6 require_once('mitsql.lib.php');
11 function Login($u, $p=null) {
12 if (empty($u)) return;
17 $opt = sprintf(" UserId = '%s'", mysql_escape_string($u));
19 $opt = sprintf(" Username = '%s'", mysql_escape_string($u));
20 $opt .= (is_null($p)?'':sprintf(" AND Password='%s'", mysql_escape_string(base64_encode($p))));
22 $sql = sprintf("SELECT UserId, Username, Name, Email, UL, bEnabled
25 $r = fetchRows(DBSelect($sql),'UserId');
26 $this->info = count($r)?array_shift($r):$r;
29 return count($this->info);
32 return $this->getUL()>0;
34 function isEnabled() {
35 return $this->exists() && $this->info['bEnabled']==1;
38 return $this->isEnabled() && $this->isValid();
40 function canSignup() {
41 return !$this->isEnabled() && $this->isValid();
43 function getUserId() {
44 return $this->exists()?$this->info['UserId']:'';
46 function getUsername() {
47 return $this->exists()?$this->info['Username']:'';
50 return $this->exists()?$this->info['Name']:'';
53 return $this->exists()?$this->info['Email']:'';
56 return $this->exists()?$this->info['UL']:'';
61 function update($name=null,$email=null) {
62 if (!$this->exists()) return;
64 if ($name == $this->getName()) $name = null;
65 if ($email == $this->getEmail()) $email = null;
66 is_null($name) || $arr['Name'] = $name;
67 is_null($email) || $arr['Email'] = $email;
68 $upd = buildSQLSet($arr);
69 $sql = sprintf("UPDATE User SET %s WHERE UserId = '%s'",
70 $upd, mysql_escape_string($this->getUserId()));
71 if (!empty($upd) && $upd != 'SET')
73 if (isset($arr['Name']))
74 $this->info['Name'] = $arr['Name'];
75 if (isset($arr['Email']))
76 $this->info['Email'] = $arr['Email'];
84 function User($userId) {
85 $this->userId = $userId;
86 $sql = sprintf("SELECT User.UserId, Username, Name, Email, UL, bEnabled, nBytesSoft, nBytesHard, nBytes, nDatabases, nDatabasesHard, IF(nBytes>nBytesHard,1,0) AS bOverQuota
88 INNER JOIN UserQuota ON User.UserId = UserQuota.UserId
89 INNER JOIN UserStat ON User.UserId = UserStat.UserId
90 WHERE User.UserId = '%s'",
91 mysql_escape_string($userId));
92 $r = fetchRows(DBSelect($sql),'UserId');
93 $this->info = count($r)?array_shift($r):$r;
94 $this->dblist = $this->getDBList();
98 $this->User($this->userId);
100 $sql = sprintf("SELECT UserId, Username, Name, Email, UL, bEnabled
102 WHERE UserId = '%s'",
103 mysql_escape_string($this->userId));
104 $r = fetchRows(DBSelect($sql),'UserId');
105 $this->info = count($r)?array_shift($r):$r;
106 unset($this->dblist);
111 return count($this->info);
113 function getUserId() {
114 return $this->exists()?$this->info['UserId']:'';
116 function getUsername() {
117 return $this->exists()?$this->info['Username']:'';
119 function isOverQuota() {
120 return $this->exists()?($this->info['bOverQuota']>0?true:false):'';
122 function getDBQuotaHard() {
123 return $this->exists()?$this->info['nDatabasesHard']:0;
125 function getBytes() {
126 if($this->exists()) {
127 $arr['nBytes'] = $this->info['nBytes'];
128 $arr['nBytesSoft'] = $this->info['nBytesSoft'];
129 $arr['nBytesHard'] = $this->info['nBytesHard'];
133 function setPassword($pwd) {
134 $arr['Password'] = base64_encode($pwd);
135 $sql = sprintf("UPDATE User SET %s WHERE UserId = '%s'",
136 buildSQLSet($arr), mysql_escape_string($this->getUserId()));
138 $sql = sprintf('SET PASSWORD FOR \'%s\'@\'%%\'=PASSWORD(\'%s\')',
139 mysql_escape_string($this->getUsername()),
140 mysql_escape_string($pwd));
143 function signup($pwd) {
145 $arr['Password'] = base64_encode($pwd);
146 $arr['bEnabled'] = 1;
147 $arr['dSignup'] = 'NOW()';
148 $sql = sprintf("UPDATE User SET %s WHERE UserId = '%s'",
149 buildSQLSet($arr), mysql_escape_string($this->getUserId()));
155 function setUsage($yes=true) {
156 $verb = $yes?'GRANT':'REVOKE';
157 $prep = $yes?'TO':'FROM';
158 $suffix = $yes?sprintf("IDENTIFIED BY '%s'",mysql_escape_string($this->pass)):'';
159 $sql = sprintf("%s USAGE ON * . * %s '%s'@'%s' %s",
160 mysql_escape_string($verb),
161 mysql_escape_string($prep),
162 mysql_escape_string($this->getUsername()),
167 function setAccess($db=null,$yes=true) {
168 $verb = $yes?'GRANT':'REVOKE';
169 $prep = $yes?'TO':'FROM';
171 $dbs = $this->getDBList();
173 $dbs[] = array('Name'=>$db);
175 foreach($dbs as $db) {
177 $sql = sprintf("%s ALL PRIVILEGES ON `%s` . * %s '%s'@'%s'",
178 mysql_escape_string($verb),
179 mysql_escape_string($name),
180 mysql_escape_string($prep),
181 mysql_escape_string($this->getUsername()),
186 function getDBList() {
187 if (isset($this->dblist)) {
188 return $this->dblist;
190 // LEFT JOIN DBQuota ON DBQuota.DatabaseId = DBOwner.DatabaseId
191 $sql = sprintf("SELECT *
193 INNER JOIN DB ON DB.DatabaseId = DBOwner.DatabaseId
194 INNER JOIN DBQuota ON DBQuota.DatabaseId = DBOwner.DatabaseId
195 WHERE DBOwner.UserId = '%s' AND DB.bEnabled=1",
196 mysql_escape_string($this->getUserId()));
197 // $r = fetchRows(DBSelect($sql),'DatabaseId');
198 $r = fetchRows(DBSelect($sql),'Name');
203 function addDB($name) {
204 if (in_array($name, array_keys($this->getDBList()))) return false;
205 if (!addDB($name, $this->getUserId())) return false;
206 $this->setAccess($name);
209 function delDB($name) {
210 if (!in_array($name, array_keys($this->getDBList()))) return false;
211 if (!delDB($name)) return false;//, $this->getUserId())) return false;
212 $this->setAccess($name,false);
218 function isLoggedIn($aLogin=null) {
219 if (is_null($aLogin)) {
223 return !empty($aLogin) && ($aLogin instanceof Login) && $aLogin->canLogin();
226 function isAdmin($aLogin=null) {
227 if (is_null($aLogin)) {
231 return !empty($aLogin) && ($aLogin instanceof Login) && $aLogin->getUL()>=100;
234 function isImpersonating() {
235 return isSess('_UserId') && isSess('UserId');
238 function isOffline() {
239 return (defined('OFFLINE') && OFFLINE);
242 function isOnline() {
246 function impersonate($userId=null) {
247 $wasImpersonating = isImpersonating();
248 if ($wasImpersonating) {
249 if (is_null($userId) || empty($userId)) {
250 sess('UserId',sess('_UserId'));
252 } elseif ($userId>0) {
253 sess('UserId',$userId);
257 } elseif (isLoggedIn()) {
258 sess('_UserId',sess('UserId'));
259 sess('UserId',$userId);
267 return isset($_SERVER['SERVER_PORT'])?($_SERVER['SERVER_PORT'] == 443):false;
270 function getSSLCert() {
271 if (DEVEL && file_exists('.forceauth')) {
272 $fu = explode('|',file_get_contents('.forceauth'));
273 $name = trim($fu[0]);
274 $email = trim($fu[1]);
276 $name = isset($_SERVER['SSL_CLIENT_S_DN_CN'])?$_SERVER['SSL_CLIENT_S_DN_CN']:null;
277 $email = isset($_SERVER['REMOTE_USER'])?$_SERVER['REMOTE_USER']:null;
279 if (!is_null($email)) {
280 $user = explode('@',$email);
282 return array('Username'=>$user, 'Name'=>$name, 'Email'=>$email);
288 function getUsernameID($username) {
289 $sql = sprintf("SELECT UserId FROM User USE INDEX (UsernameID) WHERE Username = '%s'", mysql_escape_string($username));
290 $r = fetchRows(DBSelect($sql), 'UserId');
291 $r = array_shift($r);
292 return count($r)?$r['UserId']:null;
297 function redirect($target=null,$secure=null) {
298 $base = (is_null($target)||substr($target,0,1)=='?')?URI:((strlen(dirname(URI))>1?dirname(URI).'/':'/'));
299 redirectFull(is_null($target)?$base:($base.$target),$secure);
301 function redirectStart() {
302 redirectFull(BASE_URL,null);
304 function redirectFull($target,$secure) {
305 redirect2((((isSSL()&&is_null($secure))||$secure==true)?BASE_HTTPS:BASE_HTTP).$target);
307 function redirect2($target) {
308 header('Location: '.$target);
312 return (isSSL()?BASE_HTTP:BASE_HTTPS).URI;
317 function addUser($sslCredentials) {
318 global $_NEW_USER, $_NEW_USERQUOTA, $_NEW_USERSTAT;
320 $arr = array_merge($sslCredentials, $_NEW_USER);
321 $sql = sprintf("INSERT INTO User %s",
322 buildSQLInsert($arr));
323 $UserId = DBInsert($sql);
325 $arr = $_NEW_USERQUOTA;
326 $arr['UserId'] = $UserId;
327 $sql = sprintf("INSERT INTO UserQuota %s",
328 buildSQLInsert($arr));
331 $arr = $_NEW_USERSTAT;
332 $arr['UserId'] = $UserId;
333 $sql = sprintf("INSERT INTO UserStat %s",
334 buildSQLInsert($arr));
340 function addDB($dbname,$userid) {
341 global $_NEW_DB, $_NEW_DBQUOTA, $_NEW_DBOWNER;
343 DBCreate(sprintf('CREATE DATABASE `%s`', mysql_escape_string($dbname)));
344 if (mysql_error()) return false;
346 $newdb['Name'] = $dbname;
347 $arr = array_merge($newdb, $_NEW_DB);
348 $arr['bEnabled'] = 1;
349 $sql = sprintf("INSERT IGNORE INTO DB %s",
350 buildSQLInsert($arr));
351 $DBId = DBInsert($sql);
353 $sql = sprintf("SELECT DatabaseId FROM DB WHERE Name = '%s'",
354 mysql_escape_string($dbname));
355 $r = fetchRows(DBSelect($sql), 'DatabaseId');
357 $r = array_shift($r);
358 $DBId = $r['DatabaseId'];
362 $sql = sprintf("UPDATE DB SET %s WHERE DB.DatabaseId = '%s'",
368 DBDelete(sprintf("DELETE FROM DBOwner WHERE DatabaseId = '%s'", mysql_escape_string($DBId)));
369 DBDelete(sprintf("DELETE FROM DBQuota WHERE DatabaseId = '%s'", mysql_escape_string($DBId)));
371 $arr = $_NEW_DBQUOTA;
372 $arr['DatabaseId'] = $DBId;
373 $sql = sprintf("INSERT IGNORE INTO DBQuota %s",
374 buildSQLInsert($arr));
377 $arr = $_NEW_DBOWNER;
378 $arr['DatabaseId'] = $DBId;
379 $arr['UserId'] = $userid;
380 $sql = sprintf("INSERT IGNORE INTO DBOwner %s",
381 buildSQLInsert($arr));
387 function delDB($dbname) {
388 global $_NEW_DB, $_NEW_DBQUOTA, $_NEW_DBOWNER;
390 DBCreate(sprintf('DROP DATABASE `%s`', mysql_escape_string($dbname)));
392 $arr['bEnabled'] = 0;
393 $sql = sprintf("UPDATE DB SET %s WHERE DB.Name = '%s'",