SWAT/auth/SNcsiAuthModule.php5

<?php

class SNcsiAuthModule extends SObject {

    private $userName;
    private $firstName;
    private $lastName;
    private $email;
    private $userId;
    private $role;

    public function __construct() {
        parent::__construct();
    }

    public function authenticate($username, $password) {

        # Attempt to connect to the NCSI database (assuming somebody
        # has put the database connection info into the defaults).
        $DBI = new DBI( SConfig::getOption('ncsi.db_user'),
                        SConfig::getOption('ncsi.db_pass'),
                        SConfig::getOption('ncsi.db_name'),
                        SConfig::getOption('ncsi.db_host'));

        # Report any errors connecting, exit
        if (count($DBI->getError()) > 0) {
            $this->setPrettyError('authenticate', 'Could not connect to NCSI database.');
            return null;
        }

        // Assume that the password is unencrypted if it isn't 32 characters long.
        // Passwords can only be 6-10 characters, so this should be valid
        if (strlen($password) != 32) {
            $password = MD5($password);
        }

        # Query for the specified user.
        $query = "SELECT user.UserId, user.UserName, user.FirstName, " .
                 "user.LastName, user.Email, user.AccountType FROM user WHERE " .
                 "user.UserName LIKE '" . SWATFunctions::safeSql($username) . "' AND " .
                 "user.Password COLLATE latin1_general_cs LIKE '" . SWATFunctions::safeSql($password) . "'";

        $result = $DBI->query($query);

        # Report any query errors
        if (count($DBI->getError()) > 0) {
            $this->setPrettyError('authenticate', $DBI->getError());
            return null;
        }

        # Reject user's credentials if not found in the DB
        if (count($result) == 0) return (false);

        # Otherwise, set our values from the CSERD DB
        $this->userId = ("");
        $this->userName = ($result[0]['UserName']);
        $this->firstName = ($result[0]['FirstName']);
        $this->lastName = ($result[0]['LastName']);
        $this->email = ($result[0]['Email']);
        $this->role = ("other");

        return(true);
    }

    public function getRole() {
        return $this->role;
    }

    public function getPermissions() {
        return false;
    }

    public function getUID() {
        return $this->uid;
    }

    public function getFirstName() {
        return $this->firstName;
    }

    public function getLastName() {
        return $this->lastName;
    }

    public function getEmail() {
        return $this->email;
    }

    protected function setUID($uid) {
        $this->uid = $uid;
    }

    protected function setUserName($username) {
        $this->userName = $username;
    }

    protected function setEmail($email) {
        $this->email = $email;
    }

    public function __sleep() {
        return array_keys(get_object_vars($this));
    }

    public function __wakeup() {
        return array_keys(get_object_vars($this));
    }

}

?>

---