phpslash-commit Mailing List for phpSlash (Page 60)

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Update of /cvsroot/phpslash/phpslash-ft/class
In directory sc8-pr-cvs1:/tmp/cvs-serv13468/phpslash-ft/class

Modified Files:
	Author.class 
Log Message:
change profile and lost password fixes

Index: Author.class
===================================================================
RCS file: /cvsroot/phpslash/phpslash-ft/class/Author.class,v
retrieving revision 1.40
retrieving revision 1.41
diff -C2 -d -r1.40 -r1.41
*** Author.class	12 Feb 2003 22:33:44 -0000	1.40
--- Author.class	25 Feb 2003 15:04:13 -0000	1.41
***************
*** 844,848 ****
     function lostpw($ary = "") {
  
!       global $REMOTE_ADDR;
  
        $this->author_templ->set_file(array(
--- 844,848 ----
     function lostpw($ary = "") {
  
!       global $challenge;
  
        $this->author_templ->set_file(array(
***************
*** 872,885 ****
        if ($this->db->next_record()) {
  
           $cookie_challenge = md5($this->auth->magic .":". $this->psl['basedir']);
!          $md5_pw = $this->db->Record['password']; // this is the raw MD5ed user/pass combo
!          $cookie_response = md5("$md5_pw:$cookie_challenge");
!          // replace the challenge with the date
!          $cookie_challenge = date("Ymd");
!          $cookie_ary[] = $cookie_response;
!          $cookie_ary[] = $this->db->Record['author_name'];
!          $cookie_ary[] = $cookie_challenge;
           $confirm_hash=serialize($cookie_ary);
           $confirm_hash=base64_encode($confirm_hash);
           $confirm_hash=urlencode($confirm_hash);
           if(!is_valid_email($this->db->Record['email'])) {
--- 872,904 ----
        if ($this->db->next_record()) {
  
+          // This is a site unique challenge word
           $cookie_challenge = md5($this->auth->magic .":". $this->psl['basedir']);
!          
! 	 // this is the raw MD5ed user/pass combo
! 	 $md5_pw = $this->db->Record['password']; 
!          
! 	 // create the correct reponse
! 	 $cookie_response = md5("$md5_pw:$cookie_challenge");
! 	 
!          // create a unique challenge
!          $cookie_challenge2 = md5(uniqid($this->psl['magic']));
! 	 
! 	 // setup and save the confirmation check to the user's record
!          $cookie_ary['response'] = $cookie_response;
!          $cookie_ary['name'] = $this->db->Record['author_name'];
!          $cookie_ary['challenge'] = $cookie_challenge2;
           $confirm_hash=serialize($cookie_ary);
           $confirm_hash=base64_encode($confirm_hash);
+          if(!$this->setConfirm($this->db->Record['author_name'],$confirm_hash)) {
+             $this->message .= "Username not found";
+             return false;
+          }
+ 
+ 	 // setup and email the confirmation string
+ 	 $cookie_ary = '';
+ 	 $cookie_ary['challenge'] = $cookie_challenge2;
+ 	 $cookie_ary['name'] = $this->db->Record['author_name'];
+ 	 $confirm_hash=serialize($cookie_ary);
+          $confirm_hash=base64_encode($confirm_hash);
           $confirm_hash=urlencode($confirm_hash);
           if(!is_valid_email($this->db->Record['email'])) {
***************
*** 891,896 ****
           $mail_ary['mail_to_address'] = $this->db->Record['email'];
           $mail_ary['vars']['confirm'] = $confirm_hash;
!          $mail_ary['vars']['remote_addr'] = $REMOTE_ADDR;
! 
           if(emailNotify($mail_ary)) {
              $this->message .= "Email Confirmation sent";
--- 910,914 ----
           $mail_ary['mail_to_address'] = $this->db->Record['email'];
           $mail_ary['vars']['confirm'] = $confirm_hash;
!          $mail_ary['vars']['remote_addr'] = $_SERVER['REMOTE_ADDR'];
           if(emailNotify($mail_ary)) {
              $this->message .= "Email Confirmation sent";
***************
*** 906,909 ****
--- 924,1031 ----
  
  
+    /**
+    * setConfirm -  set confirm string assigned to name
+    *
+    * when given a name, setConfirm sets the confirmation string
+    *
+    * @param string name
+    * @access public
+    * return true or false
+    */
+ 
+    function setConfirm($name, $confirm) {
+       // debug("setConfirm::name", $name);
+       // debug("setConfirm::confirm", $confirm);
+       if (!$name) {
+          // debug("setConfirm", "no name");
+          $success =  false;
+       } else {
+           $q = "UPDATE psl_author
+                   SET perms = '$confirm'
+                 WHERE author_name = '$name' ";
+          $this->db->query($q);
+          $success = true;
+       } 
+       return $success;
+    }
+ 
+    /**
+    * getConfirm -  get confirm string assigned to name
+    *
+    * when given a name, getConfirm gets the confirmation string
+    *
+    * @param string name
+    * @access public
+    * return string
+    */
+    
+    function getConfirm($name) {
+       // debug("getConfirm::name", $name);
+       if (!$name) {
+          // debug("getConfirm", "no name");
+          $success =  false;
+       } else {
+ 	 $q = "SELECT perms
+                  FROM psl_author
+                 WHERE author_name = '$name' ";
+          $this->db->query($q);
+          $this->db->next_record();
+          $success = $this->db->f("perms");
+       } 
+       return $success;
+    }
+ 
+ 
+    /**
+    * confirmAuthor -  attempts to confirm a lost password confirmation string
+    *
+    * when given a confirm string, returns false if not confirmed 
+    * and true upon success.
+    *
+    * If successful, HTTP_COOKIE_VARS are set with the correct variables for
+    * logging in automatically.
+    *
+    * @param string confirm
+    * @access public
+    * return boolean 
+    */
+    
+    function confirmAuthor($confirm) {
+       global $HTTP_COOKIE_VARS;
+ 
+       if ( $confirm) {
+          // explode the confirmation string into an array
+ 	 $confirm_hash = base64_decode($confirm);
+          $confirm_hash = unserialize($confirm_hash);
+ 
+ 	 // explode the saved array
+          $saved_confirm = $this->getConfirm($confirm_hash['name']);
+          $saved_confirm = base64_decode($saved_confirm);
+          $saved_confirm = unserialize($saved_confirm);
+ 
+ 	 // if the unique challenge word matches, continue.
+          if($confirm_hash['challenge'] == $saved_confirm['challenge']) {
+             
+ 	    // reset the confirmation string - one time use only.
+             $this->setConfirm($saved_confirm['name'], '');
+ 
+ 	    // setup the cookie variables
+ 	    $confirm_hash = '';
+ 	    $confirm_hash[0] = $saved_confirm['response'];
+ 	    $confirm_hash[1] = $saved_confirm['name'];
+             $confirm_hash[2] = md5($auth->magic .":". $this->psl['basedir']);
+             $HTTP_COOKIE_VARS['user_info'] = base64_encode(serialize($confirm_hash));
+ 	    // login should be successful
+             return true;
+          } else {
+             // confirmation challenge word did not match
+             return false;
+          }
+       } else {
+ 	 // missing confirmation string
+          return false;
+       }
+    }
+    
  }  /* end of Author.class */
  ?>

2001	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct (11)	Nov (59)	Dec (60)
2002	Jan (52)	Feb (77)	Mar (118)	Apr (76)	May (106)	Jun (145)	Jul (9)	Aug (15)	Sep (78)	Oct (83)	Nov (105)	Dec (51)
2003	Jan (105)	Feb (100)	Mar (111)	Apr (149)	May (95)	Jun (56)	Jul (8)	Aug (2)	Sep	Oct (22)	Nov (117)	Dec (6)
2004	Jan (1)	Feb	Mar (3)	Apr (25)	May	Jun (11)	Jul (26)	Aug (85)	Sep (119)	Oct (312)	Nov (271)	Dec (5)
2005	Jan (6)	Feb	Mar	Apr (12)	May (7)	Jun (8)	Jul	Aug	Sep	Oct	Nov	Dec
2009	Jan (5)	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec

phpslash-commit Mailing List for phpSlash (Page 60)

phpslash-commit — A list for automatically mailed SCM Commits