ConLite/conlite/classes/class.activeusers.php

302 Zeilen
7.5 KiB
PHP

<?php
/**
* Project:
* Contenido Content Management System
*
* Description:
* Display current online user
*
* @package Contenido Backend classes
* @version 1.0.1
* @author Bilal Arsland
* @copyright four for business AG <www.4fb.de>
* @license http://www.contenido.org/license/LIZENZ.txt
* @link http://www.4fb.de
* @link http://www.contenido.org
* @since file available since contenido release <= 4.6
*
* $Id: class.activeusers.php 362 2015-10-05 16:31:26Z oldperl $;
*/
if(!defined('CON_FRAMEWORK')) {
die('Illegal call');
}
class ActiveUsers {
var $oDb;
var $oCfg;
var $oAuth;
var $iUserId;
/**
* Constructor
*
* @param object $db - Contenido Database Object
* @param object $cfg
* @param object $auth
*
* @return
**/
function ActiveUsers($oDb, $oCfg, $oAuth) {
$this->oCfg= $oCfg;
$this->oAuth= $oAuth;
$this->oDb= $oDb;
// init db object
if (!is_object($this->oDb) || (is_null($this->oDb))) {
$this->oDb= new DB_ConLite;
}
if (!is_resource($this->oDb->Link_ID)) {
$this->oDb->connect();
}
// Load the userid
$this->iUserId= $this->oAuth->auth["uid"];
}
/**
* Start the User Tracking:
* 1) First delete all inactive users with timelimit is off
* 2) If find user in the table, do update
* 3) Else there is no current user do insert new user
*
*
* @return
**/
function startUsersTracking() {
// Delete all Contains in the table "online_user" that is older as timeout(current is 60 minutes)
$this->deleteInactiveUser();
$bResult= $this->findUser($this->iUserId);
if ($bResult) {
// update the curent user
$this->updateUser($this->iUserId);
} else {
// User not found, we can insert the new user
$this->insertOnlineUser($this->iUserId);
}
}
/**
* Insert this user in online_user table
*
* @param object $db - Contenido Database Object
*
* @return Returns true if successful else false
**/
function insertOnlineUser($sUserId) {
$userid = (string) $sUserId;
$sql= "INSERT INTO `" . $this->oCfg["tab"]["online_user"] . "`(`user_id`,`lastaccessed`) VALUES('".Contenido_Security::escapeDB($userid, $this->oDb)."', NOW())";
if ($this->oDb->query($sql)) {
return true;
} else {
return false;
}
}
/**
* Find the this user if exists in the table "online_user"
*
* @param integer $iUserId - Is the User-Id (get from auth object)
*
* @return Returns true if this User is found, else false
**/
function findUser($sUserId) {
$userid = (string) $sUserId;
$bReturn = false;
$sql= "SELECT user_id FROM `" . $this->oCfg["tab"]["online_user"] . "` WHERE `user_id`='".Contenido_Security::escapeDB($userid, $this->oDb)."'";
$this->oDb->query($sql);
if ($this->oDb->next_record()) {
$bReturn= true;
}
return $bReturn;
}
/**
* Find all user_ids in the table 'online_user' for get rest information from
* table 'con_phplib_auth_user_md5'
*
*
* @return Returns array of user-information
**/
function findAllUser() {
$aAllUser= array ();
$aUser= array ();
$sWebsiteName= "";
// get all user_ids
$sql= "SELECT `user_id` FROM `" . $this->oCfg["tab"]["online_user"]."`";
if ($this->oDb->query($sql) && $this->oDb->Errno == 0) {
if ($this->oDb->num_rows() > 0) {
while ($this->oDb->next_record()) { // Table Online User
$aUser[]= "'" . $this->oDb->f('user_id') . "'";
}
}
}
// get data of those users
$aAllUser= array ();
$sSqlIn= implode(', ', $aUser); // '1','2','5','8'
$sql= "SELECT user_id, realname, username, perms " .
"FROM " . $this->oCfg["tab"]["phplib_auth_user_md5"] . " " .
"WHERE user_id IN(" . $sSqlIn . ")";
if ($this->oDb->query($sql) && $this->oDb->Errno == 0) {
if ($this->oDb->num_rows() > 0) {
while ($this->oDb->next_record()) { // Table Online User
$sWebsiteNames = '';
$sUserId= $this->oDb->f("user_id");
$aAllUser[$sUserId]['realname']= $this->oDb->f("realname");
$aAllUser[$sUserId]['username']= $this->oDb->f("username");
$sPerms= $this->oDb->f("perms");
$aPerms= explode(",", $sPerms); //Alle Rechte als array in aPerms packen
if (in_array("sysadmin", $aPerms)) {
$aAllUser[$sUserId]['perms']= 'Systemadministrator';
} else {
$bIsAdmin= false;
$iCounter= 0;
foreach ($aPerms as $sPerm) {
$aResults = array();
if (preg_match('/^admin\[(\d+)\]$/', $sPerm, $aResults)) {
$iClientId= $aResults[1];
$bIsAdmin= true;
$sWebsiteName = $this->getWebsiteName($iClientId);
if ($iCounter == 0 && $sWebsiteName != "") {
$sWebsiteNames .= $sWebsiteName;
} else if ($sWebsiteName != "") {
$sWebsiteNames .= ', ' . $sWebsiteName;
}
$aAllUser[$sUserId]['perms']= "Administrator (" . $sWebsiteNames . ")";
$iCounter++;
} else if (preg_match('/^client\[(\d+)\]$/', $sPerm, $aResults) && !$bIsAdmin) {
$iClientId= $aResults[1];
$sWebsiteName = $this->getWebsiteName($iClientId);
if ($iCounter == 0 && $sWebsiteName != "") {
$sWebsiteNames .= $sWebsiteName;
} else if ($sWebsiteName != "") {
$sWebsiteNames .= ', ' . $sWebsiteName;
}
$aAllUser[$sUserId]['perms']= '(' . $sWebsiteNames . ')';
$iCounter++;
}
}
}
}
}
}
return $aAllUser;
}
/**
* This function do an update of current timestamp in "online_user"
*
* @param integer $iUserId - Is the User-Id (get from auth object)
*
* @return Returns true if successful, else false
**/
function updateUser($sUserId) {
$userid= (string) $sUserId;
$sql= "UPDATE `" . $this->oCfg["tab"]["online_user"] . "` SET `lastaccessed`=NOW() WHERE `user_id`='".Contenido_Security::escapeDB($userid, $this->oDb)."'";
if ($this->oDb->query($sql)) {
return true;
} else
return false;
}
/**
* Delete all Contains in the table "online_user" that is older as
* Backend timeout(currently is $cfg["backend"]["timeout"] = 60)
*
*
* @return Returns true if successful else false
**/
function deleteInactiveUser() {
cInclude("config", "config.misc.php");
$iSetTimeOut= $this->oCfg["backend"]["timeout"];
if ($iSetTimeOut == 0)
$iSetTimeOut= 10;
$sql= "";
$sql= "DELETE FROM `" . $this->oCfg["tab"]["online_user"] . "` WHERE DATE_SUB(now(), INTERVAL '$iSetTimeOut' Minute) >= `lastaccessed`";
if ($this->oDb->query($sql)) {
return true;
} else {
return false;
}
}
/**
* Get the number of users from the table "online_user"
*
*
* @return Returns if exists a number of users
**/
function getNumberOfUsers() {
$iAnzahl= 0;
$sql= "SELECT user_id FROM `" . $this->oCfg["tab"]["online_user"]."`";
if ($this->oDb->query($sql)) {
$iAnzahl= $this->oDb->num_rows();
}
return $iAnzahl;
}
/**
* Delete this user from 'online user' table
*
* @param integer $iUserId - Is the User-Id (get from auth object)
*
* @return Returns true if successful, else false
**/
function deleteUser($sUserId) {
$userid= (string) $sUserId;
$sql= "DELETE FROM `" . $this->oCfg["tab"]["online_user"] . "` WHERE `user_id` = '".Contenido_Security::escapeDB($userid, $this->oDb)."'";
if ($this->oDb->query($sql)) {
return true;
} else {
return false;
}
}
/**
* Get the website name from table con_clients
*
* @param int $iIdClient
* @return string|boolean
*/
public function getWebsiteName($iIdClient) {
$oClient = new cApiClient($iIdClient);
return $oClient->get('name');
}
}
?>