|
|
<?php
|
|
|
|
|
|
/**
|
|
|
* shop SESSION 公用类库
|
|
|
* ============================================================================
|
|
|
* * 版权所有 2005-2012 上海商派网络科技有限公司，并保留所有权利。
|
|
|
* 网站地址: http://www.shop.com；
|
|
|
* ----------------------------------------------------------------------------
|
|
|
* 这不是一个自由软件！您只能在不用于商业目的的前提下对程序代码进行修改和
|
|
|
* 使用；不允许对程序代码以任何形式任何目的的再发布。
|
|
|
* ============================================================================
|
|
|
* $Author: wayne $
|
|
|
* $Id: cls_session.php 17217 2011-01-19 06:29:08Z wayne $
|
|
|
*/
|
|
|
|
|
|
if (!defined('IN_ASC'))
|
|
|
{
|
|
|
die('Hacking attempt');
|
|
|
}
|
|
|
|
|
|
class cls_session
|
|
|
{
|
|
|
var $db = NULL;
|
|
|
var $session_table = '';
|
|
|
|
|
|
var $max_life_time = 1800; // SESSION 杩囨湡鏃堕棿
|
|
|
|
|
|
var $session_name = '';
|
|
|
var $session_id = '';
|
|
|
|
|
|
var $session_expiry = '';
|
|
|
var $session_md5 = '';
|
|
|
|
|
|
var $session_cookie_path = '/';
|
|
|
var $session_cookie_domain = '';
|
|
|
var $session_cookie_secure = false;
|
|
|
|
|
|
var $_ip = '';
|
|
|
var $_time = 0;
|
|
|
|
|
|
function __construct(&$db, $session_table, $session_data_table, $session_name = 'ECS_ID', $session_id = '')
|
|
|
{
|
|
|
$this->cls_session($db, $session_table, $session_data_table, $session_name, $session_id);
|
|
|
}
|
|
|
|
|
|
function cls_session(&$db, $session_table, $session_data_table, $session_name = 'ECS_ID', $session_id = '')
|
|
|
{
|
|
|
$GLOBALS['_SESSION'] = array();
|
|
|
|
|
|
if (!empty($GLOBALS['cookie_path']))
|
|
|
{
|
|
|
$this->session_cookie_path = $GLOBALS['cookie_path'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$this->session_cookie_path = '/';
|
|
|
}
|
|
|
|
|
|
if (!empty($GLOBALS['cookie_domain']))
|
|
|
{
|
|
|
$this->session_cookie_domain = $GLOBALS['cookie_domain'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$this->session_cookie_domain = '';
|
|
|
}
|
|
|
|
|
|
if (!empty($GLOBALS['cookie_secure']))
|
|
|
{
|
|
|
$this->session_cookie_secure = $GLOBALS['cookie_secure'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$this->session_cookie_secure = false;
|
|
|
}
|
|
|
|
|
|
$this->session_name = $session_name;
|
|
|
$this->session_table = $session_table;
|
|
|
$this->session_data_table = $session_data_table;
|
|
|
|
|
|
$this->db = $db;
|
|
|
$this->_ip = real_ip();
|
|
|
|
|
|
if ($session_id == '' && !empty($_COOKIE[$this->session_name]))
|
|
|
{
|
|
|
$this->session_id = $_COOKIE[$this->session_name];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$this->session_id = $session_id;
|
|
|
}
|
|
|
|
|
|
if ($this->session_id)
|
|
|
{
|
|
|
$tmp_session_id = substr($this->session_id, 0, 32);
|
|
|
if ($this->gen_session_key($tmp_session_id) == substr($this->session_id, 32))
|
|
|
{
|
|
|
$this->session_id = $tmp_session_id;
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$this->session_id = '';
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$this->_time = time();
|
|
|
|
|
|
if ($this->session_id)
|
|
|
{
|
|
|
$this->load_session();
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$this->gen_session_id();
|
|
|
|
|
|
setcookie($this->session_name, $this->session_id . $this->gen_session_key($this->session_id), 0, $this->session_cookie_path, $this->session_cookie_domain, $this->session_cookie_secure);
|
|
|
}
|
|
|
|
|
|
register_shutdown_function(array(&$this, 'close_session'));
|
|
|
}
|
|
|
|
|
|
function gen_session_id()
|
|
|
{
|
|
|
$this->session_id = md5(uniqid(mt_rand(), true));
|
|
|
|
|
|
return $this->insert_session();
|
|
|
}
|
|
|
|
|
|
function gen_session_key($session_id)
|
|
|
{
|
|
|
static $ip = '';
|
|
|
|
|
|
if ($ip == '')
|
|
|
{
|
|
|
$ip = substr($this->_ip, 0, strrpos($this->_ip, '.'));
|
|
|
}
|
|
|
|
|
|
return sprintf('%08x', crc32(ROOT_PATH . $ip . $session_id));
|
|
|
}
|
|
|
|
|
|
function insert_session()
|
|
|
{
|
|
|
return $this->db->query('INSERT INTO ' . $this->session_table . " (sesskey, expiry, ip, data) VALUES ('" . $this->session_id . "', '". $this->_time ."', '". $this->_ip ."', 'a:0:{}')");
|
|
|
}
|
|
|
|
|
|
function load_session()
|
|
|
{
|
|
|
$session = $this->db->getRow('SELECT userid, adminid, user_name, user_rank, discount, email, data, expiry FROM ' . $this->session_table . " WHERE sesskey = '" . $this->session_id . "'");
|
|
|
if (empty($session))
|
|
|
{
|
|
|
$this->insert_session();
|
|
|
|
|
|
$this->session_expiry = 0;
|
|
|
$this->session_md5 = '40cd750bba9870f18aada2478b24840a';
|
|
|
$GLOBALS['_SESSION'] = array();
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
if (!empty($session['data']) && $this->_time - $session['expiry'] <= $this->max_life_time)
|
|
|
{
|
|
|
$this->session_expiry = $session['expiry'];
|
|
|
$this->session_md5 = md5($session['data']);
|
|
|
$GLOBALS['_SESSION'] = unserialize($session['data']);
|
|
|
$GLOBALS['_SESSION']['user_id'] = $session['userid'];
|
|
|
$GLOBALS['_SESSION']['admin_id'] = $session['adminid'];
|
|
|
$GLOBALS['_SESSION']['user_name'] = $session['user_name'];
|
|
|
$GLOBALS['_SESSION']['user_rank'] = $session['user_rank'];
|
|
|
$GLOBALS['_SESSION']['discount'] = $session['discount'];
|
|
|
$GLOBALS['_SESSION']['email'] = $session['email'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$session_data = $this->db->getRow('SELECT data, expiry FROM ' . $this->session_data_table . " WHERE sesskey = '" . $this->session_id . "'");
|
|
|
if (!empty($session_data['data']) && $this->_time - $session_data['expiry'] <= $this->max_life_time)
|
|
|
{
|
|
|
$this->session_expiry = $session_data['expiry'];
|
|
|
$this->session_md5 = md5($session_data['data']);
|
|
|
$GLOBALS['_SESSION'] = unserialize($session_data['data']);
|
|
|
$GLOBALS['_SESSION']['user_id'] = $session['userid'];
|
|
|
$GLOBALS['_SESSION']['admin_id'] = $session['adminid'];
|
|
|
$GLOBALS['_SESSION']['user_name'] = $session['user_name'];
|
|
|
$GLOBALS['_SESSION']['user_rank'] = $session['user_rank'];
|
|
|
$GLOBALS['_SESSION']['discount'] = $session['discount'];
|
|
|
$GLOBALS['_SESSION']['email'] = $session['email'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$this->session_expiry = 0;
|
|
|
$this->session_md5 = '40cd750bba9870f18aada2478b24840a';
|
|
|
$GLOBALS['_SESSION'] = array();
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
|
|
|
function update_session()
|
|
|
{
|
|
|
$adminid = !empty($GLOBALS['_SESSION']['admin_id']) ? intval($GLOBALS['_SESSION']['admin_id']) : 0;
|
|
|
$userid = !empty($GLOBALS['_SESSION']['user_id']) ? intval($GLOBALS['_SESSION']['user_id']) : 0;
|
|
|
$user_name = !empty($GLOBALS['_SESSION']['user_name']) ? trim($GLOBALS['_SESSION']['user_name']) : 0;
|
|
|
$user_rank = !empty($GLOBALS['_SESSION']['user_rank']) ? intval($GLOBALS['_SESSION']['user_rank']) : 0;
|
|
|
$discount = !empty($GLOBALS['_SESSION']['discount']) ? round($GLOBALS['_SESSION']['discount'], 2) : 0;
|
|
|
$email = !empty($GLOBALS['_SESSION']['email']) ? trim($GLOBALS['_SESSION']['email']) : 0;
|
|
|
unset($GLOBALS['_SESSION']['admin_id']);
|
|
|
unset($GLOBALS['_SESSION']['user_id']);
|
|
|
unset($GLOBALS['_SESSION']['user_name']);
|
|
|
unset($GLOBALS['_SESSION']['user_rank']);
|
|
|
unset($GLOBALS['_SESSION']['discount']);
|
|
|
unset($GLOBALS['_SESSION']['email']);
|
|
|
|
|
|
$data = serialize($GLOBALS['_SESSION']);
|
|
|
$this->_time = time();
|
|
|
|
|
|
if ($this->session_md5 == md5($data) && $this->_time < $this->session_expiry + 10)
|
|
|
{
|
|
|
return true;
|
|
|
}
|
|
|
|
|
|
$data = addslashes($data);
|
|
|
|
|
|
if (isset($data[255]))
|
|
|
{
|
|
|
$this->db->autoReplace($this->session_data_table, array('sesskey' => $this->session_id, 'expiry' => $this->_time, 'data' => $data), array('expiry' => $this->_time,'data' => $data));
|
|
|
|
|
|
$data = '';
|
|
|
}
|
|
|
|
|
|
return $this->db->query('UPDATE ' . $this->session_table . " SET expiry = '" . $this->_time . "', ip = '" . $this->_ip . "', userid = '" . $userid . "', adminid = '" . $adminid . "', user_name='" . $user_name . "', user_rank='" . $user_rank . "', discount='" . $discount . "', email='" . $email . "', data = '$data' WHERE sesskey = '" . $this->session_id . "' LIMIT 1");
|
|
|
}
|
|
|
|
|
|
function close_session()
|
|
|
{
|
|
|
$this->update_session();
|
|
|
|
|
|
/* 闅忔満瀵 sessions_data 鐨勫簱杩涜?鍒犻櫎鎿嶄綔 */
|
|
|
if (mt_rand(0, 2) == 2)
|
|
|
{
|
|
|
$this->db->query('DELETE FROM ' . $this->session_data_table . ' WHERE expiry < ' . ($this->_time - $this->max_life_time));
|
|
|
}
|
|
|
|
|
|
if ((time() % 2) == 0)
|
|
|
{
|
|
|
return $this->db->query('DELETE FROM ' . $this->session_table . ' WHERE expiry < ' . ($this->_time - $this->max_life_time));
|
|
|
}
|
|
|
|
|
|
return true;
|
|
|
}
|
|
|
|
|
|
function delete_spec_admin_session($adminid)
|
|
|
{
|
|
|
if (!empty($GLOBALS['_SESSION']['admin_id']) && $adminid)
|
|
|
{
|
|
|
return $this->db->query('DELETE FROM ' . $this->session_table . " WHERE adminid = '$adminid'");
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
return false;
|
|
|
}
|
|
|
}
|
|
|
|
|
|
function destroy_session()
|
|
|
{
|
|
|
$GLOBALS['_SESSION'] = array();
|
|
|
|
|
|
setcookie($this->session_name, $this->session_id, 1, $this->session_cookie_path, $this->session_cookie_domain, $this->session_cookie_secure);
|
|
|
|
|
|
/* shop 鑷?畾涔夋墽琛岄儴鍒 */
|
|
|
if (!empty($GLOBALS['ecs']))
|
|
|
{
|
|
|
//$this->db->query('DELETE FROM ' . $GLOBALS['ecs']->table('cart') . " WHERE session_id = '$this->session_id'");//青蜂网络www.0769web.net购物车选择性结算注释
|
|
|
$this->db->query('DELETE FROM ' . $GLOBALS['ecs']->table('cart') . " WHERE session_id = '$this->session_id' AND user_id = 0");//新增青蜂网络www.0769web.net购物车选择性结算
|
|
|
}
|
|
|
/* shop 鑷?畾涔夋墽琛岄儴鍒 */
|
|
|
|
|
|
$this->db->query('DELETE FROM ' . $this->session_data_table . " WHERE sesskey = '" . $this->session_id . "' LIMIT 1");
|
|
|
|
|
|
return $this->db->query('DELETE FROM ' . $this->session_table . " WHERE sesskey = '" . $this->session_id . "' LIMIT 1");
|
|
|
}
|
|
|
|
|
|
function get_session_id()
|
|
|
{
|
|
|
return $this->session_id;
|
|
|
}
|
|
|
|
|
|
function get_users_count()
|
|
|
{
|
|
|
return $this->db->getOne('SELECT count(*) FROM ' . $this->session_table);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
?>
|
