Revision: 1512
          http://mrbs.svn.sourceforge.net/mrbs/?rev=1512&view=rev
Author:   jberanek
Date:     2010-10-18 16:32:17 +0000 (Mon, 18 Oct 2010)

Log Message:
-----------
* Added support for setting 'cookie' session scheme to use only
 session cookies. For this set
 $auth["session_cookie"]["session_expire_time"] to 0. Fixed token
 checking code, so this it takes notice of this variable.

Modified Paths:
--------------
    mrbs/trunk/web/session_cookie.inc

Modified: mrbs/trunk/web/session_cookie.inc
===================================================================
--- mrbs/trunk/web/session_cookie.inc   2010-10-18 16:10:43 UTC (rev 1511)
+++ mrbs/trunk/web/session_cookie.inc   2010-10-18 16:32:17 UTC (rev 1512)
@@ -82,7 +82,14 @@
       $UserPassword = $NewUserPassword;
     }
 
-    $expiry_time = time()+$auth['session_cookie']['session_expire_time'];
+    if ($auth['session_cookie']['session_expire_time'] == 0)
+    {
+      $expiry_time = 0;
+    }
+    else
+    {
+      $expiry_time = time()+$auth['session_cookie']['session_expire_time'];
+    }
     $token = "AUTH".$UserName."|".$expiry_time;
     if ($auth['session_cookie']['include_ip'])
     {
@@ -196,7 +203,7 @@
 
 function getUserName()
 {
-  global $blowfish, $REMOTE_ADDR;
+  global $blowfish, $REMOTE_ADDR, $auth;
 
   $encrypted_token = NULL;
   $username = NULL;
@@ -227,11 +234,16 @@
 
       /* Check for a valid token */
       if (isset($parts[0]) &&
-          isset($parts[1]) && ($parts[1] > time()) &&
-          (!isset($parts[2]) ||
-          (isset($parts[2]) && ($parts[2] == $REMOTE_ADDR))))
+          isset($parts[1]))
       {
-        $username = $parts[0];
+        error_log("expiry is ".$parts[1]);
+        if (((($auth["session_cookie"]["session_expire_time"] == 0) &&
+            ($parts[1] == 0)) || ($parts[1] > time())) &&
+            (!isset($parts[2]) ||
+             (isset($parts[2]) && ($parts[2] == $REMOTE_ADDR))))
+        {
+          $username = $parts[0];
+        }
       }
       else
       {


This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.

------------------------------------------------------------------------------
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev
_______________________________________________
Mrbs-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mrbs-commits

Reply via email to