<?php
/*=====================================================================*\
|| ###################################################################
|| # Bugdar [#]version[#]
|| # Copyright ©2002-[#]year[#] Blue Static
|| #
|| # This program is free software; you can redistribute it and/or modify
|| # it under the terms of the GNU General Public License as published by
|| # the Free Software Foundation; version [#]gpl[#] of the License.
|| #
|| # This program is distributed in the hope that it will be useful, but
|| # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|| # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|| # more details.
|| #
|| # You should have received a copy of the GNU General Public License along
|| # with this program; if not, write to the Free Software Foundation, Inc.,
|| # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
|| ###################################################################
\*=====================================================================*/

require_once('./includes/auth/auth.php');

/**
* Authentication: phpBB2
*
* Authentication system for phpBB2
*
* @author		Blue Static
* @copyright	Copyright (c)2002 - [#]year[#], Blue Static
* @version		$Revision$
* @package		Bugdar
*
*/
class AuthenticationPhpbb2 extends Authentication
{
	/**
	* Mapping of Bugdar to phpBB2 fields
	* @var array
	*/
	var $fieldMap = array(
		'authid'		=> 'user_id',
		'displayname'	=> 'username',
		'email'			=> 'user_email'
	);
	
	/**
	* Database table prefix
	* @var string
	*/
	var $phpBBTablePrefix = 'phpbb2_';
	
	/**
	* The cookie name that is set in phpBB -> Administration -> General Admin -> Configuration -> Cookie Settings -> Cookie Name
	* @var string
	*/
	var $cookieName = 'phpbb2mysql';
	
	// ###################################################################
	function _setupDatabase()
	{
		// connect to the DB
		$this->authDb = new DB_MySQL($this->registry);
		$this->authDb->connect('DATABASE_SERVER', 'DATABASE_USER', 'DATABASE_PASSWORD', 'DATABASE_NAME', false);
	}
	
	// ###################################################################
	function _fetchCookieUniqueId()
	{
		$val = $this->registry->in[$this->cookieName . '_sid'];
		return (!$val ? -1 : $val); // hack so we don't do stupid things but can still create a session
	}
	
	// ###################################################################
	function _fetchCookiePassword()
	{
		return true;
	}
	
	// ###################################################################
	function _fetchUserUsingCookies()
	{
		$session = $this->authDb->query_first("SELECT * FROM {$this->phpBBTablePrefix}sessions WHERE session_id = '" . $this->authDb->escape_string($this->_fetchCookieUniqueId()) . "'");
		if (!$session)
		{
			// phpBB's wacky auto-login system
			$data = unserialize($_COOKIE[$this->cookieName . '_data']);
			if (!$data)
			{
				return false;
			}
			return $this->authDb->query_first("SELECT * FROM {$this->phpBBTablePrefix}users WHERE user_id = " . $this->registry->clean($data['userid'], TYPE_UINT) . " AND user_password = '" . $this->authDb->escape_string($data['autologinid']) . "'");
		}
		else
		{
			if ($session['session_user_id'] == 0 OR $session['session_user_id'] == -1)
			{
				return false;
			}
			return $this->authDb->query_first("SELECT * FROM {$this->phpBBTablePrefix}users WHERE user_id = " . $session['session_user_id']);
		}
	}
	
	// ###################################################################
	function _verifyCookieData()
	{
		return ($this->_fetchUserUsingCookies() != false);
	}
	
	// ###################################################################
	function _fetchUserWithIdentifier($string)
	{
		return $this->authDb->query_first("SELECT * FROM {$this->phpBBTablePrefix}users WHERE username = '" . $this->authDb->escape_string($string) . "'");
	}
	
	// ###################################################################
	function _verifyLoginUser($password)
	{
		return (md5($password) == $this->authUser['user_password']);
	}

	// ###################################################################
	function clearCookies()
	{
		$this->registry->funct->cookie($this->cookieName . '_data');
		$this->registry->funct->cookie($this->cookieName . '_sid');
		$this->authDb->query("DELETE FROM {$this->phpBBTablePrefix}sessions WHERE session_id = '" . $this->authDb->escape_string($this->_fetchCookieUniqueId()) . "'");
	}
	
	// ###################################################################
	function _setCookies($permanent = false)
	{
		$sid = $this->_fetchCookieUniqueId();
		$sid = ($sid != '-1' ? $sid : md5(microtime() . rand()));
		$this->registry->funct->cookie($this->cookieName . '_sid', $sid, false);
		if ($permanent)
		{
			$this->registry->funct->cookie($this->cookieName . '_data', serialize(array('autologinid' => $this->authUser['user_password'], 'userid' => $this->authUser['user_id'])), true);
		}
		$this->authDb->query("
			REPLACE INTO {$this->phpBBTablePrefix}sessions
				(session_id, session_user_id, session_start, session_time, session_logged_in)
			VALUES
			(
				'$sid', " . $this->authUser['user_id'] . ", " . time() . ", " . time() . ", 1
			)"
		);
		
		$this->authDb->query("UPDATE {$this->phpBBTablePrefix}users SET user_session_time = " . time() . ", user_lastvisit = " . time() . " WHERE user_id = " . $this->authUser['user_id']);
	}
}

/*=====================================================================*\
|| ###################################################################
|| # $HeadURL$
|| # $Id$
|| ###################################################################
\*=====================================================================*/
?>