public function __construct()
{
// Set class variables
$this->status = false;
$this->data_src = strtolower($_SESSION['auth_data_source']);
// Set this local file path
$local_path = dirname(__FILE__);
//*****************************************
// Load and Set Authentication Parameters
//*****************************************
if ($this->data_src != 'none' && $this->data_src != 'custom') {
$this->data_type = $_SESSION['auth_data_type'];
$this->user_table = $_SESSION['auth_user_table'];
$this->user_field = $_SESSION['auth_user_field'];
$this->add_to_where = isset($_SESSION['auth_add_to_where']) ? $_SESSION['auth_add_to_where'] : '';
// Password Security
$valid_pass_sec_types = array('clear' => 'clear', 'md5' => 'md5', 'sha1' => 'sha1');
$this->auth_pass_security = isset($_SESSION['auth_pass_security']) ? strtolower($_SESSION['auth_pass_security']) : 'clear';
if (!isset($valid_pass_sec_types[$this->auth_pass_security])) {
$this->auth_pass_security = 'clear';
}
// Set User ID and Password
if (isset($_POST['user']) && isset($_POST['pass'])) {
$this->user = addslashes($_POST['user']);
switch ($this->auth_pass_security) {
case 'md5':
$this->pass = md5($_POST['pass']);
break;
case 'sha1':
$this->pass = sha1($_POST['pass']);
break;
case 'sha256':
$this->pass = hash('sha256', $_POST['pass']);
break;
default:
$this->pass = $_POST['pass'];
break;
}
}
// Load Data Transaction Class
require_once $_SESSION['frame_path'] . '/core/data_access/data_trans.class.php';
} else {
if ($this->data_src == 'custom') {
// Load Database Engine
require_once $_SESSION['frame_path'] . '/core/data_access/data_trans.class.php';
require_once $_SESSION['frame_path'] . '/plugins/qdba.inc.php';
$this->data_type = 'custom';
} else {
$this->data_type = 'none';
}
}
//*****************************************
// Setup the Query
//*****************************************
switch ($this->data_type) {
case 'ldap':
$search_dn = $this->user_table . ',';
$ldapFilter = "(&(uid={$this->user}))";
$query = array($search_dn, $ldapFilter);
break;
case 'mysql':
case 'pgsql':
case 'mysqli':
case 'oracle':
case 'sqlite':
case 'mssql':
case 'sqlsrv':
case 'sqlite':
case 'db2':
$query = "select * from {$this->user_table} where {$this->user_field} = '{$this->user}'";
if ($this->add_to_where != '') {
$query .= " and {$this->add_to_where}";
}
break;
case 'custom':
break;
default:
// Kerberos or other SSO Authentication
if (isset($_SERVER['REMOTE_USER']) && !empty($_SERVER['REMOTE_USER'])) {
$_SESSION['userid'] = $_SERVER['REMOTE_USER'];
} else {
if (isset($_SERVER['PHP_AUTH_USER']) && !empty($_SERVER['PHP_AUTH_USER'])) {
$_SESSION['userid'] = $_SERVER['PHP_AUTH_USER'];
} else {
$_SESSION['userid'] = 'none';
}
}
$this->status = true;
break;
}
//*****************************************
// Perform Authentication
//*****************************************
if ($this->data_src != 'none' && $this->data_src != 'custom') {
$data_auth = new data_trans($this->data_src);
$data_auth->data_query($query);
$user_info = $data_auth->data_assoc_result();
$num_rows = $data_auth->data_num_rows();
$auth_user = strtolower($this->data_type) == 'ldap' && isset($user_info[0]) ? $user_info[0]['dn'] : $this->user;
if ($num_rows <= 0) {
$this->status = false;
} elseif ($data_auth->data_user_bind($auth_user, $this->pass)) {
$_SESSION['userid'] = $this->user;
$_SESSION['passwd'] = $this->pass;
// Set Name of User
switch ($this->data_type) {
case 'ldap':
$_SESSION['ldap_userid'] = $user_info[0]['dn'];
$_SESSION['name'] = isset($user_info[0][$_SESSION['auth_fname_field']][0]) ? $user_info[0][$_SESSION['auth_fname_field']][0] : '';
break;
case 'mysql':
case 'pgsql':
case 'mysqli':
case 'oracle':
case 'sqlite':
case 'mssql':
case 'sqlsrv':
case 'sqlite':
case 'db2':
$_SESSION['first_name'] = isset($user_info[0][$_SESSION['auth_fname_field']]) ? $user_info[0][$_SESSION['auth_fname_field']] : '';
$_SESSION['last_name'] = isset($user_info[0][$_SESSION['auth_lname_field']]) ? $user_info[0][$_SESSION['auth_lname_field']] : '';
$_SESSION['name'] = $_SESSION['first_name'] . ' ' . $_SESSION['last_name'];
break;
}
$this->status = true;
}
} else {
if ($this->data_src == 'custom') {
if (function_exists('custom_login')) {
$custom_ret_val = call_user_func('custom_login');
$this->status = (bool) $custom_ret_val;
if ($this->status) {
$_SESSION['userid'] = (string) $custom_ret_val;
}
} else {
trigger_error('Custom login handler function "custom_login() is not defined. Authentication automatically failed."');
}
if ($this->status) {
if (!isset($_SESSION['first_name'])) {
$_SESSION['first_name'] = '';
}
if (!isset($_SESSION['last_name'])) {
$_SESSION['last_name'] = '';
}
if (!isset($_SESSION['name'])) {
$_SESSION['name'] = '';
}
}
}
}
}
