| | |
| | | <?php |
| | | |
| | | /* |
| | | /** |
| | | +-----------------------------------------------------------------------+ |
| | | | This file is part of the Roundcube Webmail client | |
| | | | Copyright (C) 2005-2014, The Roundcube Dev Team | |
| | |
| | | +-----------------------------------------------------------------------+ |
| | | | Author: Thomas Bruederli <roundcube@gmail.com> | |
| | | | Author: Aleksander Machniak <alec@alec.pl> | |
| | | | Author: Cor Bosman <cor@roundcu.be> | |
| | | | Author: Cor Bosman <cor@roundcu.be> | |
| | | +-----------------------------------------------------------------------+ |
| | | */ |
| | | |
| | |
| | | */ |
| | | abstract class rcube_session |
| | | { |
| | | protected $config; |
| | | protected $key; |
| | | protected $ip; |
| | | protected $changed; |
| | | protected $start; |
| | | protected $time_diff = 0; |
| | | protected $reloaded = false; |
| | | protected $appends = array(); |
| | | protected $unsets = array(); |
| | | protected $gc_handlers = array(); |
| | | protected $cookiename = 'roundcube_sessauth'; |
| | | protected $vars; |
| | | protected $now; |
| | | protected $secret = ''; |
| | | protected $ip_check = false; |
| | | protected $logging = false; |
| | | protected $config; |
| | | protected $time_diff = 0; |
| | | protected $reloaded = false; |
| | | protected $appends = array(); |
| | | protected $unsets = array(); |
| | | protected $gc_handlers = array(); |
| | | protected $cookiename = 'roundcube_sessauth'; |
| | | protected $secret = ''; |
| | | protected $ip_check = false; |
| | | protected $logging = false; |
| | | |
| | | /** |
| | | * Blocks session data from being written to database. |
| | |
| | | ); |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Wrapper for session_start() |
| | | */ |
| | |
| | | abstract function write($key, $vars); |
| | | abstract function update($key, $newvars, $oldvars); |
| | | |
| | | |
| | | /** |
| | | * session write handler. This calls the implementation methods for write/update after some initial checks. |
| | | * |
| | | * @param $key |
| | | * @param $vars |
| | | * |
| | | * @return bool |
| | | */ |
| | | public function sess_write($key, $vars) |
| | |
| | | return $this->write($key, $vars); |
| | | } |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Wrapper for session_write_close() |
| | |
| | | $this->gc_handlers[] = $func; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Garbage collector handler to run on script shutdown |
| | | */ |
| | |
| | | } |
| | | } |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Generate and set new session id |
| | |
| | | return $cache; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Append the given value to the certain node in the session data array |
| | | * |
| | |
| | | unset($this->unsets[$path]); |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Unset a session variable |
| | | * |
| | |
| | | return true; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Kill this session |
| | | */ |
| | | public function kill() |
| | | { |
| | | $this->vars = null; |
| | | $this->ip = rcube_utils::remote_addr(); // update IP (might have changed) |
| | | $this->ip = rcube_utils::remote_addr(); // update IP (might have changed) |
| | | $this->destroy(session_id()); |
| | | rcube_utils::setcookie($this->cookiename, '-del-', time() - 60); |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Re-read session data from storage backend |
| | |
| | | |
| | | return $data; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Unserialize session data |
| | |
| | | return unserialize( 'a:' . $items . ':{' . $serialized . '}' ); |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Setter for session lifetime |
| | | */ |
| | |
| | | $this->now = $now - ($now % ($this->lifetime / 2)); |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Getter for remote IP saved with this session |
| | | */ |
| | |
| | | { |
| | | return $this->ip; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Setter for cookie encryption secret |
| | |
| | | $this->secret = $secret; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Enable/disable IP check |
| | | */ |
| | |
| | | { |
| | | $this->ip_check = $check; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Setter for the cookie name used for session cookie |
| | |
| | | $this->cookiename = $cookiename; |
| | | } |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Check session authentication cookie |
| | |
| | | return $result; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Set session authentication cookie |
| | | */ |
| | |
| | | rcube_utils::setcookie($this->cookiename, $this->cookie, 0); |
| | | $_COOKIE[$this->cookiename] = $this->cookie; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Create session cookie from session data |