Initial import from local backup (Documents-Playground/pakerpale)
This commit is contained in:
jeonghwa
549
application/libraries/Ion_auth.php
Normal file
549
application/libraries/Ion_auth.php
Normal file
@@ -0,0 +1,549 @@
|
||||
<?php
|
||||
/**
|
||||
* Name: Ion Auth
|
||||
* Author: Ben Edmunds
|
||||
* ben.edmunds@gmail.com
|
||||
* @benedmunds
|
||||
*
|
||||
* Added Awesomeness: Phil Sturgeon
|
||||
*
|
||||
* Created: 10.01.2009
|
||||
*
|
||||
* Description: Modified auth system based on redux_auth with extensive customization. This is basically what Redux Auth 2 should be.
|
||||
* Original Author name has been kept but that does not mean that the method has not been modified.
|
||||
*
|
||||
* Requirements: PHP5 or above
|
||||
*
|
||||
* @package CodeIgniter-Ion-Auth
|
||||
* @author Ben Edmunds
|
||||
* @link http://github.com/benedmunds/CodeIgniter-Ion-Auth
|
||||
* @filesource
|
||||
*/
|
||||
defined('BASEPATH') OR exit('No direct script access allowed');
|
||||
|
||||
/**
|
||||
* Class Ion_auth
|
||||
*/
|
||||
class Ion_auth
|
||||
{
|
||||
/**
|
||||
* account status ('not_activated', etc ...)
|
||||
*
|
||||
* @var string
|
||||
**/
|
||||
protected $status;
|
||||
|
||||
/**
|
||||
* extra where
|
||||
*
|
||||
* @var array
|
||||
**/
|
||||
public $_extra_where = array();
|
||||
|
||||
/**
|
||||
* extra set
|
||||
*
|
||||
* @var array
|
||||
**/
|
||||
public $_extra_set = array();
|
||||
|
||||
/**
|
||||
* caching of users and their groups
|
||||
*
|
||||
* @var array
|
||||
**/
|
||||
public $_cache_user_in_group;
|
||||
|
||||
/**
|
||||
* __construct
|
||||
*
|
||||
* @author Ben
|
||||
*/
|
||||
public function __construct()
|
||||
{
|
||||
$this->config->load('ion_auth', TRUE);
|
||||
$this->load->library(array('email'));
|
||||
$this->lang->load('ion_auth');
|
||||
$this->load->helper(array('cookie', 'language','url'));
|
||||
|
||||
$this->load->library('session');
|
||||
|
||||
$this->load->model('ion_auth_model');
|
||||
|
||||
$this->_cache_user_in_group =& $this->ion_auth_model->_cache_user_in_group;
|
||||
|
||||
$email_config = $this->config->item('email_config', 'ion_auth');
|
||||
|
||||
if ($this->config->item('use_ci_email', 'ion_auth') && isset($email_config) && is_array($email_config))
|
||||
{
|
||||
$this->email->initialize($email_config);
|
||||
}
|
||||
|
||||
$this->ion_auth_model->trigger_events('library_constructor');
|
||||
}
|
||||
|
||||
/**
|
||||
* __call
|
||||
*
|
||||
* Acts as a simple way to call model methods without loads of stupid alias'
|
||||
*
|
||||
* @param string $method
|
||||
* @param array $arguments
|
||||
*
|
||||
* @return mixed
|
||||
* @throws Exception
|
||||
*/
|
||||
public function __call($method, $arguments)
|
||||
{
|
||||
if (!method_exists( $this->ion_auth_model, $method) )
|
||||
{
|
||||
throw new Exception('Undefined method Ion_auth::' . $method . '() called');
|
||||
}
|
||||
if($method == 'create_user')
|
||||
{
|
||||
return call_user_func_array(array($this, 'register'), $arguments);
|
||||
}
|
||||
if($method=='update_user')
|
||||
{
|
||||
return call_user_func_array(array($this, 'update'), $arguments);
|
||||
}
|
||||
return call_user_func_array( array($this->ion_auth_model, $method), $arguments);
|
||||
}
|
||||
|
||||
/**
|
||||
* __get
|
||||
*
|
||||
* Enables the use of CI super-global without having to define an extra variable.
|
||||
*
|
||||
* I can't remember where I first saw this, so thank you if you are the original author. -Militis
|
||||
*
|
||||
* @param string $var
|
||||
*
|
||||
* @return mixed
|
||||
*/
|
||||
public function __get($var)
|
||||
{
|
||||
$CI = & get_instance();
|
||||
return isset($CI->$var) ? $CI->$var : null;
|
||||
}
|
||||
|
||||
/**
|
||||
* Forgotten password feature
|
||||
*
|
||||
* @param string $identity
|
||||
*
|
||||
* @return array|bool
|
||||
* @author Mathew
|
||||
*/
|
||||
public function forgotten_password($identity)
|
||||
{
|
||||
if ($this->ion_auth_model->forgotten_password($identity))
|
||||
{
|
||||
// Get user information
|
||||
$identifier = $this->ion_auth_model->identity_column; // use model identity column, so it can be overridden in a controller
|
||||
$user = $this->where($identifier, $identity)->where('active', 1)->users()->row();
|
||||
|
||||
if ($user)
|
||||
{
|
||||
$data = array(
|
||||
'identity' => $user->{$this->config->item('identity', 'ion_auth')},
|
||||
'forgotten_password_code' => $user->forgotten_password_code
|
||||
);
|
||||
|
||||
if (!$this->config->item('use_ci_email', 'ion_auth'))
|
||||
{
|
||||
$this->set_message('forgot_password_successful');
|
||||
return $data;
|
||||
}
|
||||
else
|
||||
{
|
||||
$message = $this->load->view($this->config->item('email_templates', 'ion_auth') . $this->config->item('email_forgot_password', 'ion_auth'), $data, TRUE);
|
||||
$this->email->clear();
|
||||
$this->email->from($this->config->item('admin_email', 'ion_auth'), $this->config->item('site_title', 'ion_auth'));
|
||||
$this->email->to($user->email);
|
||||
$this->email->subject($this->config->item('site_title', 'ion_auth') . ' - ' . $this->lang->line('email_forgotten_password_subject'));
|
||||
$this->email->message($message);
|
||||
|
||||
if ($this->email->send())
|
||||
{
|
||||
$this->set_message('forgot_password_successful');
|
||||
return TRUE;
|
||||
}
|
||||
else
|
||||
{
|
||||
$this->set_error('forgot_password_unsuccessful');
|
||||
return FALSE;
|
||||
}
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$this->set_error('forgot_password_unsuccessful');
|
||||
return FALSE;
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$this->set_error('forgot_password_unsuccessful');
|
||||
return FALSE;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* forgotten_password_complete
|
||||
*
|
||||
* @param string $code
|
||||
*
|
||||
* @return array|bool
|
||||
* @author Mathew
|
||||
*/
|
||||
public function forgotten_password_complete($code)
|
||||
{
|
||||
$this->ion_auth_model->trigger_events('pre_password_change');
|
||||
|
||||
$identity = $this->config->item('identity', 'ion_auth');
|
||||
$profile = $this->where('forgotten_password_code', $code)->users()->row(); // pass the code to profile
|
||||
|
||||
if (!$profile)
|
||||
{
|
||||
$this->ion_auth_model->trigger_events(array('post_password_change', 'password_change_unsuccessful'));
|
||||
$this->set_error('password_change_unsuccessful');
|
||||
return FALSE;
|
||||
}
|
||||
|
||||
$new_password = $this->ion_auth_model->forgotten_password_complete($code, $profile->salt);
|
||||
|
||||
if ($new_password)
|
||||
{
|
||||
$data = array(
|
||||
'identity' => $profile->{$identity},
|
||||
'new_password' => $new_password
|
||||
);
|
||||
if(!$this->config->item('use_ci_email', 'ion_auth'))
|
||||
{
|
||||
$this->set_message('password_change_successful');
|
||||
$this->ion_auth_model->trigger_events(array('post_password_change', 'password_change_successful'));
|
||||
return $data;
|
||||
}
|
||||
else
|
||||
{
|
||||
$message = $this->load->view($this->config->item('email_templates', 'ion_auth').$this->config->item('email_forgot_password_complete', 'ion_auth'), $data, true);
|
||||
|
||||
$this->email->clear();
|
||||
$this->email->from($this->config->item('admin_email', 'ion_auth'), $this->config->item('site_title', 'ion_auth'));
|
||||
$this->email->to($profile->email);
|
||||
$this->email->subject($this->config->item('site_title', 'ion_auth') . ' - ' . $this->lang->line('email_new_password_subject'));
|
||||
$this->email->message($message);
|
||||
|
||||
if ($this->email->send())
|
||||
{
|
||||
$this->set_message('password_change_successful');
|
||||
$this->ion_auth_model->trigger_events(array('post_password_change', 'password_change_successful'));
|
||||
return TRUE;
|
||||
}
|
||||
else
|
||||
{
|
||||
$this->set_error('password_change_unsuccessful');
|
||||
$this->ion_auth_model->trigger_events(array('post_password_change', 'password_change_unsuccessful'));
|
||||
return FALSE;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
$this->ion_auth_model->trigger_events(array('post_password_change', 'password_change_unsuccessful'));
|
||||
return FALSE;
|
||||
}
|
||||
|
||||
/**
|
||||
* forgotten_password_check
|
||||
*
|
||||
* @param string $code
|
||||
*
|
||||
* @return object|bool
|
||||
* @author Michael
|
||||
*/
|
||||
public function forgotten_password_check($code)
|
||||
{
|
||||
$profile = $this->where('forgotten_password_code', $code)->users()->row(); // pass the code to profile
|
||||
|
||||
if (!is_object($profile))
|
||||
{
|
||||
$this->set_error('password_change_unsuccessful');
|
||||
return FALSE;
|
||||
}
|
||||
else
|
||||
{
|
||||
if ($this->config->item('forgot_password_expiration', 'ion_auth') > 0)
|
||||
{
|
||||
//Make sure it isn't expired
|
||||
$expiration = $this->config->item('forgot_password_expiration', 'ion_auth');
|
||||
if (time() - $profile->forgotten_password_time > $expiration)
|
||||
{
|
||||
//it has expired
|
||||
$this->ion_auth_model->clear_forgotten_password_code($code);
|
||||
$this->set_error('password_change_unsuccessful');
|
||||
return FALSE;
|
||||
}
|
||||
}
|
||||
return $profile;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* register
|
||||
*
|
||||
* @param string $identity
|
||||
* @param string $password
|
||||
* @param string $email
|
||||
* @param array $additional_data
|
||||
* @param array $group_ids
|
||||
*
|
||||
* @return int|array|bool The new user's ID if e-mail activation is disabled or Ion-Auth e-mail activation was
|
||||
* completed; or an array of activation details if CI e-mail validation is enabled; or FALSE
|
||||
* if the operation failed.
|
||||
* @author Mathew
|
||||
*/
|
||||
public function register($identity, $password, $email, $additional_data = array(), $group_ids = array())
|
||||
{
|
||||
$this->ion_auth_model->trigger_events('pre_account_creation');
|
||||
|
||||
$email_activation = $this->config->item('email_activation', 'ion_auth');
|
||||
|
||||
$id = $this->ion_auth_model->register($identity, $password, $email, $additional_data, $group_ids);
|
||||
|
||||
if (!$email_activation)
|
||||
{
|
||||
if ($id !== FALSE)
|
||||
{
|
||||
$this->set_message('account_creation_successful');
|
||||
$this->ion_auth_model->trigger_events(array('post_account_creation', 'post_account_creation_successful'));
|
||||
return $id;
|
||||
}
|
||||
else
|
||||
{
|
||||
$this->set_error('account_creation_unsuccessful');
|
||||
$this->ion_auth_model->trigger_events(array('post_account_creation', 'post_account_creation_unsuccessful'));
|
||||
return FALSE;
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
if (!$id)
|
||||
{
|
||||
$this->set_error('account_creation_unsuccessful');
|
||||
return FALSE;
|
||||
}
|
||||
|
||||
// deactivate so the user much follow the activation flow
|
||||
$deactivate = $this->ion_auth_model->deactivate($id);
|
||||
|
||||
// the deactivate method call adds a message, here we need to clear that
|
||||
$this->ion_auth_model->clear_messages();
|
||||
|
||||
|
||||
if (!$deactivate)
|
||||
{
|
||||
$this->set_error('deactivate_unsuccessful');
|
||||
$this->ion_auth_model->trigger_events(array('post_account_creation', 'post_account_creation_unsuccessful'));
|
||||
return FALSE;
|
||||
}
|
||||
|
||||
$activation_code = $this->ion_auth_model->activation_code;
|
||||
$identity = $this->config->item('identity', 'ion_auth');
|
||||
$user = $this->ion_auth_model->user($id)->row();
|
||||
|
||||
$data = array(
|
||||
'identity' => $user->{$identity},
|
||||
'id' => $user->id,
|
||||
'email' => $email,
|
||||
'activation' => $activation_code,
|
||||
);
|
||||
if(!$this->config->item('use_ci_email', 'ion_auth'))
|
||||
{
|
||||
$this->ion_auth_model->trigger_events(array('post_account_creation', 'post_account_creation_successful', 'activation_email_successful'));
|
||||
$this->set_message('activation_email_successful');
|
||||
return $data;
|
||||
}
|
||||
else
|
||||
{
|
||||
$message = $this->load->view($this->config->item('email_templates', 'ion_auth').$this->config->item('email_activate', 'ion_auth'), $data, true);
|
||||
|
||||
$this->email->clear();
|
||||
$this->email->from($this->config->item('admin_email', 'ion_auth'), $this->config->item('site_title', 'ion_auth'));
|
||||
$this->email->to($email);
|
||||
$this->email->subject($this->config->item('site_title', 'ion_auth') . ' - ' . $this->lang->line('email_activation_subject'));
|
||||
$this->email->message($message);
|
||||
|
||||
if ($this->email->send() === TRUE)
|
||||
{
|
||||
$this->ion_auth_model->trigger_events(array('post_account_creation', 'post_account_creation_successful', 'activation_email_successful'));
|
||||
$this->set_message('activation_email_successful');
|
||||
return $id;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
$this->ion_auth_model->trigger_events(array('post_account_creation', 'post_account_creation_unsuccessful', 'activation_email_unsuccessful'));
|
||||
$this->set_error('activation_email_unsuccessful');
|
||||
return FALSE;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Logout
|
||||
*
|
||||
* @return true
|
||||
* @author Mathew
|
||||
**/
|
||||
public function logout()
|
||||
{
|
||||
$this->ion_auth_model->trigger_events('logout');
|
||||
|
||||
$identity = $this->config->item('identity', 'ion_auth');
|
||||
|
||||
if (substr(CI_VERSION, 0, 1) == '2')
|
||||
{
|
||||
$this->session->unset_userdata(array($identity => '', 'id' => '', 'user_id' => ''));
|
||||
}
|
||||
else
|
||||
{
|
||||
$this->session->unset_userdata(array($identity, 'id', 'user_id'));
|
||||
}
|
||||
|
||||
// delete the remember me cookies if they exist
|
||||
if (get_cookie($this->config->item('identity_cookie_name', 'ion_auth')))
|
||||
{
|
||||
delete_cookie($this->config->item('identity_cookie_name', 'ion_auth'));
|
||||
}
|
||||
if (get_cookie($this->config->item('remember_cookie_name', 'ion_auth')))
|
||||
{
|
||||
delete_cookie($this->config->item('remember_cookie_name', 'ion_auth'));
|
||||
}
|
||||
|
||||
// Destroy the session
|
||||
$this->session->sess_destroy();
|
||||
|
||||
//Recreate the session
|
||||
if (substr(CI_VERSION, 0, 1) == '2')
|
||||
{
|
||||
$this->session->sess_create();
|
||||
}
|
||||
else
|
||||
{
|
||||
session_start();
|
||||
$this->session->sess_regenerate(TRUE);
|
||||
}
|
||||
|
||||
$this->set_message('logout_successful');
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
/**
|
||||
* Auto logs-in the user if they are remembered
|
||||
* @return bool Whether the user is logged in
|
||||
* @author Mathew
|
||||
**/
|
||||
public function logged_in()
|
||||
{
|
||||
$this->ion_auth_model->trigger_events('logged_in');
|
||||
|
||||
$recheck = $this->ion_auth_model->recheck_session();
|
||||
|
||||
// auto-login the user if they are remembered
|
||||
if (!$recheck && get_cookie($this->config->item('identity_cookie_name', 'ion_auth')) && get_cookie($this->config->item('remember_cookie_name', 'ion_auth')))
|
||||
{
|
||||
$recheck = $this->ion_auth_model->login_remembered_user();
|
||||
}
|
||||
|
||||
return $recheck;
|
||||
}
|
||||
|
||||
/**
|
||||
* @return int|null The user's ID from the session user data or NULL if not found
|
||||
* @author jrmadsen67
|
||||
**/
|
||||
public function get_user_id()
|
||||
{
|
||||
$user_id = $this->session->userdata('user_id');
|
||||
if (!empty($user_id))
|
||||
{
|
||||
return $user_id;
|
||||
}
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/**
|
||||
* @param int|string|bool $id
|
||||
*
|
||||
* @return bool Whether the user is an administrator
|
||||
* @author Ben Edmunds
|
||||
*/
|
||||
public function is_admin($id = FALSE)
|
||||
{
|
||||
$this->ion_auth_model->trigger_events('is_admin');
|
||||
|
||||
$admin_group = $this->config->item('admin_group', 'ion_auth');
|
||||
|
||||
return $this->in_group($admin_group, $id);
|
||||
}
|
||||
|
||||
/**
|
||||
* @param int|string|array $check_group group(s) to check
|
||||
* @param int|string|bool $id user id
|
||||
* @param bool $check_all check if all groups is present, or any of the groups
|
||||
*
|
||||
* @return bool Whether the/all user(s) with the given ID(s) is/are in the given group
|
||||
* @author Phil Sturgeon
|
||||
**/
|
||||
public function in_group($check_group, $id = FALSE, $check_all = FALSE)
|
||||
{
|
||||
$this->ion_auth_model->trigger_events('in_group');
|
||||
|
||||
$id || $id = $this->session->userdata('user_id');
|
||||
|
||||
if (!is_array($check_group))
|
||||
{
|
||||
$check_group = array($check_group);
|
||||
}
|
||||
|
||||
if (isset($this->_cache_user_in_group[$id]))
|
||||
{
|
||||
$groups_array = $this->_cache_user_in_group[$id];
|
||||
}
|
||||
else
|
||||
{
|
||||
$users_groups = $this->ion_auth_model->get_users_groups($id)->result();
|
||||
$groups_array = array();
|
||||
foreach ($users_groups as $group)
|
||||
{
|
||||
$groups_array[$group->id] = $group->name;
|
||||
}
|
||||
$this->_cache_user_in_group[$id] = $groups_array;
|
||||
}
|
||||
foreach ($check_group as $key => $value)
|
||||
{
|
||||
$groups = (is_numeric($value)) ? array_keys($groups_array) : $groups_array;
|
||||
|
||||
/**
|
||||
* if !all (default), in_array
|
||||
* if all, !in_array
|
||||
*/
|
||||
if (in_array($value, $groups) xor $check_all)
|
||||
{
|
||||
/**
|
||||
* if !all (default), true
|
||||
* if all, false
|
||||
*/
|
||||
return !$check_all;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* if !all (default), false
|
||||
* if all, true
|
||||
*/
|
||||
return $check_all;
|
||||
}
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user