r1441: Adding a phpBB2 authentication module

diff --git a/includes/auth/auth_phpbb2.php b/includes/auth/auth_phpbb2.php
new file mode 100644 (file)
index 0000000..435d1f3
--- /dev/null
+++ b/includes/auth/auth_phpbb2.php
@@ -0,0 +1,159 @@
+<?php
+/*=====================================================================*\
+|| ###################################################################
+|| # Bugdar [#]version[#]
+|| # Copyright ©2002-[#]year[#] Blue Static
+|| #
+|| # This program is free software; you can redistribute it and/or modify
+|| # it under the terms of the GNU General Public License as published by
+|| # the Free Software Foundation; version [#]gpl[#] of the License.
+|| #
+|| # This program is distributed in the hope that it will be useful, but
+|| # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+|| # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+|| # more details.
+|| #
+|| # You should have received a copy of the GNU General Public License along
+|| # with this program; if not, write to the Free Software Foundation, Inc.,
+|| # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
+|| ###################################################################
+\*=====================================================================*/
+
+require_once('./includes/auth/auth.php');
+
+/**
+* Authentication: phpBB2
+*
+* Authentication system for phpBB2
+*
+* @author              Blue Static
+* @copyright   Copyright (c)2002 - [#]year[#], Blue Static
+* @version             $Revision$
+* @package             Bugdar
+*
+*/
+class AuthenticationPhpbb2 extends Authentication
+{
+       /**
+       * Mapping of Bugdar to phpBB2 fields
+       * @var array
+       */
+       var $fieldMap = array(
+               'authid'                => 'user_id',
+               'displayname'   => 'username',
+               'email'                 => 'user_email'
+       );
+       
+       /**
+       * Database table prefix
+       * @var string
+       */
+       var $phpBBTablePrefix = 'phpbb2_';
+       
+       /**
+       * The cookie name that is set in phpBB -> Administration -> General Admin -> Configuration -> Cookie Settings -> Cookie Name
+       * @var string
+       */
+       var $cookieName = 'phpbb2mysql';
+       
+       // ###################################################################
+       function _setupDatabase()
+       {
+               // connect to the DB
+               $this->authDb = new DB_MySQL($this->registry);
+               $this->authDb->connect('DATABASE_SERVER', 'DATABASE_USER', 'DATABASE_PASSWORD', 'DATABASE_NAME', false);
+       }
+       
+       // ###################################################################
+       function _fetchCookieUniqueId()
+       {
+               $val = $this->registry->in[$this->cookieName . '_sid'];
+               return (!$val ? -1 : $val); // hack so we don't do stupid things but can still create a session
+       }
+       
+       // ###################################################################
+       function _fetchCookiePassword()
+       {
+               return true;
+       }
+       
+       // ###################################################################
+       function _fetchUserUsingCookies()
+       {
+               $session = $this->authDb->query_first("SELECT * FROM {$this->phpBBTablePrefix}sessions WHERE session_id = '" . $this->authDb->escape_string($this->_fetchCookieUniqueId()) . "'");
+               if (!$session)
+               {
+                       // phpBB's wacky auto-login system
+                       $data = unserialize($_COOKIE[$this->cookieName . '_data']);
+                       if (!$data)
+                       {
+                               return false;
+                       }
+                       return $this->authDb->query_first("SELECT * FROM {$this->phpBBTablePrefix}users WHERE user_id = " . $this->registry->clean($data['userid'], TYPE_UINT) . " AND user_password = '" . $this->authDb->escape_string($data['autologinid']) . "'");
+               }
+               else
+               {
+                       if ($session['session_user_id'] == 0 OR $session['session_user_id'] == -1)
+                       {
+                               return false;
+                       }
+                       return $this->authDb->query_first("SELECT * FROM {$this->phpBBTablePrefix}users WHERE user_id = " . $session['session_user_id']);
+               }
+       }
+       
+       // ###################################################################
+       function _verifyCookieData()
+       {
+               return ($this->_fetchUserUsingCookies() != false);
+       }
+       
+       // ###################################################################
+       function _fetchUserWithIdentifier($string)
+       {
+               return $this->authDb->query_first("SELECT * FROM {$this->phpBBTablePrefix}users WHERE username = '" . $this->authDb->escape_string($string) . "'");
+       }
+       
+       // ###################################################################
+       function _verifyLoginUser($password)
+       {
+               return (md5($password) == $this->authUser['user_password']);
+       }
+
+       // ###################################################################
+       function clearCookies()
+       {
+               $this->registry->funct->cookie($this->cookieName . '_data');
+               $this->registry->funct->cookie($this->cookieName . '_sid');
+               $this->authDb->query("DELETE FROM {$this->phpBBTablePrefix}sessions WHERE session_id = '" . $this->authDb->escape_string($this->_fetchCookieUniqueId()) . "'");
+       }
+       
+       // ###################################################################
+       function _setCookies($permanent = false)
+       {
+               $sid = $this->_fetchCookieUniqueId();
+               $sid = ($sid != '-1' ? $sid : md5(microtime() . rand()));
+               $this->registry->funct->cookie($this->cookieName . '_sid', $sid, false);
+               if ($permanent)
+               {
+                       $this->registry->funct->cookie($this->cookieName . '_data', serialize(array('autologinid' => $this->authUser['user_password'], 'userid' => $this->authUser['user_id'])), true);
+               }
+               $this->authDb->query("
+                       REPLACE INTO {$this->phpBBTablePrefix}sessions
+                               (session_id, session_user_id, session_start, session_time, session_logged_in)
+                       VALUES
+                       (
+                               '$sid', " . $this->authUser['user_id'] . ", " . time() . ", " . time() . ", 1
+                       )"
+               );
+               
+               $this->authDb->query("UPDATE {$this->phpBBTablePrefix}users SET user_session_time = " . time() . ", user_lastvisit = " . time() . " WHERE user_id = " . $this->authUser['user_id']);
+       }
+}
+
+/*=====================================================================*\
+|| ###################################################################
+|| # $HeadURL$
+|| # $Id$
+|| ###################################################################
+\*=====================================================================*/
+?>
\ No newline at end of file