user.php

Go to the documentation of this file.

<?php
/***************************************************************************
 This program is free software; you can redistribute it and/or
 modify it under the terms of the GNU General Public License
 as published by the Free Software Foundation; either version 2
 of the License, or (at your option) any later version.

 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.

 You should have received a copy of the GNU General Public License
 along with this program; if not, write to the Free Software
 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 ***************************************************************************/

class User
{
    var $oDB;           
    var $oLog;          
    var $aAdmin;        
    var $aAdminArrays;  
    var $aRights;       
    var $intUserID;
    var $strUser;       
    var $strPasswd;     
    var $booLoggedIn;   
    var $cookie_name;   
    var $intHomeX;
    var $intHomeY;
    var $intLastX;
    var $intLastY;
    var $intZoom;
    var $intSizeX;
    var $intSizeY;
    var $intFog;            
    var $intDruidFill;      
    var $intDruidBorder;    
    var $intUnit;
    var $intPlayer;         
    var $aTowns;
    var $intLimitView;

    function User( &$oDB, &$oLog, &$aAdmin, $aAdminArrays, $strCookie )
    {
        $this->oDB =& $oDB;
        $this->oLog =& $oLog;
        $this->aAdmin =& $aAdmin;
        $this->aAdminArrays = $aAdminArrays;
        $this->cookie_name = $strCookie;
        $this->_clearUser();
    }


    function checklogin()
    {
        $this->booLoggedIn = false;

        // check if cookies are set
        if( isset( $_COOKIE[$this->cookie_name]['login']) && isset( $_COOKIE[$this->cookie_name]['pass'] ) )
        {
            $this->strUser = $_COOKIE[$this->cookie_name]['login'];
            $this->strPasswd = $_COOKIE[$this->cookie_name]['pass'];

            // get admin fields in db
            $strAdmin = '';
            foreach( $this->aAdminArrays AS $strField )
            {
                $strAdmin .= ', g.'.$strField;
            }

            $this->oDB->query("SELECT p.name AS pname, u.*$strAdmin
                               FROM `".$this->oDB->tblUser."` u
                               LEFT JOIN ".$this->oDB->tblUsergroup." g USING (usergroup_id)
                               LEFT JOIN ".$this->oDB->tblPlayer." p ON (u.player_id=p.player_id)
                               WHERE u.`name`='".$this->strUser."' AND u.`pass` = '".$this->strPasswd."'");
            $aRow = $this->oDB->fetch_assoc();
            if( $aRow['name'] == $this->strUser )
            {
                $this->_setUser( $aRow );
            }
            else
            {
                $this->oLog->write( 'login cookies incorrect', 3 );
                $this->logout();
            }
        }
        elseif( isset( $_SERVER['HTTP_WDSMAP_USER'] ) && isset( $_SERVER['HTTP_WDSMAP_PASSWORD'] ) && preg_match( '/^WDSMAP\//ui', $_SERVER['HTTP_USER_AGENT'] ) )
        {
            $this->strUser = $_SERVER['HTTP_WDSMAP_USER'];
            $this->strPasswd = $_SERVER['HTTP_WDSMAP_PASSWORD'];

            // get admin fields in db
            $strAdmin = '';
            foreach( $this->aAdminArrays AS $strField )
            {
                $strAdmin .= ', g.'.$strField;
            }

            $this->oDB->query("SELECT p.name AS pname, u.*$strAdmin
                               FROM `".$this->oDB->tblUser."` u
                               LEFT JOIN ".$this->oDB->tblUsergroup." g USING (usergroup_id)
                               LEFT JOIN ".$this->oDB->tblPlayer." p ON (u.player_id=p.player_id)
                               WHERE u.`name`='".$this->strUser."' AND u.`pass` = '".$this->strPasswd."'");
            $aRow = $this->oDB->fetch_assoc();
            if( $aRow['name'] == $this->strUser )
            {
                $this->_setUser( $aRow );
            }
            else
            {
                header("phpmap-ReturnCode: 1");
                header("phpmap-ErrorMessage: Invalid login");
                die();
            }
        }

        return( $this->booLoggedIn );
    }

    function login( $strLoginName, $strPass )
    {
        $this->booLoggedIn = false;

        // check for empty name
        if( trim( $strLoginName ) == '' ) return false;

        // get admin fields in db
        $strAdmin = '';
        foreach( $this->aAdminArrays AS $strField )
        {
            $strAdmin .= ', g.'.$strField;
        }

        $this->oDB->query("SELECT p.name AS pname, u.*$strAdmin
                           FROM `".$this->oDB->tblUser."` u
                           LEFT JOIN ".$this->oDB->tblUsergroup." g USING (usergroup_id)
                           LEFT JOIN ".$this->oDB->tblPlayer." p ON (u.player_id=p.player_id)
                           WHERE u.`name`='".$strLoginName."' AND u.`pass`='".md5($strPass)."';");

        $aRow = $this->oDB->fetch_assoc();
        if( $aRow['name'] == $strLoginName )
        {
            $this->strUser = $aRow['name'];
            $this->strPasswd = $aRow['pass'];
            $this->_setUser( $aRow );
        }

        return( $this->booLoggedIn );
    }

    function logout()
    {
        setcookie( $this->cookie_name . '[login]', '', -1000 );
        setcookie( $this->cookie_name . '[pass]',  '', -1000 );
        $this->oLog->write( 'logout', 3 );
        $this->_clearUser();
    }

    function isAdmin( $strRight )
    {
        // check in which array this right is set
        foreach( $this->aAdminArrays AS $intKey => $strField )
        {
            if( isset( $this->aAdmin[$intKey][$strRight] ) && isset( $this->aRights[$intKey] ) )
            {
                return( ( $this->aRights[$intKey] & $this->aAdmin[$intKey][$strRight] ) > 0 );
            }
        }
        return false;
    }

    function check( $x, $y )
    {
        if( $this->intLimitView == 0 )
        {
            // the user's view is not limited
            return true;
        }

        if( empty( $this->aTowns ) )
        {
            // check x and y
            return ( $x > ( $this->intHomeX - $this->intLimitView) )
                && ( $x < ( $this->intHomeX + $this->intLimitView) )
                && ( $y > ( $this->intHomeY - $this->intLimitView) )
                && ( $y < ( $this->intHomeY + $this->intLimitView) );
        }

        $booReturn = false;
        // check view for each of his towns
        foreach( $this->aTowns AS $aTown )
        {
            $booReturn = $booReturn || ( $x > ( $aTown['x']- $this->intLimitView) )
                && ( $x < ( $aTown['x'] + $this->intLimitView) )
                && ( $y > ( $aTown['y'] - $this->intLimitView) )
                && ( $y < ( $aTown['y'] + $this->intLimitView) );
        }
        return $booReturn;

    }

    function giveRight( $strRight )
    {
        // check in which array this right is set
        foreach( $this->aAdminArrays AS $intKey => $strField )
        {
            if( isset( $this->aAdmin[$intKey][$strRight] ) )
            {
                $this->aRights[$intKey] += $this->aAdmin[$intKey][$strRight];
            }
        }
    }

    function _clearUser()
    {
        $this->booLoggedIn = false;
        $this->intUserID      = -1;
        $this->strUser        = '';
        $this->strPasswd      = '';
        $this->intHomeX       = 0;
        $this->intHomeY       = 0;
        $this->intLastX       = 0;
        $this->intLastY       = 0;
        $this->intZoom        = 0;
        $this->intSizeX       = 640;
        $this->intSizeY       = 320;
        $this->intFog         = 0;
        $this->intDruidFill   = 1;
        $this->intDruidBorder = 1;
        $this->intUnit        = 0;
        $this->intLimitView   = 0;
        $this->intPlayer      = 0;
        $this->aRights        = array();
    }

    function _setUser( $aRow )
    {
        $this->booLoggedIn    = true;
        $this->intUserID      = $aRow['user_id'];
        //  $this->strUser     = ...            user and password are already set
        //  $this->strPasswd   = ...
        $this->intHomeX     = $aRow['home_x'];
        $this->intHomeY     = $aRow['home_y'];
        $this->intLastX     = $aRow['last_x'];
        $this->intLastY     = $aRow['last_y'];
        $this->intZoom      = $aRow['zoom_last'];
        $this->intSizeX     = $aRow['size_x'];
        $this->intSizeY     = $aRow['size_y'];
        $this->intFog       = $aRow['show_fog'];
        $this->intTownFill  = $aRow['show_town_fill'];
        $this->intTownSight = $aRow['show_town_sight'];
        $this->intUnit      = $aRow['show_unit'];
        $this->intPlayer    = $aRow['player_id'];
        $this->strPlayer    = $aRow['pname'];

        $this->aTowns = array();
        if( $this->intPlayer > 1 )
        {
            $sqlResult = $this->oDB->query( "SELECT town_id, player_id, x, y, name FROM ".$this->oDB->tblTown." WHERE player_id='".$this->intPlayer."';" );
            while( $aRow2 = $this->oDB->fetch_assoc( $sqlResult ) )
            {
                $this->aTowns[] = $aRow2;
            }
        }

        // set admin rights
        foreach( $this->aAdminArrays AS $intKey => $strField )
        {
            $this->aRights[$intKey] = $aRow[$strField];
        }
        $this->intLimitView = $this->isAdmin( 'limit_view' ) ? 50 : 0;

        $this->oDB->query("UPDATE ".$this->oDB->tblUser." SET lastlogin = ".time()." WHERE user_id='".$this->intUserID."'");
        // Fehlerbehandlung

        // user is valid, set cookie for 7 days
        setcookie( $this->cookie_name . '[login]', $aRow['name'], time()+7*24*60*60);
        setcookie( $this->cookie_name . '[pass]',  $aRow['pass'], time()+7*24*60*60);
    }
}

---