGL_Session::destroy();
$_SESSION = unserialize(base64_decode($_COOKIE['AdmingotoAdmin']));
}
$aParams = array('moduleName' => 'user'
, 'managerName' => 'user');
SGL_HTTP::redirect($aParams);
}
}
?>
Copyright 2K16 - 2K18 Indonesian Hacker Rulez