source: branches/dev/html/admin/login.php @ 17

<?php
/*
 * Copyright(c) 2000-2007 LOCKON CO.,LTD. All Rights Reserved.
 *
 * http://www.lockon.co.jp/
 */
require_once("./require.php");

$conn = new SC_DBConn();

$osess = new SC_Session();
$ret = false;

// ÆþÎÏȽÄê
if(strlen($_POST{'login_id'}) > 0 && strlen($_POST{'password'}) > 0) {
    // ǧ¾Ú¥Ñ¥¹¥ï¡¼¥É¤ÎȽÄê
    $ret = fnCheckPassword($conn);
}

if($ret){
    // À®¸ù
    header("Location: ".URL_HOME);
    exit;
} else {
    // ¥¨¥é¡¼¥Ú¡¼¥¸¤Îɽ¼¨
    sfDispError(LOGIN_ERROR);
    exit;
}

/* ǧ¾Ú¥Ñ¥¹¥ï¡¼¥É¤ÎȽÄê */
function fnCheckPassword($conn) {
    $sql = "SELECT member_id, password, authority, login_date, name FROM dtb_member WHERE login_id = ? AND del_flg <> 1 AND work = 1";
    $arrcol = array ($_POST['login_id']);
    // DB¤«¤é°Å¹æ²½¥Ñ¥¹¥ï¡¼¥É¤ò¼èÆÀ¤¹¤ë¡£
    $data_list = $conn->getAll($sql ,$arrcol); 
    // ¥Ñ¥¹¥ï¡¼¥É¤Î¼èÆÀ
    $password = $data_list[0]['password'];
    // ¥æ¡¼¥¶ÆþÎϥѥ¹¥ï¡¼¥É¤ÎȽÄê
    $ret = sha1($_POST['password'] . ":" . AUTH_MAGIC);
    
    if ($ret == $password) {
        // ¥»¥Ã¥·¥ç¥óÅÐÏ¿
        fnSetLoginSession($data_list[0]['member_id'], $data_list[0]['authority'], $data_list[0]['login_date'], $data_list[0]['name']);
        // ¥í¥°¥¤¥óÆü»þ¤ÎÅÐÏ¿
        fnSetLoginDate();
        return true;
    } 
    
    // ¥Ñ¥¹¥ï¡¼¥É
    gfPrintLog($_POST['login_id'] . " password incorrect.");
    return false;
}

/* ǧ¾Ú¥»¥Ã¥·¥ç¥ó¤ÎÅÐÏ¿ */
function fnSetLoginSession($member_id,$authority,$login_date, $login_name = '') {
    global $osess;
    // ǧ¾ÚºÑ¤ß¤ÎÀßÄê
    $osess->SetSession('cert', CERT_STRING);
    $osess->SetSession('login_id', $_POST{'login_id'});
    $osess->SetSession('authority', $authority);
    $osess->SetSession('member_id', $member_id);
    $osess->SetSession('login_name', $login_name);
    
    if(strlen($login_date) > 0) {
        $osess->SetSession('last_login', $login_date);
    } else {
        $osess->SetSession('last_login', date("Y-m-d H:i:s"));
    }
    $sid = $osess->GetSID();
    // ¥í¥°¤Ëµ­Ï¿¤¹¤ë
    gfPrintLog("login : user=".$_SESSION{'login_id'}." auth=".$_SESSION{'authority'}." lastlogin=". $_SESSION{'last_login'} ." sid=".$sid);
}

/* ¥í¥°¥¤¥óÆü»þ¤Î¹¹¿· */
function fnSetLoginDate() {
    global $osess;
    $oquery = new SC_Query();
    $sqlval['login_date'] = date("Y-m-d H:i:s");
    $member_id = $osess->GetSession('member_id');
    $where = "member_id = " . $member_id;
    $ret = $oquery->update("dtb_member", $sqlval, $where);
}
?>