Exemplos de session_get_schema_version em PHP

Exemplo n.º 1

Arquivo: sessions.php Projeto: Verisor/tt-rss

function validate_session()
{
    if (SINGLE_USER_MODE) {
        return true;
    }
    if (isset($_SESSION["ref_schema_version"]) && $_SESSION["ref_schema_version"] != session_get_schema_version(true)) {
        $_SESSION["login_error_msg"] = __("Session failed to validate (schema version changed)");
        return false;
    }
    if ($_SESSION["uid"]) {
        $result = Db::get()->query("SELECT pwd_hash FROM ttrss_users WHERE id = '" . $_SESSION["uid"] . "'");
        // user not found
        if (Db::get()->num_rows($result) == 0) {
            $_SESSION["login_error_msg"] = __("Session failed to validate (user not found)");
            return false;
        } else {
            $pwd_hash = Db::get()->fetch_result($result, 0, "pwd_hash");
            if ($pwd_hash != $_SESSION["pwd_hash"]) {
                $_SESSION["login_error_msg"] = __("Session failed to validate (password changed)");
                return false;
            }
        }
    }
    return true;
}

Exemplo n.º 2

Arquivo: sessions.php Projeto: cs-team/tiny_tiny_rss-openshift-quickstart

function validate_session()
{
    if (SINGLE_USER_MODE) {
        return true;
    }
    if (VERSION_STATIC != $_SESSION["version"]) {
        return false;
    }
    $check_ip = $_SESSION['ip_address'];
    switch (SESSION_CHECK_ADDRESS) {
        case 0:
            $check_ip = '';
            break;
        case 1:
            $check_ip = substr($check_ip, 0, strrpos($check_ip, '.') + 1);
            break;
        case 2:
            $check_ip = substr($check_ip, 0, strrpos($check_ip, '.'));
            $check_ip = substr($check_ip, 0, strrpos($check_ip, '.') + 1);
            break;
    }
    if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) {
        $_SESSION["login_error_msg"] = __("Session failed to validate (incorrect IP)");
        return false;
    }
    if ($_SESSION["ref_schema_version"] != session_get_schema_version(true)) {
        $_SESSION["login_error_msg"] = __("Session failed to validate (schema version changed)");
        return false;
    }
    if (sha1($_SERVER['HTTP_USER_AGENT']) != $_SESSION["user_agent"]) {
        $_SESSION["login_error_msg"] = __("Session failed to validate (user agent changed)");
        return false;
    }
    if ($_SESSION["uid"]) {
        $result = Db::get()->query("SELECT pwd_hash FROM ttrss_users WHERE id = '" . $_SESSION["uid"] . "'");
        // user not found
        if (Db::get()->num_rows($result) == 0) {
            $_SESSION["login_error_msg"] = __("Session failed to validate (user not found)");
            return false;
        } else {
            $pwd_hash = Db::get()->fetch_result($result, 0, "pwd_hash");
            if ($pwd_hash != $_SESSION["pwd_hash"]) {
                $_SESSION["login_error_msg"] = __("Session failed to validate (password changed)");
                return false;
            }
        }
    }
    return true;
}