Initial Commit
This commit is contained in:
@@ -0,0 +1,362 @@
|
||||
<?php
|
||||
|
||||
/*===============================================*\
|
||||
|| ############################################# ||
|
||||
|| # JAKWEB.CH / Version 2.1.2 # ||
|
||||
|| # ----------------------------------------- # ||
|
||||
|| # Copyright 2023 JAKWEB All Rights Reserved # ||
|
||||
|| ############################################# ||
|
||||
\*===============================================*/
|
||||
|
||||
class JAK_userlogin {
|
||||
|
||||
protected $name = '', $email = '', $pass = '', $time = '';
|
||||
var $username; //Username given on sign-up
|
||||
|
||||
public function __construct() {
|
||||
$this->username = '';
|
||||
}
|
||||
|
||||
function jakChecklogged() {
|
||||
|
||||
/* Check if user has been remembered */
|
||||
if (isset($_COOKIE['jak_lcp_cookname']) && isset($_COOKIE['jak_lcp_cookid'])) {
|
||||
$_SESSION['jak_lcp_username'] = $_COOKIE['jak_lcp_cookname'];
|
||||
$_SESSION['jak_lcp_idhash'] = $_COOKIE['jak_lcp_cookid'];
|
||||
}
|
||||
|
||||
/* Username and idhash have been set */
|
||||
if (isset($_SESSION['jak_lcp_username']) && isset($_SESSION['jak_lcp_idhash']) && $_SESSION['jak_lcp_username'] != $this->username) {
|
||||
/* Confirm that username and userid are valid */
|
||||
if (!JAK_userlogin::jakConfirmidhash($_SESSION['jak_lcp_username'], $_SESSION['jak_lcp_idhash'])) {
|
||||
/* Variables are incorrect, user not logged in */
|
||||
unset($_SESSION['jak_lcp_username']);
|
||||
unset($_SESSION['jak_lcp_idhash']);
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
// Return the user data
|
||||
return JAK_userlogin::jakUserinfo($_SESSION['jak_lcp_username']);
|
||||
|
||||
/* User not logged in */
|
||||
} else {
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
function jakCheckrestlogged($userid, $hash) {
|
||||
|
||||
/* UserID and Hash have been set */
|
||||
global $jakdb;
|
||||
$datauinfo = $jakdb->get("user", "*", ["AND" => ["id" => $userid, "idhash" => $hash]]);
|
||||
if (isset($datauinfo) && !empty($datauinfo)) {
|
||||
|
||||
// Return the user data
|
||||
return $datauinfo;
|
||||
|
||||
/* User not logged in */
|
||||
} else {
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
public static function jakCheckuserdata($username, $pass) {
|
||||
|
||||
// The new password encrypt with hash_hmac
|
||||
$passcrypt = hash_hmac('sha256', $pass, DB_PASS_HASH);
|
||||
|
||||
if (!filter_var($username, FILTER_VALIDATE_EMAIL)) {
|
||||
|
||||
if (!preg_match('/^([a-zA-Z0-9\-_])+$/', $username)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
global $jakdb;
|
||||
$datausr = $jakdb->get("user", ["id", "username"], ["AND" => ["OR" => ["username" => strtolower($username), "email" => strtolower($username)], "password" => $passcrypt, "access" => 1]]);
|
||||
if ($datausr) {
|
||||
return $datausr;
|
||||
} else {
|
||||
return false;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
public static function jakLogin($name, $pass, $remember) {
|
||||
|
||||
// The new password encrypt with hash_hmac
|
||||
$passcrypt = hash_hmac('sha256', $pass, DB_PASS_HASH);
|
||||
|
||||
global $jakdb;
|
||||
|
||||
// Get the stuff out the database
|
||||
$datausr = $jakdb->get("user", ["idhash", "logins"], ["AND" => ["username" => $name, "password" => $passcrypt]]);
|
||||
|
||||
if ($datausr['logins'] % 10 == 0) {
|
||||
|
||||
// Generate new idhash
|
||||
$nidhash = JAK_userlogin::generateRandID();
|
||||
|
||||
} else {
|
||||
|
||||
if (isset($datausr['idhash']) && !empty($datausr['idhash']) && $datausr['idhash'] != "NULL") {
|
||||
|
||||
// Take old idhash
|
||||
$nidhash = $datausr['idhash'];
|
||||
|
||||
} else {
|
||||
|
||||
// Generate new idhash
|
||||
$nidhash = JAK_userlogin::generateRandID();
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
// Set session in database
|
||||
$jakdb->update("user", ["session" => session_id(), "idhash" => $nidhash, "logins[+]" => 1, "available" => 1, "forgot" => 0, "lastactivity" => time()], ["AND" => ["username" => $name, "password" => $passcrypt]]);
|
||||
|
||||
$_SESSION['jak_lcp_username'] = $name;
|
||||
$_SESSION['jak_lcp_idhash'] = $nidhash;
|
||||
|
||||
// Check if cookies are set previous (wrongly) and delete
|
||||
if (isset($_COOKIE['jak_lcp_cookname']) || isset($_COOKIE['jak_lcp_cookid'])) {
|
||||
|
||||
JAK_base::jakCookie('jak_lcp_cookname', $name, JAK_COOKIE_TIME, JAK_COOKIE_PATH);
|
||||
JAK_base::jakCookie('jak_lcp_cookid', $nidhash, JAK_COOKIE_TIME, JAK_COOKIE_PATH);
|
||||
|
||||
}
|
||||
|
||||
// Now check if remember is selected and set cookies new...
|
||||
if ($remember) {
|
||||
|
||||
JAK_base::jakCookie('jak_lcp_cookname', $name, JAK_COOKIE_TIME, JAK_COOKIE_PATH);
|
||||
JAK_base::jakCookie('jak_lcp_cookid', $nidhash, JAK_COOKIE_TIME, JAK_COOKIE_PATH);
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
public static function jakrestLogin($name, $pass) {
|
||||
|
||||
// The new password encrypt with hash_hmac
|
||||
$passcrypt = hash_hmac('sha256', $pass, DB_PASS_HASH);
|
||||
|
||||
global $jakdb;
|
||||
|
||||
// Get the stuff out the database
|
||||
$datausr = $jakdb->get("user",["idhash", "logins"], ["AND" => ["username" => $name, "password" => $passcrypt]]);
|
||||
|
||||
if ($datausr['logins'] % 10 == 0) {
|
||||
|
||||
// Generate new idhash
|
||||
$nidhash = JAK_userlogin::generateRandID();
|
||||
|
||||
} else {
|
||||
|
||||
if (isset($datausr['idhash']) && !empty($datausr['idhash']) && $datausr['idhash'] != "NULL") {
|
||||
|
||||
// Take old idhash
|
||||
$nidhash = $datausr['idhash'];
|
||||
|
||||
} else {
|
||||
|
||||
// Generate new idhash
|
||||
$nidhash = JAK_userlogin::generateRandID();
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
// Set session in database
|
||||
$jakdb->update("user", ["session" => session_id(), "idhash" => $nidhash, "logins[+]" => 1, "available" => 1, "forgot" => 0, "lastactivity" => time()], ["AND" => ["username" => $name, "password" => $passcrypt]]);
|
||||
|
||||
// Return the user data
|
||||
return JAK_userlogin::jakUserinfo($name);
|
||||
|
||||
}
|
||||
|
||||
public static function jakWriteDeviceToken($userid, $opid, $device, $token, $appname, $appversion) {
|
||||
|
||||
// Check the data before we run any queries
|
||||
$allowed_device_types = ['ios', 'android'];
|
||||
if (in_array($device, $allowed_device_types) === false) {
|
||||
return false;
|
||||
}
|
||||
|
||||
if ((strlen(trim($token)) === 0) || (strlen(trim($token)) > 250)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
$allowed_app_versions = ['LC3', 'HD3'];
|
||||
if (in_array($appname, $allowed_app_versions) === false) {
|
||||
$appname = 'LC3';
|
||||
}
|
||||
|
||||
// trim token
|
||||
$token = trim($token);
|
||||
|
||||
global $jakdb;
|
||||
// Get the info out the database
|
||||
$pushid = $jakdb->get("push_notification_devices", "id", ["token" => $token]);
|
||||
|
||||
if (isset($pushid) && !empty($pushid)) {
|
||||
$jakdb->update("push_notification_devices", ["lastedit" => $jakdb->raw("NOW()")], ["id" => $pushid]);
|
||||
} else {
|
||||
// We have no entry at all
|
||||
$jakdb->insert("push_notification_devices", ["userid" => $userid, "opid" => $opid, "ostype" => $device, "token" => $token, "appname" => $appname, "appversion" => $appversion, "lastedit" => $jakdb->raw("NOW()"), "created" => $jakdb->raw("NOW()")]);
|
||||
}
|
||||
|
||||
// Remove old entries older than 4 weeks
|
||||
$deleteold = strtotime("-4 weeks");
|
||||
$deleteoldmysql = date('Y-m-d H:i:s', $deleteold);
|
||||
$jakdb->delete("push_notification_devices", ["lastedit[<]" => $deleteoldmysql]);
|
||||
|
||||
return true;
|
||||
|
||||
}
|
||||
|
||||
public static function jakConfirmidhash($username, $idhash) {
|
||||
|
||||
global $jakdb;
|
||||
|
||||
if (isset($username) && !empty($username)) {
|
||||
|
||||
$datausr = $jakdb->get("user","idhash",["AND" => ["username" => $username, "access" => 1]]);
|
||||
|
||||
if ($datausr) {
|
||||
|
||||
$datausr = stripslashes($datausr);
|
||||
$idhash = stripslashes($idhash);
|
||||
|
||||
/* Validate that userid is correct */
|
||||
if(!is_null($datausr) && $idhash == $datausr) {
|
||||
return true; //Success! Username and idhash confirmed
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
return false;
|
||||
|
||||
}
|
||||
|
||||
public static function jakUserinfo($username) {
|
||||
|
||||
global $jakdb;
|
||||
$datauinfo = $jakdb->get("user", "*", ["AND" => ["username" => $username, "access" => 1]]);
|
||||
if ($datauinfo) {
|
||||
return $datauinfo;
|
||||
} else {
|
||||
return false;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
public static function jakUpdatelastactivity($userid) {
|
||||
|
||||
global $jakdb;
|
||||
if (is_numeric($userid)) $jakdb->update("user", ["lastactivity" => time()], ["id" => $userid]);
|
||||
|
||||
}
|
||||
|
||||
public static function jakForgotpassword($email, $time) {
|
||||
|
||||
global $jakdb;
|
||||
if ($jakdb->has("user", ["AND" => ["email" => $email, "access" => 1]])) {
|
||||
if ($time != 0) $jakdb->update("user", ["forgot" => $time], ["email" => $email]);
|
||||
return true;
|
||||
} else {
|
||||
return false;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
public static function jakForgotactive($forgotid) {
|
||||
|
||||
global $jakdb;
|
||||
if ($jakdb->has("user", ["AND" => ["forgot" => $forgotid, "access" => 1]])) {
|
||||
return true;
|
||||
} else
|
||||
return false;
|
||||
|
||||
}
|
||||
|
||||
public static function jakForgotcheckuser($email, $forgotid) {
|
||||
|
||||
global $jakdb;
|
||||
if ($jakdb->has("user", ["AND" => ["email" => $email, "forgot" => $forgotid, "access" => 1]])) {
|
||||
return true;
|
||||
} else
|
||||
return false;
|
||||
|
||||
}
|
||||
|
||||
public static function jakWriteloginlog($username, $url, $ip, $agent, $success) {
|
||||
|
||||
global $jakdb;
|
||||
if ($success == 1) {
|
||||
$jakdb->update("loginlog", ["access" => 1], ["AND" => ["ip" => $ip, "time" => $jakdb->raw("NOW()")]]);
|
||||
} else {
|
||||
$jakdb->insert("loginlog", ["name" => $username, "fromwhere" => $url, "usragent" => $agent, "ip" => $ip, "time" => $jakdb->raw("NOW()"), "access" => 0]);
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
public static function jakLogout($userid) {
|
||||
|
||||
global $jakdb;
|
||||
|
||||
// Delete cookies from this page
|
||||
JAK_base::jakCookie('jak_lcp_cookname', '', -JAK_COOKIE_TIME, JAK_COOKIE_PATH);
|
||||
JAK_base::jakCookie('jak_lcp_cookid', '', - JAK_COOKIE_TIME, JAK_COOKIE_PATH);
|
||||
|
||||
// Update Database to session NULL
|
||||
$jakdb->update("user", ["session" => $jakdb->raw("NULL"), "idhash" => $jakdb->raw("NULL"), "available" => 0], ["id" => $userid]);
|
||||
|
||||
// Unset the main sessions
|
||||
unset($_SESSION['jak_lcp_username']);
|
||||
unset($_SESSION['jak_lcp_idhash']);
|
||||
unset($_SESSION['jak_lcp_lang']);
|
||||
|
||||
// Destroy session and generate new one for that user
|
||||
session_destroy();
|
||||
|
||||
// Start new session
|
||||
session_start();
|
||||
session_regenerate_id();
|
||||
|
||||
}
|
||||
|
||||
public static function jakLogoutRest($userid) {
|
||||
|
||||
global $jakdb;
|
||||
|
||||
// Update Database to session NULL
|
||||
$jakdb->update("user", ["session" => $jakdb->raw("NULL"), "idhash" => $jakdb->raw("NULL"), "available" => 0], ["id" => $userid]);
|
||||
|
||||
}
|
||||
|
||||
public static function generateRandStr($length) {
|
||||
$randstr = "";
|
||||
for($i=0; $i<$length; $i++){
|
||||
$randnum = mt_rand(0,61);
|
||||
if($randnum < 10){
|
||||
$randstr .= chr($randnum+48);
|
||||
}else if($randnum < 36){
|
||||
$randstr .= chr($randnum+55);
|
||||
}else{
|
||||
$randstr .= chr($randnum+61);
|
||||
}
|
||||
}
|
||||
return $randstr;
|
||||
}
|
||||
|
||||
private static function generateRandID() {
|
||||
return md5(JAK_userlogin::generateRandStr(16));
|
||||
}
|
||||
}
|
||||
?>
|
||||
Reference in New Issue
Block a user