From f8ac2f6582001bfa3b42ac4fbdc77ff97137a8f8 Mon Sep 17 00:00:00 2001 From: Florian Pritz Date: Wed, 30 Jan 2013 22:31:11 +0100 Subject: Modularize authentication system This allows to easily add LDAP and other support. Signed-off-by: Florian Pritz --- application/libraries/Duser/drivers/Duser_db.php | 63 ++++++++++++++++++++++++ 1 file changed, 63 insertions(+) create mode 100644 application/libraries/Duser/drivers/Duser_db.php (limited to 'application/libraries/Duser/drivers/Duser_db.php') diff --git a/application/libraries/Duser/drivers/Duser_db.php b/application/libraries/Duser/drivers/Duser_db.php new file mode 100644 index 000000000..806b0d150 --- /dev/null +++ b/application/libraries/Duser/drivers/Duser_db.php @@ -0,0 +1,63 @@ + + * + * Licensed under GPLv3 + * (see COPYING for full license text) + * + */ + +class Duser_db extends Duser_Driver { + + public $optional_functions = array( + 'username_exists', + 'can_reset_password', + 'can_register_new_users' + ); + + public function login($username, $password) + { + $CI =& get_instance(); + + $query = $CI->db->query(' + SELECT username, id, password + FROM `users` + WHERE `username` = ? + ', array($username))->row_array(); + + if (!isset($query["username"]) || $query["username"] !== $username) { + return false; + } + + if (!isset($query["password"])) { + return false; + } + + if (crypt($password, $query["password"]) === $query["password"]) { + return array( + "username" => $username, + "userid" => $query["id"] + ); + } else { + return false; + } + } + + public function username_exists($username) + { + $CI =& get_instance(); + + $query = $CI->db->query(" + SELECT id + FROM users + WHERE username = ? + ", array($username)); + + if ($query->num_rows() > 0) { + return true; + } else { + return false; + } + } + +} -- cgit v1.2.3-24-g4f1b