1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
|
<?php
/*
Module: base/session
Megjegyzés: a base-ből minden oldalletöltésnél betöltődik
*/
define('_ADMIN_ACCESS', 0);
define('_SELF_ACCESS', 1);
define('_OTHER_ACCESS', 2);
$AUTH['my']['categories'] = getAccountCategories(_USERACCOUNT, _POLICY); // a függvény itt deklarált
######################################################
# Az aktuális policy backend-jének alapvető session-kezelése. Csatoljuk be, vagy üzenjünk hibát
######################################################
if (file_exists('include/backend/'.$AUTH[_POLICY]['backend'].'/session/base.php'))
require_once('include/backend/'.$AUTH[_POLICY]['backend'].'/session/base.php');
else
$_SESSION['alert'][] = 'page:file_not_found:'.'include/backend/'.$AUTH[_POLICY]['backend'].'/session/base.php';
/* Függvények */
/*
function memberOf($userAccount, $group, $toPolicy = _POLICY)
a függvény becsatolja a backend-nek megfelelő modul filet és használja a [backend]MemberOf() függvényt
function getAccountCategories($userAccount = '', $toPolicy = _POLICY)
a függvény lekérdezi a policy globális configfilejában megadott lehető kategóriákba userAccount bele tartozik-e
használja: memberOf()
--
function getBackendAttrs($type = 'Account', $toPolicy = _POLICY)
function getFailedLoginCount($uid, $sinceDt, $lr='')
function getLastLoginDt($uid, $lr='')
*/
######################################################
# memberOf - csoport tag-e - session modul
######################################################
function memberOf($userAccount, $group, $toPolicy = _POLICY) {
global $AUTH;
if ($AUTH[$toPolicy]['cacheable']=='yes' && $userAccount == _USERACCOUNT) {
$r = _queryCache('mOf:'.$group,$toPolicy,'value');
if (!is_null($r)) {
if ($r=='1') $return = true;
elseif ($r=='0') $return = false;
}
}
if (is_null($return)) {
require_once('include/backend/'.$AUTH[$toPolicy]['backend'].'/session/base.php');
$func = $AUTH[$toPolicy]['backend'].'MemberOf';
$return = $func($userAccount, $group, $toPolicy);
if ($AUTH[$toPolicy]['cacheable']=='yes' && $userAccount == _USERACCOUNT)
_registerToCache('mOf:'.$group, (($return == true) ? '1':'0'), $toPolicy);
}
return $return;
}
######################################################
# getCategories - felhasználó besorolása(i) - session modul
######################################################
function getAccountCategories($userAccount = '', $toPolicy = _POLICY) {
global $AUTH;
if ($userAccount == '') $userAccount = _USERACCOUNT;
if ($AUTH[$toPolicy]['cacheable']=='yes' && $userAccount == _USERACCOUNT) {
$cacheable = true;
_maintainCache();
$r = _queryCache('aCat', $toPolicy);
for ($i=0; $i<count($r); $i++) { // valójában csak egy érték lehet, de azért bent hagyjuk a ciklust
$_eArr[] = $r[$i]['ertek'];
$_eArr = explode(';',$r[$i]['ertek']);
if (is_array($_eArr)) $return = $_eArr;
else $return[] = $_eArr;
}
} else $cacheable = false;
if (count($r)>0) return $return;
else {
$return = array();
if (is_array($AUTH[$toPolicy]['categories']))
foreach ($AUTH[$toPolicy]['categories'] as $key => $category) {
if (memberOf($userAccount, $category, $toPolicy)) {
$return[] = $category;
}
if ($cacheable) _registerToCache('aCat',implode(';',$return),$toPolicy); // ha több csoport tagja is, ";"
}
return $return;
}
}
function _queryCache($kulcs, $policy, $rType="indexed") {
$v = array(_SESSIONID,$kulcs,$policy);
return db_query("SELECT `ertek` FROM `cache` WHERE sessionID='%s' AND dt>NOW() - INTERVAL 5 MINUTE AND `kulcs`='%s' AND policy='%s'", array('fv' => 'getAccountCategories', 'modul' => 'login', 'result' => $rType, 'values'=>$v));
}
function _registerToCache($kulcs,$ertek,$policy) {
$v = array(_SESSIONID,$policy,$kulcs,$ertek);
db_query("REPLACE INTO `cache` (sessionID,policy,kulcs,ertek,dt) VALUES ('%s','%s','%s','%s',NOW())", array('fv' => 'cache', 'modul' => 'login', 'result' => 'indexed', 'values'=>$v));
}
function _maintainCache() {
$q = "DELETE FROM `cache` WHERE dt<NOW() - INTERVAL 5 MINUTE";
db_query($q, array('fv' => 'cache', 'modul' => 'login', 'result' => 'indexed', 'values'=>$v));
}
######################################################
# getBackendAttrs - az adott policy backend-jéhez tartozó attribútumok - session modul
######################################################
function getBackendAttrs($type = 'Account', $toPolicy = _POLICY) {
global $AUTH;
require_once('include/backend/'.$AUTH[$toPolicy]['backend'].'/session/base.php');
global $AUTH;
$attrArrayName = $AUTH[$toPolicy]['backend'].$type.'AttrDef';
global $$attrArrayName;
$backendAttrDef = $$attrArrayName;
// Válogassuk ki az olvasható attribútumokat
reset($backendAttrDef);
foreach ($backendAttrDef as $attr => $def) {
if (!isset($def['rights']) || $def['rights'] == '') {
$rigths = _DEFAULT_LDAP_RIGHTS; //LDAP???
$backendAttrDef[$attr]['rights'] = $rights;
} else $rights = $def['rights'];
if ($rights[_ACCESS_AS] != '-') $attrList[] = $attr;
}
return array($attrList,$backendAttrDef);
}
######################################################################
# Utolsó bejelentkezés dátuma
######################################################################
function getLastLoginDt($toPolicy, $userAccount=_USERACCOUNT, $lr = null) {
$q = "SELECT dt FROM loginLog WHERE policy='%s' AND userAccount='%s' AND flag=0 ORDER BY dt DESC LIMIT 1";
return db_query($q , array('fv' => 'getLastLoginDt', 'modul' => 'login', 'result' => 'value', 'values' => array($toPolicy,$userAccount)), $lr);
}
######################################################################
# Hibás bejelentkezések száma, a legutolsó sikeres bejelentkezés óta
######################################################################
function getFailedLoginCount($toPolicy, $userAccount=_USERACCOUNT, $lr = null) {
if ($sinceDt == '') $sinceDt = getLastLoginDt($toPolicy, $userAccount, $lr);
$q = "SELECT COUNT(*) AS db FROM loginLog WHERE policy='%s' AND userAccount='%s' AND dt>'%s' AND flag>0";
return db_query($q , array('fv' => 'getFailedLoginCount', 'modul' => 'login', 'result' => 'value', 'values' => array($toPolicy, $userAccount, $sinceDt)), $lr);
}
?>
|
