Subversion Repositories php_library

<?php

const LOGIN_DB_VERSION = "1.0";

/* 

 * Login Class

 * by Randell R. Miller

 * Initial Development Started: 10-6-2020

 */

class login {

    private $username; //User's Username

    private $email; //User's email

    private $password; //User's Password

    private $issuperadmin; //Is this user a superadmin

    private $db; //The database object

    private $prefix; //The table prefix to be used for the login tables

    function __construct($db, $prefix = "_login", $username=null, $password = null) {

        //Grab the db object

        $this->db = $db;

        //Check the database

        @$this->prefix = $prefix;

        $this->checkDatabase();

        //Check if a user is being given.

        @$this->username = $username;

        @$this->password = $password;

        if(!isset($this->username) || !isset($this->password)) {

            //No user or password supplied in constructor, check to see if they were supplied via a form...

            @$username = $_POST['username'];

            @$password = $_POST['password'];

            if(!isset($username) || !isset($password)) {

                //We're missing login info.

                return;

            } else {

                $this->username = $username;

                $this->password = $password;

            }

        }

        //Do we have a user?

        $sql = "select user_email, user_superadmin from {$this->prefix}_users where user_name='$this->username' and user_password=PASSWORD('{$this->password}');";

        if($result = $this->db->query($sql)) {

            //Successful...

            $row = $result->fetch_assoc();

            $this->email = $row['user_email'];

            $this->issuperadmin = $row['user_superadmin'];

        } else {

            echo "<pre>Login failed.\n$sql</pre>";

        }

        //echo "Login system init successful."; //This is a debug message.  Remove later.

    }

    private function checkDatabase() {

        //Check to make sure the database is working correctly.

        $sql = "select option_value from {$this->prefix}_options where option_name = 'db_version'";

        if($result = $this->db->query($sql)) {

            $row = $result->fetch_assoc();

            if(isset($row['option_value']) && $row['option_value'] < LOGIN_DB_VERSION) {

                //Do any upgrades to the DB here.

                echo "<pre>Database is older than current version.";

            } elseif(!isset($row['option_value'])) {

                //We failed to read the database value

                die("Failed to read database value from login database table.\n$sql"); //Unrecoverable error

            } else {

                //Correct version...

                //echo "<pre>Version matching: ({$row['option_value']} - " . LOGIN_DB_VERSION . ")</pre>"; //Debug message.  Remove.

            }

        } else {

            //We had some sort of error...

            if($this->db->errno === 1146) {

                //Table does not exist.

                echo "<pre>Login table does not exist.  Assuming first run and creating table with default data.<pre>";

                $this->createDatabase();

            } else {

                echo "<pre>Error reading database.\n$sql\n{$this->db->error}\n{$this->db->errno}";

                die("Login class could not read database.\n$sql\n{$this->db->error}\n{$this->db->errno}");

            }

        }

    }

    private function createDatabase() {

        //Use this function to create the database

        $sql = "

CREATE TABLE `{$this->prefix}_options` (

	`option_id` INT NOT NULL AUTO_INCREMENT,

	`option_name` VARCHAR(255) NOT NULL,

	`option_value` VARCHAR(255) NOT NULL,

	PRIMARY KEY (`option_id`)

) ENGINE=InnoDB;                 

INSERT INTO `{$this->prefix}_options` (`option_name`,`option_value`) VALUES ('db_version','" . LOGIN_DB_VERSION . "');

CREATE TABLE `{$this->prefix}_users` (

	`user_id` INT NOT NULL AUTO_INCREMENT,

	`user_name` VARCHAR(255) NOT NULL,

	`user_email` VARCHAR(255) NOT NULL,

	`user_password` VARCHAR(255) NOT NULL,

	`user_superadmin` INT(1) NOT NULL DEFAULT '0',

	PRIMARY KEY (`user_id`)

) ENGINE=InnoDB;

INSERT INTO `{$this->prefix}_users` (`user_name`,`user_email`, `user_password`, `user_superadmin`) VALUES ('dailydata','support@dailydata.net',PASSWORD('los,vce'),1);

";

        if($result = $this->db->multi_query($sql)) {

            //Success

        } else {

            //Failed

            echo "<pre>Error crecting database for first run.\n$sql\n{$this->db->error}\n{$this->db->errno}</pre>";

        }

    }

    private function updateDatabase() {

        //Use this function to update the database

    }

    function displayUser() {

        echo "<span class='login_box'>";

        if(isset($this->email) && isset($this->issuperadmin)) {

            //If we have a logged in user, display them here along with a button to logout.    

            echo "Currently Logged In: {$this->username}";

            echo " <form method='post'><button type='submit' name='logout' value='true'>Logout</button>";

        } else {

            //User is not logged in.  Display a login form.

            echo "<form method='post'>";

            echo "<input name='username' placeholder='username'> <br />";

            echo "<input name='password' placeholder='password' type='password'><br />";

            echo "<button type='submit' name='login' value='true'>Login</button>";

            echo "</form>";

        }

        echo "</span>";

    }

    private function handel_login_form() {

    }

    private function handel_logout_form() {

    }

}