source: trunk/user.php@ 428

Last change on this file since 428 was 428, checked in by chronos, 12 years ago
  • Přidáno: Stránka obecné správy dat.
  • Přidáno: Zobrazení seznamu položek se zobrazením s obsluhou dle typu položky.
  • Property svn:executable set to *
File size: 15.3 KB
Line 
1<?php
2
3define('LOGIN_USED', 'Přihlašovací jméno již použito.');
4define('NAME_USED', 'Jméno uživatele již použito');
5define('EMAIL_USED', 'Email je již použitý. Použijte jiný email nebo si můžete nechat zaslat nové heslo na email.');
6define('USER_REGISTRATED', 'Uživatel registrován. Na zadanou emailovou adresu byl poslán mail s odkazem pro aktivování účtu.');
7define('USER_REGISTRATION_CONFIRMED', 'Vaše registrace byla potvrzena.');
8define('DATA_MISSING', 'Chybí emailová adresa, přezdívka, nebo některé z hesel.');
9define('PASSWORDS_UNMATCHED', 'Hesla si neodpovídají.');
10define('ACCOUNT_LOCKED', 'Účet je uzamčen. Po registraci je nutné provést aktivaci účtu pomocí odkazu zaslaného v aktivačním emailu.');
11define('USER_NOT_LOGGED', 'Nejste přihlášen.');
12define('USER_LOGGED', 'Uživatel přihlášen.');
13define('USER_NOT_REGISTRED', 'Uživatel neregistrován.');
14define('USER_ALREADY_LOGGED', 'Uživatel již přihlášen.');
15define('USER_LOGGED_IN', 'Byl jste přihlášen.');
16define('USER_LOGGED_OUT', 'Byl jste odhlášen.');
17define('BAD_PASSWORD', 'Špatné heslo.');
18define('USER_NOT_FOUND', 'Uživatel nenalezen.');
19define('USER_PASSWORD_RECOVERY_SUCCESS', 'Přihlašovací údaje byly odeslány na zadanou emailovou adresu.');
20define('USER_PASSWORD_RECOVERY_FAIL', 'Podle zadaných údajů nebyl nalezen žádný uživatel.');
21define('USER_PASSWORD_RECOVERY_CONFIRMED', 'Nové heslo bylo aktivováno.');
22
23define('USER_EVENT_REGISTER', 1);
24define('USER_EVENT_LOGIN', 2);
25define('USER_EVENT_LOGOUT', 3);
26define('USER_EVENT_OPTIONS_CHANGED', 4);
27
28class User extends Module
29{
30 var $Dependencies = array('Log');
31 var $Roles = array();
32 var $User = array();
33 var $DefaultRole = 2;
34 var $AnonymousUserId = 98;
35 var $OnlineStateTimeout = 600; // in seconds
36 var $PermissionCache = array();
37 var $PermissionGroupCache = array();
38 var $PermissionGroupCacheOp = array();
39
40 function Check()
41 {
42 $SID = session_id();
43 // Lookup user record
44 $Query = $this->Database->select('UserOnline', '*', 'SessionId="'.$SID.'"');
45 if($Query->num_rows > 0)
46 {
47 // Refresh time of last access
48 $this->Database->update('UserOnline', 'SessionId="'.$SID.'"', array('ActivityTime' => 'NOW()'));
49 } else $this->Database->insert('UserOnline', array('SessionId' => $SID, 'User' => $this->AnonymousUserId, 'LoginTime' => 'NOW()', 'ActivityTime' => 'NOW()', 'IpAddress' => GetRemoteAddress(), 'HostName' => gethostbyaddr(GetRemoteAddress()), 'ScriptName' => $_SERVER['PHP_SELF']));
50 //echo($this->Database->LastQuery);
51
52 // Check login
53 $Query = $this->Database->select('UserOnline', '*', 'SessionId="'.$SID.'"');
54 $Row = $Query->fetch_assoc();
55 if($Row['User'] != $this->AnonymousUserId)
56 {
57 $Query = $this->Database->query('SELECT User.*, UserCustomerRel.Customer AS Member FROM User LEFT JOIN UserCustomerRel ON UserCustomerRel.User=User.Id WHERE User.Id='.$Row['User']);
58 $this->User = $Query->fetch_assoc();
59 $Result = USER_LOGGED;
60 } else
61 {
62 $Query = $this->Database->select('User', '*', 'Id='.$this->AnonymousUserId);
63 $this->User = $Query->fetch_assoc();
64 $Result = USER_NOT_LOGGED;
65 }
66
67 // Remove nonactive users
68 $DbResult = $this->Database->select('UserOnline', 'Id, User', 'ActivityTime < DATE_SUB(NOW(), INTERVAL '.$this->OnlineStateTimeout.' SECOND)');
69 while($DbRow = $DbResult->fetch_array())
70 {
71 $this->Database->delete('UserOnline', 'Id='.$DbRow['Id']);
72 if($DbRow['User'] != $this->AnonymousUserId) $this->System->Modules['Log']->NewRecord('User', 'Logout');
73 }
74 //$this->LoadPermission($this->User['Role']);
75
76 // Role and permission
77 //$this->LoadRoles();
78 }
79
80 function Register($Login, $Password, $Password2, $Email, $Name, $PhoneNumber, $ICQ)
81 {
82 global $Options, $Config;
83
84 if(($Email == '') || ($Login == '') || ($Password == '') || ($Password2 == '') || ($Name == '')) $Result = DATA_MISSING;
85 else if($Password != $Password2) $Result = PASSWORDS_UNMATCHED;
86 else
87 {
88 // Je uživatel registrován?
89 $Query = $this->Database->select('User', '*', 'Login = "'.$Login.'"');
90 if($Query->num_rows > 0) $Result = LOGIN_USED;
91 else
92 {
93 $Query = $this->Database->select('User', '*', 'Name = "'.$Name.'"');
94 if($Query->num_rows > 0) $Result = NAME_USED;
95 else
96 {
97 $Query = $this->Database->select('User', '*', 'Email = "'.$Email.'"');
98 if($Query->num_rows > 0) $Result = EMAIL_USED;
99 else
100 {
101 $this->Database->insert('User', array('Name' => $Name, 'Login' => $Login, 'Password' => sha1($Password), 'Email' => $Email, 'RegistrationTime' => 'NOW()', 'Locked' => 1, 'PhoneNumber' => $PhoneNumber, 'ICQ' => $ICQ));
102 $UserId = $this->Database->insert_id;
103 $this->Database->insert('PermissionUserAssignment', array('User' => $UserId, 'GroupOrOperation' => 2, 'Type' => 'Group'));
104
105 $Subject = FromUTF8('Registrace nového účtu', 'iso2');
106 $Message = 'Provedli jste registraci nového účtu na serveru <a href="http://'.$Config['Web']['Host'].$Config['Web']['RootFolder'].'">http://'.$Config['Web']['Host'].$Config['Web']['RootFolder']."</a>.<br>\nPokud jste tak neučinili, měli by jste tento email ignorovat.<br><br>\n\nVáš účet je: ".$Login."\n<br>Pro dokončení registrace klikněte na tento odkaz: ".'<a href="http://'.$Config['Web']['Host'].$Config['Web']['RootFolder'].'/?Action=UserRegisterConfirm&User='.$UserId.'&H='.sha1($Password).'">http://'.$Config['Web']['Host'].$Config['Web']['RootFolder'].'/?Action=UserRegisterConfirm&User='.$UserId.'&H='.sha1($Password).'</a>.'."\n<br> \n\n<br><br>Na tento email neodpovídejte.";
107 $AdditionalHeaders = "To: ".$Name." <".$Email.">\n"."From: ".FromUTF8($Config['Web']['Title'], 'iso2')." <noreplay@zdechov.net>\n"."MIME-Version: 1.0\n"."Content-type: text/html; charset=utf-8";
108 mail($Email, $Subject, $Message, $AdditionalHeaders);
109 $Result = USER_REGISTRATED;
110 $this->System->Modules['Log']->NewRecord('User', 'NewRegistration', $Login);
111 }
112 }
113 }
114 }
115 return($Result);
116 }
117
118 function RegisterConfirm($Id, $Hash)
119 {
120 $DbResult = $this->Database->select('User', 'Id, Login, Password', 'Id = '.$Id);
121 if($DbResult->num_rows > 0)
122 {
123 $Row = $DbResult->fetch_array();
124 if($Hash == $Row['Password'])
125 {
126 $this->Database->update('User', 'Id='.$Row['Id'], array('Locked' => 0));
127 $Output = USER_REGISTRATION_CONFIRMED;
128 $this->System->Modules['Log']->NewRecord('User', 'RegisterConfirm', 'Login='.$Row['Login'].', Id='.$Row['Id']);
129 } else $Output = PASSWORDS_UNMATCHED;
130 } else $Output = USER_NOT_FOUND;
131 return($Output);
132 }
133
134 function Login($Login, $Password)
135 {
136 $SID = session_id();
137 $Query = $this->Database->select('User', '*', 'Login="'.$Login.'"');
138 if($Query->num_rows > 0)
139 {
140 $Row = $Query->fetch_assoc();
141 if($Row['Password'] != sha1($Password)) $Result = BAD_PASSWORD;
142 else if($Row['Locked'] == 1) $Result = ACCOUNT_LOCKED;
143 else
144 {
145 $this->Database->update('User', 'Id='.$Row['Id'], array('LastLoginTime' => 'NOW()', 'LastIpAddress' => GetRemoteAddress()));
146 $this->Database->update('UserOnline', 'SessionId="'.$SID.'"', array('User' => $Row['Id']));
147 // načtení stavu stromu
148 $Result = USER_LOGGED_IN;
149 $this->System->Modules['Log']->NewRecord('User', 'Login', 'Login='.$Login.',Host='.gethostbyaddr(GetRemoteAddress()));
150 }
151 } else $Result = USER_NOT_REGISTRED;
152 $this->Check();
153 return($Result);
154 }
155
156 function Logout()
157 {
158 $SID = session_id();
159 $this->Database->update('UserOnline', 'SessionId="'.$SID.'"', array('User' => $this->AnonymousUserId));
160 $this->System->Modules['Log']->NewRecord('User', 'Logout', $this->User['Login']);
161 $this->Check();
162 return(USER_LOGGED_OUT);
163 }
164
165 function LoadRoles()
166 {
167 $this->Roles = array();
168 $DbResult = $this->Database->select('UserRole', '*');
169 while($DbRow = $DbResult->fetch_array())
170 $this->Roles[] = $DbRow;
171 }
172
173 function LoadPermission($Role)
174 {
175 $this->User['Permission'] = array();
176 $DbResult = $this->Database->query('SELECT `UserRolePermission`.*, `PermissionOperation`.`Description` FROM `UserRolePermission` JOIN `PermissionOperation` ON `PermissionOperation`.`Id` = `UserRolePermission`.`Operation` WHERE `UserRolePermission`.`Role` = '.$Role);
177 if($DbResult->num_rows > 0)
178 while($DbRow = $DbResult->fetch_array())
179 $this->User['Permission'][$DbRow['Operation']] = $DbRow;
180 }
181
182 function PermissionMatrix()
183 {
184 $Result = array();
185 $DbResult = $this->Database->query('SELECT `UserRolePermission`.*, `PermissionOperation`.`Description`, `UserRole`.`Title` FROM `UserRolePermission` LEFT JOIN `PermissionOperation` ON `PermissionOperation`.`Id` = `UserRolePermission`.`Operation` LEFT JOIN `UserRole` ON `UserRole`.`Id` = `UserRolePermission`.`Role`');
186 while($DbRow = $DbResult->fetch_array())
187 {
188 $Value = '';
189 if($DbRow['Read']) $Value .= 'R';
190 if($DbRow['Write']) $Value .= 'W';
191 $Result[$DbRow['Description']][$DbRow['Title']] = $Value;
192 }
193 return($Result);
194 }
195
196 function CheckGroupPermission($GroupId, $OperationId)
197 {
198 $PermissionExists = false;
199 // First try to check cache group-group relation
200 if(array_key_exists($GroupId, $this->PermissionGroupCache))
201 {
202 $PermissionExists = true;
203 } else
204 {
205 // If no permission combination exists in cache, do new check of database items
206 $DbResult = $this->Database->select('PermissionGroupAssignment', '*', '`Group`="'.$GroupId.'" AND `AssignedGroup` IS NOT NULL');
207 $DbRow = array();
208 while($DbRow[] = $DbResult->fetch_array());
209 $this->PermissionGroupCache[$GroupId] = $DbRow;
210 $PermissionExists = true;
211 }
212 if($PermissionExists)
213 {
214 foreach($this->PermissionGroupCache[$GroupId] as $DbRow)
215 {
216 if($DbRow['AssignedGroup'] != '')
217 if($this->CheckGroupPermission($DbRow['AssignedGroup'], $OperationId) == true) return(true);
218 }
219 }
220
221 // Check group-operation relation
222 if(array_key_exists($GroupId.','.$OperationId, $this->PermissionGroupCacheOp))
223 {
224 $PermissionExists = true;
225 } else
226 {
227 // If no permission combination exists in cache, do new check of database items
228 $DbResult = $this->Database->select('PermissionGroupAssignment', '*', '`Group`="'.$GroupId.'" AND `AssignedOperation`="'.$OperationId.'"');
229 if($DbResult->num_rows > 0) $this->PermissionGroupCacheOp[$GroupId.','.$OperationId] = true;
230 else $this->PermissionGroupCacheOp[$GroupId.','.$OperationId] = false;
231 $PermissionExists = true;
232 }
233 if($PermissionExists)
234 {
235 return($this->PermissionGroupCacheOp[$GroupId.','.$OperationId]);
236 }
237 return(false);
238 }
239
240 function CheckPermission($Module, $Operation, $ItemType = '', $ItemIndex = 0)
241 {
242 //echo('Check '.$Module.' '.$Operation.' '.$ItemType.' '.$ItemIndex);
243 //
244 // First try to check cache
245 if(in_array(array($Module, $Operation, $ItemType, $ItemType), $this->PermissionCache))
246 {
247 $OperationId = array_search(array($Module, $Operation, $ItemType, $ItemIndex), $this->PermissionCache);
248 $PermissionExists = is_numeric($OperationId);
249 } else
250 {
251 // If no permission combination exists in cache, do new check of database items
252 $DbResult = $this->Database->select('PermissionOperation', 'Id', '`Module`="'.$Module.'" AND `Item`="'.$ItemType.'" AND `ItemId`='.$ItemIndex.' AND `Operation`="'.$Operation.'"');
253 if($DbResult->num_rows > 0)
254 {
255 $DbRow = $DbResult->fetch_array();
256 $OperationId = $DbRow['Id'];
257 $this->PermissionCache[$DbRow['Id']] = array($Module, $Operation, $ItemType, $ItemIndex);
258 $PermissionExists = true;
259 } else
260 {
261 $this->PermissionCache[count($this->PermissionCache).'_'] = array($Module, $Operation, $ItemType, $ItemIndex);
262 $PermissionExists = false;
263 }
264 }
265
266 if($PermissionExists)
267 {
268 // Check user-operation relation
269 $DbResult = $this->Database->select('PermissionUserAssignment', '*', '`User`="'.$this->User['Id'].'" AND `AssignedOperation`="'.$OperationId.'"');
270 if($DbResult->num_rows > 0) return(true);
271
272 // Check user-group relation
273 $DbResult = $this->Database->select('PermissionUserAssignment', 'AssignedGroup', '`User`="'.$this->User['Id'].'"');
274 while($DbRow = $DbResult->fetch_array())
275 {
276 if($this->CheckGroupPermission($DbRow['AssignedGroup'], $OperationId) == true) return(true);
277 }
278 return(false);
279 } else return(false);
280 }
281
282 function PasswordRecoveryRequest($Login, $Email)
283 {
284 global $Config;
285
286 $DbResult = $this->Database->select('User', 'Name, Id, Email, Password', '`Login`="'.$Login.'" AND `Email`="'.$Email.'"');
287 if($DbResult->num_rows > 0)
288 {
289 $Row = $DbResult->fetch_array();
290 $NewPassword = substr(sha1(strtoupper($Row['Login'])), 0, 7);
291
292 $Subject = 'Obnova hesla';
293 $Message = 'Požádali jste o zaslání nového hesla na serveru <a href="http://'.$Config['Web']['Host'].$Config['Web']['RootFolder'].'">http://'.$Config['Web']['Host'].$Config['Web']['RootFolder']."</a>.<br />\nPokud jste tak neučinili, měli by jste tento email ignorovat.<br /><br />\n\nVaše nové heslo k účtu ".$Row['Login']." je: ".$NewPassword."\n<br>Pro aktivaci tohoto hesla klikněte na ".'<a href="http://'.$Config['Web']['Host'].$Config['Web']['RootFolder'].'/?Action=PasswordRecoveryConfirm&User='.$Row['Id'].'&H='.$Row['Password'].'&P='.$NewPassword.'">tento odkaz</a>.'."\n<br /> Po přihlášení si prosím změňte heslo na nové.\n\n<br><br>Na tento email neodpovídejte.";
294 $AdditionalHeaders = "To: ".$Row['Name']." <".$Row['Email'].">\n"."From: ".FromUTF8($Config['Web']['Title'], 'iso2')." <noreplay@zdechov.net>\n"."MIME-Version: 1.0\n"."Content-type: text/html; charset=utf-8";
295 mail($Row['Email'], $Subject, $Message, $AdditionalHeaders);
296 $Output = USER_PASSWORD_RECOVERY_SUCCESS;
297 $this->System->Modules['Log']->NewRecord('User', 'PasswordRecoveryRequest', 'Login='.$Login.',Email='.$Email);
298 } else $Output = USER_PASSWORD_RECOVERY_FAIL;
299 return($Output);
300 }
301
302 function PasswordRecoveryConfirm($Id, $Hash, $NewPassword)
303 {
304 $DbResult = $this->Database->select('User', 'Id, Login, Password', 'Id = '.$Id);
305 if($DbResult->num_rows > 0)
306 {
307 $Row = $DbResult->fetch_array();
308 $NewPassword2 = substr(sha1(strtoupper($Row['Login'])), 0, 7);
309 if(($NewPassword == $NewPassword2) and ($Hash == $Row['Password']))
310 {
311 $this->Database->update('User', 'Id='.$Row['Id'], array('Password' => sha1($NewPassword), 'Locked' => 0));
312 $Output = USER_PASSWORD_RECOVERY_CONFIRMED;
313 $this->System->Modules['Log']->NewRecord('User', 'PasswordRecoveryConfirm', 'Login='.$Row['Login']);
314 } else $Output = PASSWORDS_UNMATCHED;
315 } else $Output = USER_NOT_FOUND;
316 return($Output);
317 }
318}
319
320?>
Note: See TracBrowser for help on using the repository browser.