HB/includes/onyx/session.class.php

122 lines
2.6 KiB
PHP

<?php
class session {
var $xid;
var $level = 0;
var $values;
function clean()
{
global $config;
if($config['session']=='1')
{
$db = new bdd();
$db->connexion();
$db->db();
$db->control($config['db_prefix']."sessions");
$time = time()-$config['session_time'];
$table = $config['db_prefix']."sessions";
$db->query("DELETE FROM $table WHERE time < $time AND active = '1'");
$db->deconnexion();
}
}
function new_cookie()
{
global $config;
if($config['session']=='1')
{
$db = new bdd();
$db->connexion();
$db->db();
$time = time();
$xid = random();
$sess_cookie = random();
$ip = encode_ip();
$table = $config['db_prefix']."sessions";
$db->query("INSERT INTO $table(xid,session,time,ip,var_session,level,hash,active) VALUES('$xid','$sess_cookie','$time','$ip','','1','','0') ");
$db->hash($table,"xid = '$xid'");
$this->xid = $xid;
cookie($config['session_name'],$sess_cookie);
$db->deconnexion();
}
}
function load()
{
$this->clean();
global $config;
if($config['session']=='1')
{
if($cookie = gpc($config['session_name'],'cookie'))
{
$db = new bdd();
$db->connexion();
$db->db();
$db->escape($cookie);
$table = $config['db_prefix']."sessions";
$query = $db->unique_query("SELECT * FROM $table WHERE session='$cookie' AND active='1'");
if($db->num_rows == 1 && $query['ip'] == encode_ip())
{
$time = time();
$xid = $query['xid'];
$db->query("UPDATE $table SET time='$time' WHERE xid='$xid'");
$this->xid = $xid;
$this->level = $query['level'];
$this->values = unserialize($query['var_session']);
cookie($config['session_name'],gpc($config['session_name'],'cookie'));
}
else $this->new_cookie();
$db->deconnexion();
}
else $this->new_cookie();
}
}
function put()
{
global $config;
if($config['session']=='1')
{
$db = new bdd();
$db->connexion();
$db->db();
$time = time();
$var_session = serialize($this->values);
$db->escape($var_session);
$xid = $this->xid;
$table = $config['db_prefix']."sessions";
$db->query("UPDATE $table SET time='$time', var_session='$var_session' WHERE xid='$xid'");
$db->hash($table,"xid = '$xid'");
$db->deconnexion();
}
}
}
?>