80 lines
1.7 KiB
PHP
80 lines
1.7 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
|
||
|
|
class Dao_Users
|
||
|
|
extends DAO
|
||
|
|
{
|
||
|
|
private function hashPassword( $password , $salt , $iterations )
|
||
|
|
{
|
||
|
|
$hash = $password;
|
||
|
|
$salt = trim( $salt );
|
||
|
|
do {
|
||
|
|
$hash = sha1( "$salt$hash$salt" );
|
||
|
|
$iterations --;
|
||
|
|
} while ( $iterations > 0 );
|
||
|
|
return $hash;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
public function getUsers( )
|
||
|
|
{
|
||
|
|
return $this->query( 'SELECT user_id , user_email FROM users ORDER BY LOWER( user_email )' )->execute( );
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
public function getUser( $email )
|
||
|
|
{
|
||
|
|
$query = $this->query( 'SELECT * FROM users WHERE user_email = LOWER( $1 )' );
|
||
|
|
$results = $query->execute( $email );
|
||
|
|
if ( empty( $results ) ) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
return array_shift( $results );
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
public function checkLogin( $email , $password )
|
||
|
|
{
|
||
|
|
$userData = $this->getUser( $email );
|
||
|
|
if ( $userData != null ) {
|
||
|
|
$hashed = $this->hashPassword( $password ,
|
||
|
|
$userData->user_salt ,
|
||
|
|
$userData->user_iterations );
|
||
|
|
if ( $hashed === $userData->user_hash ) {
|
||
|
|
return $userData;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
public function addUser( $email , $password )
|
||
|
|
{
|
||
|
|
$iterations = rand( 130 , 160 );
|
||
|
|
|
||
|
|
$randSource = array( );
|
||
|
|
for ( $i = 0 ; $i < 26 ; $i ++ ) {
|
||
|
|
array_push( $randSource , chr( $i + ord( 'a' ) ) );
|
||
|
|
array_push( $randSource , chr( $i + ord( 'A' ) ) );
|
||
|
|
if ( $i < 10 ) {
|
||
|
|
array_push( $randSource , chr( $i + 48 ) );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
shuffle( $randSource );
|
||
|
|
$salt = join( '' , array_splice( $randSource , 0 , 4 ) );
|
||
|
|
|
||
|
|
$hash = $this->hashPassword( $password , $salt , $iterations );
|
||
|
|
|
||
|
|
$result = $this->query( 'SELECT users_add( $1 , $2 , $3 , $4 ) AS error' )
|
||
|
|
->execute( $email , $salt , $iterations , $hash );
|
||
|
|
return $result[ 0 ]->error;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
public function hasUsers( )
|
||
|
|
{
|
||
|
|
$result = $this->query( 'SELECT COUNT(*) AS n_users FROM users' )->execute( );
|
||
|
|
return $result[0]->n_users;
|
||
|
|
}
|
||
|
|
}
|