/**
* This static method returns a valid CurrentUser object if there is one
* in the session that is not timed out. The session-ID is updated if
* necessary. The CurrentUser will be removed from the session, if it is
* timed out. If there is no valid CurrentUser in the session or the
* session is timed out, null will be returned. If the session data is
* correct, but there is no user found in the user table, false will be
* returned. On success, a valid CurrentUser object is returned.
*
* @static
*
* @param PMF_Configuration $config
*
* @return null|PMF_User_CurrentUser
*/
public static function getFromSession(PMF_Configuration $config)
{
// there is no valid user object in session
if (!isset($_SESSION[PMF_SESSION_CURRENT_USER]) || !isset($_SESSION[PMF_SESSION_ID_TIMESTAMP])) {
return null;
}
// create a new CurrentUser object
$user = new PMF_User_CurrentUser($config);
$user->getUserById($_SESSION[PMF_SESSION_CURRENT_USER]);
// user object is timed out
if ($user->sessionIsTimedOut()) {
$user->deleteFromSession();
$user->errors[] = 'Session timed out.';
return null;
}
// session-id not found in user table
$session_info = $user->getSessionInfo();
$session_id = isset($session_info['session_id']) ? $session_info['session_id'] : '';
if ($session_id == '' || $session_id != session_id()) {
return false;
}
// check ip
if ($config->get('security.ipCheck') && $session_info['ip'] != $_SERVER['REMOTE_ADDR']) {
return false;
}
// session-id needs to be updated
if ($user->sessionIdIsTimedOut()) {
$user->updateSessionId();
}
// user is now logged in
$user->_loggedIn = true;
// save current user to session and return the instance
$user->saveToSession();
return $user;
}
} else {
// Try to authenticate with cookie information
$user = PMF_User_CurrentUser::getFromCookie($faqConfig);
// authenticate with session information
if (!$user instanceof PMF_User_CurrentUser) {
$user = PMF_User_CurrentUser::getFromSession($faqConfig);
}
if ($user instanceof PMF_User_CurrentUser) {
$auth = true;
} else {
$user = new PMF_User_CurrentUser($faqConfig);
}
}
// logout
if ($action == 'logout' && $auth) {
$user->deleteFromSession(true);
$auth = null;
$ssoLogout = $faqConfig->get('security.ssoLogoutRedirect');
if ($faqConfig->get('security.ssoSupport') && !empty($ssoLogout)) {
header("Location: {$ssoLogout}");
}
}
//
// Get current admin user and group id - default: -1
//
if (isset($user) && is_object($user)) {
$currentAdminUser = $user->getUserId();
if ($user->perm instanceof PMF_Perm_Medium) {
$currentAdminGroups = $user->perm->getUserGroups($currentAdminUser);
} else {
$currentAdminGroups = array(-1);
