class session {

var $session_id = '';

var $load;

function start($update = true)

{

global $SID, $db, $board_config, $user_ip;

$current_time = time();

{

$SID = '?sid=';

}

else

{

$sessiondata = '';

$SID = '?sid=' . $this->session_id;

}

// Load limit check (if applicable)

if ( !empty($board_config['limit_load']) && file_exists('/proc/loadavg') )

{

if ( $load = @file('/proc/loadavg') )

}

}

// session_id exists so go ahead and attempt to grab all data in preparation

if ( !empty($this->session_id) )

{

$sql = "SELECT u.*, s.*

$userdata = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

// Did the session exist in the DB?

if ( isset($userdata['user_id']) )

{

$ip_check_s = explode('.', $userdata['session_ip']);

$ip_check_u = explode('.', $user_ip);

{

// Only update session DB a minute or so after last update or if page changes

if ( ( $current_time - $userdata['session_time'] > 60 || $userdata['session_page'] != $user_page ) && $update )

{

$sql = "UPDATE " . SESSIONS_TABLE . "

WHERE session_id = '" . $this->session_id . "'";

$db->sql_query($sql);

}

}

}

// If we reach here then no (valid) session exists. So we'll create a new one,

// using the cookie user_id if available to pull basic user prefs.

$autologin = ( isset($sessiondata['autologinid']) ) ? $sessiondata['autologinid'] : '';

$user_id = ( isset($sessiondata['userid']) ) ? intval($sessiondata['userid']) : ANONYMOUS;

}

// Create a new session

{

global $SID, $db, $board_config, $user_ip;

$sessiondata = array();

$current_time = time();

// Limit sessions in 1 minute period

$sql = "SELECT COUNT(*) AS sessions

FROM " . SESSIONS_TABLE . "

WHERE session_time >= " . ( $current_time - 60 );

message_die(MESSAGE, 'Board_unavailable');

}

// Grab user data

$sql = "SELECT *

FROM " . USERS_TABLE . "

WHERE user_id = $user_id";

$userdata = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

// Check autologin request, is it valid?

if ( $userdata['user_password'] != $autologin || !$userdata['user_active'] || $user_id == ANONYMOUS )

{

$autologin = '';

}

$db->sql_freeresult($result);

// Create or update the session

$db->sql_return_on_error(true);

$sql = "UPDATE " . SESSIONS_TABLE . "

WHERE session_id = '" . $this->session_id . "'";

if ( !($result = $db->sql_query($sql)) || !$db->sql_affectedrows() )

{

$this->session_id = md5(uniqid($user_ip));

$sql = "INSERT INTO " . SESSIONS_TABLE . "

$db->sql_query($sql);

}

$db->sql_return_on_error(false);

$sessiondata['autologinid'] = ( $autologin && $user_id != ANONYMOUS ) ? $autologin : '';

$sessiondata['userid'] = $user_id;

$SID = '?sid=' . $this->session_id;

return $userdata;

}

// Destroy a session

function destroy(&$userdata)

{

global $SID, $db, $board_config;

$current_time = time();

// Delete existing session, update last visit info first!

$sql = "UPDATE " . USERS_TABLE . "

SET user_lastvisit = " . $userdata['session_time'] . ", user_session_page = '" . $userdata['session_page'] . "'

WHERE user_id = " . $userdata['user_id'];

AND session_user_id = " . $userdata['user_id'];

$db->sql_query($sql);

$this->session_id = '';

return true;

}

//

// Garbage collection

function gc(&$current_time)

{

global $db, $board_config, $user_ip;

$sql = "SELECT *

FROM " . SESSIONS_TABLE . "

WHERE session_time < " . ( $current_time - $board_config['session_length'] ) . "

LIMIT 10";

$result = $db->sql_query($sql);

if ( $del_session_id != '' )

{

// Delete expired sessions

$sql = "DELETE FROM " . SESSIONS_TABLE . "

WHERE session_id IN ($del_session_id)";

$db->sql_query($sql);

if ( $del_sessions < 10 )

{

// Less than 10 sessions, update gc timer ... else we want gc

// called again to delete other sessions

$sql = "UPDATE " . CONFIG_TABLE . "

SET config_value = '$current_time'

WHERE config_name = 'session_last_gc'";

return;

}

function configure($userdata, $lang_set = false)

{

global $db, $template, $lang, $board_config, $theme, $images;

if ( $userdata['user_id'] )

{

$board_config['default_dateformat'] = $userdata['user_dateformat'];

$board_config['board_timezone'] = $userdata['user_timezone'];

}

include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_main.' . $phpEx);

if ( defined('IN_ADMIN') )

{

include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_admin.' . $phpEx);

}

$i10n = array('post_new', 'post_locked', 'post_pm', 'reply_new', 'reply_pm', 'reply_locked', 'icon_quote', 'icon_edit', 'icon_search', 'icon_profile', 'icon_pm', 'icon_email', 'icon_www', 'icon_icq', 'icon_aim', 'icon_yim', 'icon_msnm', 'icon_delete', 'icon_ip', 'icon_no_email', 'icon_no_www', 'icon_no_icq', 'icon_no_aim', 'icon_no_yim', 'icon_no_msnm');

{

}

return;

}

}

// Will be keeping my eye of 'other products' to ensure these things don't

// mysteriously appear elsewhere, think up your own solutions!

{

var $founder = false;

var $acl = false;

$auth_sql";

$db->sql_query($sql);

}

function login($username, $password, $autologin = false)

{

$method = trim($board_config['auth_method']);

$autologin = ( isset($autologin) ) ? md5($password) : '';

}

}