From Code to Community: Sponsoring The Perl and Raku Conference 2025 Learn more

DMOW / Eludia-10.01.15.7423a8a / Eludia-10.01.15.7423a8a / Eludia / Content / Auth.pm 

            

              
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127

              
no warnings;
################################################################################
sub start_session {
        my ($id_user) = @_;
        sql_do ("DELETE FROM $conf->{systables}->{sessions} WHERE id_user = ?", $id_user);
        while (1) {
                $_REQUEST {sid} = int (rand () * time ()) . int (rand () * time ());
                 
                sql_select_scalar ("SELECT id FROM $conf->{systables}->{sessions} WHERE id = ?", $_REQUEST {sid}) or last;
                 
        }
        sql_do ("INSERT INTO $conf->{systables}->{sessions} (ts, id, id_user) VALUES (NOW(), ?, ?)", $_REQUEST {sid}, $id_user);
         
        session_access_logs_purge ();
}
################################################################################
sub refresh_sessions {
        return if $_REQUEST {__suggest};
        my $time = time;
        sql_do_refresh_sessions ();
        __log_profilinig ($time, ' <refresh_sessions>');
         
}
################################################################################
sub get_user_sql {
        my ($users, $sessions, $roles) = map {$conf -> {systables} -> {$_}} qw (users sessions roles);
         
        my @session_fields = qw (ip ip_fw client_cookie);
         
        push @session_fields, 'tz_offset' if $preconf -> {core_fix_tz};
        <<EOS;
                SELECT
                        $users.*
                        , $roles.name AS role
                        , $roles.label AS role_label
                        @{[ map {', ' . $sessions . '.' . $_} @session_fields]}
                FROM
                        $sessions
                        LEFT JOIN $users ON (
                                $sessions.id_user = $users.id
                                AND $users.fake <> -1
                        )
                        LEFT JOIN $roles ON $users.id_role = $roles.id
                WHERE
                        $sessions.id = ?
EOS
}
################################################################################
sub get_user_with_fixed_session {
        my ($peer_server) = @_;
         
        $_REQUEST {sid} or return undef;
        my $time = time ();                             
        my $user = sql_select_hash ($preconf -> {_} -> {sql} -> {get_user} ||= get_user_sql (), $_REQUEST {sid});
        __log_profilinig ($time, ' <get_user>');
         
        $user -> {id} or return undef;
         
        $user -> {peer_server} = $peer_server;
         
        if (!$preconf -> {core_no_cookie_check} && !$peer_server) {
                 
                $_COOKIE {client_cookie} or return undef;
                if ($user -> {client_cookie}) {
                        $user -> {client_cookie} eq $_COOKIE {client_cookie} or return undef;
                }
         
        }
         
        if ($user -> {ip}) {
         
                $user -> {ip}    eq $ENV {REMOTE_ADDR}          or return undef;
                $user -> {ip_fw} eq $ENV {HTTP_X_FORWARDED_FOR} or return undef;
                 
        }
        return $user;
}
################################################################################
sub get_user {
         
        refresh_sessions ();
        foreach (@{$preconf -> {_} -> {pre_auth}}) {&$_ ()};
         
        my $user = get_user_with_fixed_session (check_peer_server ());
         
        defined $user and $user -> {id} or delete $_REQUEST {sid};
        foreach (@{$preconf -> {_} -> {post_auth}}) {&$_ ()};
         
        return $user;
}
1;