SWAT/auth/SCserdAuthModule.php5

<?php

class SCserdAuthModule extends SObject {

    private $userName;
    private $firstName;
    private $lastName;
    private $email;
    private $userId;
    private $role;

    public function __construct() {
        parent::__construct();
    }

    public function authenticate($username, $password) {

        # Attempt to connect to the CSERD database (assuming somebody
        # has put the database connection info into the defaults).
        $DBI = new DBI( SConfig::getOption('cserd.db_user'),
                        SConfig::getOption('cserd.db_pass'),
                        SConfig::getOption('cserd.db_name'),
                        SConfig::getOption('cserd.db_host'));

        # Report any errors connecting, exit
        if (count($DBI->getError()) > 0) {
            $this->setPrettyError('authenticate', 'Could not connect to CSERD database.');
            return null;
        }

        # Query for the specified user.
        $query = "SELECT user.userId, user.userName, user.firstName, " .
                 "user.lastName, user.email, user.role FROM user WHERE " .
                 "user.username LIKE '" . SWATFunctions::safeSql($username) . "' AND " .
                 "user.password = '" . MD5(SWATFunctions::safeSql($password)) . "' AND " .
                 "user.active > 0 LIMIT 1;";

        $result = $DBI->query($query);

        # Report any query errors
        if (count($DBI->getError()) > 0) {
            $this->setPrettyError('authenticate', $DBI->getError());
            return null;
        }

        # Reject user's credentials if not found in the DB
        if (count($result) == 0) return (false);

        # Otherwise, set our values from the CSERD DB
        $this->userId = ("");
        $this->userName = ($result[0]['userName']);
        $this->firstName = ($result[0]['firstName']);
        $this->lastName = ($result[0]['lastName']);
        $this->email = ($result[0]['email']);
        $this->role = ("other");

        return(true);
    }

    public function getRole() {
        return $this->role;
    }

    public function getPermissions() {
        return false;
    }

    public function getUID() {
        return $this->uid;
    }

    public function getFirstName() {
        return $this->firstName;
    }

    public function getLastName() {
        return $this->lastName;
    }

    public function getEmail() {
        return $this->email;
    }

    protected function setUID($uid) {
        $this->uid = $uid;
    }

    protected function setUserName($username) {
        $this->userName = $username;
    }

    protected function setEmail($email) {
        $this->email = $email;
    }

    public function __sleep() {
        return array_keys(get_object_vars($this));
    }

    public function __wakeup() {
        return array_keys(get_object_vars($this));
    }

}

?>

---