File Source for functions

<?php
/**
* @package linea21.utils
* @subpackage lib
* @author linea21 <info@linea21.com>
* @version $id SVN
* @access public
* @license http://opensource.org/licenses/gpl-3.0.html
*/
function loginAuth($login) {
$data = $GLOBALS['sql_object']->DBSelect(SQL_get_UserInfo($login));
if ($data != 0 && count($data) == 1) {
return $data[0];
} else {
return false;
}
}
/**
* AuthenthificationProcess()
* Authentification d'un utilisateur
*
* @param $login
* @param $pass
* @param $type ='PUBLIC' || 'ADMIN'
* @return boolean (true) ou message d'erreur
*/
function AuthenthificationProcess($login, $pass, $type)
{
if($type == 'PUBLIC') $src = LOG_PUBLIC_ACCESS;
if($type == 'ADMIN') $src = LOG_ADMIN_ACCESS;
logfile($src, array($type, $login, $_SERVER['HTTP_USER_AGENT'], $_SERVER['HTTP_REFERER'], $_SERVER['REQUEST_METHOD'], $_SERVER['REQUEST_URI'], $_SERVER['QUERY_STRING'], $_SERVER['HTTP_COOKIE'], i2c_realip()));
$crypt_pass = crypt($pass, SALT_CRYPT);
list($login, $crypt_pass) = $GLOBALS['sql_object']->DBEscape(array($login, $crypt_pass));
$data = $GLOBALS['sql_object']->DBSelect(SQL_Get_UserInfo4Auth($login, $crypt_pass));
if ($data != 0 && count($data) == 1) {
if ($type == 'PUBLIC') {
$workgroups = retrieveWorkgroups(array('login' => $login, 'pass' => $crypt_pass));
$table['id'] = $data[0]['user_id'];
$table['whois'] = base64_encode($crypt_pass);
$table['login'] = $login;
$table['workshop'] = base64_encode($workgroups);
$table['lifetime'] = time() + 3600 * 720;
if(!empty($data[0]['profile_firstname'])) {
$table['firstname'] = $data[0]['profile_firstname'];
}
DestroyUserCookie();
SetUserCookie($table);
}
if ($type == 'ADMIN') {
// préparation du tableau de droits
$right['dashboard'] = $data[0]['rights_dashboard'];
$right['workshop'] = $data[0]['rights_workshop'];
$right['project'] = $data[0]['rights_project'];
$right['publication'] = $data[0]['rights_publication'];
$right['news'] = $data[0]['rights_news'];
$right['yellowpages'] = $data[0]['rights_yellowpages'];
$right['theme'] = $data[0]['rights_theme'];
$right['scale'] = $data[0]['rights_scale'];
$right['level'] = $data[0]['rights_level'];
$right['category_user'] = $data[0]['rights_category_user'];
// est simple utilisateur
if (!array_search ('A' , $right) && !array_search ('O' , $right)) {
return _t('divers','errorauth');
// est utilisateur avec droits
} else {
$_SESSION['authenticated'] = true;
$_SESSION['userid'] = base64_encode($data[0]['user_id']);
$_SESSION['userwhois'] = base64_encode($crypt_pass);
$_SESSION['userlogin'] = $login;
if(!empty($data[0]['profile_firstname'])) {
$_SESSION['userfirstname'] = $data[0]['profile_firstname'];
}
$_SESSION['userright'] = $right;
Set_Cookie_last_connexion();
}
}
return true;
} else {
$error_msg = _t('divers','errorauth');
return $error_msg;
}
}
/**
* retrieveWorkgroups()
* Retrieve Workgroups for a given user
* @param $a array (optional)
* @return string
*/
function retrieveWorkgroups($a = array()) {
// user already logged-in
if(isset($_COOKIE['linea21']['id'])) {
$login = $_COOKIE['linea21']['login'];
$crypt_pass = base64_decode($_COOKIE['linea21']['whois']);
}
else
{
if(isset($a['login'])) {
$login = $a['login'];
$crypt_pass = $a['pass'];
} else {
return false;
}
}
$data_w = $GLOBALS['sql_object']->DBSelect(SQL_Get_UserWorkshop($login, $crypt_pass));
$workgroups = '';
for ($i = 0; $i < count($data_w); $i++) {
$workgroups .= "/" . $data_w[$i]['jwu_workshop_id'];
}
return $workgroups;
}
/**
* AuthUser4Workshop()
*
* @param integer $workshop_id
* @param object $sql_object
* @return boolean
*/
function AuthUser4Workshop ($workshop_id, $sql_object)
{
$data = $sql_object->DBSelect(SQL_Get_UserWorkshopOwner($workshop_id));
for ($i = 0; $i < count($data); $i++) {
if (GetSessionElement('id') == $data[$i]['jwu_user_id']) return true;
}
return false;
}
/**
* IsSuperAdmin()
*
* @return boolean
*/
function IsSuperAdmin()
{
return hasRight('theme');
}
/**
* hasRights()
*
* @param string $item
* @return bool
*/
function hasRight($item)
{
switch ($item) {
case 'category_user':
if (GetSessionElement('right_category_user') != 'A') return false;
else return true;
case 'theme':
if (GetSessionElement('right_theme') != 'A') return false;
else return true;
case 'level':
if (GetSessionElement('right_level') != 'A') return false;
else return true;
case 'scale':
if (GetSessionElement('right_scale') != 'A') return false;
else return true;
case 'yellowpages':
if (GetSessionElement('right_yellowpages') != 'A') return false;
else return true;
case 'news':
if (GetSessionElement('right_news') != 'U') return true;
else return false;
case 'project':
if (GetSessionElement('right_project') != 'A') return false;
else return true;
case 'publication':
if (GetSessionElement('right_publication') != 'U') return true;
else return false;
case 'workshop':
if (GetSessionElement('right_workshop') != 'U') return true;
else return false;
case 'workshoprep':
if (GetSessionElement('right_workshop') != 'U') return true;
else return false;
case 'dashboard':
if (GetSessionElement('right_dashboard') != 'U') return true;
else return false;
default:
return false;
}
}
/**
* GetSessionElement()
*
* @param string $item
* @return $result
*/
function GetSessionElement($item)
{
switch ($item) {
case 'id':
return base64_decode($_SESSION['userid']);
break;
case 'whois':
return base64_decode($_SESSION['userwhois']);
break;
case 'login':
return $_SESSION['userlogin'];
break;
case 'firstname':
if(isset($_SESSION['userfirstname']))
return $_SESSION['userfirstname'];
else return false;
break;
case 'right_theme':
return $_SESSION['userright']['theme'];
break;
case 'right_dashboard':
return $_SESSION['userright']['dashboard'];
break;
case 'right_workshop':
return $_SESSION['userright']['workshop'];
break;
case 'right_project':
return $_SESSION['userright']['project'];
break;
case 'right_publication':
return $_SESSION['userright']['publication'];
break;
case 'right_news':
return $_SESSION['userright']['news'];
break;
case 'right_yellowpages':
return $_SESSION['userright']['yellowpages'];
break;
case 'right_scale':
return $_SESSION['userright']['scale'];
break;
case 'right_level':
return $_SESSION['userright']['level'];
break;
case 'right_category_user':
return $_SESSION['userright']['category_user'];
break;
}
}
/**
* SetUserCookie()
* set les infos contenu en tableau PHP en cookie
*
* @param $table
* @return void
*/
function SetUserCookie($table)
{
$cookie_expires = $table['lifetime'];
while (list($key, $value) = @each($table)) {
setcookie('linea21[' . $key . ']', $value, $cookie_expires, '/');
}
}
/**
* DestroyUserCookie()
* Détruit les infos contenu en cookie
*
* @return void
*/
function DestroyUserCookie()
{
while (list($key, $val) = @each($_COOKIE['linea21'])) {
setcookie('linea21[' . $key . ']', '', (time() - 3600), '/');
}
}
/**
* UpdateCookiePassword()
* Mise à jour du mot de passe dans le cookie (cas de changement)
*
* @param $newpass
* @return void
*/
function UpdateCookiePassword($newpass)
{
$newpass = base64_encode($newpass);
setcookie('linea21[whois]', $newpass, $_COOKIE['linea21']['lifetime'], '/');
}
/**
* updateCookieWorkshop()
* Update workgroups list
*
* @return void
*/
function updateCookieWorkshop()
{
$str = base64_encode(retrieveWorkgroups());
setcookie('linea21[workshop]', $str, $_COOKIE['linea21']['lifetime'], '/');
}
/**
* isWorkgroupUser()
* check if the current user belongs to a workgroup
* used in PUBLIC app
* @param $workshop_id
* @return boolean
*/
function isWorkgroupUser($workshop_id)
{
include_once('../admin/'.SQL.'.inc.php');
// 1 -we check that login and password stored in cookie are corrects
$q = SQL_Get_UserInfo4Auth($_COOKIE['linea21']['login'], base64_decode($_COOKIE['linea21']['whois']));
$data = $GLOBALS['sql_object']->DBSelect($q);
if ($data != 0 && count($data) == 1 && $data[0]['user_id']==$_COOKIE['linea21']['id']) {
// 2 - if ok, we check that the user belongs to the given group
$r = $GLOBALS['sql_object']->DBSelect(SQL_Get_isWorkgroupUser($data[0]['user_id']));
for ($i = 0; $i < count($r); $i++) {
if ($workshop_id == $r[$i]['jwu_workshop_id']) {
return true;
}
}
}
return false;
}
/**
* isWorkgroupOrganiser()
* check if a given user is workgroup organiser
* used in ADMIN app
* @param $id_user
* @param $sql_object
* @param $id_workshop
* @return boolean
*/
function isWorkgroupOrganiser($id_user, $sql_object, $id_workshop)
{
$data = $sql_object->DBSelect(SQL_Get_isWorkgroupOrganiser($id_user));
for ($i = 0; $i < count($data); $i++) {
if ($id_workshop == $data[$i]['jwu_workshop_id'])
return true;
}
return false;
}
/**
* Set_Cookie_last_page()
* used for the admin/ part
*/
function Set_Cookie_last_page()
{
if(isset($_SESSION['authenticated'])) {
setcookie('linea21_lastpage', 'index.php?'.$_SERVER['QUERY_STRING'], (time() + 3600 * 720), '/');
setcookie('linea21_lastactivity', time(), (time() + 3600 * 720), '/');
}
}
/**
* Set_Cookie_last_connexion()
* used for the admin/ part
*/
function Set_Cookie_last_connexion()
{
setcookie('linea21_lastcon', time(), (time() + 3600 * 720), '/');
setcookie('linea21_lastuser', $_SESSION['login'], (time() + 3600 * 720), '/');
}
// Returns the real IP address of the user
function i2c_realip()
{
// No IP found (will be overwritten by for
// if any IP is found behind a firewall)
$ip = false;
// If HTTP_CLIENT_IP is set, then give it priority
if (!empty($_SERVER["HTTP_CLIENT_IP"])) {
$ip = $_SERVER["HTTP_CLIENT_IP"];
}
// User is behind a proxy and check that we discard RFC1918 IP addresses
// if they are behind a proxy then only figure out which IP belongs to the
// user. Might not need any more hackin if there is a squid reverse proxy
// infront of apache.
if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
// Put the IP's into an array which we shall work with shortly.
$ips = explode (", ", $_SERVER['HTTP_X_FORWARDED_FOR']);
if ($ip) {
array_unshift($ips, $ip);
$ip = false;
}
for ($i = 0; $i < count($ips); $i++) {
// Skip RFC 1918 IP's 10.0.0.0/8, 172.16.0.0/12 and
// 192.168.0.0/16 -- jim kill me later with my regexp pattern
// below.
if (!eregi ("^(10|172\.16|192\.168)\.", $ips[$i])) {
$ip = $ips[$i];
break;
}
}
}
// Return with the found IP or the remote address
return ($ip ? $ip : $_SERVER['REMOTE_ADDR']);
}
?>

Source for file functions_auth.php