]>
git.wh0rd.org - tt-rss.git/blob - include/sessions.php
2 // Original from http://www.daniweb.com/code/snippet43.html
4 require_once "config.php";
5 require_once "classes/db.php";
6 require_once "autoload.php";
7 require_once "errorhandler.php";
8 require_once "lib/accept-to-gettext.php";
9 require_once "lib/gettext/gettext.inc";
10 require_once "version.php";
12 $session_expire = min(2147483647 - time() - 1, max(SESSION_COOKIE_LIFETIME
, 86400));
13 $session_name = (!defined('TTRSS_SESSION_NAME')) ?
"ttrss_sid" : TTRSS_SESSION_NAME
;
15 if (is_server_https()) {
16 $session_name .= "_ssl";
17 ini_set("session.cookie_secure", true);
20 ini_set("session.gc_probability", 75);
21 ini_set("session.name", $session_name);
22 ini_set("session.use_only_cookies", true);
23 ini_set("session.gc_maxlifetime", $session_expire);
24 ini_set("session.cookie_lifetime", min(0, SESSION_COOKIE_LIFETIME
));
26 function session_get_schema_version() {
27 global $schema_version;
29 if (!$schema_version) {
30 $result = Db
::get()->query("SELECT schema_version FROM ttrss_version");
31 $version = Db
::get()->fetch_result($result, 0, "schema_version");
32 $schema_version = $version;
35 return $schema_version;
39 function validate_session() {
40 if (SINGLE_USER_MODE
) return true;
42 if (isset($_SESSION["ref_schema_version"]) && $_SESSION["ref_schema_version"] != session_get_schema_version()) {
43 $_SESSION["login_error_msg"] =
44 __("Session failed to validate (schema version changed)");
48 if ($_SESSION["uid"]) {
49 $result = Db
::get()->query(
50 "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'");
53 if (Db
::get()->num_rows($result) == 0) {
55 $_SESSION["login_error_msg"] =
56 __("Session failed to validate (user not found)");
60 $pwd_hash = Db
::get()->fetch_result($result, 0, "pwd_hash");
62 if ($pwd_hash != $_SESSION["pwd_hash"]) {
64 $_SESSION["login_error_msg"] =
65 __("Session failed to validate (password changed)");
76 * @SuppressWarnings(PHPMD.UnusedFormalParameter)
78 function ttrss_open ($s, $n) {
82 function ttrss_read ($id){
83 global $session_expire;
85 $res = Db
::get()->query("SELECT data FROM ttrss_sessions WHERE id='$id'");
87 if (Db
::get()->num_rows($res) != 1) {
89 $expire = time() +
$session_expire;
91 Db
::get()->query("INSERT INTO ttrss_sessions (id, data, expire)
92 VALUES ('$id', '', '$expire')");
96 return base64_decode(Db
::get()->fetch_result($res, 0, "data"));
101 function ttrss_write ($id, $data) {
102 global $session_expire;
104 $data = base64_encode($data);
105 $expire = time() +
$session_expire;
107 Db
::get()->query("UPDATE ttrss_sessions SET data='$data', expire='$expire' WHERE id='$id'");
112 function ttrss_close () {
116 function ttrss_destroy($id) {
117 Db
::get()->query("DELETE FROM ttrss_sessions WHERE id = '$id'");
123 * @SuppressWarnings(PHPMD.UnusedFormalParameter)
125 function ttrss_gc ($expire) {
126 Db
::get()->query("DELETE FROM ttrss_sessions WHERE expire < " . time());
131 if (!SINGLE_USER_MODE
/* && DB_TYPE == "pgsql" */) {
132 session_set_save_handler("ttrss_open",
133 "ttrss_close", "ttrss_read", "ttrss_write",
134 "ttrss_destroy", "ttrss_gc");
135 register_shutdown_function('session_write_close');
138 if (!defined('NO_SESSION_AUTOSTART')) {
139 if (isset($_COOKIE[session_name()])) {