aliroAdminAuthenticator Class Reference

Inheritance diagram for aliroAdminAuthenticator:

List of all members.

Public Member Functions
	login ()
	logout ()
Static Public Member Functions
static	getInstance ()
Protected Attributes
	$prefix = 'admin'
Static Private Attributes
static	$instance = __CLASS__

---

Detailed Description

Definition at line 252 of file aliroAuthenticator.php.

---

Member Function Documentation

static aliroAdminAuthenticator::getInstance

(

)

[static]

Definition at line 256 of file aliroAuthenticator.php.

Referenced by aliroAdminRequest::doControl(), and mosUser::userStore().

                                          {
        return is_object(self::$instance) ? self::$instance : (self::$instance = new self::$instance());
    }

aliroAdminAuthenticator::login

(

)

escape and trim to minimise injection of malicious sql

Definition at line 260 of file aliroAuthenticator.php.

References aliroCoreDatabase::getInstance(), aliroRequest::getInstance(), aliroDatabase::getInstance(), aliroSessionFactory::getSession(), and T_().

                      {
        $session = aliroSessionFactory::getSession();
        if (!($session->cookiesAccepted())) return null;
        
        $database = aliroDatabase::getInstance();
        $request = aliroRequest::getInstance();

        $usrname = $database->getEscaped($request->getParam($_POST, 'usrname'));
        $pass = $database->getEscaped($request->getParam($_POST, 'pass'));

        $my = null;
        if (!$pass) {
            $request->setErrorMessage(T_('Please enter a password'), _ALIRO_ERROR_WARN);
            return $my;
        }

        $users = $database->doSQLget("SELECT * FROM #__users WHERE usertype IN ('Administrator', 'Super Administrator') OR (username='$usrname' AND block<=10)");
        $admins = count($users);
        $database = aliroCoreDatabase::getInstance();
        foreach ($users as $key=>$oneuser) {
            if ($oneuser->username == $usrname) {
                $database->setQuery("SELECT COUNT(*) FROM #__core_users WHERE id=$oneuser->id  AND password=MD5(CONCAT(salt,'$pass'))");
                if ($database->loadResult()) {
                    $my =& $users[$key];
                    if (!in_array($my->usertype, array('Administrator', 'Super Administrator'))) $admins--;
                }
            }
        }
        if ($admins == 0) {
            $request->setErrorMessage(T_('You cannot login. There are no administrators set up.'), _ALIRO_ERROR_FATAL);
            return null;
        }
        if (isset($my)) {
            $session->setNewUserData ($my);
            $currentDate = date("Y-m-d/TH:i:s");
            $query = "UPDATE #__users SET lastvisitDate='$currentDate', block=0 where id='$my->id'";
        }
        else {
            $request->setErrorMessage(T_('Incorrect Username, Password, or Access Level.  Please try again'), _ALIRO_ERROR_WARN);
            $query = "UPDATE #__users SET block=block+1 where username='$usrname'";
            sleep(2);
        }
        $database->doSQL("OPTIMIZE TABLE #__error_log, #__session, #__session_data");
        $database = aliroDatabase::getInstance();
        $database->doSQL($query);
        return $my;
    }

aliroAdminAuthenticator::logout

(

)

Reimplemented from aliroAuthenticator.

Definition at line 309 of file aliroAuthenticator.php.

References aliroRequest::getInstance().

                       {
        parent::logout();
        $request = aliroRequest::getInstance();
        $request->redirect($request->getCfg('live_site'));
    }

---

Member Data Documentation

aliroAdminAuthenticator::$instance = __CLASS__ [static, private]

Definition at line 253 of file aliroAuthenticator.php.

aliroAdminAuthenticator::$prefix = 'admin' [protected]

Definition at line 254 of file aliroAuthenticator.php.

---

The documentation for this class was generated from the following file:

• aliroAuthenticator.php