+ var $cookie_data = array();

+ var $time_now = 0;

+

+ /**

+ * Start session management

+ *

+ * This is where all session activity begins. We gather various pieces of

+ * information from the client and server. We test to see if a session already

+ * exists. If it does, fine and dandy. If it doesn't we'll go on to create a

+ * new one ... pretty logical heh? We also examine the system load (if we're

+ * running on a system which makes such information readily available) and

+ * halt if it's above an admin definable limit.

+ *

+ * @todo Review page discovery code

+ * @todo Review IP grab, getenv still valid? Need feedback from community

+ * @todo Introduce further user types, bot, guest

+ * @todo Change user_type (as above) to a bitfield? user_type & USER_FOUNDER for example

+ * @todo Look at enforcing IP check for bots if admin desires

+ */

+ //function session_begin()

+ $this->time_now = time();

+

+

+

+ $this->cookie_data = array();

+ $this->cookie_data = (!empty($_COOKIE[$config['cookie_name'] . '_data'])) ? unserialize(stripslashes($_COOKIE[$config['cookie_name'] . '_data'])) : array();

+ // @todo .. finish this!

+ $this->ip = (!empty($_SERVER['REMOTE_ADDR'])) ? htmlspecialchars($_SERVER['REMOTE_ADDR']) : htmlspecialchars(getenv('REMOTE_ADDR'));

+

+ // Is session_id is set or session_id is set and matches the url param if required

+ // Validate IP length according to admin ... enforces an IP

+ // check on bots if admin requires this

+// $quadcheck = ($config['ip_check_bot'] && $user->data['user_type'] & USER_BOT) ? 4 : $config['ip_check'];

+

+ if ($this->time_now - $this->data['session_time'] > 60 || $this->data['session_page'] != $this->page)

+ SET session_time = $this->time_now, session_page = '" . $db->sql_escape($this->page) . "'

+

+ // Ultimately to be removed

+

+

+ // If we reach here then no (valid) session exists. So we'll create a new one

+ return $this->session_create();

+

+

+ /**

+ * Create a new session

+ *

+ * If upon trying to start a session we discover there is nothing existing we

+ * jump here. Additionally this method is called directly during login to regenerate

+ * the session for the specific user. In this method we carry out a number of tasks;

+ * garbage collection, (search)bot checking, banned user comparison. Basically

+ * though this method will result in a new session for a specific user.

+ */

+ function session_create($user_id = false, $set_admin = false, $persist_login = false, $viewonline = true)

+ $this->data = array();

+

+ // Garbage collection ... remove old sessions updating user information

+ // if necessary. It means (potentially) 11 queries but only infrequently

+ if ($this->time_now > $config['session_last_gc'] + $config['session_gc'])

+ {

+ $this->session_gc();

+ }

+

+ // Do we allow autologin on this board? No? Then override anything

+ // that may be requested here

+ if (!$config['allow_autologin'])

+ {

+ $this->cookie_data['k'] = $persist_login = false;

+ }

+ /**

+ * Here we do a bot check, oh er saucy! No, not that kind of bot

+ * check. We loop through the list of bots defined by the admin and

+ * see if we have any useragent and/or IP matches. If we do, this is a

+ * bot, act accordingly

+ */

+ $bot = false;

+

+ $bot = (int) $row['user_id'];

+

+ // If we're presented with an autologin key we'll join against it.

+ // Else if we've been passed a user_id we'll grab data based on that

+ if ($this->cookie_data['k'] && $this->cookie_data['u'])

+ $sql = 'SELECT u.*

+ FROM ' . USERS_TABLE . ' u, ' . SESSIONS_KEYS_TABLE . ' k

+ WHERE u.user_id = ' . $db->sql_escape($this->cookie_data['u']) . '

+ AND u.user_type <> ' . USER_INACTIVE . "

+ AND k.user_id = u.user_id

+ AND k.key_id = '" . $db->sql_escape($this->cookie_data['k']) . "'";

+ $result = $db->sql_query($sql);

+ $this->data = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+ }

+ else if ($user_id !== false)

+ $this->cookie_data['k'] = '';

+ $this->cookie_data['u'] = $user_id;

+ WHERE user_id = ' . $this->cookie_data['u'] . '

+ AND user_type <> ' . USER_INACTIVE;

+

+ // If no data was returned one or more of the following occured:

+ // Key didn't match one in the DB

+ // User does not exist

+ // User is inactive

+ // User is bot

+ if (!sizeof($this->data))

+ $this->cookie_data['k'] = '';

+ $this->cookie_data['u'] = ($bot) ? $bot : ANONYMOUS;

+ $sql = 'SELECT *

+ FROM ' . USERS_TABLE . '

+ WHERE user_id = ' . $this->cookie_data['u'];

+ $this->data = $db->sql_fetchrow($result);

+ if ($this->data['user_id'] != ANONYMOUS)

+ $sql = 'SELECT session_time, session_id

+ FROM ' . SESSIONS_TABLE . '

+ WHERE session_user_id = ' . $db->sql_escape($this->data['user_id']) . '

+ ORDER BY session_time DESC';

+ $result = $db->sql_query_limit($sql, 1);

+ if ($sdata = $db->sql_fetchrow($result))

+ $this->data = array_merge($sdata, $this->data);

+ unset($sdata);

+

+ $this->session_id = $this->data['session_id'];

+ }

+ $this->data['session_last_visit'] = ($this->data['session_time']) ? $this->data['session_time'] : (($this->data['user_lastvisit']) ? $this->data['user_lastvisit'] : time());

+ }

+ else

+ {

+ $this->data['session_last_visit'] = time();

+ }

+ // At this stage we should have a filled data array, defined cookie u and k data.

+ // data array should contain recent session info if we're a real user and a recent

+ // session exists in which case session_id will also be set

+ // Is user banned? Are they excluded? Won't return on ban, exists within method

+ // @todo Change to !$this->data['user_type'] & USER_FOUNDER && !$this->data['user_type'] & USER_BOT in time

+ if ($this->data['user_type'] != USER_FOUNDER)

+ {

+ $this->check_ban();

+

+ //

+ // Do away with ultimately?

+ $this->data['is_registered'] = (!$bot && $this->data['user_id'] != ANONYMOUS) ? true : false;

+ //

+ //

+

+ 'session_user_id' => (int) $this->data['user_id'],

+ 'session_start' => (int) $this->time_now,

+ 'session_time' => (int) $this->time_now,

+ 'session_admin' => ($set_admin) ? 1 : 0,

+ 'session_viewonline' => ($viewonline) ? 1 : 0,

+ $db->sql_return_on_error(true);

+

+ if (!$this->session_id || !$db->sql_query($sql) || !$db->sql_affectedrows())

+ // Limit new sessions in 1 minute period (if required)

+ if (!$this->data['session_time'] && $config['active_sessions'])

+ {

+ $sql = 'SELECT COUNT(*) AS sessions

+ FROM ' . SESSIONS_TABLE . '

+ WHERE session_time >= ' . ($this->time_now - 60);

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if ((int) $row['sessions'] > (int) $config['active_sessions'])

+ {

+ trigger_error('BOARD_UNAVAILABLE');

+ }

+ }

+

+ $this->session_id = $this->data['session_id'] = md5(unique_id());

+ // Regenerate autologin/persistent login key

+ // @todo Change this ... check for "... && user_type & USER_NORMAL" ?

+ if ((!empty($this->cookie_data['k']) || $persist_login) && $this->data['user_id'] != ANONYMOUS)

+ {

+ $this->set_login_key();

+ }

+

+ $SID = '?sid=';

+ $this->set_cookie('data', serialize($this->cookie_data), $this->time_now + 31536000);

+ $this->set_cookie('sid', $this->session_id, 0);

+// global $evt;

+// $evt->trigger(EVT_NEW_SESSION, $this->data);

+

+

+ /**

+ * Kills a session

+ *

+ * This method does what it says on the tin. It will delete a pre-existing session.

+ * It resets cookie information (destroying any autologin key within that cookie data)

+ * and update the users information from the relevant session data. It will then

+ * grab guest user information.

+ */

+ function session_kill()

+ if ($this->data['user_id'] != ANONYMOUS)

+ {

+ // Delete existing session, update last visit info first!

+ $sql = 'UPDATE ' . USERS_TABLE . '

+ SET user_lastvisit = ' . $this->data['session_time'] . '

+ WHERE user_id = ' . $this->data['user_id'];

+ $db->sql_query($sql);

+ // Reset the data array

+ $this->data = array();

+

+ $sql = 'SELECT *

+ FROM ' . USERS_TABLE . '

+ WHERE user_id = ' . ANONYMOUS;

+ $result = $db->sql_query($sql);

+

+ $this->data = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+ }

+

+ $this->set_cookie('data', '', $this->time_now - 31536000);

+ $this->set_cookie('sid', '', $this->time_now - 31536000);

+

+ $SID = '?sid=';

+ $this->session_id = '';

+

+ /**

+ * Session garbage collection

+ *

+ * This looks a lot more complex than it really is. Effectively we are

+ * deleting any sessions older than an admin definable limit. Due to the

+ * way in which we maintain session data we have to ensure we update user

+ * data before those sessions are destroyed. In addition this method

+ * removes autologin key information that is older than an admin defined

+ * limit.

+ */

+ function session_gc()

+ AND session_time < ' . ($this->time_now - $config['session_length']);

+ WHERE s.session_time < ' . ($this->time_now - $config['session_length']) . '

+ WHERE session_time < ' . ($this->time_now - $config['session_length']);

+ set_config('session_last_gc', $this->time_now);

+ WHERE session_time < ' . ($this->time_now - $config['session_length']) . '

+ AND session_time < " . ($this->time_now - $config['session_length']);

+ set_config('session_last_gc', $this->time_now);

+

+ // Now we'll clean autologin keys which have expired, i.e.

+ // where users have not logged in for an admin defined number

+ // of days

+ if ($config['allow_autologin'] && $config['max_autologin_time'])

+ {

+ $sql = 'DELETE FROM ' . SESSIONS_KEYS_TABLE . '

+ WHERE last_login < ' . (time() - ($config['max_autologin_time'] * 86400));

+ $db->sql_query($sql);

+ }

+

+ /**

+ * Sets a cookie

+ *

+ * Sets a cookie of the given name with the specified data for the given length of time.

+ */

+ setcookie($config['cookie_name'] . '_' . $name, $cookiedata, $cookietime, $config['cookie_path']);

+ }

+

+ /**

+ * Check for banned user

+ *

+ * Checks whether the supplied user is banned by id, ip or email. If no parameters

+ * are passed to the method pre-existing session data is used. This routine does

+ * not return on finding a banned user, it outputs a relevant message and stops

+ * execution.

+ */

+ function check_ban($user_id = false, $user_ip = false, $user_email = false)

+ {

+ global $config, $db;

+

+ $user_id = ($user_id === false) ? $this->data['user_id'] : $user_id;

+ $user_ip = ($user_ip === false) ? $this->ip : $user_ip;

+ $user_email = ($user_email === false) ? $this->data['user_email'] : $user_email;

+

+ $banned = false;

+

+ $sql = 'SELECT ban_ip, ban_userid, ban_email, ban_exclude, ban_give_reason, ban_end

+ FROM ' . BANLIST_TABLE . '

+ WHERE ban_end >= ' . time() . '

+ OR ban_end = 0';

+ $result = $db->sql_query($sql);

+

+ if ($row = $db->sql_fetchrow($result))

+ do

+ {

+ if ((!empty($row['ban_userid']) && intval($row['ban_userid']) == $user_id) ||

+ (!empty($row['ban_ip']) && preg_match('#^' . str_replace('*', '.*?', $row['ban_ip']) . '$#i', $user_ip)) ||

+ (!empty($row['ban_email']) && preg_match('#^' . str_replace('*', '.*?', $row['ban_email']) . '$#i', $user_email)))

+ {

+ if (!empty($row['ban_exclude']))

+ {

+ $banned = false;

+ break;

+ }

+ else

+ {

+ $banned = true;

+ }

+ }

+ }

+ while ($row = $db->sql_fetchrow($result));

+ $db->sql_freeresult($result);

+

+ if ($banned)

+ {

+ // Initiate environment ... since it won't be set at this stage

+ $this->setup();

+

+ // Determine which message to output

+ $till_date = (!empty($row['ban_end'])) ? $this->format_date($row['ban_end']) : '';

+ $message = (!empty($row['ban_end'])) ? 'BOARD_BAN_TIME' : 'BOARD_BAN_PERM';

+

+ $message = sprintf($this->lang[$message], $till_date, '<a href="mailto:' . $config['board_contact'] . '">', '</a>');

+ // More internal HTML ...

+ $message .= (!empty($row['ban_show_reason'])) ? '<br /><br />' . sprintf($this->lang['BOARD_BAN_REASON'], $row['ban_show_reason']) : '';

+ trigger_error($message);

+ }

+

+ return false;

+ }

+

+ /**

+ * Set/Update a persistent login key

+ *

+ * This method creates or updates a persistent session key. When a user makes

+ * use of persistent (formerly auto-) logins a key is generated and stored in the

+ * DB. When they revisit with the same key it's automatically updated in both the

+ * DB and cookie. Multiple keys may exist for each user representing different

+ * browsers or locations. As with _any_ non-secure-socket no passphrase login this

+ * remains vulnerable to exploit. However, by rotating the keys and seperating them

+ * from the password hash it's more secure than 2.0.x. Don't be surprised to see

+ * this backported!

+ */

+ function set_login_key($user_id = false, $key = false, $user_ip = false)

+ {

+ global $config, $db;

+

+ $user_id = ($user_id === false) ? $this->data['user_id'] : $user_id;

+ $user_ip = ($user_ip === false) ? $this->ip : $user_ip;

+ $key = ($key === false) ? ((!empty($this->cookie_data['k'])) ? true : false) : $key;

+

+ $sql_ary = array(

+ 'key_id' => (string) md5(unique_id()),

+ 'last_ip' => (string) $this->ip,

+ 'last_login' => (int) time()

+ );

+ if (!$key)

+ {

+ $sql_ary += array(

+ 'user_id' => (int) $user_id

+ );

+ }

+

+ $sql = ($key) ? 'UPDATE ' . SESSIONS_KEYS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $sql_ary) . ' WHERE user_id = ' . $db->sql_escape($user_id) . ' AND key_id = "' . $db->sql_escape($key) . '"' : 'INSERT INTO ' . SESSIONS_KEYS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);

+ $db->sql_query($sql);

+

+ $this->cookie_data['k'] = $sql_ary['key_id'];

+ unset($sql_ary);

+

+ return false;

+ }

+

+ /**

+ * Remove stale login keys

+ *

+ * @private

+ */

+ function tidy_login_keys()

+ {

+ global $config, $db;

+

+ if (!empty($config['max_autologin_time']))

+ $sql = 'DELETE FROM ' . SESSIONS_KEYS_TABLE . '

+ WHERE last_login < ' . (time() - (86400 * (int) $config['max_autologin_time']));

+ $db->sql_query($sql);

+

+ return false;

+* Base user class

+*

+* This is the overarching class which contains (through session extend)

+* all methods utilised for user functionality during a session.

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+ $sql_group = ($group_id !== false) ? ((!is_array($group_id)) ? "group_id = $group_id" : 'group_id IN (' . implode(', ', $group_id) . ')') : '';

+ $sql_forum = ($forum_id !== false) ? ((!is_array($forum_id)) ? "AND a.forum_id = $forum_id" : 'AND a.forum_id IN (' . implode(', ', $forum_id) . ')') : '';

+ $sql_opts = ($opts !== false) ? ((!is_array($opts)) ? "AND ao.auth_option = '$opts'" : 'AND ao.auth_option IN (' . implode(', ', preg_replace('#^[\s]*?(.*?)[\s]*?$#e', "\"'\" . \$db->sql_escape('\\1') . \"'\"", $opts)) . ')') : '';

+ $where_sql = ($user_id !== false) ? ' WHERE user_id ' . ((is_array($user_id)) ? ' IN (' . implode(', ', array_map('intval', $user_id)) . ')' : " = $user_id") : '';

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+

+ return $user->session_create($login['user_id'], $admin, $autologin, $viewonline);