source: trunk/include/user.inc.php @ 541

<?php
// +-----------------------------------------------------------------------+
// |                             user.inc.php                              |
// +-----------------------------------------------------------------------+
// | application   : PhpWebGallery <http://phpwebgallery.net>              |
// | branch        : BSF (Best So Far)                                     |
// +-----------------------------------------------------------------------+
// | file          : $RCSfile$
// | last update   : $Date: 2004-10-02 23:12:50 +0000 (Sat, 02 Oct 2004) $
// | last modifier : $Author: z0rglub $
// | revision      : $Revision: 541 $
// +-----------------------------------------------------------------------+
// | This program is free software; you can redistribute it and/or modify  |
// | it under the terms of the GNU General Public License as published by  |
// | the Free Software Foundation                                          |
// |                                                                       |
// | This program is distributed in the hope that it will be useful, but   |
// | WITHOUT ANY WARRANTY; without even the implied warranty of            |
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU      |
// | General Public License for more details.                              |
// |                                                                       |
// | You should have received a copy of the GNU General Public License     |
// | along with this program; if not, write to the Free Software           |
// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
// | USA.                                                                  |
// +-----------------------------------------------------------------------+

// retrieving user informations
// $infos array is used to know the fields to retrieve in the table "users"
// Each field becomes an information of the array $user.
// Example :
//            status --> $user['status']
$infos = array('id','username','mail_address','nb_image_line','nb_line_page',
               'status','language','maxwidth','maxheight','expand',
               'show_nb_comments','recent_period','template',
               'forbidden_categories');

$query_user = 'SELECT * FROM '.USERS_TABLE;
$query_done = false;
$user['is_the_guest'] = false;

// cookie deletion if administrator don't authorize them anymore
if (!$conf['authorize_remembering'] and isset($_COOKIE['id']))
{
  setcookie('id', '', 0, cookie_path());
  $url = 'category.php';
  redirect($url);
}

if (isset($_GET['id']))
{
  $session_id = $_GET['id'];
  $user['has_cookie'] = false;
  $session_id_size = $conf['session_id_size_URI'];
}
elseif (isset($_COOKIE['id']))
{
  $session_id = $_COOKIE['id'];
  $user['has_cookie'] = true;
  $session_id_size = $conf['session_id_size_cookie'];
}
else
{
  $user['has_cookie'] = false;
}

if (isset($session_id)
     and ereg("^[0-9a-zA-Z]{".$session_id_size."}$", $session_id))
{
  $page['session_id'] = $session_id;
  $query = '
SELECT user_id,expiration,ip
  FROM '.SESSIONS_TABLE.'
  WHERE id = \''.$page['session_id'].'\'
;';
  $result = mysql_query($query);
  if (mysql_num_rows($result) > 0)
  {
    $row = mysql_fetch_array($result);
    if (!$user['has_cookie'])
    {
      if ($row['expiration'] < time())
      {
        // deletion of the session from the database,
        // because it is out-of-date
        $delete_query = 'DELETE FROM '.SESSIONS_TABLE;
        $delete_query.= " WHERE id = '".$page['session_id']."'";
        $delete_query.= ';';
        mysql_query($delete_query);
      }
      else if ($_SERVER['REMOTE_ADDR'] == $row['ip'])
      {
        $query_user .= ' WHERE id = '.$row['user_id'];
        $query_done = true;
      }
    }
    else
    {
      $query_user .= ' WHERE id = '.$row['user_id'];
      $query_done = true;
    }
  }
}
if (!$query_done)
{
  $query_user .= ' WHERE id = 2';
  $user['is_the_guest'] = true;
}
$query_user .= ';';
$row = mysql_fetch_array(mysql_query($query_user));

// affectation of each value retrieved in the users table into a variable
// of the array $user.
foreach ($infos as $info) {
  if (isset($row[$info]))
  {
    // If the field is true or false, the variable is transformed into a
    // boolean value.
    if ($row[$info] == 'true' or $row[$info] == 'false')
      $user[$info] = get_boolean($row[$info]);
    else
      $user[$info] = $row[$info];    
  }
  else
  {
    $user[$info] = '';
  }
}

// special for $user['restrictions'] array
$user['restrictions'] = explode(',', $user['forbidden_categories']);
if ($user['restrictions'][0] == '')
{
  $user['restrictions'] = array();
}

$isadmin = false;
if ($user['status'] == 'admin')
{
  $isadmin =true;
}
// calculation of the number of picture to display per page
$user['nb_image_page'] = $user['nb_image_line'] * $user['nb_line_page'];
init_userprefs($user);
?>