in-portal
No OneTemporary
Actions

Subscribers

None

File Metadata

Created: Mon, Aug 25, 1:34 PM

in-portal
View Options

	Index: branches/unlabeled/unlabeled-1.68.2/core/units/users/users_event_handler.php
	===================================================================
	--- branches/unlabeled/unlabeled-1.68.2/core/units/users/users_event_handler.php (revision 7091)
	+++ branches/unlabeled/unlabeled-1.68.2/core/units/users/users_event_handler.php (revision 7092)
	@@ -1,1094 +1,1094 @@
	<?php

	class UsersEventHandler extends kDBEventHandler
	{
	/**
	* Allows to override standart permission mapping
	*
	*/
	function mapPermissions()
	{
	parent::mapPermissions();
	$permissions = Array(
	// admin
	'OnSetPersistantVariable' => Array('self' => 'view'), // because setting to logged in user only
	'OnUpdateRootPassword' => Array('self' => true), // because setting to logged in user only

	// front
	'OnRefreshForm' => Array('self' => true),

	'OnForgotPassword' => Array('self' => true),
	'OnResetPassword' => Array('self' => true),
	'OnResetPasswordConfirmed' => Array('self' => true),

	'OnSubscribeQuery' => Array('self' => true),
	'OnSubscribeUser' => Array('self' => true),

	'OnRecommend' => Array('self' => true),
	);
	$this->permMapping = array_merge($this->permMapping, $permissions);
	}

	/**
	* Checks permissions of user
	*
	* @param kEvent $event
	*/
	function CheckPermission(&$event)
	{
	if ($event->Name == 'OnLogin' \|\| $event->Name == 'OnLogout') {
	// permission is checked in OnLogin event directly
	return true;
	}

	if (!$this->Application->IsAdmin()) {
	$user_id = $this->Application->RecallVar('user_id');
	$items_info = $this->Application->GetVar($event->getPrefixSpecial(true));

	if ($event->Name == 'OnCreate' && $user_id == -2) {
	// "Guest" can create new users
	return true;
	}

	if ($event->Name == 'OnUpdate' && $user_id > 0) {
	$user_dummy =& $this->Application->recallObject($event->Prefix.'.-item', null, Array('skip_autoload' => true));
	foreach ($items_info as $id => $field_values) {
	if ($id != $user_id) {
	// registered users can update their record only
	return false;
	}

	$user_dummy->Load($id);
	$status_field = array_shift($this->Application->getUnitOption($event->Prefix, 'StatusField'));

	if ($user_dummy->GetDBField($status_field) != STATUS_ACTIVE) {
	// not active user is not allowed to update his record (he could not activate himself manually)
	return false;
	}

	if (isset($field_values[$status_field]) && $user_dummy->GetDBField($status_field) != $field_values[$status_field]) {
	// user can't change status by himself
	return false;
	}
	}
	return true;
	}

	if ($event->Name == 'OnUpdate' && $user_id <= 0) {
	// guests are not allowed to update their record, because they don't have it :)
	return false;
	}
	}

	return parent::CheckPermission($event);
	}

	function OnSessionExpire()
	{
	if( $this->Application->IsAdmin() ) {
	$this->Application->Redirect('index', Array('expired' => 1), '', 'index.php');
	}
	else {
	$http_query =& $this->Application->recallObject('HTTPQuery');
	$get = $http_query->getRedirectParams();

	$t = $this->Application->GetVar('t');
	$get['js_redirect'] = $this->Application->ConfigValue('UseJSRedirect');
	$this->Application->Redirect($t ? $t : 'index', $get);
	}
	}

	/**
	* Checks user data and logs it in if allowed
	*
	* @param kEvent $event
	*/
	function OnLogin(&$event)
	{
	// persistent session data after login is not refreshed, because redirect will follow in any case
	$prefix_special = $this->Application->IsAdmin() ? 'u.current' : 'u'; // "u" used on front not to change theme
	$object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));
	$password = $this->Application->GetVar('password');
	if(!$password)
	{
	$object->SetError('ValidateLogin', 'blank_password', 'lu_blank_password');
	$event->status = erFAIL;
	return false;
	}

	$email_as_login = $this->Application->ConfigValue('Email_As_Login');
	list($login_field, $submit_field) = $email_as_login && !$this->Application->IsAdmin() ? Array('Email', 'email') : Array('Login', 'login');
	$login_value = $this->Application->GetVar($submit_field);

	// process "Save Username" checkbox
	$save_username = $this->Application->GetVar('cb_save_username') ? $login_value : '';
	- setcookie('save_username', $save_username);
	+ $this->Application->Session->SetCookie('save_username', $save_username, adodb_mktime() + 31104000); // 1 year expiration
	$this->Application->SetVar('save_username', $save_username); // cookie will be set on next refresh, but refresh won't occur if login error present, so duplicate cookie in HTTPQuery

	if ($this->Application->IsAdmin() && ($login_value == 'root')) {
	// logging in "root" (admin only)
	$root_password = $this->Application->ConfigValue('RootPass');
	$password_formatter =& $this->Application->recallObject('kPasswordFormatter');
	$test = $password_formatter->EncryptPassword($password, 'b38');
	if ($root_password != $test) {
	$object->SetError('ValidateLogin', 'invalid_password', 'lu_invalid_password');
	$event->status = erFAIL;
	return false;
	}
	elseif ($this->checkLoginPermission($login_value)) {
	$user_id = -1;
	$object->Load($user_id);
	$object->SetDBField('Login', $login_value);

	$session =& $this->Application->recallObject('Session');
	$session->SetField('PortalUserId', $user_id);
	// $session->SetField('GroupList', implode(',', $groups) );
	$this->Application->SetVar('u.current_id', $user_id);
	$this->Application->StoreVar('user_id', $user_id);

	$this->processLoginRedirect($event, $password);
	return true;
	}
	else {
	$object->SetError('ValidateLogin', 'invalid_license', 'la_invalid_license');
	$event->status = erFAIL;
	return false;
	}
	}

	/*$sql = 'SELECT PortalUserId FROM '.$object->TableName.' WHERE (%s = %s) AND (Password = MD5(%s))';
	$user_id = $this->Conn->GetOne( sprintf($sql, $login_field, $this->Conn->qstr($login_value), $this->Conn->qstr($password) ) );*/

	$sql = 'SELECT PortalUserId FROM '.$object->TableName.' WHERE (Email = %1$s OR Login = %1$s) AND (Password = MD5(%2$s))';
	$user_id = $this->Conn->GetOne( sprintf($sql, $this->Conn->qstr($login_value), $this->Conn->qstr($password) ) );

	if ($user_id) {
	$object->Load($user_id);
	if ($object->GetDBField('Status') == STATUS_ACTIVE) {
	$groups = $object->getMembershipGroups(true);
	if(!$groups) $groups = Array();
	array_push($groups, $this->Application->ConfigValue('User_LoggedInGroup') );
	$this->Application->StoreVar( 'UserGroups', implode(',', $groups) );

	if ($this->checkLoginPermission($login_value)) {
	$session =& $this->Application->recallObject('Session');
	$session->SetField('PortalUserId', $user_id);
	$session->SetField('GroupList', implode(',', $groups) );
	$this->Application->SetVar('u.current_id', $user_id);
	$this->Application->StoreVar('user_id', $user_id);

	$this_login = (int)$object->getPersistantVar('ThisLogin');
	$object->setPersistantVar('LastLogin', $this_login);
	$object->setPersistantVar('ThisLogin', adodb_mktime());
	}
	else {
	$object->Load(-2);
	$object->SetError('ValidateLogin', 'no_permission', 'lu_no_permissions');
	$event->status = erFAIL;
	}

	$this->processLoginRedirect($event, $password);
	}
	else {
	$event->redirect = $this->Application->GetVar('pending_disabled_template');
	}
	}
	else
	{
	$object->SetID(-2);
	$object->SetError('ValidateLogin', 'invalid_password', 'lu_invalid_password');
	$event->status = erFAIL;
	}

	$event->SetRedirectParam('pass', 'm');
	}

	/**
	* Enter description here...
	*
	* @param string $user_name
	* @return bool
	*/
	function checkLoginPermission($user_name)
	{
	$ret = true;
	if ($this->Application->IsAdmin()) {
	$modules_helper =& $this->Application->recallObject('ModulesHelper');
	if ($user_name != 'root') {
	// root is virtual user, so allow him to login to admin in any case
	$ret = $this->Application->CheckPermission('ADMIN', 1);
	}
	$ret = $ret && $modules_helper->checkLogin();
	}
	else {
	$ret = $this->Application->CheckPermission('LOGIN', 1);
	}
	return $ret;
	}

	/**
	* Process all required data and redirect logged-in user
	*
	* @param kEvent $event
	*/
	function processLoginRedirect(&$event, $password)
	{
	$prefix_special = $this->Application->IsAdmin() ? 'u.current' : 'u'; // "u" used on front not to change theme
	$object =& $this->Application->recallObject($prefix_special, null, Array('skip_autoload' => true));

	$next_template = $this->Application->GetVar('next_template');
	if ($next_template == '_ses_redirect') {
	$location = $this->Application->BaseURL().$this->Application->RecallVar($next_template);
	if( $this->Application->isDebugMode() && constOn('DBG_REDIRECT') )
	{
	$this->Application->Debugger->appendTrace();
	echo "<b>Debug output above!!!</b> Proceed to redirect: <a href=\"$location\">$location</a><br>";
	}
	else {
	header('Location: '.$location);
	}

	$session =& $this->Application->recallObject('Session');
	$session->SaveData();
	exit;
	}

	if ($next_template) {
	$event->redirect = $next_template;
	}

	if ($this->Application->ConfigValue('UseJSRedirect')) {
	$event->SetRedirectParam('js_redirect', 1);
	}

	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LoginUser', $object->GetDBField('Login'), $password);
	}

	/**
	* Called when user logs in using old in-portal
	*
	* @param kEvent $event
	*/
	function OnInpLogin(&$event)
	{
	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LoginUser', $event->getEventParam('user'), $event->getEventParam('pass') );

	if ($event->redirect && is_string($event->redirect)) {
	// some real template specified instead of true
	$this->Application->Redirect($event->redirect, $event->redirect_params);
	}
	}

	/**
	* Called when user logs in using old in-portal
	*
	* @param kEvent $event
	*/
	function OnInpLogout(&$event)
	{
	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LogoutUser');
	}

	function OnLogout(&$event)
	{
	$sync_manager =& $this->Application->recallObjectP('UsersSyncronizeManager', null, Array(), 'InPortalSyncronize');
	$sync_manager->performAction('LogoutUser');

	$session =& $this->Application->recallObject('Session');
	$session->SetField('PortalUserId', -2);
	$this->Application->SetVar('u.current_id', -2);
	$this->Application->StoreVar('user_id', -2);
	$object =& $this->Application->recallObject('u.current', null, Array('skip_autoload' => true));
	$object->Load(-2);

	$this->Application->DestroySession();

	$group_list = $this->Application->ConfigValue('User_GuestGroup').','.$this->Application->ConfigValue('User_LoggedInGroup');
	$session->SetField('GroupList', $group_list);
	$this->Application->StoreVar('UserGroups', $group_list);

	if ($this->Application->ConfigValue('UseJSRedirect')) {
	$event->SetRedirectParam('js_redirect', 1);
	}

	$event->SetRedirectParam('pass', 'm');
	}

	/**
	* Prefill states dropdown with correct values
	*
	* @param kEvent $event
	* @access public
	*/
	function OnPrepareStates(&$event)
	{
	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	$cs_helper->PopulateStates($event, 'State', 'Country');

	$object =& $event->getObject();

	if( $object->isRequired('Country') && $cs_helper->CountryHasStates( $object->GetDBField('Country') ) ) $object->setRequired('State', true);
	$object->setLogin();
	}

	/**
	* Redirects user after succesfull registration to confirmation template (on Front only)
	*
	* @param kEvent $event
	*/
	function OnAfterItemCreate(&$event)
	{
	$is_subscriber = $this->Application->GetVar('IsSubscriber');
	if(!$is_subscriber)
	{
	$object =& $event->getObject();

	$ug_table = TABLE_PREFIX.'UserGroup';
	if ($object->mode == 't') {
	$ug_table = $this->Application->GetTempName($ug_table, 'prefix:'.$event->Prefix);
	}

	$sql = 'UPDATE '.$ug_table.'
	SET PrimaryGroup = 0
	WHERE PortalUserId = '.$object->GetDBField('PortalUserId');
	$this->Conn->Query($sql);

	$group_id = $this->Application->ConfigValue('User_NewGroup');

	$sql = 'REPLACE INTO '.$ug_table.'(PortalUserId,GroupId,PrimaryGroup) VALUES (%s,%s,1)';
	$this->Conn->Query( sprintf($sql, $object->GetID(), $group_id) );
	}
	}

	/**
	* Login user if possible, if not then redirect to corresponding template
	*
	* @param kEvent $event
	*/
	function autoLoginUser(&$event)
	{
	$object =& $event->getObject();
	$this->Application->SetVar('u.current_id', $object->GetID() );

	if($object->GetDBField('Status') == STATUS_ACTIVE && !$this->Application->ConfigValue('User_Password_Auto'))
	{
	$email_as_login = $this->Application->ConfigValue('Email_As_Login');
	list($login_field, $submit_field) = $email_as_login ? Array('Email', 'email') : Array('Login', 'login');

	$this->Application->SetVar($submit_field, $object->GetDBField($login_field) );
	$this->Application->SetVar('password', $object->GetDBField('Password_plain') );

	$event->CallSubEvent('OnLogin');
	}
	}


	/**
	* When creating user & user with such email exists then force to use OnUpdate insted of ?
	*
	* @param kEvent $event
	*/
	function OnSubstituteSubscriber(&$event)
	{
	$ret = false;
	$object =& $event->getObject( Array('skip_autoload' => true) );
	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
	if($items_info)
	{
	list($id, $field_values) = each($items_info);
	$user_email = $field_values['Email'];
	if($user_email)
	{
	// check if is subscriber
	$verify_user =& $this->Application->recallObject('u.verify', null, Array('skup_autoload' => true) );
	$verify_user->Load($user_email, 'Email');
	if( $verify_user->isLoaded() && $verify_user->isSubscriberOnly() )
	{
	$items_info = Array( $verify_user->GetDBField('PortalUserId') => $field_values );
	$this->Application->SetVar($event->getPrefixSpecial(true), $items_info);
	$ret = true;
	}
	}
	}

	if( isset($event->MasterEvent) )
	{
	$event->MasterEvent->setEventParam('is_subscriber_only', $ret);
	}
	else
	{
	$event->setEventParam('is_subscriber_only', $ret);
	}
	}


	/**
	* Enter description here...
	*
	* @param kEvent $event
	* @return bool
	*/
	function isSubscriberOnly(&$event)
	{
	$event->CallSubEvent('OnSubstituteSubscriber');
	$is_subscriber = false;
	if( $event->getEventParam('is_subscriber_only') )
	{
	$is_subscriber = true;
	$object =& $event->getObject( Array('skip_autoload' => true) );
	$this->OnUpdate($event);
	if($event->status == erSUCCESS)
	{
	$this->OnAfterItemCreate($event);
	$object->SendEmailEvents();
	if( !$this->Application->IsAdmin() && ($event->status == erSUCCESS) && $event->redirect) $this->autoLoginUser($event);
	}
	}
	return $is_subscriber;
	}

	/**
	* Creates new user
	*
	* @param kEvent $event
	*/
	function OnCreate(&$event)
	{
	if( !$this->Application->IsAdmin() ) $this->setUserStatus($event);

	if( !$this->isSubscriberOnly($event) )
	{
	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	$cs_helper->CheckStateField($event, 'State', 'Country');

	$object =& $event->getObject( Array('skip_autoload' => true) );
	if ($this->Application->ConfigValue('User_Password_Auto')) {
	$pass = makepassword4(rand(5,8));
	$object->SetField('Password', $pass);
	$object->SetField('VerifyPassword', $pass);
	$this->Application->SetVar('user_password',$pass);
	}
	parent::OnCreate($event);


	$this->Application->SetVar('u.current_id', $object->getID() ); // for affil:OnRegisterAffiliate after hook

	$this->setNextTemplate($event);

	if( !$this->Application->IsAdmin() && ($event->status == erSUCCESS) && $event->redirect)
	{
	$object->SendEmailEvents();
	$this->autoLoginUser($event);
	}
	}
	}

	/**
	* Set's new user status based on config options
	*
	* @param kEvent $event
	*/
	function setUserStatus(&$event)
	{
	$object =& $event->getObject( Array('skip_autoload' => true) );

	$new_users_allowed = $this->Application->ConfigValue('User_Allow_New');
	// 1 - Instant, 2 - Not Allowed, 3 - Pending

	switch ($new_users_allowed)
	{
	case 1: // Instant
	$object->SetDBField('Status', 1);
	$next_template = $this->Application->GetVar('registration_confirm_template');
	if($next_template) $event->redirect = $next_template;
	break;

	case 3: // Pending
	$next_template = $this->Application->GetVar('registration_confirm_pending_template');
	if($next_template) $event->redirect = $next_template;
	$object->SetDBField('Status', 2);
	break;

	case 2: // Not Allowed
	$object->SetDBField('Status', 0);
	break;
	}

	/*if ($object->GetDBField('PaidMember') == 1) {
	$this->Application->HandleEvent($add_to_cart, 'ord:OnAddToCart');
	$event->redirect = 'in-commerce/checkout/shop_cart';
	} */

	}




	/**
	* Set's new unique resource id to user
	*
	* @param kEvent $event
	*/
	function OnBeforeItemCreate(&$event)
	{
	$email_as_login = $this->Application->ConfigValue('Email_As_Login');
	$object =& $event->getObject();
	if ($email_as_login) {
	$object->Fields['Email']['error_msgs']['unique'] = $this->Application->Phrase('lu_user_and_email_already_exist');
	}

	}

	/**
	* Set's new unique resource id to user
	*
	* @param kEvent $event
	*/
	function OnAfterItemValidate(&$event)
	{
	$object =& $event->getObject();
	$resource_id = $object->GetDBField('ResourceId');
	if (!$resource_id)
	{
	$object->SetDBField('ResourceId', $this->Application->NextResourceId() );
	}
	}


	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnRecommend(&$event){

	$friend_email = $this->Application->GetVar('friend_email');
	$friend_name = $this->Application->GetVar('friend_email');

	// used for error reporting only -> rewrite code + theme (by Alex)
	$object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too

	if (preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $friend_email))
	{
	$send_params = array();
	$send_params['to_email']=$friend_email;
	$send_params['to_name']=$friend_name;

	$user_id = $this->Application->RecallVar('user_id');
	$email_event = &$this->Application->EmailEventUser('SITE.SUGGEST', $user_id, $send_params);

	if ($email_event->status == erSUCCESS){
	$event->redirect_params = array('opener' => 's', 'pass' => 'all');
	$event->redirect = $this->Application->GetVar('template_success');
	}
	else {
	// $event->redirect_params = array('opener' => 's', 'pass' => 'all');
	// $event->redirect = $this->Application->GetVar('template_fail');

	$object->ErrorMsgs['send_error'] = $this->Application->Phrase('lu_email_send_error');
	$object->FieldErrors['Email']['pseudo'] = 'send_error';
	$event->status = erFAIL;
	}
	}
	else {
	$object->ErrorMsgs['invalid_email'] = $this->Application->Phrase('lu_InvalidEmail');
	$object->FieldErrors['Email']['pseudo'] = 'invalid_email';
	$event->status = erFAIL;
	}
	}

	/**
	* Saves address changes and mades no redirect
	*
	* @param kEvent $event
	*/
	function OnUpdateAddress(&$event)
	{
	$object =& $event->getObject( Array('skip_autoload' => true) );

	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
	if($items_info)
	{
	list($id,$field_values) = each($items_info);
	if($id > 0) $object->Load($id);
	$object->SetFieldsFromHash($field_values);
	$object->setID($id);
	$object->Validate();
	}

	$event->redirect = false;
	}

	function OnSubscribeQuery(&$event)
	{
	$user_email = $this->Application->GetVar('subscriber_email');
	if ( preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $user_email) ){

	$object = &$this->Application->recallObject($this->Prefix.'.subscriber', null, Array('skip_autoload' => true));

	$this->Application->StoreVar('SubscriberEmail', $user_email);

	if( $object->Load(array('Email'=>$user_email)) ){
	$group_info = $this->GetGroupInfo($object->GetID());
	$event->redirect = $this->Application->GetVar($group_info ? 'unsubscribe_template' : 'subscribe_template');
	}
	else {
	$event->redirect = $this->Application->GetVar('subscribe_template');
	$this->Application->StoreVar('SubscriberEmail', $user_email);
	}
	}
	else {
	// used for error reporting only -> rewrite code + theme (by Alex)
	$object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too
	$object->ErrorMsgs['invalid_email'] = $this->Application->Phrase('lu_InvalidEmail');
	$object->FieldErrors['SubscribeEmail']['pseudo'] = 'invalid_email';
	$event->status = erFAIL;
	}
	//subscribe_query_ok_template
	}

	function OnSubscribeUser(&$event){

	$object = &$this->Application->recallObject($this->Prefix.'.subscriber', null, Array('skip_autoload' => true));

	$user_email = $this->Application->RecallVar('SubscriberEmail');

	if (preg_match("/^[_a-zA-Z0-9-\.]+@[a-zA-Z0-9-\.]+\.[a-z]{2,4}$/", $user_email)){

	if($object->Load(array('Email'=>$user_email))){

	$group_info = $this->GetGroupInfo($object->GetID());

	if ($group_info){
	if ($event->getEventParam('no_unsubscribe')) return;

	if ($group_info['PrimaryGroup']){
	// delete user
	$object->Delete();
	}
	else {
	$this->RemoveSubscriberGroup($object->GetID());
	}

	$event->redirect = $this->Application->GetVar('unsubscribe_ok_template');

	}
	else {
	$this->AddSubscriberGroup($object->GetID(), 0);
	$event->redirect = $this->Application->GetVar('subscribe_ok_template');
	}


	}
	else {

	$object->SetField('Email', $user_email);
	$object->SetField('Login', $user_email);
	$object->SetDBField('dob', 1);
	$object->SetDBField('dob_date', 1);
	$object->SetDBField('dob_time', 1);
	$ip = getenv('HTTP_X_FORWARDED_FOR')?getenv('HTTP_X_FORWARDED_FOR'):getenv('REMOTE_ADDR');
	$object->SetDBField('ip', $ip);

	$this->Application->SetVar('IsSubscriber', 1);

	if ($object->Create()) {

	$this->AddSubscriberGroup($object->GetID(), 1);
	$event->redirect = $this->Application->GetVar('subscribe_ok_template');
	}

	$this->Application->SetVar('IsSubscriber', 0);
	}
	}
	else {
	// error handling here
	$event->redirect = $this->Application->GetVar('subscribe_fail_template');
	}


	}

	function AddSubscriberGroup($user_id, $is_primary){

	$group_id = $this->Application->ConfigValue('User_SubscriberGroup');
	$sql = 'INSERT INTO '.TABLE_PREFIX.'UserGroup(PortalUserId,GroupId,PrimaryGroup) VALUES (%s,%s,'.$is_primary.')';
	$this->Conn->Query( sprintf($sql, $user_id, $group_id) );
	$this->Application->EmailEventAdmin('USER.SUBSCRIBE', $user_id);
	$this->Application->EmailEventUser('USER.SUBSCRIBE', $user_id);

	}

	function RemoveSubscriberGroup($user_id){

	$group_id = $this->Application->ConfigValue('User_SubscriberGroup');
	$sql = 'DELETE FROM '.TABLE_PREFIX.'UserGroup WHERE PortalUserId='.$user_id.' AND GroupId='.$this->Application->ConfigValue('User_SubscriberGroup');
	$this->Conn->Query($sql);
	$this->Application->EmailEventAdmin('USER.UNSUBSCRIBE', $user_id);
	$this->Application->EmailEventUser('USER.UNSUBSCRIBE', $user_id);

	}

	function GetGroupInfo($user_id){

	$group_info = $this->Conn->GetRow('SELECT * FROM '.TABLE_PREFIX.'UserGroup
	WHERE PortalUserId='.$user_id.'
	AND GroupId='.$this->Application->ConfigValue('User_SubscriberGroup'));
	return $group_info;

	}

	function OnForgotPassword(&$event)
	{
	$user_object = &$this->Application->recallObject('u.forgot', null, Array('skip_autoload' => true));

	// used for error reporting only -> rewrite code + theme (by Alex)
	$user_current_object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true)); // TODO: change theme too

	$username = $this->Application->GetVar('username');
	$email = $this->Application->GetVar('email');
	$found = false;
	$allow_reset = true;

	if( strlen($username) )
	{
	if( $user_object->Load(array('Login'=>$username)) )
	$found = ($user_object->GetDBField("Login")==$username && $user_object->GetDBField("Status")==1) && strlen($user_object->GetDBField("Password"));
	}
	else if( strlen($email) )
	{
	if( $user_object->Load(array('Email'=>$email)) )
	$found = ($user_object->GetDBField("Email")==$email && $user_object->GetDBField("Status")==1) && strlen($user_object->GetDBField("Password"));
	}

	if( $user_object->isLoaded() )
	{
	$PwResetConfirm = $user_object->GetDBField('PwResetConfirm');
	$PwRequestTime = $user_object->GetDBField('PwRequestTime');
	$PassResetTime = $user_object->GetDBField('PassResetTime');
	//$MinPwResetDelay = $user_object->GetDBField('MinPwResetDelay');
	$MinPwResetDelay = $this->Application->ConfigValue('Users_AllowReset');

	$allow_reset = (strlen($PwResetConfirm) ?
	adodb_mktime() > $PwRequestTime + $MinPwResetDelay :
	adodb_mktime() > $PassResetTime + $MinPwResetDelay);
	}

	if($found && $allow_reset)
	{
	$this->Application->StoreVar('tmp_user_id', $user_object->GetDBField("PortalUserId"));
	$this->Application->StoreVar('tmp_email', $user_object->GetDBField("Email"));
	$this->Application->EmailEventUser('INCOMMERCEUSER.PSWDC', $user_object->GetDBField("PortalUserId"));

	$event->redirect = $this->Application->GetVar('template_success');
	}
	else
	{
	if(!strlen($username) && !strlen($email))
	{
	$user_current_object->ErrorMsgs['forgotpw_nodata'] = $this->Application->Phrase('lu_ferror_forgotpw_nodata');
	$user_current_object->FieldErrors['Login']['pseudo'] = 'forgotpw_nodata';
	$user_current_object->FieldErrors['Email']['pseudo'] = 'forgotpw_nodata';
	}
	else
	{
	if($allow_reset)
	{
	if( strlen($username) ){
	$user_current_object->ErrorMsgs['unknown_username'] = $this->Application->Phrase('lu_ferror_unknown_username');
	$user_current_object->FieldErrors['Login']['pseudo']='unknown_username';
	}
	if( strlen($email) ){
	$user_current_object->ErrorMsgs['unknown_email'] = $this->Application->Phrase('lu_ferror_unknown_email');
	$user_current_object->FieldErrors['Email']['pseudo']='unknown_email';
	}
	}
	else
	{
	$user_current_object->ErrorMsgs['reset_denied'] = $this->Application->Phrase('lu_ferror_reset_denied');
	if( strlen($username) ){
	$user_current_object->FieldErrors['Login']['pseudo']='reset_denied';
	}
	if( strlen($email) ){
	$user_current_object->FieldErrors['Email']['pseudo']='reset_denied';
	}
	}
	}

	if($user_current_object->FieldErrors){
	$event->redirect = false;
	}
	}

	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnResetPassword(&$event){

	$user_object = &$this->Application->recallObject('u.forgot');

	if($user_object->Load($this->Application->RecallVar('tmp_user_id'))){

	$this->Application->EmailEventUser('INCOMMERCEUSER.PSWDC', $user_object->GetDBField("PortalUserId"));
	$event->redirect = $this->Application->GetVar('template_success');

	$mod_object =& $this->Application->recallObject('mod.'.'In-Commerce');
	$m_cat_id = $mod_object->GetDBField('RootCat');
	$event->SetRedirectParam('pass', 'm');
	//$event->SetRedirectParam('m_cat_id', $m_cat_id);
	$this->Application->SetVar('m_cat_id', $m_cat_id);


	}

	}

	function OnResetPasswordConfirmed(&$event)
	{
	$passed_key = $this->Application->GetVar('user_key');

	$user_object = &$this->Application->recallObject('u.forgot');

	// used for error reporting only -> rewrite code + theme (by Alex)
	$user_current_object =& $this->Application->recallObject('u', null, Array('skip_autoload' => true));// TODO: change theme too

	if (strlen(trim($passed_key)) == 0) {
	$event->redirect_params = array('opener' => 's', 'pass' => 'all');
	$event->redirect = false;

	$user_current_object->ErrorMsgs['code_is_not_valid'] = $this->Application->Phrase('lu_code_is_not_valid');
	$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_is_not_valid';
	}


	if($user_object->Load(array('PwResetConfirm'=>$passed_key)))
	{
	$exp_time = $user_object->GetDBField('PwRequestTime') + 3600;
	$user_object->SetDBField("PwResetConfirm", '');
	$user_object->SetDBField("PwRequestTime", 0);
	if ( $exp_time > adodb_mktime() )
	{
	//$m_var_list_update['codevalidationresult'] = 'lu_resetpw_confirm_text';
	$newpw = makepassword4();

	$this->Application->StoreVar('password', $newpw);

	$user_object->SetDBField("Password",$newpw);
	$user_object->SetDBField("PassResetTime", adodb_mktime());
	$user_object->SetDBField("PwResetConfirm", '');
	$user_object->SetDBField("PwRequestTime", 0);
	$user_object->Update();

	$this->Application->SetVar('ForgottenPassword', $newpw);

	$email_event_user = &$this->Application->EmailEventUser('INCOMMERCEUSER.PSWD', $user_object->GetDBField('PortalUserId'));
	$email_event_admin = &$this->Application->EmailEventAdmin('INCOMMERCEUSER.PSWD');

	$this->Application->DeleteVar('ForgottenPassword');

	if ($email_event_user->status == erSUCCESS){
	$event->redirect_params = array('opener' => 's', 'pass' => 'all');
	$event->redirect = $this->Application->GetVar('template_success');
	}

	$user_object->SetDBField("Password",md5($newpw));
	$user_object->Update();

	} else {
	$user_current_object->ErrorMsgs['code_expired'] = $this->Application->Phrase('lu_code_expired');
	$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_expired';
	$event->redirect = false;

	}
	} else {
	$user_current_object->ErrorMsgs['code_is_not_valid'] = $this->Application->Phrase('lu_code_is_not_valid');
	$user_current_object->FieldErrors['PwResetConfirm']['pseudo'] = 'code_is_not_valid';
	$event->redirect = false;

	}
	}

	function OnUpdate(&$event)
	{
	$cs_helper =& $this->Application->recallObject('CountryStatesHelper');
	$cs_helper->CheckStateField($event, 'State', 'Country');

	parent::OnUpdate($event);

	$this->setNextTemplate($event);
	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function setNextTemplate(&$event)
	{
	if( !$this->Application->IsAdmin() )
	{
	$event->redirect_params['opener'] = 's';
	$object =& $event->getObject();
	if($object->GetDBField('Status') == STATUS_ACTIVE)
	{
	$next_template = $this->Application->GetVar('next_template');
	if($next_template) $event->redirect = $next_template;
	}
	}
	}



	/**
	* Delete users from groups if their membership is expired
	*
	* @param kEvent $event
	*/
	function OnCheckExpiredMembership(&$event)
	{
	// send pre-expiration reminders: begin
	$pre_expiration = adodb_mktime() + $this->Application->ConfigValue('User_MembershipExpirationReminder') * 3600 * 24;
	$sql = 'SELECT PortalUserId, GroupId
	FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (ExpirationReminderSent = 0) AND (MembershipExpires < '.$pre_expiration.')';

	$skip_clause = $event->getEventParam('skip_clause');
	if ($skip_clause) {
	$sql .= ' AND !('.implode(') AND !(', $skip_clause).')';
	}

	$records = $this->Conn->Query($sql);
	if ($records) {
	$conditions = Array();
	foreach ($records as $record) {
	$email_event_user =& $this->Application->EmailEventUser('USER.MEMBERSHIP.EXPIRATION.NOTICE', $record['PortalUserId']);
	$email_event_admin =& $this->Application->EmailEventAdmin('USER.MEMBERSHIP.EXPIRATION.NOTICE');
	$conditions[] = '(PortalUserId = '.$record['PortalUserId'].' AND GroupId = '.$record['GroupId'].')';
	}
	$sql = 'UPDATE '.TABLE_PREFIX.'UserGroup
	SET ExpirationReminderSent = 1
	WHERE '.implode(' OR ', $conditions);
	$this->Conn->Query($sql);
	}
	// send pre-expiration reminders: end

	// remove users from groups with expired membership: begin
	$sql = 'SELECT PortalUserId
	FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (MembershipExpires < '.adodb_mktime().')';
	$user_ids = $this->Conn->GetCol($sql);
	if ($user_ids) {
	foreach ($user_ids as $id) {
	$email_event_user =& $this->Application->EmailEventUser('USER.MEMBERSHIP.EXPIRED', $id);
	$email_event_admin =& $this->Application->EmailEventAdmin('USER.MEMBERSHIP.EXPIRED');
	}
	}
	$sql = 'DELETE FROM '.TABLE_PREFIX.'UserGroup
	WHERE (MembershipExpires IS NOT NULL) AND (MembershipExpires < '.adodb_mktime().')';
	$this->Conn->Query($sql);
	// remove users from groups with expired membership: end
	}

	/**
	* Enter description here...
	*
	* @param kEvent $event
	*/
	function OnRefreshForm(&$event)
	{
	$event->redirect = false;
	$item_info = $this->Application->GetVar($event->Prefix_Special);
	list($id, $fields) = each($item_info);

	$object =& $event->getObject( Array('skip_autoload' => true) );
	$object->setID($id);
	$object->IgnoreValidation = true;
	$object->SetFieldsFromHash($fields);
	}

	/**
	* Sets persistant variable
	*
	* @param kEvent $event
	*/
	function OnSetPersistantVariable(&$event)
	{
	$object =& $event->getObject();

	$field = $this->Application->GetVar('field');
	$value = $this->Application->GetVar('value');
	$object->setPersistantVar($field, $value);

	$force_tab = $this->Application->GetVar('SetTab');
	if ($force_tab) {
	$this->Application->StoreVar('force_tab', $force_tab);
	}
	}

	/**
	* Overwritten to return user from order by special .ord
	*
	* @param kEvent $event
	*/
	function getPassedId(&$event)
	{
	if ($event->Special == 'ord') {
	$order =& $this->Application->recallObject('ord');
	return $order->GetDBField('PortalUserId');
	}
	return parent::getPassedID($event);
	}

	/**
	* Allows to change root password
	*
	* @param kEvent $event
	*/
	function OnUpdateRootPassword(&$event)
	{
	$user_id = $this->Application->RecallVar('user_id');
	if ($user_id != -1) {
	// not "root" can't change root's password via this event
	return false;
	}

	// put salt to user's config
	$field_options = $this->Application->getUnitOption($event->Prefix.'.RootPassword', 'Fields');
	$field_options['salt'] = 'b38';
	$this->Application->setUnitOption($event->Prefix.'.RootPassword', 'Fields', $field_options);

	$object =& $event->getObject( Array('skip_autoload' => true) );
	/* @var $object UsersItem */

	$items_info = $this->Application->GetVar( $event->getPrefixSpecial(true) );
	if ($items_info) {
	list ($id, $field_values) = each($items_info);
	$this->RemoveRequiredFields($object);
	$object->SetDBField('RootPassword', $this->Application->ConfigValue('RootPass'));
	$object->SetFieldsFromHash($field_values);
	$status = $object->Validate();
	if ($status) {
	// validation on, password match too
	$fields_hash = Array (
	'VariableValue' => $object->GetDBField('RootPassword')
	);
	$conf_table = $this->Application->getUnitOption('conf', 'TableName');
	$this->Conn->doUpdate($fields_hash, $conf_table, 'VariableName = "RootPass"');
	$event->SetRedirectParam('opener', 'u');
	}
	else {
	$event->status = erFAIL;
	$event->redirect = false;
	}
	}
	}
	}

	?>
	\ No newline at end of file

	Property changes on: branches/unlabeled/unlabeled-1.68.2/core/units/users/users_event_handler.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.68.2.7
	\ No newline at end of property
	+1.68.2.8
	\ No newline at end of property
	Index: branches/unlabeled/unlabeled-1.52.4/core/kernel/session/session.php
	===================================================================
	--- branches/unlabeled/unlabeled-1.52.4/core/kernel/session/session.php (revision 7091)
	+++ branches/unlabeled/unlabeled-1.52.4/core/kernel/session/session.php (revision 7092)
	@@ -1,870 +1,867 @@
	<?php

	/*

	The session works the following way:

	1. When a visitor loads a page from the site the script checks if cookies_on varibale has been passed to it as a cookie.
	2. If it has been passed, the script tries to get Session ID (SID) from the request:
	3. Depending on session mode the script is getting SID differently.
	The following modes are available:

	smAUTO - Automatic mode: if cookies are on at the client side, the script relays only on cookies and
	ignore all other methods of passing SID.
	If cookies are off at the client side, the script relays on SID passed through query string
	and referal passed by the client. THIS METHOD IS NOT 100% SECURE, as long as attacker may
	get SID and substitude referal to gain access to user' session. One of the faults of this method
	is that the session is only created when the visitor clicks the first link on the site, so
	there is NO session at the first load of the page. (Actually there is a session, but it gets lost
	after the first click because we do not use SID in query string while we are not sure if we need it)

	smCOOKIES_ONLY - Cookies only: in this mode the script relays solely on cookies passed from the browser
	and ignores all other methods. In this mode there is no way to use sessions for clients
	without cookies support or cookies support disabled. The cookies are stored with the
	full domain name and path to base-directory of script installation.

	smGET_ONLY - GET only: the script will not set any cookies and will use only SID passed in
	query string using GET, it will also check referal. The script will set SID at the
	first load of the page

	smCOOKIES_AND_GET - Combined mode: the script will use both cookies and GET right from the start. If client has
	cookies enabled, the script will check SID stored in cookie and passed in query string, and will
	use this SID only if both cookie and query string matches. However if cookies are disabled on the
	client side, the script will work the same way as in GET_ONLY mode.

	4. After the script has the SID it tries to load it from the Storage (default is database)
	5. If such SID is found in the database, the script checks its expiration time. If session is not expired, it updates
	its expiration, and resend the cookie (if applicable to session mode)
	6. Then the script loads all the data (session variables) pertaining to the SID.



	Usage:

	$session =& new Session(smAUTO); //smAUTO is default, you could just leave the brackets empty, or provide another mode

	$session->SetCookieDomain('my.domain.com');
	$session->SetCookiePath('/myscript');
	$session->SetCookieName('my_sid_cookie');
	$session->SetGETName('sid');
	$session->InitSession();

	...

	//link output:

	echo "<a href='index.php?'". ( $session->NeedQueryString() ? 'sid='.$session->SID : '' ) .">My Link</a>";

	*/

	//Implements session storage in the database
	class SessionStorage extends kDBBase {

	var $Expiration;
	var $SessionTimeout=0;

	var $DirectVars = Array();
	var $ChangedDirectVars = Array();

	var $PersistentVars = Array ();

	var $OriginalData=Array();

	var $TimestampField;
	var $SessionDataTable;
	var $DataValueField;
	var $DataVarField;

	function Init($prefix,$special)
	{
	parent::Init($prefix,$special);
	$this->setTableName('sessions');
	$this->setIDField('sid');
	$this->TimestampField = 'expire';
	$this->SessionDataTable = 'SessionData';
	$this->DataValueField = 'value';
	$this->DataVarField = 'var';
	}

	function setSessionTimeout($new_timeout)
	{
	$this->SessionTimeout = $new_timeout;
	}

	function StoreSession(&$session, $additional_fields = Array())
	{
	$fields_hash = Array (
	$this->IDField => $session->SID,
	$this->TimestampField => $session->Expiration
	);

	$this->Conn->doInsert($fields_hash, $this->TableName);

	foreach ($additional_fields as $field_name => $field_value) {
	$this->SetField($session, $field_name, $field_value);
	}
	}

	function DeleteSession(&$session)
	{
	$query = ' DELETE FROM '.$this->TableName.' WHERE '.$this->IDField.' = '.$this->Conn->qstr($session->SID);
	$this->Conn->Query($query);

	$query = ' DELETE FROM '.$this->SessionDataTable.' WHERE '.$this->IDField.' = '.$this->Conn->qstr($session->SID);
	$this->Conn->Query($query);

	$this->OriginalData = Array();
	}

	function UpdateSession(&$session, $timeout=0)
	{
	$this->SetField($session, $this->TimestampField, $session->Expiration);
	$query = ' UPDATE '.$this->TableName.' SET '.$this->TimestampField.' = '.$session->Expiration.' WHERE '.$this->IDField.' = '.$this->Conn->qstr($session->SID);
	$this->Conn->Query($query);
	}

	function LocateSession($sid)
	{
	$query = ' SELECT * FROM '.$this->TableName.' WHERE '.$this->IDField.' = '.$this->Conn->qstr($sid);
	$result = $this->Conn->GetRow($query);

	if($result===false) return false;

	$this->DirectVars = $result;

	$this->Expiration = $result[$this->TimestampField];
	return true;
	}

	function GetExpiration()
	{
	return $this->Expiration;
	}

	function LoadData(&$session)
	{
	$query = 'SELECT '.$this->DataValueField.','.$this->DataVarField.' FROM '.$this->SessionDataTable.' WHERE '.$this->IDField.' = '.$this->Conn->qstr($session->SID);

	$this->OriginalData = $this->Conn->GetCol($query, $this->DataVarField);
	return $this->OriginalData;
	}

	/**
	* Enter description here...
	*
	* @param Session $session
	* @param string $var_name
	* @param mixed $default
	*/
	function GetField(&$session, $var_name, $default = false)
	{
	return isset($this->DirectVars[$var_name]) ? $this->DirectVars[$var_name] : $default;
	//return $this->Conn->GetOne('SELECT '.$var_name.' FROM '.$this->TableName.' WHERE `'.$this->IDField.'` = '.$this->Conn->qstr($session->GetID()) );
	}

	function SetField(&$session, $var_name, $value)
	{
	$value_changed = !isset($this->DirectVars[$var_name]) \|\| ($this->DirectVars[$var_name] != $value);
	if ($value_changed) {
	$this->DirectVars[$var_name] = $value;
	$this->ChangedDirectVars[] = $var_name;
	$this->ChangedDirectVars = array_unique($this->ChangedDirectVars);
	}
	//return $this->Conn->Query('UPDATE '.$this->TableName.' SET '.$var_name.' = '.$this->Conn->qstr($value).' WHERE '.$this->IDField.' = '.$this->Conn->qstr($session->GetID()) );
	}

	function SaveData(&$session)
	{
	if(!$session->SID) return false; // can't save without sid

	$ses_data = $session->Data->GetParams();

	$replace = '';
	foreach ($ses_data as $key => $value)
	{
	if ( isset($this->OriginalData[$key]) && $this->OriginalData[$key] == $value)
	{
	continue; //skip unchanged session data
	}
	else
	{
	$replace .= sprintf("(%s, %s, %s),",
	$this->Conn->qstr($session->SID),
	$this->Conn->qstr($key),
	$this->Conn->qstr($value));
	}
	}
	$replace = rtrim($replace, ',');
	if ($replace != '') {
	$query = ' REPLACE INTO '.$this->SessionDataTable. ' ('.$this->IDField.', '.$this->DataVarField.', '.$this->DataValueField.') VALUES '.$replace;
	$this->Conn->Query($query);
	}

	if ($this->ChangedDirectVars) {
	$changes = array();
	foreach ($this->ChangedDirectVars as $var) {
	$changes[] = $var.' = '.$this->Conn->qstr($this->DirectVars[$var]);
	}
	$query = 'UPDATE '.$this->TableName.' SET '.implode(',', $changes).' WHERE '.$this->IDField.' = '.$this->Conn->qstr($session->GetID());
	$this->Conn->Query($query);
	}
	}

	function RemoveFromData(&$session, $var)
	{
	$query = 'DELETE FROM '.$this->SessionDataTable.' WHERE '.$this->IDField.' = '.$this->Conn->qstr($session->SID).
	' AND '.$this->DataVarField.' = '.$this->Conn->qstr($var);
	$this->Conn->Query($query);
	unset($this->OriginalData[$var]);
	}

	function GetFromData(&$session, $var)
	{
	return getArrayValue($this->OriginalData, $var);
	}

	function GetExpiredSIDs()
	{
	$query = ' SELECT '.$this->IDField.' FROM '.$this->TableName.' WHERE '.$this->TimestampField.' > '.adodb_mktime();
	return $this->Conn->GetCol($query);
	}

	function DeleteExpired()
	{
	$expired_sids = $this->GetExpiredSIDs();
	if ($expired_sids) {
	$where_clause=' WHERE '.$this->IDField.' IN ("'.implode('","',$expired_sids).'")';
	$sql = 'DELETE FROM '.$this->SessionDataTable.$where_clause;
	$this->Conn->Query($sql);

	$sql = 'DELETE FROM '.$this->TableName.$where_clause;
	$this->Conn->Query($sql);

	// delete debugger ouputs left of expired sessions
	foreach ($expired_sids as $expired_sid) {
	$debug_file = KERNEL_PATH.'/../cache/debug_@'.$expired_sid.'@.txt';
	if (file_exists($debug_file)) {
	@unlink($debug_file);
	}
	}
	}
	return $expired_sids;
	}

	function LoadPersistentVars(&$session)
	{
	$user_id = $this->Application->RecallVar('user_id');
	if ($user_id != -2) {
	// root & normal users
	$sql = 'SELECT VariableValue, VariableName
	FROM '.TABLE_PREFIX.'PersistantSessionData
	WHERE PortalUserId = '.$user_id;
	$this->PersistentVars = $this->Conn->GetCol($sql, 'VariableName');
	}
	else {
	$this->PersistentVars = Array ();
	}
	}

	function StorePersistentVar(&$session, $var_name, $var_value)
	{
	$this->PersistentVars[$var_name] = $var_value;

	$replace_hash = Array (
	'PortalUserId' => $this->Application->RecallVar('user_id'),
	'VariableName' => $var_name,
	'VariableValue' => $var_value
	);
	$this->Conn->doInsert($replace_hash, TABLE_PREFIX.'PersistantSessionData', 'REPLACE');

	}

	function RecallPersistentVar(&$session, $var_name, $default = false)
	{
	return isset($this->PersistentVars[$var_name]) ? $this->PersistentVars[$var_name] : $default;
	}

	function RemovePersistentVar(&$session, $var_name)
	{
	unset($this->PersistentVars[$var_name]);

	$user_id = $this->Application->RecallVar('user_id');

	if ($user_id != -2) {
	$sql = 'DELETE FROM '.TABLE_PREFIX.'PersistantSessionData
	WHERE PortalUserId = '.$user_id.' AND VariableName = '.$this->Conn->qstr($var_name);
	$this->Conn->Query($sql);
	}
	}
	}

	define('smAUTO', 1);
	define('smCOOKIES_ONLY', 2);
	define('smGET_ONLY', 3);
	define('smCOOKIES_AND_GET', 4);

	class Session extends kBase {
	var $Checkers;

	var $Mode;
	var $OriginalMode = null;
	var $GETName = 'sid';

	var $CookiesEnabled = true;
	var $CookieName = 'sid';
	var $CookieDomain;
	var $CookiePath;
	var $CookieSecure = 0;

	var $SessionTimeout = 3600;
	var $Expiration;

	var $SID;

	/**
	* Enter description here...
	*
	* @var SessionStorage
	*/
	var $Storage;

	var $CachedNeedQueryString = null;

	var $Data;


	function Session($mode=smAUTO)
	{
	parent::kBase();
	$this->SetMode($mode);
	}

	function SetMode($mode)
	{
	$this->Mode = $mode;
	$this->CachedNeedQueryString = null;
	$this->CachedSID = null;
	}

	function SetCookiePath($path)
	{
	$this->CookiePath = $path;
	}

	function SetCookieDomain($domain)
	{
	$this->CookieDomain = '.'.ltrim($domain, '.');
	}

	function SetGETName($get_name)
	{
	$this->GETName = $get_name;
	}

	function SetCookieName($cookie_name)
	{
	$this->CookieName = $cookie_name;
	}

	function InitStorage()
	{
	$this->Storage =& $this->Application->recallObject('SessionStorage');
	$this->Storage->setSessionTimeout($this->SessionTimeout);
	}

	function Init($prefix,$special)
	{
	parent::Init($prefix,$special);

	$this->CheckIfCookiesAreOn();
	if ($this->CookiesEnabled) $_COOKIE['cookies_on'] = 1;

	$this->Checkers = Array();
	$this->InitStorage();
	$this->Data =& new Params();

	$tmp_sid = $this->GetPassedSIDValue();

	$check = $this->Check();
	if( !(defined('IS_INSTALL') && IS_INSTALL) )
	{
	$expired_sids = $this->DeleteExpired();
	if( ( $expired_sids && in_array($tmp_sid,$expired_sids) ) \|\| ( $tmp_sid && !$check ) )
	{
	$this->SetSession();
	$this->Application->HandleEvent($event, 'u:OnSessionExpire');
	}
	}

	if ($check) {
	$this->SID = $this->GetPassedSIDValue();
	$this->Refresh();
	$this->LoadData();
	}
	else {
	$this->SetSession();
	}

	if (!is_null($this->OriginalMode)) $this->SetMode($this->OriginalMode);
	}

	function IsHTTPSRedirect()
	{
	$http_referer = getArrayValue($_SERVER, 'HTTP_REFERER');
	return (
	( PROTOCOL == 'https://' && preg_match('#http:\/\/#', $http_referer) )
	\|\|
	( PROTOCOL == 'http://' && preg_match('#https:\/\/#', $http_referer) )
	);
	}

	function CheckReferer($for_cookies=0)
	{
	if (!$for_cookies) {
	if ( !$this->Application->ConfigValue('SessionReferrerCheck') \|\| $_SERVER['REQUEST_METHOD'] != 'POST') {
	return true;
	}
	}
	$path = preg_replace('/admin[\/]{0,1}$/', '', $this->CookiePath); // removing /admin for compatability with in-portal (in-link/admin/add_link.php)
	$reg = '#^'.preg_quote(PROTOCOL.ltrim($this->CookieDomain, '.').$path).'#';
	return preg_match($reg, getArrayValue($_SERVER, 'HTTP_REFERER') ) \|\| (defined('IS_POPUP') && IS_POPUP);
	}

	/*function CheckDuplicateCookies()
	{
	if (isset($_SERVER['HTTP_COOKIE'])) {
	$cookie_str = $_SERVER['HTTP_COOKIE'];
	$cookies = explode('; ', $cookie_str);
	$all_cookies = array();
	foreach ($cookies as $cookie) {
	list($name, $value) = explode('=', $cookie);
	if (isset($all_cookies[$name])) {
	//double cookie name!!!
	$this->RemoveCookie($name);
	}
	else $all_cookies[$name] = $value;
	}
	}
	}

	function RemoveCookie($name)
	{
	$path = $_SERVER['PHP_SELF'];
	$path_parts = explode('/', $path);
	$cur_path = '';
	setcookie($name, false, null, $cur_path);
	foreach ($path_parts as $part) {
	$cur_path .= $part;
	setcookie($name, false, null, $cur_path);
	$cur_path .= '/';
	setcookie($name, false, null, $cur_path);
	}
	}*/

	function CheckIfCookiesAreOn()
	{
	// $this->CheckDuplicateCookies();
	if ($this->Mode == smGET_ONLY)
	{
	//we don't need to bother checking if we would not use it
	$this->CookiesEnabled = false;
	return;
	}
	$http_query =& $this->Application->recallObject('HTTPQuery');
	$cookies_on = isset($http_query->Cookie['cookies_on']); // not good here

	$get_sid = getArrayValue($http_query->Get, $this->GETName);
	if ($this->IsHTTPSRedirect() && $get_sid) { //Redirect from http to https on different domain
	$this->OriginalMode = $this->Mode;
	$this->SetMode(smGET_ONLY);
	}

	if (!$cookies_on \|\| $this->IsHTTPSRedirect()) {
	//If referer is our server, but we don't have our cookies_on, it's definetly off
	$is_install = defined('IS_INSTALL') && IS_INSTALL;
	if (!$is_install && $this->CheckReferer(1) && !$this->Application->GetVar('admin') && !$this->IsHTTPSRedirect()) {
	$this->CookiesEnabled = false;
	}
	else {
	//Otherwise we still suppose cookies are on, because may be it's the first time user visits the site
	//So we send cookies on to get it next time (when referal will tell us if they are realy off
	- setcookie(
	- 'cookies_on',
	- 1,
	- adodb_mktime()+31104000, //one year should be enough
	- $this->CookiePath,
	- $this->CookieDomain,
	- $this->CookieSecure
	- );
	+ $this->SetCookie('cookies_on', 1, adodb_mktime() + 31104000); //one year should be enough
	}
	}
	else
	$this->CookiesEnabled = true;
	return $this->CookiesEnabled;
	}

	+ /**
	+ * Sets cookie for current site using path and domain
	+ *
	+ * @param string $name
	+ * @param mixed $value
	+ * @param int $expires
	+ */
	+ function SetCookie($name, $value, $expires = null)
	+ {
	+ setcookie($name, $value, $expires, $this->CookiePath, $this->CookieDomain, $this->CookieSecure);
	+ }
	+
	function Check()
	{
	// we should check referer if cookies are disabled, and in combined mode
	// auto mode would detect cookies, get only mode would turn it off - so we would get here
	// and we don't care about referal in cookies only mode

	if ( $this->Mode != smCOOKIES_ONLY && (!$this->CookiesEnabled \|\| $this->Mode == smCOOKIES_AND_GET) ) {
	if (!$this->CheckReferer())
	return false;
	}

	$sid = $this->GetPassedSIDValue();

	if (empty($sid)) return false;

	//try to load session by sid, if everything is fine
	$result = $this->LoadSession($sid);

	return $result;
	}

	function LoadSession($sid)
	{
	if( $this->Storage->LocateSession($sid) ) {
	//if we have session with such SID - get its expiration
	$this->Expiration = $this->Storage->GetExpiration();

	//If session has expired
	if ($this->Expiration < adodb_mktime()) return false;

	//Otherwise it's ok
	return true;
	}
	else //fake or deleted due to expiration SID
	return false;
	}

	function GetPassedSIDValue($use_cache = 1)
	{
	if (!empty($this->CachedSID) && $use_cache) return $this->CachedSID;
	$http_query =& $this->Application->recallObject('HTTPQuery');
	$get_sid = getArrayValue($http_query->Get, $this->GETName);

	if ($this->Application->GetVar('admin') == 1 && $get_sid) {
	$sid = $get_sid;
	}
	else {
	switch ($this->Mode) {
	case smAUTO:
	//Cookies has the priority - we ignore everything else
	$sid = $this->CookiesEnabled ? $this->GetSessionCookie() : $get_sid;
	break;
	case smCOOKIES_ONLY:
	$sid = $this->GetSessionCookie();
	break;
	case smGET_ONLY:
	$sid = $get_sid;
	break;
	case smCOOKIES_AND_GET:
	$cookie_sid = $this->GetSessionCookie();
	//both sids should match if cookies are enabled
	if (!$this->CookiesEnabled \|\| ($cookie_sid == $get_sid))
	{
	$sid = $get_sid; //we use get here just in case cookies are disabled
	}
	else
	{
	$sid = '';
	}
	break;
	}
	}


	$this->CachedSID = $sid;
	return $this->CachedSID;
	}

	/**
	* Returns session id
	*
	* @return int
	* @access public
	*/
	function GetID()
	{
	return $this->SID;
	}

	/**
	* Generates new session id
	*
	* @return int
	* @access private
	*/
	function GenerateSID()
	{
	list($usec, $sec) = explode(" ",microtime());

	$sid_part_1 = substr($usec, 4, 4);
	$sid_part_2 = mt_rand(1,9);
	$sid_part_3 = substr($sec, 6, 4);
	$digit_one = substr($sid_part_1, 0, 1);
	if ($digit_one == 0) {
	$digit_one = mt_rand(1,9);
	$sid_part_1 = ereg_replace("^0","",$sid_part_1);
	$sid_part_1=$digit_one.$sid_part_1;
	}
	$this->setSID($sid_part_1.$sid_part_2.$sid_part_3);
	return $this->SID;
	}

	/**
	* Set's new session id
	*
	* @param int $new_sid
	* @access private
	*/
	function setSID($new_sid)
	{
	$this->SID=$new_sid;
	$this->Application->SetVar($this->GETName,$new_sid);
	}

	function SetSession()
	{
	$this->GenerateSID();
	$this->Expiration = adodb_mktime() + $this->SessionTimeout;
	switch ($this->Mode) {
	case smAUTO:
	if ($this->CookiesEnabled) {
	$this->SetSessionCookie();
	}
	break;
	case smGET_ONLY:
	break;
	case smCOOKIES_ONLY:
	case smCOOKIES_AND_GET:
	$this->SetSessionCookie();
	break;
	}
	$this->Storage->StoreSession($this);
	}

	/**
	* Returns SID from cookie
	*
	* @return int
	*/
	function GetSessionCookie()
	{
	return isset($this->Application->HttpQuery->Cookie[$this->CookieName]) ? $this->Application->HttpQuery->Cookie[$this->CookieName] : false;
	}

	/**
	* Updates SID in cookie with new value
	*
	*/
	function SetSessionCookie()
	{
	- setcookie(
	- $this->CookieName,
	- $this->SID,
	- $this->Expiration,
	- $this->CookiePath,
	- $this->CookieDomain,
	- $this->CookieSecure
	- );
	-
	+ $this->SetCookie($this->CookieName, $this->SID, $this->Expiration);
	$_COOKIE[$this->CookieName] = $this->SID; // for compatibility with in-portal
	}

	/**
	* Refreshes session expiration time
	*
	* @access private
	*/
	function Refresh()
	{
	if ($this->CookiesEnabled) $this->SetSessionCookie(); //we need to refresh the cookie
	$this->Storage->UpdateSession($this);
	}

	function Destroy()
	{
	$this->Storage->DeleteSession($this);
	$this->Data =& new Params();
	$this->SID = '';
	if ($this->CookiesEnabled) $this->SetSessionCookie(); //will remove the cookie due to value (sid) is empty
	$this->SetSession(); //will create a new session
	}

	function NeedQueryString($use_cache = 1)
	{
	if ($this->CachedNeedQueryString != null && $use_cache) return $this->CachedNeedQueryString;

	$result = false;
	switch ($this->Mode)
	{
	case smAUTO:
	if (!$this->CookiesEnabled) $result = true;
	break;
	/*case smCOOKIES_ONLY:
	break;*/
	case smGET_ONLY:
	case smCOOKIES_AND_GET:
	$result = true;
	break;
	}
	$this->CachedNeedQueryString = $result;
	return $result;
	}

	function LoadData()
	{
	$this->Data->AddParams($this->Storage->LoadData($this));
	}

	function PrintSession($comment='')
	{
	if($this->Application->isDebugMode() && constOn('DBG_SHOW_SESSIONDATA')) {
	// dump session data
	$this->Application->Debugger->appendHTML('SessionStorage ('.$comment.'):');
	$session_data = $this->Data->GetParams();
	ksort($session_data);
	foreach ($session_data as $session_key => $session_value) {
	if (IsSerialized($session_value)) {
	$session_data[$session_key] = unserialize($session_value);
	}
	}
	$this->Application->Debugger->dumpVars($session_data);

	// dump persistent session data
	if ($this->Storage->PersistentVars) {
	$this->Application->Debugger->appendHTML('Persistant Session:');
	$session_data = $this->Storage->PersistentVars;
	ksort($session_data);
	foreach ($session_data as $session_key => $session_value) {
	if (IsSerialized($session_value)) {
	$session_data[$session_key] = unserialize($session_value);
	}
	}
	$this->Application->Debugger->dumpVars($session_data);
	}

	// to insert after HTTPQuery if it's visible
	// $new_row = constOn('DBG_SHOW_HTTPQUERY') ? 4 : 2;
	// $debugger->moveAfterRow($new_row,2);
	}
	}

	function SaveData()
	{
	if (!$this->Application->GetVar('skip_last_template') && $this->Application->GetVar('ajax') != 'yes') {
	$this->SaveLastTemplate( $this->Application->GetVar('t') );
	}

	$this->PrintSession('after save');
	$this->Storage->SaveData($this);
	}

	function SaveLastTemplate($t)
	{
	// save last_template
	$wid = $this->Application->GetVar('m_wid');

	$last_env = $this->getLastTemplateENV($t, Array('m_opener' => 'u'));
	$last_template = basename($_SERVER['PHP_SELF']).'\|'.substr($last_env, strlen(ENV_VAR_NAME) + 1);
	$this->StoreVar(rtrim('last_template_'.$wid, '_'), $last_template);

	$last_env = $this->getLastTemplateENV($t, Array());
	$last_template = basename($_SERVER['PHP_SELF']).'\|'.substr($last_env, strlen(ENV_VAR_NAME) + 1);
	$this->StoreVar(rtrim('last_template_popup_'.$wid, '_'), $last_template);

	// save other last... variables for mistical purposes (customizations may be)
	$this->StoreVar('last_url', $_SERVER['REQUEST_URI']); // needed by ord:StoreContinueShoppingLink
	$this->StoreVar('last_env', substr($last_env, strlen(ENV_VAR_NAME)+1));
	}

	function getLastTemplateENV($t, $params)
	{
	$params['__URLENCODE__'] = 1;
	return $this->Application->BuildEnv($t, $params, 'all');
	}

	function StoreVar($name, $value)
	{
	$this->Data->Set($name, $value);
	}

	function StorePersistentVar($name, $value)
	{
	$this->Storage->StorePersistentVar($this, $name, $value);
	}

	function LoadPersistentVars()
	{
	$this->Storage->LoadPersistentVars($this);
	}

	function StoreVarDefault($name, $value)
	{
	$tmp = $this->RecallVar($name);
	if($tmp === false \|\| $tmp == '')
	{
	$this->StoreVar($name, $value);
	}
	}

	function RecallVar($name, $default = false)
	{
	$ret = $this->Data->Get($name);
	return ($ret === false) ? $default : $ret;
	}

	function RecallPersistentVar($name, $default = false)
	{
	return $this->Storage->RecallPersistentVar($this, $name, $default);
	}

	function RemoveVar($name)
	{
	$this->Storage->RemoveFromData($this, $name);
	$this->Data->Remove($name);
	}

	function RemovePersistentVar($name)
	{
	return $this->Storage->RemovePersistentVar($this, $name);
	}

	/**
	* Ignores session varible value set before
	*
	* @param string $name
	*/
	function RestoreVar($name)
	{
	return $this->StoreVar($name, $this->Storage->GetFromData($this, $name));
	}

	function GetField($var_name, $default = false)
	{
	return $this->Storage->GetField($this, $var_name, $default);
	}

	function SetField($var_name, $value)
	{
	$this->Storage->SetField($this, $var_name, $value);
	}

	/**
	* Deletes expired sessions
	*
	* @return Array expired sids if any
	* @access private
	*/
	function DeleteExpired()
	{
	return $this->Storage->DeleteExpired();
	}

	}

	?>
	\ No newline at end of file

	Property changes on: branches/unlabeled/unlabeled-1.52.4/core/kernel/session/session.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.52.4.4
	\ No newline at end of property
	+1.52.4.5
	\ No newline at end of property

in-portalNo OneTemporaryActions

File Metadata

in-portalView Options

Event Timeline

in-portal
No OneTemporary
Actions

in-portal
View Options