<?php
/**
 * @li gnu/agpl v3 or leter
 * @code utf8
 * @version 0.1
 * @author cojack from Aichra.pl
 * @date 16.06.09
 *
 **/
 
 
class UserSession
{
    private $php_session_id;						 # php session id zapisywane przy logowaniu
    private $ff_session_id;							 # bezpieczny session id
    private $logged_in;									 # bool, zalogowany user
    private $user_id;										 # user id
    private $time_start;								 # czas zalogowania usera
    private $check_browser = true;			 # bool, sprawdzac przegladarke usera
    private $check_ip_blocks = 4;				 # ile blokow ip ma byc sprawdzanych 
    private $session_name = 'Testing';   # nazwa sessji
    private $secure_word = 'GzuH3sLaURRCsuCd'; # sól
    private $session_timeout = 600;      # 10 minutowa nieaktywnosc sessji
    private $session_lifespan = 3600;    # 1 godzinna waznosc sessji, po tym nastapi wylogowanie
    
    public function __construct() 
    {
      # Ustawiamy czas życia ciasteczek
      session_set_cookie_params($this->session_lifespan);
      # Ustawiamy nazwe sessji
      session_name($this->session_name);
      # Startujemy sessje
      session_start();
      # Regenerowanie php session id, zabezpieczenie przed atakami PHP_SID
      $this->_session_idregenerate();
      # czyścimy sessje 
      $this->_session_clean();
      # sprawdzamy czy user jest zalogowany
     	$this->_session_read();
     	# aktualizujemy czas sessji
    	$this->_session_timeupdate();
    }
 
    private function _session_timeupdate() 
    {
      if ($this->ff_session_id) 
      {
				$query = Doctrine_Query::create()
								 ->update('dUserSession')
								 ->set('ostatnia_reakcja',time())
								 ->where('ff_sid = ?',$this->ff_session_id);
				$result = $query->execute();
      }
    }
 
    public function IsLoggedIn() #zwracamy wartość boolean, czy użytkownik jest zalogowany
    {
    	return($this->logged_in);
    }
 
    public function GetUserID() #zwracamy id użytkownika
    {
      if ($this->logged_in) 
      {
        return($this->user_id);
      } 
      else 
      {
        return(false);
      }
    }
 
    public function GetFfSessionIdentifier() # zwracaamy ff_sprinta
    {
    	return($this->ff_session_id);
    }
 
    public function Login($login, $haslo) #logowanie użytkownika
    {
    	if($this->logged_in == false)
    	{
	      $md5haslo = md5($haslo);
	      $query = Doctrine_Query::create()
	      				 ->select('id')
	      				 ->from('dUser')
	      				 ->where('login = ?',$login)
	      				 ->andWhere('haslo = ?',$md5haslo);
	      $result = $query->execute();
	      $result = $result->toArray();
	      if (!empty($result))
	      {
	        $this->user_id = $result[0]['id'];
	        $this->logged_in = true;
					$this->_session_start();
					return (true);
	      }
	      else
	      	throw new Exception (Errors::_getError('l_01'));
    	}
    	else
    		throw new Exception (Errors::_getError('l_03'));
    }  
 
    public function LogOut() 
    {
      if ($this->logged_in == true) 
      {
      	var_dump($this->logged_in);
				$this->_session_destroy($this->user_id);
        $this->logged_in = false;
        $this->user_id = 0;
        return(true);
      }
      throw new Exception (Errors::_getError('l_02'));
    }
 
    private function _session_start()
    {
    	$this->time_start = time();
    	$this->_session_open();
			$this->_session_write();
			$this->_session_misc();
			return (true);
    }
 
    private function _session_open() 
    {
			$this->php_session_id = session_id();
			$this->ff_session_id = $this->_session_secure();
    }
 
    private function _session_write() 
    {
    	if($this->_session_check())
    	{
	    	$query = new dUserSession;
	    	$query->php_sid = $this->php_session_id;
	    	$query->ff_sid = $this->ff_session_id;
	    	$query->zalogowany = $this->logged_in;
	    	$query->iidusera = $this->user_id;
	    	$query->ostatnia_reakcja = $this->time_start;
	    	$query->utworzono = $this->time_start;
	    	$query->user_agent = $_SERVER['HTTP_USER_AGENT'];
	    	$query->save();
	    	$query = Doctrine_Query::create()
	    					 ->update('dUser')
	    					 ->set('lastvisit',$this->time_start)
	    					 ->where('id = ?',$this->user_id);
				$result = $query->execute();
    	}
    }
 
    private function _session_misc()
    {
    		setcookie('ff_sprint',$this->ff_session_id,($this->time_start+$this->session_lifespan));
    		$_SESSION['ff_sprint'] = $this->ff_session_id;
    }
 
    private function _session_read() 
    {
      $query = Doctrine_Query::create()
      				 ->select('id, zalogowany, iidusera')
      				 ->from('dUserSession')
      				 ->where('ff_sid = ?',$_SESSION['ff_sprint']);
			$result = $query->execute();
			$result = $result->toArray();
      if (!empty($result)) 
      {
	       $this->native_session_id = $result[0]['id'];
	       $this->ff_session_id = $_SESSION['ff_sprint'];
	       if ($result[0]['zalogowany']== 'true') 
	       {
	       	$this->logged_in = true;
	       	$this->user_id = $result[0]["iidusera"];
	       }
	       else {
	       	$this->logged_in = false;
	       }
	       $this->_session_compare();
	     }
     return(true);
    }
 
    private function _session_clean()
    {
			$strUserAgent = $_SERVER["HTTP_USER_AGENT"];
      $this->ff_session_id = $_COOKIE["ss_fprint"];
      $query = Doctrine_Query::create()
      				->select('id')
      				->from('dUserSession')
      				->where('ff_sid = ?',$this->ff_session_id)
      				->andWhere('(('.time().' - utworzono) < ? ) ',$this->session_lifespan)
      				->andWhere('user_agent = ? ',$strUserAgent)
      				->andWhere('('.time().' - ostatnia_reakcja) <= ? ',$this->session_timeout)
      				->orWhere('ostatnia_reakcja IS NULL');				
      $result = $query->execute();
      $result = $result->toArray();
      if (empty($result)) 
      {
        $query = Doctrine_Query::create()
        				 ->delete('dUserSession')
        				 ->where('ff_sid = ?',$this->ff_session_id)
        				 ->orWhere('('.time().' - utworzono) > ?',$this->session_lifespan)
        				 ->orWhere('('.time().' - ostatnia_reakcja) > ?',$this->session_timeout);
			  $result = $query->execute();
      }
    }
 
    private function _session_check()
    {
    	$query = Doctrine::getTable('dUserSession')->findOneByiidusera($this->user_id);
    	if(empty($query))
    	{
    		return (true);
    	}
    	else
    	{
    		$this->_session_compare();
    	}
    }
 
 
    private function _session_compare()
    {
    	$query = Doctrine::getTable('dUserSession')->findOneByiidusera($this->user_id);
			if ($query->ff_sid == $this->ff_session_id)
			{
				return (true);
			}
			else
			{
				$this->_session_destroy();
				throw new Exception (Errors::_getError('l_04'));
			}
    }
 
    private function _session_secure()
    {
        $fingerprint = $this->secure_word;
        if ($this->check_browser) {
            $fingerprint .= $_SERVER['HTTP_USER_AGENT'];
        }
        $fingerprint .= $this->user_id;
        if ($this->check_ip_blocks) {
            $num_blocks = abs(intval($this->check_ip_blocks));
            if ($num_blocks > 4) {
                $nxum_blocks = 4;
            }
            $blocks = explode('.', $_SERVER['REMOTE_ADDR']);
            for ($i = 0; $i < $num_blocks; $i++) {
                $fingerprint .= $blocks[$i] . '.';
            }
        }
        $fingerprint .= $this->time_start;
        $fingerprint .= $this->php_session_id;
        return md5($fingerprint);
    }
 
    private function _session_idregenerate()
    {
        if ($this->regenerate_id && function_exists('session_regenerate_id')) {
            if (version_compare('5.1.0', phpversion(), '>=')) {
                session_regenerate_id(true);
            } else {
                session_regenerate_id();
            }
        }
    }
 
    private function _session_destroy() 
    {
    	$query = Doctrine_Query::create()
      				 ->delete('dUserSession')
       				 ->where('iidusera = ?',$this->user_id)
       				 ->orWhere('ff_sid = ?',$this->ff_session_id);
			$result = $query->execute();
			$this->_session_close();      
    }
 
    private function _session_close() 
    {
    	if (isset($_COOKIE['ff_sprint'])) 
    	{ 
			   setcookie('ff_sprint', '', time()-84000, '/'); 
			}
			$_SESSION = array();
			$_COOKIE = array();
			session_destroy();
    }
 
    public function __destruct()
    {
    	unset($query,$result);
    }
}
?>

<?php
/**
 * @li gnu/agpl v3 or leter
 * @code utf8
 * @version 0.1
 * @author cojack from Aichra.pl
 * @date 19.06.09
 *
**/
 
class dUserSession extends Doctrine_Record
{
  public function setTableDefinition()
  {
    $this->setTableName('user_session');
    $this->hasColumn('ssession_identifer_php as php_sid','string',32);
    $this->hasColumn('ssession_identifer_ff as ff_sid','string',32); 
    $this->hasColumn('bzalogowany as zalogowany','boolean');
    $this->hasColumn('iidusera','integer');
    $this->hasColumn('iostatnia_reakcja as ostatnia_reakcja','integer');
    $this->hasColumn('iutworzono as utworzono','integer');
    $this->hasColumn('user_agent','string',256);
  }
 
  public function setUp()
  {
 
    $this->hasOne('dUser',array(
    	'local' => 'iidusera',
    	'foreign' => 'id'
    	)
    );
  }
}
 
?>

<?php
/**
 * @li gnu/agpl v3 or leter
 * @code utf8
 * @version 0.1
 * @author cojack from Aichra.pl
 * @date 10.06.09
 *
 * For Doctrine ORM for php, create a model with reference to group, to easier adding a group to user, manager etc.
 * Relation is many-to-many, user can have many groups and group can have many users.
 * 
**/
 
class dUser extends Doctrine_Record
{
  public function setTableDefinition()
  {
    $this->setTableName('users');
    // we don't have to define id column, it's auto defined by Doctrine, called id, and auto incrament it
    $this->hasColumn('slogin as login','string',64); // it's a login for user, s here tell us it's a string value
    $this->hasColumn('shaslo as haslo','string',32); // same like upper, but with one difreneces, it's a password in md5 sum
    $this->hasColumn('simie as imie','string',64); // same like upper, it's first name
    $this->hasColumn('snazwisko as nazwisko','string',64); // same like upper, it'f second name (last name etc)
    $this->hasColumn('ilastvisit as lastvisit','integer'); // it's a time in unixitimestamp (UNIX epoch), this value is integer
  }
 
  public function setUp()
  {
    $this->hasMany('dGroup as dGroups', array (
      'refClass' => 'dUser2Group', // we have reference this relation to class UserGroup, table name called user2group
      'local' => 'iidusera', // creating reference from local user id
      'foreign' => 'iidgrupy' // to group id in table user2group (class UserGroup)
    	)
    );
 
    $this->hasOne('dUserSession',array(
    	'local' => 'id',
    	'foreign' => 'iidusera'
    	)
    );
 
    $this->hasMutator('haslo','md5haslo');
  }
 
  public function md5haslo($value)
  {
  	$this->_set('haslo',md5($value));
  }
}
 
?>

CREATE TABLE "users" 
(
  "id" serial UNIQUE PRIMARY KEY NOT NULL,
  "slogin" VARCHAR(64) NOT NULL,
  "shaslo" VARCHAR(32) NOT NULL,
  "simie" VARCHAR(64) NOT NULL,
  "snazwisko" VARCHAR(64) NOT NULL,
  "ilastvisit" INT
);
 
CREATE TABLE "user_session"
(
  "id" serial UNIQUE PRIMARY KEY NOT NULL,
  "ssession_identifer_php" VARCHAR(32),
  "ssession_identifer_ff" VARCHAR(32),
  "bzalogowany" BOOLEAN,
  "iidusera" INT,
  "iostatnia_reakcja" INT,
  "iutworzono" INT,
  "user_agent" VARCHAR(256),
  FOREIGN KEY ("iidusera") REFERENCES "users"("id")
);