gnieark/ClassUsers
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

serializes

Browse Source
This commit is contained in:
Gnieark 2019-04-18 23:40:05 +02:00
parent 07d17b0a4d
commit 3b593a8490
3 changed files with 33 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
User.php
View File

@ -11,6 +11,10 @@ class User
protected $db; protected $db;
public function __sleep(){
return array('is_connected','external_id','id','display_name','auth_method','groups');
}
public function get_id() public function get_id()
{ {
if($this->is_connected){ if($this->is_connected){
@ -36,14 +40,12 @@ class User
} }
public function set_db(PDO $db){ public function set_db(PDO $db){
$this->$db = $db;
$this->db = $db;
} }
public function __construct(PDO $db){ public function __construct(PDO $db){
$this->db = $db; $this->db = $db;
} }
} }

2
User_Manager.php
View File

@ -105,7 +105,7 @@ class User_Manager
} }
} }
$user = new User(); $user = new User($db);
return $user; return $user;
} }

50
User_Sql.php
View File

@ -18,9 +18,11 @@ class User_Sql extends User {
$stmt->bindParam(':admin', $adminInt); $stmt->bindParam(':admin', $adminInt);
$stmt->bindParam(':active', $activeInt); $stmt->bindParam(':active', $activeInt);
$hashed_password = password_hash($password, PASSWORD_BCRYPT); $hashed_password = password_hash($password, PASSWORD_BCRYPT);
$adminInt = $admin? 1 : 0; $adminInt = $admin? 1 : 0;
$activeInt = $activeInt? 1 : 0; $activeInt = $active? 1 : 0;
$stmt->execute(); $stmt->execute();
return $db->lastInsertId(); return $db->lastInsertId();
@ -28,31 +30,31 @@ class User_Sql extends User {
public function authentificate($login,$password) public function authentificate($login,$password)
{ {
$sql =
"SELECT id,display_name,
FROM users
WHERE login='". mysqli_real_escape_string($this->db,$login) . "'
AND password=SHA2('". mysqli_real_escape_string($this->db,$password) . "',512)
AND auth_method='local';";
$rs = $this->db->query($sql);
if($r = $rs->fetch_array(MYSQLI_ASSOC)){ $stmt = $this->db->prepare(
$this->is_connected = true; "SELECT id,display_name,password
$this->display_name = $r["display_name"]; FROM users
$this->id = $r['id']; WHERE login=:login
$this->auth_method = 'sql'; AND active=1
AND auth_method='local'"
return $this; );
}else{ $stmt->bindParam(':login', $login);
$this->is_connected = false; $stmt->execute();
return false; if($r = $stmt->fetch()){
}
return false; //check password
if(password_verify($password,$r["password"])){
$this->is_connected = true;
$this->display_name = $r["display_name"];
$this->id = $r['id'];
$this->auth_method = 'sql';
return $this;
}
}
$this->is_connected = false;
return $this;
} }
} }