File inc/user.inc.php changed (mode: 100644) (index 1561c75..26c4e2c) |
... |
... |
function rg_user_edit_no_check($db, $d) |
560 |
560 |
. ', is_admin, rights, session_time' |
. ', is_admin, rights, session_time' |
561 |
561 |
. ', confirmed, confirm_token, plan_id' |
. ', confirmed, confirm_token, plan_id' |
562 |
562 |
. ', suspended, last_seen, disk_used_mb' |
. ', suspended, last_seen, disk_used_mb' |
563 |
|
. ', deleted)' |
|
|
563 |
|
. ', deleted, last_ip)' |
564 |
564 |
. ' VALUES (@@username@@, @@realname@@, @@salt@@' |
. ' VALUES (@@username@@, @@realname@@, @@salt@@' |
565 |
565 |
. ', @@pass@@, @@email@@, @@itime@@' |
. ', @@pass@@, @@email@@, @@itime@@' |
566 |
566 |
. ', @@is_admin@@, @@rights@@, @@session_time@@' |
. ', @@is_admin@@, @@rights@@, @@session_time@@' |
567 |
567 |
. ', @@confirmed@@, @@confirm_token@@, @@plan_id@@' |
. ', @@confirmed@@, @@confirm_token@@, @@plan_id@@' |
568 |
568 |
. ', @@suspended@@, @@last_seen@@' |
. ', @@suspended@@, @@last_seen@@' |
569 |
569 |
. ', @@disk_used_mb@@, @@deleted@@' |
. ', @@disk_used_mb@@, @@deleted@@' |
570 |
|
. ')' |
|
|
570 |
|
. ', @@last_ip@@)' |
571 |
571 |
. ' RETURNING uid'; |
. ' RETURNING uid'; |
572 |
572 |
|
|
573 |
573 |
$ignore = array(RG_SQL_UNIQUE_VIOLATION); |
$ignore = array(RG_SQL_UNIQUE_VIOLATION); |
|
... |
... |
function rg_user_auto_login($db, $uid, $lock_ip, $https, $domain, &$ui) |
1014 |
1014 |
/* |
/* |
1015 |
1015 |
* Helper for rg_user_login_by_user_pass for db |
* Helper for rg_user_login_by_user_pass for db |
1016 |
1016 |
*/ |
*/ |
1017 |
|
function rg_user_login_by_user_pass_db($db, $user, $pass, $lock_ip, $https, |
|
|
1017 |
|
function rg_user_login_by_user_pass_db($db, $user, $pass, $ip, $lock_ip, $https, |
1018 |
1018 |
$domain, &$ui) |
$domain, &$ui) |
1019 |
1019 |
{ |
{ |
1020 |
1020 |
global $rg_account_email_confirm; |
global $rg_account_email_confirm; |
|
... |
... |
function rg_user_login_by_user_pass_db($db, $user, $pass, $lock_ip, $https, |
1064 |
1064 |
* Authorize a user |
* Authorize a user |
1065 |
1065 |
*/ |
*/ |
1066 |
1066 |
function rg_user_login_by_user_pass_helper($db, $user, $pass, $login_token, |
function rg_user_login_by_user_pass_helper($db, $user, $pass, $login_token, |
1067 |
|
$lock_ip, $https, $domain, &$ui) |
|
|
1067 |
|
$ip, $lock_ip, $https, $domain, &$ui) |
1068 |
1068 |
{ |
{ |
1069 |
1069 |
global $rg_login_functions; |
global $rg_login_functions; |
1070 |
1070 |
|
|
|
... |
... |
function rg_user_login_by_user_pass_helper($db, $user, $pass, $login_token, |
1089 |
1089 |
|
|
1090 |
1090 |
while (1) { |
while (1) { |
1091 |
1091 |
$r = rg_user_login_by_user_pass_db($db, $user, $pass, |
$r = rg_user_login_by_user_pass_db($db, $user, $pass, |
1092 |
|
$lock_ip, $https, $domain, $ui); |
|
|
1092 |
|
$ip, $lock_ip, $https, $domain, $ui); |
1093 |
1093 |
if ($r === TRUE) |
if ($r === TRUE) |
1094 |
1094 |
break; |
break; |
1095 |
1095 |
|
|
|
... |
... |
function rg_user_login_by_user_pass_helper($db, $user, $pass, $login_token, |
1118 |
1118 |
// to set uid into external auth table. |
// to set uid into external auth table. |
1119 |
1119 |
|
|
1120 |
1120 |
rg_log('DEBUG: user not in \'users\' table (ui[uid] 0), add it'); |
rg_log('DEBUG: user not in \'users\' table (ui[uid] 0), add it'); |
|
1121 |
|
$ui['last_ip'] = $ip; |
1121 |
1122 |
$r = rg_user_edit_no_check($db, $ui); |
$r = rg_user_edit_no_check($db, $ui); |
1122 |
1123 |
if ($r['ok'] !== 1) { |
if ($r['ok'] !== 1) { |
1123 |
1124 |
if ($r['already_exists'] == 0) { |
if ($r['already_exists'] == 0) { |
|
... |
... |
function rg_user_login_by_user_pass_helper($db, $user, $pass, $login_token, |
1283 |
1284 |
} |
} |
1284 |
1285 |
|
|
1285 |
1286 |
function rg_user_login_by_user_pass($db, $user, $pass, $login_token, |
function rg_user_login_by_user_pass($db, $user, $pass, $login_token, |
1286 |
|
$lock_ip, $https, $domain, &$ui) |
|
|
1287 |
|
$ip, $lock_ip, $https, $domain, &$ui) |
1287 |
1288 |
{ |
{ |
1288 |
1289 |
rg_prof_start('user_login_by_user_pass'); |
rg_prof_start('user_login_by_user_pass'); |
1289 |
1290 |
rg_log_enter('rg_user_login_by_user_pass'); |
rg_log_enter('rg_user_login_by_user_pass'); |
1290 |
1291 |
|
|
1291 |
1292 |
while (1) { |
while (1) { |
1292 |
1293 |
$ret = rg_user_login_by_user_pass_helper($db, $user, $pass, |
$ret = rg_user_login_by_user_pass_helper($db, $user, $pass, |
1293 |
|
$login_token, $lock_ip, $https, $domain, $ui); |
|
|
1294 |
|
$login_token, $ip, $lock_ip, $https, $domain, $ui); |
1294 |
1295 |
if ($ret['ok'] == 1) |
if ($ret['ok'] == 1) |
1295 |
1296 |
break; |
break; |
1296 |
1297 |
|
|
|
... |
... |
function rg_user_login_by_user_pass($db, $user, $pass, $login_token, |
1301 |
1302 |
$lt = substr($pass, -6); |
$lt = substr($pass, -6); |
1302 |
1303 |
$pass2 = substr($pass, 0, -6); |
$pass2 = substr($pass, 0, -6); |
1303 |
1304 |
$ret = rg_user_login_by_user_pass_helper($db, $user, $pass2, |
$ret = rg_user_login_by_user_pass_helper($db, $user, $pass2, |
1304 |
|
$lt, $lock_ip, $https, $domain, $ui); |
|
|
1305 |
|
$lt, $ip, $lock_ip, $https, $domain, $ui); |
1305 |
1306 |
if ($ret['ok'] == 1) |
if ($ret['ok'] == 1) |
1306 |
1307 |
break; |
break; |
1307 |
1308 |
|
|
|
... |
... |
function rg_user_login_by_user_pass($db, $user, $pass, $login_token, |
1309 |
1310 |
$lt = substr($pass, -8); |
$lt = substr($pass, -8); |
1310 |
1311 |
$pass2 = substr($pass, 0, -8); |
$pass2 = substr($pass, 0, -8); |
1311 |
1312 |
$ret = rg_user_login_by_user_pass_helper($db, $user, $pass2, |
$ret = rg_user_login_by_user_pass_helper($db, $user, $pass2, |
1312 |
|
$lt, $lock_ip, $https, $domain, $ui); |
|
|
1313 |
|
$lt, $ip, $lock_ip, $https, $domain, $ui); |
1313 |
1314 |
break; |
break; |
1314 |
1315 |
} |
} |
1315 |
1316 |
|
|
|
... |
... |
function rg_user_edit_high_level($db, &$rg) |
1983 |
1984 |
$ui['tos'] = 1; |
$ui['tos'] = 1; |
1984 |
1985 |
else |
else |
1985 |
1986 |
$ui['tos'] = rg_var_uint('tos'); |
$ui['tos'] = rg_var_uint('tos'); |
|
1987 |
|
$ui['last_ip'] = $rg['ip']; |
1986 |
1988 |
|
|
1987 |
1989 |
$ui['confirm_token'] = rg_id(20); |
$ui['confirm_token'] = rg_id(20); |
1988 |
1990 |
if ($rg['target_ui']['uid'] > 0) { |
if ($rg['target_ui']['uid'] > 0) { |
|
... |
... |
function rg_user_http_git($db, $rg, $paras) |
2380 |
2382 |
break; |
break; |
2381 |
2383 |
} |
} |
2382 |
2384 |
$authd = rg_user_login_by_user_pass($db, $u, $p, |
$authd = rg_user_login_by_user_pass($db, $u, $p, |
2383 |
|
'' /*login_token*/, TRUE /*lock IP*/, |
|
|
2385 |
|
'' /*login_token*/, $rg['ip'], TRUE /*lock IP*/, |
2384 |
2386 |
$rg['https'], $rg['hostname'], $rg['login_ui']); |
$rg['https'], $rg['hostname'], $rg['login_ui']); |
2385 |
2387 |
break; |
break; |
2386 |
2388 |
} |
} |
|
... |
... |
function rg_user_delete_account_high_level($db, $rg, $paras) |
2686 |
2688 |
return $ret; |
return $ret; |
2687 |
2689 |
} |
} |
2688 |
2690 |
|
|
2689 |
|
?> |
|