You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
154 lines
3.8 KiB
PHP
154 lines
3.8 KiB
PHP
<?php
|
|
|
|
/*
|
|
+-----------------------------------------------------------------------+
|
|
| program/include/session.inc |
|
|
| |
|
|
| This file is part of the RoundCube Webmail client |
|
|
| Copyright (C) 2005-2009, RoundCube Dev. - Switzerland |
|
|
| Licensed under the GNU GPL |
|
|
| |
|
|
| PURPOSE: |
|
|
| Provide database supported session management |
|
|
| |
|
|
+-----------------------------------------------------------------------+
|
|
| Author: Thomas Bruederli <roundcube@gmail.com> |
|
|
+-----------------------------------------------------------------------+
|
|
|
|
$Id$
|
|
|
|
*/
|
|
|
|
|
|
function rcube_sess_open($save_path, $session_name)
|
|
{
|
|
return true;
|
|
}
|
|
|
|
|
|
function rcube_sess_close()
|
|
{
|
|
return true;
|
|
}
|
|
|
|
|
|
// read session data
|
|
function rcube_sess_read($key)
|
|
{
|
|
global $SESS_CHANGED, $SESS_CLIENT_IP;
|
|
|
|
$DB = rcmail::get_instance()->get_dbh();
|
|
|
|
$sql_result = $DB->query(
|
|
"SELECT vars, ip, " . $DB->unixtimestamp('changed') . " AS changed
|
|
FROM " . get_table_name('session') . "
|
|
WHERE sess_id=?",
|
|
$key);
|
|
|
|
if ($sql_arr = $DB->fetch_assoc($sql_result)) {
|
|
$SESS_CHANGED = $sql_arr['changed'];
|
|
$SESS_CLIENT_IP = $sql_arr['ip'];
|
|
|
|
if (strlen($sql_arr['vars']))
|
|
return $sql_arr['vars'];
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
|
|
// save session data
|
|
function rcube_sess_write($key, $vars)
|
|
{
|
|
$DB = rcmail::get_instance()->get_dbh();
|
|
|
|
$sql_result = $DB->query(
|
|
"SELECT 1 FROM " . get_table_name('session') . "
|
|
WHERE sess_id=?",
|
|
$key);
|
|
|
|
$now = $DB->fromunixtime(time());
|
|
|
|
if ($DB->num_rows($sql_result)) {
|
|
$DB->query(
|
|
"UPDATE " . get_table_name('session') . "
|
|
SET vars=?, changed= " . $now . "
|
|
WHERE sess_id=?",
|
|
$vars,
|
|
$key);
|
|
}
|
|
else {
|
|
$DB->query(
|
|
"INSERT INTO " . get_table_name('session') . "
|
|
(sess_id, vars, ip, created, changed)
|
|
VALUES (?, ?, ?, " . $now . ", " . $now .")",
|
|
$key,
|
|
$vars,
|
|
(string)$_SERVER['REMOTE_ADDR']);
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
// handler for session_destroy()
|
|
function rcube_sess_destroy($key)
|
|
{
|
|
$rcmail = rcmail::get_instance();
|
|
$DB = $rcmail->get_dbh();
|
|
|
|
$DB->query("DELETE FROM " . get_table_name('session') . " WHERE sess_id=?", $key);
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
// garbage collecting function
|
|
function rcube_sess_gc($maxlifetime)
|
|
{
|
|
$rcmail = rcmail::get_instance();
|
|
$DB = $rcmail->get_dbh();
|
|
|
|
// just delete all expired sessions
|
|
$DB->query("DELETE FROM " . get_table_name('session') . "
|
|
WHERE changed < " . $DB->fromunixtime(time() - $maxlifetime));
|
|
|
|
if ($rcmail->config->get('enable_caching'))
|
|
rcmail_cache_gc();
|
|
|
|
rcmail_temp_gc();
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
function rcube_sess_regenerate_id()
|
|
{
|
|
$randval = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
|
|
|
|
for ($random = "", $i=1; $i <= 32; $i++) {
|
|
$random .= substr($randval, rand(0,(strlen($randval) - 1)), 1);
|
|
}
|
|
|
|
// use md5 value for id or remove capitals from string $randval
|
|
$random = md5($random);
|
|
|
|
// delete old session record
|
|
rcube_sess_destroy(session_id());
|
|
|
|
session_id($random);
|
|
|
|
$cookie = session_get_cookie_params();
|
|
$lifetime = $cookie['lifetime'] ? time() + $cookie['lifetime'] : 0;
|
|
|
|
rcmail::setcookie(session_name(), $random, $lifetime);
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
// set custom functions for PHP session management
|
|
session_set_save_handler('rcube_sess_open', 'rcube_sess_close', 'rcube_sess_read', 'rcube_sess_write', 'rcube_sess_destroy', 'rcube_sess_gc');
|
|
|
|
?>
|