[Sommaire] [Imprimer]

   1  <?php
   2  /*
   3  V4.90 8 June 2006  (c) 2000-2006 John Lim (jlim#natsoft.com.my). All rights reserved.
   4    Released under both BSD license and Lesser GPL library license. 
   5    Whenever there is any discrepancy between the two licenses, 
   6    the BSD license will take precedence.
   7      Made table name configurable - by David Johnson djohnson@inpro.net
   8      Encryption by Ari Kuorikoski <ari.kuorikoski@finebyte.com>
   9      
  10    Set tabs to 4 for best viewing.
  11    
  12    Latest version of ADODB is available at http://php.weblogs.com/adodb
  13    ======================================================================
  14    
  15   This file provides PHP4 session management using the ADODB database
  16  wrapper library.
  17   
  18   Example
  19   =======
  20   
  21      include('adodb.inc.php');
  22      #---------------------------------#
  23      include('adodb-cryptsession.php'); 
  24      #---------------------------------#
  25      session_start();
  26      session_register('AVAR');
  27      $_SESSION['AVAR'] += 1;
  28      print "
  29  -- \$_SESSION['AVAR']={$_SESSION['AVAR']}</p>";
  30  
  31   
  32   Installation
  33   ============
  34   1. Create a new database in MySQL or Access "sessions" like
  35  so:
  36   
  37    create table sessions (
  38         SESSKEY char(32) not null,
  39         EXPIRY int(11) unsigned not null,
  40         EXPIREREF varchar(64),
  41         DATA CLOB,
  42        primary key (sesskey)
  43    );
  44    
  45    2. Then define the following parameters. You can either modify
  46       this file, or define them before this file is included:
  47       
  48        $ADODB_SESSION_DRIVER='database driver, eg. mysql or ibase';
  49      $ADODB_SESSION_CONNECT='server to connect to';
  50      $ADODB_SESSION_USER ='user';
  51      $ADODB_SESSION_PWD ='password';
  52      $ADODB_SESSION_DB ='database';
  53      $ADODB_SESSION_TBL = 'sessions'
  54      
  55    3. Recommended is PHP 4.0.2 or later. There are documented
  56  session bugs in earlier versions of PHP.
  57  
  58  */
  59  
  60  
  61  include_once ('crypt.inc.php');
  62  
  63  if (!defined('_ADODB_LAYER')) {
  64      include (dirname(__FILE__).'/adodb.inc.php');
  65  }
  66  
  67   /* if database time and system time is difference is greater than this, then give warning */
  68   define('ADODB_SESSION_SYNCH_SECS',60); 
  69  
  70  if (!defined('ADODB_SESSION')) {
  71  
  72   define('ADODB_SESSION',1);
  73   
  74  GLOBAL     $ADODB_SESSION_CONNECT, 
  75      $ADODB_SESSION_DRIVER,
  76      $ADODB_SESSION_USER,
  77      $ADODB_SESSION_PWD,
  78      $ADODB_SESSION_DB,
  79      $ADODB_SESS_CONN,
  80      $ADODB_SESS_LIFE,
  81      $ADODB_SESS_DEBUG,
  82      $ADODB_SESS_INSERT,
  83      $ADODB_SESSION_EXPIRE_NOTIFY,
  84      $ADODB_SESSION_TBL; 
  85  
  86      //$ADODB_SESS_DEBUG = true;
  87      
  88      /* SET THE FOLLOWING PARAMETERS */
  89  if (empty($ADODB_SESSION_DRIVER)) {
  90      $ADODB_SESSION_DRIVER='mysql';
  91      $ADODB_SESSION_CONNECT='localhost';
  92      $ADODB_SESSION_USER ='root';
  93      $ADODB_SESSION_PWD ='';
  94      $ADODB_SESSION_DB ='xphplens_2';
  95  }
  96  
  97  if (empty($ADODB_SESSION_TBL)){
  98      $ADODB_SESSION_TBL = 'sessions';
  99  }
 100  
 101  if (empty($ADODB_SESSION_EXPIRE_NOTIFY)) {
 102      $ADODB_SESSION_EXPIRE_NOTIFY = false;
 103  }
 104  
 105  function ADODB_Session_Key() 
 106  {
 107  $ADODB_CRYPT_KEY = 'CRYPTED ADODB SESSIONS ROCK!';
 108  
 109      /* USE THIS FUNCTION TO CREATE THE ENCRYPTION KEY FOR CRYPTED SESSIONS    */
 110      /* Crypt the used key, $ADODB_CRYPT_KEY as key and session_ID as SALT    */
 111      return crypt($ADODB_CRYPT_KEY, session_ID());
 112  }
 113  
 114  $ADODB_SESS_LIFE = ini_get('session.gc_maxlifetime');
 115  if ($ADODB_SESS_LIFE <= 1) {
 116      // bug in PHP 4.0.3 pl 1  -- how about other versions?
 117      //print "<h3>Session Error: PHP.INI setting <i>session.gc_maxlifetime</i>not set: $ADODB_SESS_LIFE</h3>";
 118      $ADODB_SESS_LIFE=1440;
 119  }
 120  
 121  function adodb_sess_open($save_path, $session_name) 
 122  {
 123  GLOBAL     $ADODB_SESSION_CONNECT, 
 124      $ADODB_SESSION_DRIVER,
 125      $ADODB_SESSION_USER,
 126      $ADODB_SESSION_PWD,
 127      $ADODB_SESSION_DB,
 128      $ADODB_SESS_CONN,
 129      $ADODB_SESS_DEBUG;
 130      
 131      $ADODB_SESS_INSERT = false;
 132      
 133      if (isset($ADODB_SESS_CONN)) return true;
 134      
 135      $ADODB_SESS_CONN = ADONewConnection($ADODB_SESSION_DRIVER);
 136      if (!empty($ADODB_SESS_DEBUG)) {
 137          $ADODB_SESS_CONN->debug = true;
 138          print" conn=$ADODB_SESSION_CONNECT user=$ADODB_SESSION_USER pwd=$ADODB_SESSION_PWD db=$ADODB_SESSION_DB ";
 139      }
 140      return $ADODB_SESS_CONN->PConnect($ADODB_SESSION_CONNECT,
 141              $ADODB_SESSION_USER,$ADODB_SESSION_PWD,$ADODB_SESSION_DB);
 142      
 143  }
 144  
 145  function adodb_sess_close() 
 146  {
 147  global $ADODB_SESS_CONN;
 148  
 149      if ($ADODB_SESS_CONN) $ADODB_SESS_CONN->Close();
 150      return true;
 151  }
 152  
 153  function adodb_sess_read($key) 
 154  {
 155  $Crypt = new MD5Crypt;
 156  global $ADODB_SESS_CONN,$ADODB_SESS_INSERT,$ADODB_SESSION_TBL;
 157      $rs = $ADODB_SESS_CONN->Execute("SELECT data FROM $ADODB_SESSION_TBL WHERE sesskey = '$key' AND expiry >= " . time());
 158      if ($rs) {
 159          if ($rs->EOF) {
 160              $ADODB_SESS_INSERT = true;
 161              $v = '';
 162          } else {
 163              // Decrypt session data
 164              $v = rawurldecode($Crypt->Decrypt(reset($rs->fields), ADODB_Session_Key()));
 165          }
 166          $rs->Close();
 167          return $v;
 168      }
 169      else $ADODB_SESS_INSERT = true;
 170      
 171      return '';
 172  }
 173  
 174  function adodb_sess_write($key, $val) 
 175  {
 176  $Crypt = new MD5Crypt;
 177      global $ADODB_SESS_INSERT,$ADODB_SESS_CONN, $ADODB_SESS_LIFE, $ADODB_SESSION_TBL,$ADODB_SESSION_EXPIRE_NOTIFY;
 178  
 179      $expiry = time() + $ADODB_SESS_LIFE;
 180  
 181      // encrypt session data..    
 182      $val = $Crypt->Encrypt(rawurlencode($val), ADODB_Session_Key());
 183      
 184      $arr = array('sesskey' => $key, 'expiry' => $expiry, 'data' => $val);
 185      if ($ADODB_SESSION_EXPIRE_NOTIFY) {
 186          $var = reset($ADODB_SESSION_EXPIRE_NOTIFY);
 187          global $$var;
 188          $arr['expireref'] = $$var;
 189      }
 190      $rs = $ADODB_SESS_CONN->Replace($ADODB_SESSION_TBL,
 191          $arr,
 192          'sesskey',$autoQuote = true);
 193  
 194      if (!$rs) {
 195          ADOConnection::outp( '
 196  -- Session Replace: '.$ADODB_SESS_CONN->ErrorMsg().'</p>',false);
 197      } else {
 198          // bug in access driver (could be odbc?) means that info is not commited
 199          // properly unless select statement executed in Win2000
 200      
 201      if ($ADODB_SESS_CONN->databaseType == 'access') $rs = $ADODB_SESS_CONN->Execute("select sesskey from $ADODB_SESSION_TBL WHERE sesskey='$key'");
 202      }
 203      return isset($rs);
 204  }
 205  
 206  function adodb_sess_destroy($key) 
 207  {
 208      global $ADODB_SESS_CONN, $ADODB_SESSION_TBL,$ADODB_SESSION_EXPIRE_NOTIFY;
 209      
 210      if ($ADODB_SESSION_EXPIRE_NOTIFY) {
 211          reset($ADODB_SESSION_EXPIRE_NOTIFY);
 212          $fn = next($ADODB_SESSION_EXPIRE_NOTIFY);
 213          $savem = $ADODB_SESS_CONN->SetFetchMode(ADODB_FETCH_NUM);
 214          $rs = $ADODB_SESS_CONN->Execute("SELECT expireref,sesskey FROM $ADODB_SESSION_TBL WHERE sesskey='$key'");
 215          $ADODB_SESS_CONN->SetFetchMode($savem);
 216          if ($rs) {
 217              $ADODB_SESS_CONN->BeginTrans();
 218              while (!$rs->EOF) {
 219                  $ref = $rs->fields[0];
 220                  $key = $rs->fields[1];
 221                  $fn($ref,$key);
 222                  $del = $ADODB_SESS_CONN->Execute("DELETE FROM $ADODB_SESSION_TBL WHERE sesskey='$key'");
 223                  $rs->MoveNext();
 224              }
 225              $ADODB_SESS_CONN->CommitTrans();
 226          }
 227      } else {
 228          $qry = "DELETE FROM $ADODB_SESSION_TBL WHERE sesskey = '$key'";
 229          $rs = $ADODB_SESS_CONN->Execute($qry);
 230      }
 231      return $rs ? true : false;
 232  }
 233  
 234  
 235  function adodb_sess_gc($maxlifetime) {
 236      global $ADODB_SESS_CONN, $ADODB_SESSION_TBL,$ADODB_SESSION_EXPIRE_NOTIFY,$ADODB_SESS_DEBUG;
 237  
 238      if ($ADODB_SESSION_EXPIRE_NOTIFY) {
 239          reset($ADODB_SESSION_EXPIRE_NOTIFY);
 240          $fn = next($ADODB_SESSION_EXPIRE_NOTIFY);
 241          $savem = $ADODB_SESS_CONN->SetFetchMode(ADODB_FETCH_NUM);
 242          $t = time();
 243          $rs = $ADODB_SESS_CONN->Execute("SELECT expireref,sesskey FROM $ADODB_SESSION_TBL WHERE expiry < $t");
 244          $ADODB_SESS_CONN->SetFetchMode($savem);
 245          if ($rs) {
 246              $ADODB_SESS_CONN->BeginTrans();
 247              while (!$rs->EOF) {
 248                  $ref = $rs->fields[0];
 249                  $key = $rs->fields[1];
 250                  $fn($ref,$key);
 251                  //$del = $ADODB_SESS_CONN->Execute("DELETE FROM $ADODB_SESSION_TBL WHERE sesskey='$key'");
 252                  $rs->MoveNext();
 253              }
 254              $rs->Close();
 255              
 256              $ADODB_SESS_CONN->Execute("DELETE FROM $ADODB_SESSION_TBL WHERE expiry < $t");
 257              $ADODB_SESS_CONN->CommitTrans();
 258          }
 259      } else {
 260          $qry = "DELETE FROM $ADODB_SESSION_TBL WHERE expiry < " . time();
 261          $ADODB_SESS_CONN->Execute($qry);
 262      }
 263      
 264      // suggested by Cameron, "GaM3R" <gamr@outworld.cx>
 265      if (defined('ADODB_SESSION_OPTIMIZE'))
 266      {
 267      global $ADODB_SESSION_DRIVER;
 268      
 269          switch( $ADODB_SESSION_DRIVER ) {
 270              case 'mysql':
 271              case 'mysqlt':
 272                  $opt_qry = 'OPTIMIZE TABLE '.$ADODB_SESSION_TBL;
 273                  break;
 274              case 'postgresql':
 275              case 'postgresql7':
 276                  $opt_qry = 'VACUUM '.$ADODB_SESSION_TBL;    
 277                  break;
 278          }
 279      }
 280      
 281      if ($ADODB_SESS_CONN->dataProvider === 'oci8') $sql = 'select  TO_CHAR('.($ADODB_SESS_CONN->sysTimeStamp).', \'RRRR-MM-DD HH24:MI:SS\') from '. $ADODB_SESSION_TBL;
 282      else $sql = 'select '.$ADODB_SESS_CONN->sysTimeStamp.' from '. $ADODB_SESSION_TBL;
 283      
 284      $rs =& $ADODB_SESS_CONN->SelectLimit($sql,1);
 285      if ($rs && !$rs->EOF) {
 286      
 287          $dbts = reset($rs->fields);
 288          $rs->Close();
 289          $dbt = $ADODB_SESS_CONN->UnixTimeStamp($dbts);
 290          $t = time();
 291          if (abs($dbt - $t) >= ADODB_SESSION_SYNCH_SECS) {
 292              $msg = 
 293              __FILE__.": Server time for webserver {$_SERVER['HTTP_HOST']} not in synch with database: database=$dbt ($dbts), webserver=$t (diff=".(abs($dbt-$t)/3600)." hrs)";
 294              error_log($msg);
 295              if ($ADODB_SESS_DEBUG) ADOConnection::outp("
 296  -- $msg</p>");
 297          }
 298      }
 299      
 300      return true;
 301  }
 302  
 303  session_module_name('user'); 
 304  session_set_save_handler(
 305      "adodb_sess_open",
 306      "adodb_sess_close",
 307      "adodb_sess_read",
 308      "adodb_sess_write",
 309      "adodb_sess_destroy",
 310      "adodb_sess_gc");
 311  }
 312  
 313  /*  TEST SCRIPT -- UNCOMMENT */
 314  /*
 315  if (0) {
 316  
 317      session_start();
 318      session_register('AVAR');
 319      $_SESSION['AVAR'] += 1;
 320      print "
 321  -- \$_SESSION['AVAR']={$_SESSION['AVAR']}</p>";
 322  }
 323  */
 324  ?>