| | |
| | | private $prev; |
| | | private $secret = ''; |
| | | private $ip_check = false; |
| | | private $logging = false; |
| | | private $keep_alive = 0; |
| | | private $memcache; |
| | | |
| | |
| | | */ |
| | | public function __construct($db, $config) |
| | | { |
| | | $this->db = $db; |
| | | $this->start = microtime(true); |
| | | $this->ip = $_SERVER['REMOTE_ADDR']; |
| | | $this->db = $db; |
| | | $this->start = microtime(true); |
| | | $this->ip = $_SERVER['REMOTE_ADDR']; |
| | | $this->logging = $config->get('log_session', false); |
| | | $this->mc_debug = $config->get('memcache_debug', false); |
| | | |
| | | $lifetime = $config->get('session_lifetime', 1) * 60; |
| | | $this->set_lifetime($lifetime); |
| | | |
| | | // use memcache backend |
| | | if ($config->get('session_storage', 'db') == 'memcache') { |
| | | $this->memcache = new Memcache; |
| | | $mc_available = 0; |
| | | foreach ($config->get('memcache_hosts', array()) as $host) { |
| | | list($host, $port) = explode(':', $host); |
| | | if (!$port) $port = 11211; |
| | | // add server and attempt to connect if not already done yet |
| | | if ($this->memcache->addServer($host, $port) && !$mc_available) |
| | | $mc_available += intval($this->memcache->connect($host, $port)); |
| | | } |
| | | $this->memcache = rcmail::get_instance()->get_memcache(); |
| | | |
| | | // set custom functions for PHP session management if memcache is available |
| | | if ($mc_available) { |
| | | if ($this->memcache) { |
| | | session_set_save_handler( |
| | | array($this, 'open'), |
| | | array($this, 'close'), |
| | |
| | | public function db_read($key) |
| | | { |
| | | $sql_result = $this->db->query( |
| | | sprintf("SELECT vars, ip, %s AS changed FROM %s WHERE sess_id = ?", |
| | | $this->db->unixtimestamp('changed'), get_table_name('session')), |
| | | $key); |
| | | "SELECT vars, ip, changed FROM ".get_table_name('session') |
| | | ." WHERE sess_id = ?", $key); |
| | | |
| | | if ($sql_arr = $this->db->fetch_assoc($sql_result)) { |
| | | $this->changed = $sql_arr['changed']; |
| | | if ($sql_result && ($sql_arr = $this->db->fetch_assoc($sql_result))) { |
| | | $this->changed = strtotime($sql_arr['changed']); |
| | | $this->ip = $sql_arr['ip']; |
| | | $this->vars = base64_decode($sql_arr['vars']); |
| | | $this->key = $key; |
| | |
| | | $ts = microtime(true); |
| | | $now = $this->db->fromunixtime((int)$ts); |
| | | |
| | | // no session row in DB (db_read() returns false) |
| | | if (!$this->key) { |
| | | $oldvars = false; |
| | | } |
| | | // use internal data from read() for fast requests (up to 0.5 sec.) |
| | | if ($key == $this->key && (!$this->vars || $ts - $this->start < 0.5)) { |
| | | else if ($key == $this->key && (!$this->vars || $ts - $this->start < 0.5)) { |
| | | $oldvars = $this->vars; |
| | | } else { // else read data again from DB |
| | | } |
| | | else { // else read data again from DB |
| | | $oldvars = $this->db_read($key); |
| | | } |
| | | |
| | |
| | | */ |
| | | private function _fixvars($vars, $oldvars) |
| | | { |
| | | $ts = microtime(true); |
| | | |
| | | if ($oldvars !== false) { |
| | | $a_oldvars = $this->unserialize($oldvars); |
| | | if (is_array($a_oldvars)) { |
| | |
| | | */ |
| | | public function mc_read($key) |
| | | { |
| | | if ($value = $this->memcache->get($key)) { |
| | | $arr = unserialize($value); |
| | | $value = $this->memcache->get($key); |
| | | if ($this->mc_debug) write_log('memcache', "get($key): " . strlen($value)); |
| | | if ($value && ($arr = unserialize($value))) { |
| | | $this->changed = $arr['changed']; |
| | | $this->ip = $arr['ip']; |
| | | $this->vars = $arr['vars']; |
| | |
| | | { |
| | | $ts = microtime(true); |
| | | |
| | | // no session data in cache (mc_read() returns false) |
| | | if (!$this->key) |
| | | $oldvars = false; |
| | | // use internal data for fast requests (up to 0.5 sec.) |
| | | if ($key == $this->key && (!$this->vars || $ts - $this->start < 0.5)) |
| | | else if ($key == $this->key && (!$this->vars || $ts - $this->start < 0.5)) |
| | | $oldvars = $this->vars; |
| | | else // else read data again |
| | | $oldvars = $this->mc_read($key); |
| | | |
| | | $newvars = $oldvars !== false ? $this->_fixvars($vars, $oldvars) : $vars; |
| | | |
| | | if ($newvars !== $oldvars || $ts - $this->changed > $this->lifetime / 2) |
| | | return $this->memcache->set($key, serialize(array('changed' => time(), 'ip' => $this->ip, 'vars' => $newvars)), MEMCACHE_COMPRESSED, $this->lifetime); |
| | | if ($newvars !== $oldvars || $ts - $this->changed > $this->lifetime / 2) { |
| | | $value = serialize(array('changed' => time(), 'ip' => $this->ip, 'vars' => $newvars)); |
| | | $ret = $this->memcache->set($key, $value, MEMCACHE_COMPRESSED, $this->lifetime); |
| | | if ($this->mc_debug) { |
| | | write_log('memcache', "set($key): " . strlen($value) . ": " . ($ret ? 'OK' : 'ERR')); |
| | | write_log('memcache', "... get($key): " . strlen($this->memcache->get($key))); |
| | | } |
| | | return $ret; |
| | | } |
| | | |
| | | return true; |
| | | } |
| | |
| | | */ |
| | | public function mc_destroy($key) |
| | | { |
| | | return $this->memcache->delete($key); |
| | | $ret = $this->memcache->delete($key); |
| | | if ($this->mc_debug) write_log('memcache', "delete($key): " . ($ret ? 'OK' : 'ERR')); |
| | | return $ret; |
| | | } |
| | | |
| | | |
| | |
| | | */ |
| | | public function cleanup() |
| | | { |
| | | // current compose information is stored in $_SESSION['compose'], move it to $_SESSION['compose_data'] |
| | | if ($_SESSION['compose']) { |
| | | $_SESSION['compose_data'][$_SESSION['compose']['id']] = $_SESSION['compose']; |
| | | // current compose information is stored in $_SESSION['compose'], move it to $_SESSION['compose_data_<ID>'] |
| | | if ($compose_id = $_SESSION['compose']['id']) { |
| | | $_SESSION['compose_data_'.$compose_id] = $_SESSION['compose']; |
| | | $this->remove('compose'); |
| | | } |
| | | } |
| | |
| | | $this->cookie = $_COOKIE[$this->cookiename]; |
| | | $result = $this->ip_check ? $_SERVER['REMOTE_ADDR'] == $this->ip : true; |
| | | |
| | | if (!$result) |
| | | $this->log("IP check failed for " . $this->key . "; expected " . $this->ip . "; got " . $_SERVER['REMOTE_ADDR']); |
| | | |
| | | if ($result && $this->_mkcookie($this->now) != $this->cookie) { |
| | | // Check if using id from previous time slot |
| | | if ($this->_mkcookie($this->prev) == $this->cookie) |
| | | if ($this->_mkcookie($this->prev) == $this->cookie) { |
| | | $this->set_auth_cookie(); |
| | | else |
| | | } |
| | | else { |
| | | $result = false; |
| | | $this->log("Session authentication failed for " . $this->key . "; invalid auth cookie sent"); |
| | | } |
| | | } |
| | | |
| | | return $result; |
| | |
| | | $auth_string = "$this->key,$this->secret,$timeslot"; |
| | | return "S" . (function_exists('sha1') ? sha1($auth_string) : md5($auth_string)); |
| | | } |
| | | |
| | | /** |
| | | * |
| | | */ |
| | | function log($line) |
| | | { |
| | | if ($this->logging) |
| | | write_log('session', $line); |
| | | } |
| | | |
| | | } |