function write($id, $sess_data)
{
global $SECURITY_SESSION_OLD_ID;
if (preg_match("/^[\\da-z]{1,32}\$/i", $id)) {
if ($SECURITY_SESSION_OLD_ID && preg_match("/^[\\da-z]{1,32}\$/i", $SECURITY_SESSION_OLD_ID)) {
$old_sess_id = $SECURITY_SESSION_OLD_ID;
} else {
$old_sess_id = $id;
}
CSecurityDB::Query("\n\t\t\t\tdelete from b_sec_session\n\t\t\t\twhere SESSION_ID = '" . $old_sess_id . "'\n\t\t\t", "Module: security; Class: CSecuritySession; Function: write; File: " . __FILE__ . "; Line: " . __LINE__);
CSecurityDB::QueryBind("\n\t\t\t\tinsert into b_sec_session\n\t\t\t\t(SESSION_ID, TIMESTAMP_X, SESSION_DATA)\n\t\t\t\tvalues\n\t\t\t\t('" . $id . "', " . CSecurityDB::CurrentTimeFunction() . ", :SESSION_DATA)\n\t\t\t", array("SESSION_DATA" => base64_encode($sess_data)), "Module: security; Class: CSecuritySession; Function: write; File: " . __FILE__ . "; Line: " . __LINE__);
}
}
/**
* @param string $id - session id, must be valid hash
* @param array $sessionData
*/
public static function write($id, $sessionData)
{
if (!self::isValidId($id)) {
return;
}
if (CSecuritySession::isOldSessionIdExist()) {
$oldSessionId = CSecuritySession::getOldSessionId();
} else {
$oldSessionId = $id;
}
CSecurityDB::Query("\n\t\t\tdelete from b_sec_session\n\t\t\twhere SESSION_ID = '" . $oldSessionId . "'\n\t\t", "Module: security; Class: CSecuritySession; Function: write; File: " . __FILE__ . "; Line: " . __LINE__);
CSecurityDB::QueryBind("\n\t\t\tinsert into b_sec_session\n\t\t\t(SESSION_ID, TIMESTAMP_X, SESSION_DATA)\n\t\t\tvalues\n\t\t\t('" . $id . "', " . CSecurityDB::CurrentTimeFunction() . ", :SESSION_DATA)\n\t\t", array("SESSION_DATA" => base64_encode($sessionData)), "Module: security; Class: CSecuritySession; Function: write; File: " . __FILE__ . "; Line: " . __LINE__);
}
function dolog()
{
if (defined("ANTIVIRUS_CREATE_TRACE")) {
$this->CreateTrace();
}
$uniq_id = md5($this->data);
$rsLog = CSecurityDB::Query("SELECT * FROM b_sec_virus WHERE ID = '" . $uniq_id . "'", "Module: security; Class: CSecurityAntiVirus; Function: AddEventLog; File: " . __FILE__ . "; Line: " . __LINE__);
$arLog = CSecurityDB::Fetch($rsLog);
if ($arLog && $arLog["SENT"] == "Y") {
CSecurityDB::Query("DELETE FROM b_sec_virus WHERE SENT = 'Y' AND TIMESTAMP_X < " . CSecurityDB::SecondsAgo($BX_SECURITY_AV_TIMEOUT * 60) . "", "Module: security; Class: CSecurityAntiVirus; Function: AddEventLog; File: " . __FILE__ . "; Line: " . __LINE__);
$rsLog = CSecurityDB::Query("SELECT * FROM b_sec_virus WHERE ID = '" . $uniq_id . "'", "Module: security; Class: CSecurityAntiVirus; Function: AddEventLog; File: " . __FILE__ . "; Line: " . __LINE__);
$arLog = CSecurityDB::Fetch($rsLog);
}
if (!$arLog) {
$ss = $this->data;
if (defined("ANTIVIRUS_CREATE_TRACE")) {
foreach ($this->resultrules as $k => $v) {
$ss .= "\n" . $k . "=" . $v;
}
}
if (defined("SITE_ID") && !defined("ADMIN_SECTION")) {
$SITE_ID = SITE_ID;
} else {
$rsDefSite = CSecurityDB::Query("SELECT LID FROM b_lang WHERE ACTIVE='Y' ORDER BY DEF desc, SORT", "Module: security; Class: CSecurityAntiVirus; Function: AddEventLog; File: " . __FILE__ . "; Line: " . __LINE__);
$arDefSite = CSecurityDB::Fetch($rsDefSite);
if ($arDefSite) {
$SITE_ID = $arDefSite["LID"];
} else {
$SITE_ID = false;
}
}
$s = serialize(array("SEVERITY" => "SECURITY", "AUDIT_TYPE_ID" => "SECURITY_VIRUS", "MODULE_ID" => "security", "ITEM_ID" => "UNKNOWN", "REMOTE_ADDR" => $_SERVER["REMOTE_ADDR"], "USER_AGENT" => $_SERVER["HTTP_USER_AGENT"], "REQUEST_URI" => $_SERVER["REQUEST_URI"], "SITE_ID" => defined("SITE_ID") ? SITE_ID : false, "USER_ID" => false, "GUEST_ID" => array_key_exists("SESS_GUEST_ID", $_SESSION) && $_SESSION["SESS_GUEST_ID"] > 0 ? $_SESSION["SESS_GUEST_ID"] : false, "DESCRIPTION" => "==" . base64_encode($ss)));
CSecurityDB::QueryBind("insert into b_sec_virus (ID, TIMESTAMP_X, SITE_ID, INFO) values ('" . $uniq_id . "', " . CSecurityDB::CurrentTimeFunction() . ", " . ($SITE_ID ? "'" . $SITE_ID . "'" : "null") . ", :INFO)", array("INFO" => base64_encode($s)), "Module: security; Class: CSecurityAntiVirus; Function: AddEventLog; File: " . __FILE__ . "; Line: " . __LINE__);
@fclose(@fopen($_SERVER["DOCUMENT_ROOT"] . BX_PERSONAL_ROOT . "/managed_cache/b_sec_virus", "w"));
}
}
/**
* @param string $id - session id, must be valid hash
* @param array $sessionData
* @return bool
*/
public static function write($id, $sessionData)
{
if(!self::isValidId($id))
return false;
if (self::$isReadOnly)
return true;
if(CSecuritySession::isOldSessionIdExist())
$oldSessionId = CSecuritySession::getOldSessionId();
else
$oldSessionId = $id;
CSecurityDB::Query("
delete from b_sec_session
where SESSION_ID = '".$oldSessionId."'
", "Module: security; Class: CSecuritySession; Function: write; File: ".__FILE__."; Line: ".__LINE__);
CSecurityDB::QueryBind("
insert into b_sec_session
(SESSION_ID, TIMESTAMP_X, SESSION_DATA)
values
('".$id."', ".CSecurityDB::CurrentTimeFunction().", :SESSION_DATA)
", array("SESSION_DATA" => base64_encode($sessionData))
, "Module: security; Class: CSecuritySession; Function: write; File: ".__FILE__."; Line: ".__LINE__);
return true;
}
