source: tmp/version-2_5-test/data/module/adodb/session/old/adodb-cryptsession.php @ 18609

Revision 18609, 8.8 KB checked in by kajiwara, 14 years ago (diff)

正式版にナイトリービルド版をマージしてみるテスト
Line 
1<?php
2/*
3v4.992 10 Nov 2009  (c) 2000-2009 John Lim (jlim#natsoft.com). All rights reserved.
4  Released under both BSD license and Lesser GPL library license.
5  Whenever there is any discrepancy between the two licenses,
6  the BSD license will take precedence.
7    Made table name configurable - by David Johnson djohnson@inpro.net
8    Encryption by Ari Kuorikoski <ari.kuorikoski@finebyte.com>
9   
10  Set tabs to 4 for best viewing.
11 
12  Latest version of ADODB is available at http://php.weblogs.com/adodb
13  ======================================================================
14 
15 This file provides PHP4 session management using the ADODB database
16wrapper library.
17 
18 Example
19 =======
20 
21    include('adodb.inc.php');
22    #---------------------------------#
23    include('adodb-cryptsession.php');
24    #---------------------------------#
25    session_start();
26    session_register('AVAR');
27    $_SESSION['AVAR'] += 1;
28    print "
29-- \$_SESSION['AVAR']={$_SESSION['AVAR']}</p>";
30
31 
32 Installation
33 ============
34 1. Create a new database in MySQL or Access "sessions" like
35so:
36 
37  create table sessions (
38       SESSKEY char(32) not null,
39       EXPIRY int(11) unsigned not null,
40       EXPIREREF varchar(64),
41       DATA CLOB,
42      primary key (sesskey)
43  );
44 
45  2. Then define the following parameters. You can either modify
46     this file, or define them before this file is included:
47     
48    $ADODB_SESSION_DRIVER='database driver, eg. mysql or ibase';
49    $ADODB_SESSION_CONNECT='server to connect to';
50    $ADODB_SESSION_USER ='user';
51    $ADODB_SESSION_PWD ='password';
52    $ADODB_SESSION_DB ='database';
53    $ADODB_SESSION_TBL = 'sessions'
54   
55  3. Recommended is PHP 4.0.2 or later. There are documented
56session bugs in earlier versions of PHP.
57
58*/
59
60
61include_once('crypt.inc.php');
62
63if (!defined('_ADODB_LAYER')) {
64    include (dirname(__FILE__).'/adodb.inc.php');
65}
66
67 /* if database time and system time is difference is greater than this, then give warning */
68 define('ADODB_SESSION_SYNCH_SECS',60);
69
70if (!defined('ADODB_SESSION')) {
71
72 define('ADODB_SESSION',1);
73 
74GLOBAL  $ADODB_SESSION_CONNECT,
75    $ADODB_SESSION_DRIVER,
76    $ADODB_SESSION_USER,
77    $ADODB_SESSION_PWD,
78    $ADODB_SESSION_DB,
79    $ADODB_SESS_CONN,
80    $ADODB_SESS_LIFE,
81    $ADODB_SESS_DEBUG,
82    $ADODB_SESS_INSERT,
83    $ADODB_SESSION_EXPIRE_NOTIFY,
84    $ADODB_SESSION_TBL;
85
86    //$ADODB_SESS_DEBUG = true;
87   
88    /* SET THE FOLLOWING PARAMETERS */
89if (empty($ADODB_SESSION_DRIVER)) {
90    $ADODB_SESSION_DRIVER='mysql';
91    $ADODB_SESSION_CONNECT='localhost';
92    $ADODB_SESSION_USER ='root';
93    $ADODB_SESSION_PWD ='';
94    $ADODB_SESSION_DB ='xphplens_2';
95}
96
97if (empty($ADODB_SESSION_TBL)){
98    $ADODB_SESSION_TBL = 'sessions';
99}
100
101if (empty($ADODB_SESSION_EXPIRE_NOTIFY)) {
102    $ADODB_SESSION_EXPIRE_NOTIFY = false;
103}
104
105function ADODB_Session_Key()
106{
107$ADODB_CRYPT_KEY = 'CRYPTED ADODB SESSIONS ROCK!';
108
109    /* USE THIS FUNCTION TO CREATE THE ENCRYPTION KEY FOR CRYPTED SESSIONS  */
110    /* Crypt the used key, $ADODB_CRYPT_KEY as key and session_ID as SALT   */
111    return crypt($ADODB_CRYPT_KEY, session_ID());
112}
113
114$ADODB_SESS_LIFE = ini_get('session.gc_maxlifetime');
115if ($ADODB_SESS_LIFE <= 1) {
116    // bug in PHP 4.0.3 pl 1  -- how about other versions?
117    //print "<h3>Session Error: PHP.INI setting <i>session.gc_maxlifetime</i>not set: $ADODB_SESS_LIFE</h3>";
118    $ADODB_SESS_LIFE=1440;
119}
120
121function adodb_sess_open($save_path, $session_name)
122{
123GLOBAL  $ADODB_SESSION_CONNECT,
124    $ADODB_SESSION_DRIVER,
125    $ADODB_SESSION_USER,
126    $ADODB_SESSION_PWD,
127    $ADODB_SESSION_DB,
128    $ADODB_SESS_CONN,
129    $ADODB_SESS_DEBUG;
130   
131    $ADODB_SESS_INSERT = false;
132   
133    if (isset($ADODB_SESS_CONN)) return true;
134   
135    $ADODB_SESS_CONN = ADONewConnection($ADODB_SESSION_DRIVER);
136    if (!empty($ADODB_SESS_DEBUG)) {
137        $ADODB_SESS_CONN->debug = true;
138        print" conn=$ADODB_SESSION_CONNECT user=$ADODB_SESSION_USER pwd=$ADODB_SESSION_PWD db=$ADODB_SESSION_DB ";
139    }
140    return $ADODB_SESS_CONN->PConnect($ADODB_SESSION_CONNECT,
141            $ADODB_SESSION_USER,$ADODB_SESSION_PWD,$ADODB_SESSION_DB);
142   
143}
144
145function adodb_sess_close()
146{
147global $ADODB_SESS_CONN;
148
149    if ($ADODB_SESS_CONN) $ADODB_SESS_CONN->Close();
150    return true;
151}
152
153function adodb_sess_read($key)
154{
155$Crypt = new MD5Crypt;
156global $ADODB_SESS_CONN,$ADODB_SESS_INSERT,$ADODB_SESSION_TBL;
157    $rs = $ADODB_SESS_CONN->Execute("SELECT data FROM $ADODB_SESSION_TBL WHERE sesskey = '$key' AND expiry >= " . time());
158    if ($rs) {
159        if ($rs->EOF) {
160            $ADODB_SESS_INSERT = true;
161            $v = '';
162        } else {
163            // Decrypt session data
164            $v = rawurldecode($Crypt->Decrypt(reset($rs->fields), ADODB_Session_Key()));
165        }
166        $rs->Close();
167        return $v;
168    }
169    else $ADODB_SESS_INSERT = true;
170   
171    return '';
172}
173
174function adodb_sess_write($key, $val)
175{
176$Crypt = new MD5Crypt;
177    global $ADODB_SESS_INSERT,$ADODB_SESS_CONN, $ADODB_SESS_LIFE, $ADODB_SESSION_TBL,$ADODB_SESSION_EXPIRE_NOTIFY;
178
179    $expiry = time() + $ADODB_SESS_LIFE;
180
181    // encrypt session data..   
182    $val = $Crypt->Encrypt(rawurlencode($val), ADODB_Session_Key());
183   
184    $arr = array('sesskey' => $key, 'expiry' => $expiry, 'data' => $val);
185    if ($ADODB_SESSION_EXPIRE_NOTIFY) {
186        $var = reset($ADODB_SESSION_EXPIRE_NOTIFY);
187        global $$var;
188        $arr['expireref'] = $$var;
189    }
190    $rs = $ADODB_SESS_CONN->Replace($ADODB_SESSION_TBL,
191        $arr,
192        'sesskey',$autoQuote = true);
193
194    if (!$rs) {
195        ADOConnection::outp( '
196-- Session Replace: '.$ADODB_SESS_CONN->ErrorMsg().'</p>',false);
197    } else {
198        // bug in access driver (could be odbc?) means that info is not commited
199        // properly unless select statement executed in Win2000
200   
201    if ($ADODB_SESS_CONN->databaseType == 'access') $rs = $ADODB_SESS_CONN->Execute("select sesskey from $ADODB_SESSION_TBL WHERE sesskey='$key'");
202    }
203    return isset($rs);
204}
205
206function adodb_sess_destroy($key)
207{
208    global $ADODB_SESS_CONN, $ADODB_SESSION_TBL,$ADODB_SESSION_EXPIRE_NOTIFY;
209   
210    if ($ADODB_SESSION_EXPIRE_NOTIFY) {
211        reset($ADODB_SESSION_EXPIRE_NOTIFY);
212        $fn = next($ADODB_SESSION_EXPIRE_NOTIFY);
213        $savem = $ADODB_SESS_CONN->SetFetchMode(ADODB_FETCH_NUM);
214        $rs = $ADODB_SESS_CONN->Execute("SELECT expireref,sesskey FROM $ADODB_SESSION_TBL WHERE sesskey='$key'");
215        $ADODB_SESS_CONN->SetFetchMode($savem);
216        if ($rs) {
217            $ADODB_SESS_CONN->BeginTrans();
218            while (!$rs->EOF) {
219                $ref = $rs->fields[0];
220                $key = $rs->fields[1];
221                $fn($ref,$key);
222                $del = $ADODB_SESS_CONN->Execute("DELETE FROM $ADODB_SESSION_TBL WHERE sesskey='$key'");
223                $rs->MoveNext();
224            }
225            $ADODB_SESS_CONN->CommitTrans();
226        }
227    } else {
228        $qry = "DELETE FROM $ADODB_SESSION_TBL WHERE sesskey = '$key'";
229        $rs = $ADODB_SESS_CONN->Execute($qry);
230    }
231    return $rs ? true : false;
232}
233
234
235function adodb_sess_gc($maxlifetime) {
236    global $ADODB_SESS_CONN, $ADODB_SESSION_TBL,$ADODB_SESSION_EXPIRE_NOTIFY,$ADODB_SESS_DEBUG;
237
238    if ($ADODB_SESSION_EXPIRE_NOTIFY) {
239        reset($ADODB_SESSION_EXPIRE_NOTIFY);
240        $fn = next($ADODB_SESSION_EXPIRE_NOTIFY);
241        $savem = $ADODB_SESS_CONN->SetFetchMode(ADODB_FETCH_NUM);
242        $t = time();
243        $rs = $ADODB_SESS_CONN->Execute("SELECT expireref,sesskey FROM $ADODB_SESSION_TBL WHERE expiry < $t");
244        $ADODB_SESS_CONN->SetFetchMode($savem);
245        if ($rs) {
246            $ADODB_SESS_CONN->BeginTrans();
247            while (!$rs->EOF) {
248                $ref = $rs->fields[0];
249                $key = $rs->fields[1];
250                $fn($ref,$key);
251                //$del = $ADODB_SESS_CONN->Execute("DELETE FROM $ADODB_SESSION_TBL WHERE sesskey='$key'");
252                $rs->MoveNext();
253            }
254            $rs->Close();
255           
256            $ADODB_SESS_CONN->Execute("DELETE FROM $ADODB_SESSION_TBL WHERE expiry < $t");
257            $ADODB_SESS_CONN->CommitTrans();
258        }
259    } else {
260        $qry = "DELETE FROM $ADODB_SESSION_TBL WHERE expiry < " . time();
261        $ADODB_SESS_CONN->Execute($qry);
262    }
263   
264    // suggested by Cameron, "GaM3R" <gamr@outworld.cx>
265    if (defined('ADODB_SESSION_OPTIMIZE'))
266    {
267    global $ADODB_SESSION_DRIVER;
268   
269        switch( $ADODB_SESSION_DRIVER ) {
270            case 'mysql':
271            case 'mysqlt':
272                $opt_qry = 'OPTIMIZE TABLE '.$ADODB_SESSION_TBL;
273                break;
274            case 'postgresql':
275            case 'postgresql7':
276                $opt_qry = 'VACUUM '.$ADODB_SESSION_TBL;   
277                break;
278        }
279    }
280   
281    if ($ADODB_SESS_CONN->dataProvider === 'oci8') $sql = 'select  TO_CHAR('.($ADODB_SESS_CONN->sysTimeStamp).', \'RRRR-MM-DD HH24:MI:SS\') from '. $ADODB_SESSION_TBL;
282    else $sql = 'select '.$ADODB_SESS_CONN->sysTimeStamp.' from '. $ADODB_SESSION_TBL;
283   
284    $rs =& $ADODB_SESS_CONN->SelectLimit($sql,1);
285    if ($rs && !$rs->EOF) {
286   
287        $dbts = reset($rs->fields);
288        $rs->Close();
289        $dbt = $ADODB_SESS_CONN->UnixTimeStamp($dbts);
290        $t = time();
291        if (abs($dbt - $t) >= ADODB_SESSION_SYNCH_SECS) {
292            $msg =
293            __FILE__.": Server time for webserver {$_SERVER['HTTP_HOST']} not in synch with database: database=$dbt ($dbts), webserver=$t (diff=".(abs($dbt-$t)/3600)." hrs)";
294            error_log($msg);
295            if ($ADODB_SESS_DEBUG) ADOConnection::outp("
296-- $msg</p>");
297        }
298    }
299   
300    return true;
301}
302
303session_module_name('user');
304session_set_save_handler(
305    "adodb_sess_open",
306    "adodb_sess_close",
307    "adodb_sess_read",
308    "adodb_sess_write",
309    "adodb_sess_destroy",
310    "adodb_sess_gc");
311}
312
313/*  TEST SCRIPT -- UNCOMMENT */
314/*
315if (0) {
316
317    session_start();
318    session_register('AVAR');
319    $_SESSION['AVAR'] += 1;
320    print "
321-- \$_SESSION['AVAR']={$_SESSION['AVAR']}</p>";
322}
323*/
324?>
Note: See TracBrowser for help on using the repository browser.