6 require_once('mitsql.lib.php');
11 function Login($u, $p=null) {
12 if (empty($u)) return;
15 if ((string)intval($u)===(string)$u) {
17 $opt = sprintf(" Username = '%s' OR UserId = '%s'", mysql_escape_string($u), mysql_escape_string($u));
19 $opt = sprintf(" Username = '%s'", mysql_escape_string($u));
20 $opt .= (is_null($p)?'':sprintf(" AND Password='%s'", mysql_escape_string(base64_encode($p))));
22 $sql = sprintf("SELECT UserId, Username, Name, Email, UL, bEnabled
25 $r = fetchRows(DBSelect($sql),'UserId');
26 $this->info = count($r)?array_shift($r):$r;
29 return count($this->info);
32 return $this->getUL()>0;
34 function isEnabled() {
35 return $this->exists() && $this->info['bEnabled']==1;
38 return $this->isEnabled() && $this->isValid();
40 function canSignup() {
41 return !$this->isEnabled() && $this->isValid();
43 function getUserId() {
44 return $this->exists()?$this->info['UserId']:'';
46 function getUsername() {
47 return $this->exists()?$this->info['Username']:'';
50 return $this->exists()?$this->info['Name']:'';
53 return $this->exists()?$this->info['Email']:'';
56 return $this->exists()?$this->info['UL']:'';
62 if (!empty($this->id)) {
63 $this->Login($this->id);
65 $this->Login($this->u,$this->p);
68 function update($name=null,$email=null) {
69 if (!$this->exists()) return;
71 if ($name == $this->getName()) $name = null;
72 if ($email == $this->getEmail()) $email = null;
73 is_null($name) || $arr['Name'] = $name;
74 is_null($email) || $arr['Email'] = $email;
75 $upd = buildSQLSet($arr);
76 $sql = sprintf("UPDATE User SET %s WHERE UserId = '%s'",
77 $upd, mysql_escape_string($this->getUserId()));
78 if (!empty($upd) && $upd != 'SET')
80 if (isset($arr['Name']))
81 $this->info['Name'] = $arr['Name'];
82 if (isset($arr['Email']))
83 $this->info['Email'] = $arr['Email'];
91 function User($userId) {
92 $this->userId = $userId;
93 $sql = sprintf("SELECT User.UserId, Username, Name, Email, UL, bEnabled, nBytesSoft, nBytesHard, nBytes, nDatabases, nDatabasesHard, IF(nBytes>nBytesHard,1,0) AS bOverQuota
95 INNER JOIN UserQuota ON User.UserId = UserQuota.UserId
96 INNER JOIN UserStat ON User.UserId = UserStat.UserId
97 WHERE User.UserId = '%s'",
98 mysql_escape_string($userId));
99 $r = fetchRows(DBSelect($sql),'UserId');
100 $this->info = count($r)?array_shift($r):$r;
101 $this->dblist = $this->getDBList();
104 unset($this->dblist);
105 $this->User($this->userId);
107 $sql = sprintf("SELECT UserId, Username, Name, Email, UL, bEnabled
109 WHERE UserId = '%s'",
110 mysql_escape_string($this->userId));
111 $r = fetchRows(DBSelect($sql),'UserId');
112 $this->info = count($r)?array_shift($r):$r;
113 unset($this->dblist);
118 return count($this->info);
120 function getUserId() {
121 return $this->exists()?$this->info['UserId']:'';
123 function getUsername() {
124 return $this->exists()?$this->info['Username']:'';
126 function isOverQuota() {
127 return $this->exists()?($this->info['bOverQuota']>0?true:false):'';
129 function getDBQuotaHard() {
130 return $this->exists()?$this->info['nDatabasesHard']:0;
132 function getBytes() {
133 if($this->exists()) {
134 $arr['nBytes'] = $this->info['nBytes'];
135 $arr['nBytesSoft'] = $this->info['nBytesSoft'];
136 $arr['nBytesHard'] = $this->info['nBytesHard'];
140 function setPassword($pwd) {
141 $arr['Password'] = base64_encode($pwd);
142 $sql = sprintf("UPDATE User SET %s WHERE UserId = '%s'",
143 buildSQLSet($arr), mysql_escape_string($this->getUserId()));
145 $sql = sprintf('SET PASSWORD FOR \'%s\'@\'%%\'=PASSWORD(\'%s\')',
146 mysql_escape_string($this->getUsername()),
147 mysql_escape_string($pwd));
150 function signup($pwd) {
152 $arr['Password'] = base64_encode($pwd);
153 $arr['bEnabled'] = 1;
154 $arr['dSignup'] = 'NOW()';
155 $sql = sprintf("UPDATE User SET %s WHERE UserId = '%s'",
156 buildSQLSet($arr), mysql_escape_string($this->getUserId()));
162 function setUsage($yes=true) {
163 $verb = $yes?'GRANT':'REVOKE';
164 $prep = $yes?'TO':'FROM';
165 $suffix = $yes?sprintf("IDENTIFIED BY '%s'",mysql_escape_string($this->pass)):'';
166 $sql = sprintf("%s USAGE ON * . * %s '%s'@'%s' %s",
167 mysql_escape_string($verb),
168 mysql_escape_string($prep),
169 mysql_escape_string($this->getUsername()),
174 function setAccess($db=null,$yes=true) {
175 $verb = $yes?'GRANT':'REVOKE';
176 $prep = $yes?'TO':'FROM';
178 $dbs = $this->getDBList();
180 $dbs[] = array('Name'=>$db);
182 foreach($dbs as $db) {
184 $sql = sprintf("%s ALL PRIVILEGES ON `%s` . * %s '%s'@'%s'",
185 mysql_escape_string($verb),
186 mysql_escape_string($name),
187 mysql_escape_string($prep),
188 mysql_escape_string($this->getUsername()),
193 function getDBList() {
194 if (isset($this->dblist)) {
195 return $this->dblist;
197 // LEFT JOIN DBQuota ON DBQuota.DatabaseId = DBOwner.DatabaseId
198 $sql = sprintf("SELECT *
200 INNER JOIN DB ON DB.DatabaseId = DBOwner.DatabaseId
201 INNER JOIN DBQuota ON DBQuota.DatabaseId = DBOwner.DatabaseId
202 WHERE DBOwner.UserId = '%s' AND DB.bEnabled=1",
203 mysql_escape_string($this->getUserId()));
204 // $r = fetchRows(DBSelect($sql),'DatabaseId');
205 $r = fetchRows(DBSelect($sql),'Name');
210 function addDB($name) {
211 if (in_array($name, array_keys($this->getDBList()))) return false;
212 if (!addDB($name, $this->getUserId())) return false;
213 $this->setAccess($name);
216 function delDB($name) {
217 if (!in_array($name, array_keys($this->getDBList()))) return false;
218 if (!delDB($name)) return false;//, $this->getUserId())) return false;
219 $this->setAccess($name,false);
225 function isLoggedIn($aLogin=null) {
226 if (is_null($aLogin)) {
230 return !empty($aLogin) && ($aLogin instanceof Login) && $aLogin->canLogin();
233 function isAdmin($aLogin=null) {
234 if (is_null($aLogin)) {
238 return !empty($aLogin) && ($aLogin instanceof Login) && $aLogin->getUL()>=100;
241 function isImpersonating() {
242 return isSess('_UserId') && isSess('UserId');
245 function isOffline() {
246 return (defined('OFFLINE') && OFFLINE);
249 function isOnline() {
253 function impersonate($userId=null) {
254 $wasImpersonating = isImpersonating();
255 if ($wasImpersonating) {
256 if (is_null($userId) || empty($userId)) {
257 sess('UserId',sess('_UserId'));
259 } elseif ($userId>0) {
260 sess('UserId',$userId);
264 } elseif (isLoggedIn()) {
265 sess('_UserId',sess('UserId'));
266 sess('UserId',$userId);
274 return isset($_SERVER['SERVER_PORT'])?($_SERVER['SERVER_PORT'] == 443):false;
277 function getSSLCert() {
278 if (DEVEL && file_exists('.forceauth')) {
279 $fu = explode('|',file_get_contents('.forceauth'));
280 $name = trim($fu[0]);
281 $email = trim($fu[1]);
283 $name = isset($_SERVER['SSL_CLIENT_S_DN_CN'])?$_SERVER['SSL_CLIENT_S_DN_CN']:null;
284 $email = isset($_SERVER['SSL_CLIENT_S_DN_Email'])?$_SERVER['SSL_CLIENT_S_DN_Email']:null;
286 if (!is_null($email)) {
287 $user = explode('@',$email);
289 return array('Username'=>$user, 'Name'=>$name, 'Email'=>$email);
297 function redirect($target=null,$secure=null) {
298 $base = (is_null($target)||substr($target,0,1)=='?')?$_SERVER['REDIRECT_URL']:(dirname($_SERVER['REDIRECT_URL']).'/');
299 redirectFull(is_null($target)?$base:($base.$target),$secure);
301 function redirectStart() {
302 redirectFull(BASE_URL,null);
304 function redirectFull($target,$secure) {
305 //redirect2((((isSSL()&&is_null($secure))||$secure==true)?'https://':'http://').$_SERVER['SERVER_NAME'].$target);
306 redirect2((((isSSL()&&is_null($secure))||$secure==true)?'https://scripts-cert.mit.edu':'http://scripts.mit.edu').$target);
308 function redirect2($target) {
309 header('Location: '.$target);
313 //return (isSSL()?'http://':'https://').$_SERVER['SERVER_NAME'].$_SERVER['REDIRECT_URL'];
314 return (isSSL()?'http://scripts.mit.edu':'https://scripts-cert.mit.edu').$_SERVER['REDIRECT_URL'];
319 function addUser($sslCredentials) {
320 global $_NEW_USER, $_NEW_USERQUOTA, $_NEW_USERSTAT;
322 $arr = array_merge($sslCredentials, $_NEW_USER);
323 $sql = sprintf("INSERT INTO User %s",
324 buildSQLInsert($arr));
325 $UserId = DBInsert($sql);
327 $arr = $_NEW_USERQUOTA;
328 $arr['UserId'] = $UserId;
329 $sql = sprintf("INSERT INTO UserQuota %s",
330 buildSQLInsert($arr));
333 $arr = $_NEW_USERSTAT;
334 $arr['UserId'] = $UserId;
335 $sql = sprintf("INSERT INTO UserStat %s",
336 buildSQLInsert($arr));
342 function addDB($dbname,$userid) {
343 global $_NEW_DB, $_NEW_DBQUOTA, $_NEW_DBOWNER;
345 DBCreate(sprintf('CREATE DATABASE `%s`', mysql_escape_string($dbname)));
346 if (mysql_error()) return false;
348 $newdb['Name'] = $dbname;
349 $arr = array_merge($newdb, $_NEW_DB);
350 $arr['bEnabled'] = 1;
351 $sql = sprintf("INSERT IGNORE INTO DB %s",
352 buildSQLInsert($arr));
353 $DBId = DBInsert($sql);
355 $sql = sprintf("SELECT DatabaseId FROM DB WHERE Name = '%s'",
356 mysql_escape_string($dbname));
357 $r = fetchRows(DBSelect($sql), 'DatabaseId');
359 $r = array_shift($r);
360 $DBId = $r['DatabaseId'];
364 $sql = sprintf("UPDATE DB SET %s WHERE DB.DatabaseId = '%s'",
370 DBDelete(sprintf("DELETE FROM DBOwner WHERE DatabaseId = '%s'", mysql_escape_string($DBId)));
371 DBDelete(sprintf("DELETE FROM DBQuota WHERE DatabaseId = '%s'", mysql_escape_string($DBId)));
373 $arr = $_NEW_DBQUOTA;
374 $arr['DatabaseId'] = $DBId;
375 $sql = sprintf("INSERT IGNORE INTO DBQuota %s",
376 buildSQLInsert($arr));
379 $arr = $_NEW_DBOWNER;
380 $arr['DatabaseId'] = $DBId;
381 $arr['UserId'] = $userid;
382 $sql = sprintf("INSERT IGNORE INTO DBOwner %s",
383 buildSQLInsert($arr));
389 function delDB($dbname) {
390 global $_NEW_DB, $_NEW_DBQUOTA, $_NEW_DBOWNER;
392 DBCreate(sprintf('DROP DATABASE `%s`', mysql_escape_string($dbname)));
394 $arr['bEnabled'] = 0;
395 $sql = sprintf("UPDATE DB SET %s WHERE DB.Name = '%s'",