classes/auth/base.php

   1 <?php
   2 class Auth_Base {
   3         protected $dbh;
   4
   5         function __construct($dbh) {
   6                 $this->dbh = $dbh;
   7         }
   8
   9         function check_password($owner_uid, $password) {
  10                 return false;
  11         }
  12
  13         function authenticate($login, $password) {
  14                 return false;
  15         }
  16
  17         // Auto-creates specified user if allowed by system configuration
  18         // Can be used instead of find_user_by_login() by external auth modules
  19         function auto_create_user($login) {
  20                 if ($login && defined('AUTH_AUTO_CREATE') && AUTH_AUTO_CREATE) {
  21                         $user_id = $this->find_user_by_login($login);
  22
  23                         if (!$user_id) {
  24                                 $login = db_escape_string( $login);
  25                                 $salt = substr(bin2hex(get_random_bytes(125)), 0, 250);
  26                                 $pwd_hash = encrypt_password($password, $salt, true);
  27
  28                                 $query = "INSERT INTO ttrss_users
  29                                                 (login,access_level,last_login,created,pwd_hash,salt)
  30                                                 VALUES ('$login', 0, null, NOW(), '$pwd_hash','$salt')";
  31
  32                                 db_query( $query);
  33
  34                                 return $this->find_user_by_login($login);
  35
  36                         } else {
  37                                 return $user_id;
  38                         }
  39                 }
  40
  41                 return $this->find_user_by_login($login);
  42         }
  43
  44         function find_user_by_login($login) {
  45                 $login = db_escape_string( $login);
  46
  47                 $result = db_query( "SELECT id FROM ttrss_users WHERE
  48                         login = '$login'");
  49
  50                 if (db_num_rows($result) > 0) {
  51                         return db_fetch_result($result, 0, "id");
  52                 } else {
  53                         return false;
  54                 }
  55
  56         }
  57 }
  58
  59 ?>