Newer
Older
<?php
class remoting {
//* remote session timeout in seconds
private $session_timeout = 600;
//* remote login function
public function login($username, $password)
{
global $app, $conf, $server;
$server->fault('login_username_empty', 'The login username is empty');
return false;
}
if(empty($password)) {
$server->fault('login_password_empty', 'The login password is empty');
return false;
}
$username = $app->db->quote($username);
$password = $app->db->quote($password);
$sql = "SELECT * FROM remote_user WHERE remote_username = '$username' and remote_password = md5('$password')";
$remote_user = $app->db->queryOneRecord($sql);
if($remote_user['remote_userid'] > 0) {
//* Create a remote user session
srand ((double)microtime()*1000000);
$remote_session = md5(rand());
$remote_userid = $remote_user['remote_userid'];
$remote_functions = $remote_user['remote_functions'];
$tstamp = time() + $this->session_timeout;
$sql = "INSERT INTO remote_session (remote_session,remote_userid,remote_functions,tstamp) VALUES ('$remote_session',$remote_userid,'$remote_functions',$tstamp)";
$app->db->query($sql);
return $remote_session;
} else {
$server->fault('login_failed', 'The login failed. Username or password wrong.');
return false;
}
}
//* remote logout function
public function logout($session_id)
{
global $app, $conf, $server;
return false;
}
$session_id = $app->db->quote($session_id);
$sql = "DELETE FROM remote_session WHERE remote_session = '$session_id'";
$app->db->query($sql);
if($app->db->affectedRows() == 1) {
return true;
} else {
return false;
}
}
public function mail_domain_add($session_id, $params)
{
global $app, $conf, $server;
$server->fault('permission_denied','You do not have the permissions to access this function.');
return false;
}
//* Form definition file, that is used for this table in the interafce
$formdef = '../mail/form/mail_domain.tform.php';
//* check the variables against the form definition and build the sql query automatically.
// I will use a modified version of the tform class for this.
}
//** private functions -----------------------------------------------------------------------------------
$session = $this->getSession($session_id);
if(!$session){
return false;
}
return in_array($function_name, explode(',', $session['remote_functions']) );
private function getSession($session_id)
{
global $app, $conf, $server;
if(empty($session_id)) {
$server->fault('session_id_empty','The SessionID is empty.');
return false;
}
$session_id = $app->db->quote($session_id);
$now = time();
$sql = "SELECT * FROM remote_session WHERE remote_session = '$session_id' AND tstamp >= $now";
$session = $app->db->queryOneRecord($sql);
if($session['remote_userid'] > 0) {
return $session;
} else {
$server->fault('session_does_not_exist','The Session is expired or does not exist.');
return false;
}
}
}
?>