4 files changed, 316 insertions, 0 deletions
diff --git a/application/libraries/Duser/Duser.php b/application/libraries/Duser/Duser.php
new file mode 100644
index 000000000..07a16190c
--- /dev/null
+++ b/application/libraries/Duser/Duser.php
@@ -0,0 +1,112 @@
+<?php
+/*
+ * Copyright 2013 Florian "Bluewind" Pritz <bluewind@server-speed.net>
+ *
+ * Licensed under AGPLv3
+ * (see COPYING for full license text)
+ *
+ */
+
+abstract class Duser_Driver extends CI_Driver {
+
+	// List of optional functions that are implemented
+	//
+	// Possible values are:
+	//  - can_register_new_users (only supported with the DB driver!)
+	//  - can_reset_password (only supported with the DB driver!)
+	public $optional_functions = array();
+
+	/*
+	 * The returned array should contain the following keys:
+	 *  - username string
+	 *  - userid INT > 0
+	 *
+	 * @param username
+	 * @param password
+	 * @return mixed array on success, false on failure
+	 */
+	abstract public function login($username, $password);
+
+	/*
+	 * @param username
+	 * @return boolean true is username exists, false otherwise
+	 */
+	public function username_exists($username) {
+		return null;
+	}
+
+	/*
+	 * @param userid
+	 * @return string email address of the user
+	 */
+	public function get_email($userid) {
+		return null;
+	}
+}
+
+class Duser extends CI_Driver_Library {
+
+	protected $_adapter = null;
+
+	protected $valid_drivers = array(
+		'duser_db', 'duser_ldap', 'duser_fluxbb'
+	);
+
+	function __construct()
+	{
+		$CI =& get_instance();
+
+		$this->_adapter = $CI->config->item("authentication_driver");
+	}
+
+	// require an optional function to be implemented
+	public function require_implemented($function) {
+		if (!$this->is_implemented($function)) {
+			show_error(""
+				."Optional function '".$function."' not implemented in user adapter '".$this->_adapter."'. "
+				."Requested functionally unavailable.");
+		}
+	}
+
+	// check if an optional function is implemented
+	public function is_implemented($function) {
+		if (in_array($function, $this->{$this->_adapter}->optional_functions)) {
+			return true;
+		}
+
+		return false;
+	}
+
+	public function login($username, $password)
+	{
+		$login_info = $this->{$this->_adapter}->login($username, $password);
+		if ($login_info === false) {
+			return false;
+		}
+
+		$CI =& get_instance();
+
+		$CI->session->set_userdata(array(
+			'logged_in' => true,
+			'username' => $login_info["username"],
+			'userid' => $login_info["userid"],
+			'access_level' => 'full',
+		));
+
+		return true;
+	}
+
+	public function username_exists($username)
+	{
+		if ($username === false) {
+			return false;
+		}
+
+		return $this->{$this->_adapter}->username_exists($username);
+	}
+
+	public function get_email($userid)
+	{
+		return $this->{$this->_adapter}->get_email($userid);
+	}
+}
diff --git a/application/libraries/Duser/drivers/Duser_db.php b/application/libraries/Duser/drivers/Duser_db.php
new file mode 100644
index 000000000..0f4298258
--- /dev/null
+++ b/application/libraries/Duser/drivers/Duser_db.php
@@ -0,0 +1,83 @@
+<?php
+/*
+ * Copyright 2013 Florian "Bluewind" Pritz <bluewind@server-speed.net>
+ *
+ * Licensed under AGPLv3
+ * (see COPYING for full license text)
+ *
+ */
+
+class Duser_db extends Duser_Driver {
+
+	/* FIXME: If you use this driver as a template, remove can_reset_password
+	 * and can_register_new_users. These features require the DB driver and
+	 * will NOT work with other drivers.
+	 */
+	public $optional_functions = array(
+		'can_reset_password',
+		'can_register_new_users',
+	);
+
+	public function login($username, $password)
+	{
+		$CI =& get_instance();
+
+		$query = $CI->db->query('
+			SELECT username, id, password
+			FROM `users`
+			WHERE `username` = ?
+			', array($username))->row_array();
+
+		if (!isset($query["username"]) || $query["username"] !== $username) {
+			return false;
+		}
+
+		if (!isset($query["password"])) {
+			return false;
+		}
+
+		if (crypt($password, $query["password"]) === $query["password"]) {
+			return array(
+				"username" => $username,
+				"userid" => $query["id"]
+			);
+		} else {
+			return false;
+		}
+	}
+
+	public function username_exists($username)
+	{
+		$CI =& get_instance();
+
+		$query = $CI->db->query("
+			SELECT id
+			FROM users
+			WHERE username = ?
+			", array($username));
+
+		if ($query->num_rows() > 0) {
+			return true;
+		} else {
+			return false;
+		}
+	}
+
+	public function get_email($userid)
+	{
+		$CI =& get_instance();
+
+		$query = $CI->db->query("
+			SELECT email
+			FROM users
+			WHERE id = ?
+			", array($userid))->row_array();
+
+		if (empty($query)) {
+			show_error("Failed to get email address from db");
+		}
+
+		return $query["email"];
+	}
+
+}
diff --git a/application/libraries/Duser/drivers/Duser_fluxbb.php b/application/libraries/Duser/drivers/Duser_fluxbb.php
new file mode 100644
index 000000000..b32e2ac8e
--- /dev/null
+++ b/application/libraries/Duser/drivers/Duser_fluxbb.php
@@ -0,0 +1,53 @@
+<?php
+/*
+ * Copyright 2013 Pierre Schmitz <pierre@archlinux.de>
+ *
+ * Licensed under AGPLv3
+ * (see COPYING for full license text)
+ *
+ */
+
+class Duser_fluxbb extends Duser_Driver {
+
+	private $CI = null;
+	private $config = array();
+
+	function __construct()
+	{
+		$this->CI =& get_instance();
+		$this->config = $this->CI->config->item('auth_fluxbb');
+	}
+
+	public function login($username, $password)
+	{
+		$query = $this->CI->db->query('
+			SELECT username, id
+			FROM '.$this->config['database'].'.users
+			WHERE username LIKE ? AND password = ?
+			', array($username, sha1($password)))->row_array();
+
+		if (!empty($query)) {
+			return array(
+				'username' => $query['username'],
+				'userid' => $query['id']
+			);
+		} else {
+			return false;
+		}
+	}
+
+	public function username_exists($username)
+	{
+		$query = $this->CI->db->query('
+			SELECT id
+			FROM '.$this->config['database'].'.users
+			WHERE username LIKE ?
+			', array($username));
+
+		if ($query->num_rows() > 0) {
+			return true;
+		} else {
+			return false;
+		}
+	}
+}
diff --git a/application/libraries/Duser/drivers/Duser_ldap.php b/application/libraries/Duser/drivers/Duser_ldap.php
new file mode 100644
index 000000000..1f1581620
--- /dev/null
+++ b/application/libraries/Duser/drivers/Duser_ldap.php
@@ -0,0 +1,68 @@
+<?php
+/*
+ * Copyright 2013 Florian "Bluewind" Pritz <bluewind@server-speed.net>
+ * Contributions by Hannes Rist
+ *
+ * Licensed under AGPLv3
+ * (see COPYING for full license text)
+ *
+ */
+class Duser_ldap extends Duser_Driver {
+	// none supported
+	public $optional_functions = array();
+
+	// Original source: http://code.activestate.com/recipes/101525-ldap-authentication/
+	public function login($username, $password) {
+		$CI =& get_instance();
+
+		$config = $CI->config->item("auth_ldap");
+
+		if ($username == "" || $password == "") {
+			return false;
+		}
+
+		$ds = ldap_connect($config['host'],$config['port']);
+		if ($ds === false) {
+			return false;
+		}
+
+		switch ($config["scope"]) {
+			case "base":
+				$r = ldap_read($ds, $config['basedn'], $config["username_field"].'='.$username);
+				break;
+			case "one":
+				$r = ldap_list($ds, $config['basedn'], $config["username_field"].'='.$username);
+				break;
+			case "subtree":
+				$r = ldap_search($ds, $config['basedn'], $config["username_field"].'='.$username);
+				break;
+			default:
+				show_error("Invalid LDAP scope");
+		}
+		if ($r === false) {
+			return false;
+		}
+
+		foreach ($config["options"] as $key => $value) {
+			if (ldap_set_option($ds, $key, $value) === false) {
+				return false;
+			}
+		}
+
+		$result = ldap_get_entries($ds, $r);
+		if ($result === false || !isset($result[0])) {
+			return false;
+		}
+
+		// ignore errors from ldap_bind as it will throw an error if the password is incorrect
+		if (@ldap_bind($ds, $result[0]['dn'], $password)) {
+			ldap_unbind($ds);
+			return array(
+				"username" => $result[0][$config["username_field"]][0],
+				"userid" => $result[0][$config["userid_field"]][0]
+			);
+		}
+
+		return false;
+	}
+}