Initial commit.

This is to be the new HashRU website based on the Aaronweb.net/Kabuki CMS.
2016-09-01 23:13:23 +02:00
commit ab0e4efbcb
68 changed files with 8054 additions and 0 deletions
--- a/models/Authentication.php
+++ b/models/Authentication.php
@@ -0,0 +1,114 @@
+<?php
+/*****************************************************************************
+ * Authentication.php
+ * Contains key class Authentication.
+ *
+ * Kabuki CMS (C) 2013-2015, Aaron van Geffen
+ *****************************************************************************/
+
+/**
+ * Authentication class, containing various static functions used for account verification
+ * and session management.
+ */
+class Authentication
+{
+	/**
+	 * Checks whether a user still exists in the database.
+	 */
+	public static function checkExists($id_user)
+	{
+		$res = Registry::get('db')->queryValue('
+			SELECT id_user
+			FROM users
+			WHERE id_user = {int:id}',
+			[
+				'id' => $id_user,
+			]);
+
+		return $res !== null;
+	}
+
+	/**
+	 * Finds the user id belonging to a certain emailaddress.
+	 */
+	public static function getUserId($emailaddress)
+	{
+		$res = Registry::get('db')->queryValue('
+			SELECT id_user
+			FROM users
+			WHERE emailaddress = {string:emailaddress}',
+			[
+				'emailaddress' => $emailaddress,
+			]);
+
+		return empty($res) ? false : $res;
+	}
+
+	/**
+	 * Verifies whether the user is currently logged in.
+	 */
+	public static function isLoggedIn()
+	{
+		// Check whether the active session matches the current user's environment.
+		if (isset($_SESSION['ip_address'], $_SESSION['user_agent']) && (
+			 (isset($_SERVER['REMOTE_ADDR']) && $_SESSION['ip_address'] != $_SERVER['REMOTE_ADDR']) ||
+			 (isset($_SERVER['HTTP_USER_AGENT']) && $_SESSION['user_agent'] != $_SERVER['HTTP_USER_AGENT'])))
+		{
+			session_destroy();
+			return false;
+		}
+
+		// A user is logged in if a user id exists in the session and this id is (still) in the database.
+		return isset($_SESSION['user_id']) && self::checkExists($_SESSION['user_id']);
+	}
+
+	/**
+	 * Checks a password for a given username against the database.
+	 */
+	public static function checkPassword($emailaddress, $password)
+	{
+		// Retrieve password hash for user matching the provided emailaddress.
+		$password_hash = Registry::get('db')->queryValue('
+			SELECT password_hash
+			FROM users
+			WHERE emailaddress = {string:emailaddress}',
+			[
+				'emailaddress' => $emailaddress,
+			]);
+
+		// If there's no hash, the user likely does not exist.
+		if (!$password_hash)
+			return false;
+
+		return password_verify($password, $password_hash);
+	}
+
+	/**
+	 * Computes a password hash.
+	 */
+	public static function computeHash($password)
+	{
+		$hash = password_hash($password, PASSWORD_DEFAULT);
+		if (!$hash)
+			throw new Exception('Hash creation failed!');
+		return $hash;
+	}
+
+	/**
+	 * Resets a password for a certain user.
+	 */
+	public static function updatePassword($id_user, $hash)
+	{
+		return Registry::get('db')->query('
+			UPDATE users
+			SET
+				password_hash = {string:hash},
+				reset_key = {string:blank}
+			WHERE id_user = {int:id_user}',
+			[
+				'id_user' => $id_user,
+				'hash' => $hash,
+				'blank' => '',
+			]);
+	}
+}