Loading Please wait...

zHttpAuth.php

Go to the documentation of this file.

<?php
class zHttpAuth extends zCore{
  var $cntrl;
  var $mode;
  var $data = array();
  var $dataCon;
  var $cancelText = null;
  var $realm = null;

  function zHttpAuth(&$cntrl){
    $this->attachController($cntrl);
    if(!defined('Z_HTTP_AUTH_MODE_RAW'))define('Z_HTTP_AUTH_MODE_RAW', true);
    if(!defined('Z_HTTP_AUTH_MODE_DB'))define('Z_HTTP_AUTH_MODE_DB', false);
  }
  function attachController(&$cntrl){
    $this->cntrl = &$cntrl;
  }
  function setRawCredentials($usr, $psw){
    $this->mode = Z_HTTP_AUTH_MODE_RAW;
    $this->data = array($usr, $psw);
  }
  function setCredentialsDataCon($conName){
    $this->mode = Z_HTTP_AUTH_MODE_DB;
    $this->dataCon = $conName;
  }
  function setCredentialsDataCol($tableName, $usrCol, $pswCol){
    $this->mode = Z_HTTP_AUTH_MODE_DB;
    $this->data = array($tableName, $usrCol, $pswCol);
  }
  function validate(){
    if(count($this->data) < 2){
      perror("<code>zigmoyd.HttpAuth.validate</code><br />Credentials are Not set");
      return false;
    }
    if(!isset($_SERVER['PHP_AUTH_USER'])){
      $this->sendHeaders();
    }else{
      switch($this->mode){
        case Z_HTTP_AUTH_MODE_RAW:
          if(count($this->data) != 2){
            perror("<code>zigmoyd.HttpAuth.validate</code><br />unexpected Credentials<br />Expecting UserName and Password Pair as the validation mode is set to RAW<br />But the Credentials are TableName UserCol and PswCol (like DB)");
            return false;
          }
          //$this->cntrl->noAutoViewRender();
          //$this->cntrl->noLayout();
          return ($_SERVER['PHP_AUTH_USER'] == $this->data[0] && $_SERVER['PHP_AUTH_PW'] == $this->data[1]);
        break;
        case Z_HTTP_AUTH_MODE_DB:
          if(count($this->data) != 3){
            perror("<code>zigmoyd.HttpAuth.validate</code><br />unexpected Credentials<br />Expecting TableName UserCol and PasswordCol as the validation mode is set to DB<br />But the Credentials are UserName and PswName (like RAW)");
            return false;
          }
          load_module('dbAccess');
          $db = new zDbAccess($this->dataCon, $this->data[0]);
          $db->fetch($this->data[1]);
          $db->fetch($this->data[2]);
          $db->identifyBy($this->data[1], $_SERVER['PHP_AUTH_USER']);
          $db->identifyBy($this->data[2], $_SERVER['PHP_AUTH_PW']);
          $retSet = $db->export();
          return(is_array($retSet) && count($retSet) >= 1);
        break;
      }
    }
  }
  function noCache(){
    $this->cntrl->setHeader("Pragma: no-cache");
    $this->cntrl->setHeader("Cache-Control: no-cache, must-revalidate");
    $this->cntrl->setHeader("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
  }
  function setRealm($realmText){
    $this->realm = $realmText;
  }
  function sendHeaders(){
    if(is_null($this->realm))$this->realm = '/'.implode('/', url_segment(ZIG_URL_SEGMENT_PATH));
    $this->cntrl->setHeader('WWW-Authenticate: Basic realm="'.$this->realm.'"');
    $this->cntrl->setHeader('HTTP/1.0 401 Unauthorized');
    if(is_null($this->cancelText))$this->ifCanceled();
    $this->forward401();
  }
  function forward401(){
    exit(zTemplate::sysNumeric('401', $this->cancelText));
  }
  function loop(){
    $this->sendHeaders();
  }
  function ifCanceled($cancelText="UnAuthorized Access"){
    $this->cancelText = $cancelText;
  }
  function isOk(){
    return $this->validate();
  }
}
?>

---