Robin
15 years ago
parent
643e3726b4
commit
6b5bd81341
@ -0,0 +1,197 @@ |
||||
<?php |
||||
|
||||
/** |
||||
* ownCloud |
||||
* |
||||
* @author Frank Karlitschek |
||||
* @copyright 2010 Frank Karlitschek karlitschek@kde.org |
||||
* |
||||
* This library is free software; you can redistribute it and/or |
||||
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE |
||||
* License as published by the Free Software Foundation; either |
||||
* version 3 of the License, or any later version. |
||||
* |
||||
* This library is distributed in the hope that it will be useful, |
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
* GNU AFFERO GENERAL PUBLIC LICENSE for more details. |
||||
* |
||||
* You should have received a copy of the GNU Lesser General Public |
||||
* License along with this library. If not, see <http://www.gnu.org/licenses/>. |
||||
* |
||||
*/ |
||||
|
||||
/** |
||||
* Class for usermanagement |
||||
* |
||||
*/ |
||||
class OC_USER { |
||||
|
||||
/** |
||||
* check if the login button is pressed and logg the user in |
||||
* |
||||
*/ |
||||
public static function loginlisener(){ |
||||
global $CONFIG_ADMINLOGIN; |
||||
global $CONFIG_ADMINPASSWORD; |
||||
if(isset($_POST['loginbutton']) and isset($_POST['password']) and isset($_POST['login'])){ |
||||
if(OC_USER::login($_POST['login'],$_POST['password'])){ |
||||
OC_LOG::event($_SESSION['username'],1,''); |
||||
return(''); |
||||
}else{ |
||||
return('error'); |
||||
} |
||||
} |
||||
return(''); |
||||
} |
||||
|
||||
/** |
||||
* try to create a new user |
||||
* |
||||
*/ |
||||
public static function createuser($username,$password){ |
||||
if(OC_USER::getuserid($username)!=0){ |
||||
return false; |
||||
}else{ |
||||
$password=sha1($password); |
||||
$usernameclean=strtolower($username); |
||||
$username=mysql_escape_string($username); |
||||
$usernameclean=mysql_escape_string($usernameclean); |
||||
$query="INSERT INTO `users` (`user_id` ,`user_name` ,`user_name_clean` ,`user_password`)VALUES (NULL , '$username', '$usernameclean', '$password')"; |
||||
$result=OC_DB::query($query); |
||||
return ($result)?true:false; |
||||
} |
||||
|
||||
} |
||||
|
||||
/** |
||||
* try to login a user |
||||
* |
||||
*/ |
||||
public static function login($username,$password){ |
||||
$password=sha1($password); |
||||
$usernameclean=strtolower($username); |
||||
$username=mysql_escape_string($username); |
||||
$usernameclean=mysql_escape_string($usernameclean); |
||||
$query="SELECT user_id FROM `users` WHERE `user_name_clean` = '$usernameclean' AND `user_password` = '$password' LIMIT 1"; |
||||
$result=OC_DB::select($query); |
||||
if(isset($result[0]) && isset($result[0]['user_id'])){ |
||||
$_SESSION['user_id']=$result[0]['user_id']; |
||||
$_SESSION['username']=$username; |
||||
$_SESSION['username_clean']=$usernameclean; |
||||
return true; |
||||
}else{ |
||||
return false; |
||||
} |
||||
} |
||||
|
||||
/** |
||||
* check if the logout button is pressed and logout the user |
||||
* |
||||
*/ |
||||
public static function logoutlisener(){ |
||||
if(isset($_GET['logoutbutton']) && isset($_SESSION['username'])){ |
||||
OC_LOG::event($_SESSION['username'],2,''); |
||||
$_SESSION['user_id']=false; |
||||
$_SESSION['username']=''; |
||||
$_SESSION['username_clean']=''; |
||||
} |
||||
} |
||||
|
||||
/** |
||||
* check if a user is logged in |
||||
* |
||||
*/ |
||||
public static function isLoggedIn(){ |
||||
return (isset($_SESSION['user_id']) && $_SESSION['user_id'])?true:false; |
||||
} |
||||
|
||||
/** |
||||
* try to create a new group |
||||
* |
||||
*/ |
||||
public static function creategroup($groupname){ |
||||
if(OC_USER::getgroupid($groupname)==0){ |
||||
$groupname=mysql_escape_string($groupname); |
||||
$query="INSERT INTO `groups` (`group_id` ,`group_name`) VALUES (NULL , '$groupname');"; |
||||
$result=OC_DB::query($query); |
||||
return ($result)?true:false; |
||||
}else{ |
||||
return false; |
||||
} |
||||
} |
||||
|
||||
/** |
||||
* get the id of a user |
||||
* |
||||
*/ |
||||
public static function getuserid($username){ |
||||
$usernameclean=strtolower($username); |
||||
$username=mysql_escape_string($username); |
||||
$usernameclean=mysql_escape_string($usernameclean); |
||||
$query="SELECT user_id FROM `users` WHERE `user_name_clean` = '$usernameclean' LIMIT 1"; |
||||
$result=OC_DB::select($query); |
||||
if(isset($result[0]) && isset($result[0]['user_id'])){ |
||||
return $result[0]['user_id']; |
||||
}else{ |
||||
return 0; |
||||
} |
||||
} |
||||
|
||||
/** |
||||
* get the id of a group |
||||
* |
||||
*/ |
||||
public static function getgroupid($groupname){ |
||||
$groupname=mysql_escape_string($groupname); |
||||
$query="SELECT group_id FROM `groups` WHERE `group_name` = '$groupname' LIMIT 1"; |
||||
$result=OC_DB::select($query); |
||||
if(isset($result[0]) && isset($result[0]['group_id'])){ |
||||
return $result[0]['group_id']; |
||||
}else{ |
||||
return 0; |
||||
} |
||||
} |
||||
|
||||
/** |
||||
* check if a user belongs to a group |
||||
* |
||||
*/ |
||||
public static function ingroup($username,$groupname){ |
||||
$userid=OC_USER::getuserid($username); |
||||
$groupid=OC_USER::getgroupid($groupname); |
||||
$query="SELECT user_group_id FROM `user_group` WHERE `group_id` = '$groupid ' AND `user_id` = '$userid 'LIMIT 1"; |
||||
$result=OC_DB::select($query); |
||||
if(isset($result[0]) && isset($result[0]['user_group_id'])){ |
||||
return true; |
||||
}else{ |
||||
return false; |
||||
} |
||||
} |
||||
|
||||
/** |
||||
* add a user to a group |
||||
* |
||||
*/ |
||||
public static function addtogroup($username,$groupname){ |
||||
if(!OC_USER::ingroup($username,$groupname)){ |
||||
$userid=OC_USER::getuserid($username); |
||||
$groupid=OC_USER::getgroupid($groupname); |
||||
if($groupid!=0 and $userid!=0){ |
||||
$query="INSERT INTO `user_group` (`user_group_id` ,`user_id` ,`group_id`) VALUES (NULL , '$userid', '$groupid');"; |
||||
$result=OC_DB::query($query); |
||||
if($result){ |
||||
return true; |
||||
}else{ |
||||
return false; |
||||
} |
||||
}else{ |
||||
return false; |
||||
} |
||||
}else{ |
||||
return true; |
||||
} |
||||
} |
||||
} |
||||
|
||||
?> |
||||
Loading…
Reference in new issue