X-Git-Url: http://git.dj3c1t.com/?a=blobdiff_plain;ds=sidebyside;f=mw%2Fapp%2Fdata%2Fmodules%2Fsql%2Fmw_data_users.php;fp=mw%2Fapp%2Fdata%2Fmodules%2Fsql%2Fmw_data_users.php;h=9623e091a017eb5f7488b2df3ea74fe91843e31e;hb=36ed114046cbe3d72a3589230e9f306a54fcc79d;hp=0000000000000000000000000000000000000000;hpb=281c96e95451269f2614684b8de5be25862c8374;p=mtweb

diff --git a/mw/app/data/modules/sql/mw_data_users.php b/mw/app/data/modules/sql/mw_data_users.php
new file mode 100644
index 0000000..9623e09
--- /dev/null
+++ b/mw/app/data/modules/sql/mw_data_users.php
@@ -0,0 +1,290 @@
+<?php
+
+  class mw_data_users extends mw_data{
+
+    var $users;
+    var $_user;
+    var $user_status;
+    var $action_status;
+
+    # ----------------------------------------------------------------------------------------
+    #                                                                                    users
+    #
+
+    function users($start = 0, $alpha = null, $status = null){
+      $sgbd = $this->sgbd();
+      $env = $this->env();
+      $users = array("list" => array(), "total" => 0);
+      try{
+        $SELECT = "SELECT *";
+        $FROM = " FROM #--users";
+        $WHERE = "";
+        $WHERE .= (isset($alpha) ? ($WHERE ? " AND" : " WHERE")." LEFT(login, 1)=".$this->eq($alpha) : "");
+        $WHERE .= (isset($status) ? ($WHERE ? " AND" : " WHERE")." status=".$this->eq($status) : "");
+        $LIMIT = ($env->config("max_list") ? " LIMIT ".$env->config("max_list")." OFFSET ".$start : "");
+        $sql = "SELECT count(*) as n FROM(".$SELECT.$FROM.$WHERE.") res";
+        $rst = $sgbd->query($sql);
+        if($v_rst = $sgbd->fetch_assoc($rst)) $users["total"] = $v_rst["n"];
+        $sgbd->free_result($rst);
+        if($users["total"] > 0){
+          $sql = "SELECT * FROM(".$SELECT.$FROM.$WHERE.$LIMIT.") res";
+          $rst = $sgbd->query($sql);
+          while($v_rst = $sgbd->fetch_assoc($rst)) $users["list"][$v_rst["id"]] = $v_rst;
+          $sgbd->free_result($rst);
+        }
+      }
+      catch(Exception $e) { $users = false; }
+      return $users;
+    }
+
+    function user_by_id($id){
+      $sgbd = $this->sgbd();
+      $user = array();
+      try{
+        $sql = "SELECT * from #--users WHERE id=".$this->eq($id);
+        $rst = $sgbd->query($sql);
+        if($v_rst = $sgbd->fetch_assoc($rst)) $user = $v_rst;
+        $sgbd->free_result($rst);
+      }
+      catch(Exception $e) { $user = false; }
+      return $user;
+    }
+
+    function user($login){
+      $sgbd = $this->sgbd();
+      $user = array();
+      try{
+        $sql = "SELECT * from #--users WHERE login=".$this->eq($login);
+        $rst = $sgbd->query($sql);
+        if($v_rst = $sgbd->fetch_assoc($rst)) $user = $v_rst;
+        $sgbd->free_result($rst);
+      }
+      catch(Exception $e) { $user = false; }
+      return $user;
+    }
+
+    function user_exists($login){
+      $sgbd = $this->sgbd();
+      $EXISTS = 0;
+      try{
+        $sql = "SELECT count(*) as n from #--users WHERE login=".$this->eq($login);
+        $rst = $sgbd->query($sql);
+        if($v_rst = $sgbd->fetch_assoc($rst)) $EXISTS = $v_rst["n"];
+        $sgbd->free_result($rst);
+      }
+      catch(Exception $e) { $EXISTS = false; }
+      return $EXISTS;
+    }
+
+    function add_user($login, $password, $email, $status){
+      $sgbd = $this->sgbd();
+      $user_id = false;
+      try{
+        $sql =
+         "INSERT INTO #--users(login, password, email, status) VALUES"
+        ."( ".$this->eq($login)
+        .", ".$this->eq($password)
+        .", ".$this->eq($email)
+        .", ".$status
+        .")";
+        $sgbd->query($sql);
+        $user_id = $sgbd->insert_id();
+      }
+      catch(Exception $e) { $user_id = false; }
+      return $user_id;
+    }
+
+    function set_user($id, $login, $password, $email, $status){
+      $sgbd = $this->sgbd();
+      try{
+        $sql =
+         "UPDATE #--users SET"
+        ."  login=".$this->eq($login)
+        .", password=".$this->eq($password)
+        .", email=".$this->eq($email)
+        .", status=".$status
+        ." WHERE id=".$id;
+        $sgbd->query($sql);
+      }
+      catch(Exception $e) { return false; }
+      return true;
+    }
+
+    function del_user($login){
+      $sgbd = $this->sgbd();
+      try{
+        $sql = "DELETE FROM #--users WHERE login=".$this->eq($login);
+        $sgbd->query($sql);
+      }
+      catch(Exception $e) { return false; }
+      return true;
+    }
+
+    # ----------------------------------------------------------------------------------------
+    #                                                                                   status
+    #
+
+    function status(){
+      if(!isset($this->user_status)) return false;
+      return $this->user_status;
+    }
+
+    function init_user_status($status = array()){
+      $sgbd = $this->sgbd();
+      $this->user_status = array();
+      try{
+        $sql = "SELECT * FROM #--user_status";
+        $rst = $sgbd->query($sql);
+        while($v_rst = $sgbd->fetch_assoc($rst)) $this->user_status[$v_rst["id"]] = $v_rst;
+        $sgbd->free_result($rst);
+      }
+      catch(Exception $e) { $this->user_status = false; }
+      return $this->user_status;
+    }
+
+    function init_action_status($status = array()){
+      if(!isset($this->user_status)) return false;
+      $sgbd = $this->sgbd();
+      $this->action_status = array();
+      try{
+        $sql = "SELECT * FROM #--action_status";
+        $rst = $sgbd->query($sql);
+        while($v_rst = $sgbd->fetch_assoc($rst)) $this->action_status[$v_rst["id"]] = $v_rst;
+        $sgbd->free_result($rst);
+      }
+      catch(Exception $e) { $this->action_status = false; }
+      return $this->action_status;
+    }
+
+    function get_user_status(){
+      $user = $this->get_session_user();
+      if($user && isset($user["status"])) return $user["status"];
+      return 0;
+    }
+
+    function get_action_status($mod, $controller = "index", $action = "index", $set_status = array()){
+      $sgbd = $this->sgbd();
+      $status = array();
+      try{
+        $sql =
+         "SELECT action, id_status"
+        ." FROM #--action_status"
+        ." WHERE action=".$this->eq($mod)
+        ." OR action=".$this->eq($mod."/".$controller)
+        ." OR action=".$this->eq($mod."/".$controller."/".$action);
+        $rst = $sgbd->query($sql);
+        while($v_rst = $sgbd->fetch_assoc($rst)){
+          if(!isset($status[$v_rst["action"]])) $status[$v_rst["action"]] = array();
+          $status[$v_rst["action"]][$v_rst["id_status"]] = true;
+        }
+        $sgbd->free_result($rst);
+      }
+      catch(Exception $e) { $status = false; }
+      return $status;
+    }
+
+    function creation_default_status(){
+      $sgbd = $this->sgbd();
+      $default_status = 0;
+      try{
+        $sql = "SELECT id FROM #--user_status WHERE creation_default=1 LIMIT 0,1";
+        $rst = $sgbd->query($sql);
+        if($v_rst = $sgbd->fetch_assoc($rst)) $default_status = $v_rst["id"];
+        $sgbd->free_result($rst);
+      }
+      catch(Exception $e) { $default_status = false; }
+      return $default_status;
+    }
+
+    # ----------------------------------------------------------------------------------------
+    #                                                                             log in / out
+    #
+
+    function login($login, $password){
+      if(($user = $this->user($login)) !== false){
+        if($this->password_ok($user, $password)){
+          if(!$this->set_session($user)) $user = false;
+        }
+        else{
+          $this->clear_session();
+          $user = array();
+        }
+      }
+      return $user;
+    }
+
+    function logout(){
+      return $this->clear_session();
+    }
+
+    function user_ok($user){
+      return
+      strcmp(md5($user["password"].$_SESSION["id"]), $_SESSION["pass"]) == 0
+      && $_SESSION["ip"] == $_SERVER["REMOTE_ADDR"];
+    }
+
+    function password_ok($user, $password){
+      if(!$user) return false;
+      return
+           strcmp(md5($user["password"].$_SESSION["id"]), $password) == 0
+        && $_SESSION["ip"] == $_SERVER["REMOTE_ADDR"];
+    }
+
+    # ----------------------------------------------------------------------------------------
+    #                                                                                  session
+    #
+
+    function load_session(){
+      session_start();
+      if(!isset($_SESSION["id"])) $this->clear_session();
+      if(
+        $user = (
+          isset($_COOKIE["user"]) || isset($_SESSION["user"]) ?
+            $this->user(isset($_COOKIE["user"]) ? $_COOKIE["user"] : $_SESSION["user"])
+          : array()
+        )
+      ){
+        if(isset($_COOKIE["user"])) $this->set_session($user);
+        if(!$this->user_ok($user)){
+          $this->clear_session();
+          $user = array();
+        }
+      }
+      $this->_user = $user;
+      return $user;
+    }
+
+    function set_session($user){
+      $_SESSION["user"] = $user["login"];
+      $_SESSION["pass"] = md5($user["password"].$_SESSION["id"]);
+      $env = $this->env();
+      return setcookie("user", $user["login"], time() + (60 * 60 * 24 * 7), $env->path("web"));
+    }
+
+    function clear_session(){
+      unset($_SESSION["user"]);
+      unset($_SESSION["pass"]);
+      $_SESSION["ip"] = $_SERVER["REMOTE_ADDR"];
+      $_SESSION["id"] = md5(rand());
+      $env = $this->env();
+      return setcookie("user", "", 0, $env->path("web"));
+    }
+
+    function get_session_user(){
+      return $this->_user;
+    }
+
+    # ----------------------------------------------------------------------------------------
+    #                                                                                  uploads
+    #
+
+    function check_user_uploads_dir($user = null){
+      $env = $this->env();
+      $user_dir = $env->path("content")."uploads/".(isset($user) ? $user : $this->_user["id"]);
+      if(!file_exists($user_dir)) @mkdir($user_dir);
+      return file_exists($user_dir);
+    }
+
+  }
+
+?>
\ No newline at end of file