dbxSession.class.php

Go to the documentation of this file.

<?php

class dbxSession {
 
  Private function get_request() {
     $request='';
     if (isset($_SERVER['REQUEST_URI']))  $request=$_SERVER['REQUEST_URI'] ;
     return $request;
  }
 
 
  Private function get_new_session_id($uid) {
    $s1=microtime(true);
    $s2=dbx()->new_password(8);
    $sid=md5($uid.'|'.$s1.'|'.$s2);
    $sid=substr($sid, 0, 32);
    return $sid;
  } 
 
  Private function get_new_session($uid) {
    $config=dbx()->get_config('dbx');
    $cookie=0; if (count($_COOKIE)>0) $cookie=1;
    $oBrowser =dbx()->get_system_obj('dbxBrowser');
    $sid=$this->get_new_session_id($uid);
    dbx()->debug("#dbxSession  new sessid for user($uid) =($sid)");
 
    $session['record']['id']    = 0;
    $session['record']['create_date'] = date('Y-m-d H:i:s');
    $session['record']['create_uid']  = $uid;
    $session['record']['update_date'] = date('Y-m-d H:i:s');
    $session['record']['update_uid']  = $uid;
    $session['record']['owner'] = $uid;
    $session['record']['ip']    = $oBrowser->_ip;
    $session['record']['host']  = $oBrowser->_host;
    $session['record']['device']= $oBrowser->_device;
    $session['record']['robot'] = $oBrowser->_robot;
    $session['record']['name']  = $oBrowser->_name;
    $session['record']['ver']   = $oBrowser->_version;
    $session['record']['os']    = $oBrowser->_platform;
    $session['record']['width'] = $oBrowser->_width;
    $session['record']['height']= $oBrowser->_height;
    $session['record']['cookie']= $cookie;
    $session['record']['userid']= $uid;
    $session['record']['sessid']= $sid;
 
    $session['record']['request_counter']= '0';
    $session['record']['request_last']   = '';
    $session['record']['request_current']= '';
 
    $session['current_user']=$this->get_current_user($uid);
    $session['tmp']=array();
    $session['remember']=array();
    $session['cache']['tpl']=array();
    $session['cache']['obj']=array();
  
    // - - - - - - - - - - -
 
 
    return $session;
   }
 
 
 
   private function apply_browser_to_record(&$rec) {
      $oBrowser = dbx()->get_system_obj('dbxBrowser');
 
      $rec['ip']     = $oBrowser->_ip;
      $rec['host']   = $oBrowser->_host;
      $rec['device'] = $oBrowser->_device;
      $rec['mobile'] = $oBrowser->_mobile;
      $rec['robot']  = $oBrowser->_robot;
      $rec['name']   = $oBrowser->_name;
      $rec['ver']    = $oBrowser->_version;
      $rec['os']     = $oBrowser->_platform;
      $rec['width']  = $oBrowser->_width;
      $rec['height'] = $oBrowser->_height;
      $rec['cookie'] = count($_COOKIE)>0 ? 1 : 0;
   }
 
 
 
   public function get_current_user($uid = 0) {
    // #todo cfg ob user 1 (guest) db oder nicht !
    $current_user = [
        'id'       => 0,
        'uname'    => 'guest',
        'roles'    => 'guest',
        'email'    => '',
        'name'     => 'Guest',
        'design'   => 'default',
        'color'    => 'default',
        'language' => 'de',
        'edit'     => 0
    ];
 
    if ($uid) {
        $db       = dbx()->get_system_obj('dbxDB');
        $user_rec = $db->select1('dbxUser', $uid , verify_access: 0);
 
        if (!is_array($user_rec) || empty($user_rec['id'])) {
            $user_rec = array();
        }
 
        if (is_array($user_rec) && !empty($user_rec['id'])) {
            $current_user = [
                'id'       => (int)$user_rec['id'],
                'uname'    => $user_rec['uname'],
                'roles'    => $user_rec['roles'],
                'email'    => $user_rec['email'],
                'name'     => $user_rec['name'],
                'design'   => $user_rec['design'],
                'color'    => $user_rec['color'],
                'language' => $user_rec['language'],
                'edit'     => $user_rec['edit']
            ];
        }
    }
 
    dbx()->debug("###CURRENT-USER###", $current_user);
    return $current_user;
}
 
 

  public function load_session() {
    dbx()->timer('session-browser','Session browser');
    $sok=false;
    $oBrowser=dbx()->get_system_obj('dbxBrowser');
    $ip  = $oBrowser->_ip;
    $host= $oBrowser->_host;
    if (isset($_SESSION['dbx']['record'])) {
        if (isset($_SESSION['dbx']['current_user']['id'])) {
          $sok=1;    
          if ($_SESSION['dbx']['record']['ip']   != $ip  ) $sok=false;
          if ($_SESSION['dbx']['record']['host'] != $host) $sok=false;
       }
    }
    
 
    if (!$sok) {
      dbx()->timer('session-new','Session create new');
      $_SESSION['dbx'] =$this->get_new_session(0);
      dbx()->debug("#### Create new session #### ");
      dbx()->timer('session-new');
    }
    $this->clean_session(); 
     
 
 
    dbx()->timer('session-browser');
  }
  public function clean_session() {
     $cache = dbx()->get_config('dbx','cache');
     //$cache2 = dbx()->get_system_var('dbx_cache',0);
     //dbx_debug("##clear session cache=($cache)");
     $_SESSION['dbx']['tmp']  =array();
     $_SESSION['dbx']['norep']=array();
     if (!$cache) {
      //dbx_debug("clear cache config");
      $_SESSION['dbx']['config']=array();
      $_SESSION['dbx']['cache']=array();
     }
  }
 
  public function save_session($rec=1) {
    $session_db=dbx()->get_config('dbx','session_db');
    dbx()->debug("#SESSION db write =($session_db)");
    if ($session_db) {
 
 
      $install=dbx()->get_system_var('dbx_install',0); 
    
      $design =dbx()->get_system_var('dbx_activ_design','default');
      $page   =dbx()->get_system_var('dbx_activ_page','default');
 
      $modul  =dbx()->get_system_var('dbx_master_modul');
      $run1   =dbx()->get_system_var('dbx_master_action');
      $run2   =dbx()->get_system_var('dbx_run2', '');
      $uid    =dbx()->user();
      
    
      if (isset($_SESSION['dbx']['record'])) {
        $_SESSION['dbx']['record']['request_counter'] = ((int)($_SESSION['dbx']['record']['request_counter'] ?? 0)) + 1;
        $_SESSION['dbx']['record']['request_last']    = (string)($_SESSION['dbx']['record']['request_current'] ?? '');
        $_SESSION['dbx']['record']['request_current'] = $this->get_request();
        $rec=$_SESSION['dbx']['record'];
        $id  =(int)($rec['id'] ?? 0);
      } else {
        $rec=array();
        $id = 0;
      }
 
      //$this->apply_browser_to_record($rec);
 
      $rec['update_date']=date('Y-m-d H:i:s');
      $rec['create_uid'] =$uid;
      $rec['update_uid'] =$uid;
      $rec['owner']      =$uid;
      $rec['userid']     =$uid;
      $rec['design']     =$design;
      $rec['page']       =$page;
      $rec['modul']      =$modul;
      $rec['run1']       =$run1;
      $rec['run2']       =$run2;
      $rec['color']      =dbx()->get_system_var('dbx_color','default');
      $rec['language']   =dbx()->get_system_var('dbx_lng'  ,'de');
      $rec['edit']       =dbx()->get_system_var('dbx_edit' ,'0');
 
 
 
      if (!$install && $session_db) {
        $oDB=dbx()->get_system_obj('dbxDB');
 
        //dbx_debug("#### SESSION SAVE ID=($id) User=($uid)  rec=($id) #####",$rec);
 
        $sessid = (string)($rec['sessid'] ?? '');
 
        if ($id) {
            $ok=$oDB->update('dbxSession',$rec,$id,0,1,0,0);
            if (!$ok) {
              $id=0;
            } elseif ((int)($oDB->_update_count ?? 0) === 0 && (int)$oDB->count('dbxSession', "id=" . (int)$id) <= 0) {
              $id=0;
            }
        }
 
        if (!$id && $sessid !== '') {
          $server = $oDB->get_dd_server('dbxSession');
          $where  = "sessid='" . $oDB->escape($sessid, $server) . "'";
          $old    = $oDB->select1('dbxSession', $where, array('id'), 0);
          $oldId  = is_array($old) ? (int)($old['id'] ?? 0) : 0;
 
          if ($oldId > 0) {
            $ok=$oDB->update('dbxSession',$rec,$oldId,0,1,0,0);
            if ($ok) $id=$oldId;
          }
        }
 
        if (!$id) { // new session
          $ok=$oDB->insert('dbxSession',$rec,0,1,0,0);
          $id=(int)$oDB->_insert_id;
        }
      }
 
      $rec['id'] = (int)$id;
      $_SESSION['dbx']['record']=$rec;
      dbx()->debug("#SESSIOM-PHP-ID",$_SESSION['dbx']['record']['id']);
    } // session_db
  }
 
 
 
   public function logout($userid,$kill=1) {
       dbx()->debug("#SESSION# LOGOUT Kill=($kill) userid=($userid)");
 
       if (isset($_SESSION['dbx']['record'])) {
          $_SESSION['dbx']['record']['owner']  = 0;
          $_SESSION['dbx']['record']['userid'] = 0;
       }
       $_SESSION['dbx']['current_user']=$this->get_current_user(0);
 
       if ($kill) $GLOBALS['dbx_session_destroy_pending'] = 1;
   }
 
   public function destroy_php_session() {
       $GLOBALS['dbx_session_destroyed'] = 1;
 
       if (session_status() === PHP_SESSION_ACTIVE) {
          $_SESSION = array();
 
          if (ini_get('session.use_cookies')) {
             $params = session_get_cookie_params();
             setcookie(
                session_name(),
                '',
                time() - 42000,
                $params['path'] ?? '/',
                $params['domain'] ?? '',
                $params['secure'] ?? false,
                $params['httponly'] ?? false
             );
          }
 
          session_destroy();
       }
 
       dbx_delete_cookie('dbXwebApp');
   }
 
   public function login($uid,$remember=0) {
      dbx()->debug("#SESSION# LOGIN");
      if (session_status() === PHP_SESSION_ACTIVE && !headers_sent()) {
         session_regenerate_id(true);
      }
      $new_sessid  =$this->get_new_session_id($uid);
      $current_user=$this->get_current_user($uid);
      $_SESSION['dbx']['record']['owner']      = $uid;
      $_SESSION['dbx']['record']['userid']     = $uid;
      $_SESSION['dbx']['record']['update_uid'] = $uid;
      $_SESSION['dbx']['record']['create_uid'] = $uid;
      $_SESSION['dbx']['record']['sessid']     = $new_sessid;
      $_SESSION['dbx']['current_user']         = $current_user;
      //$_SESSION=array();
      if ($remember) dbx()->set_cookie_var('dbXwebApp','session_id',$new_sessid); // #ToDo
      dbx()->debug("#SESSION# LOGIN ($uid) Sessid=($new_sessid)",);
 
      }
 
 
} // Class