227 lines
8.3 KiB
PHP
227 lines
8.3 KiB
PHP
<?php
|
|
|
|
// _____ _____ _ _ _____ _ ______ _ ____ _ _
|
|
// / ____|_ _| \ | |/ ____| | | ____| (_) / __ \| \ | |
|
|
// | (___ | | | \| | | __| | | |__ ___ _ __ _ _ __ | | | | \| |
|
|
// \___ \ | | | . ` | | |_ | | | __| / __| |/ _` | '_ \ | | | | . ` |
|
|
// ____) |_| |_| |\ | |__| | |____| |____ \__ \ | (_| | | | | | |__| | |\ |
|
|
// |_____/|_____|_| \_|\_____|______|______| |___/_|\__, |_| |_| \____/|_| \_|
|
|
// __/ |
|
|
// |___/
|
|
// SSO
|
|
//
|
|
// Set GLOBAL VARS corresponding to current logged in user.
|
|
// They may only edit their own dir info.
|
|
//
|
|
|
|
include_once("peter_db.php");
|
|
$peter_db = new peter_db();
|
|
$c = $peter_db -> getConnection();
|
|
|
|
|
|
$server = $_SERVER['SERVER_NAME'];
|
|
|
|
$IS_PROD = 0;
|
|
if ( $server == 'www.gavilan.edu') { $IS_PROD = 1; }
|
|
|
|
|
|
|
|
date_default_timezone_set('America/Los_Angeles');
|
|
|
|
// 1. lookups, like a username
|
|
function single_row_select($qry, $j) { global $c;
|
|
$r = mysqli_query($c, $qry); d_err($qry);
|
|
$e = mysqli_error($c); if($e) { d_err("sql error: " . $e ); }
|
|
if (!$r) { return $r; }
|
|
//echo("\n<!--\n" . $qry . "\n\n" . json_encode($r) . "\n-->\n\n");
|
|
$a = mysqli_fetch_assoc($r);
|
|
$e = mysqli_error($c); if($e) { d_err("sql error: " . $e ); }
|
|
if (! $j) { return $a; } return json_encode($a); }
|
|
|
|
// 1a. inserts
|
|
function single_row_insert($qry, $j) { global $c;
|
|
error_log($qry, 0);
|
|
$r = mysqli_query($c, $qry);
|
|
//d_err($qry);
|
|
//$e = mysqli_error($c); if($e) { d_err("sql error: " . $e ); }
|
|
$new_id = mysqli_insert_id($c);
|
|
return $new_id; }
|
|
|
|
/*$a = mysqli_fetch_assoc($c);
|
|
$e = mysqli_error($c); if($e) { d_err("sql error: " . $e ); }
|
|
if (! $j) { return $a; } return json_encode($a); } */
|
|
|
|
// 1b. updates
|
|
function single_row_update($qry, $j) { global $c;
|
|
$r = mysqli_query($c, $qry);
|
|
return 1; }
|
|
|
|
// 2. grid or fancier joins, like get all sessions, rosters, todos, etc
|
|
function multi_row_select($qry, $j) { global $c;
|
|
$rows = array();
|
|
$result = mysqli_query($c, $qry);
|
|
while($r = mysqli_fetch_assoc($result)) { $rows[] = $r; }
|
|
if (! $j) { return $rows; } return json_encode( $rows); }
|
|
|
|
|
|
// 4. Plain query
|
|
function query($qry) {
|
|
global $c;
|
|
return mysqli_query($c, $qry);
|
|
}
|
|
|
|
function d_err($s) { global $DEBUG; if ($DEBUG) { p($s); } }
|
|
|
|
|
|
|
|
// 3. Check if an entry exists
|
|
function does_exist($qry, $full_record) { global $c;
|
|
$r = mysqli_query($c, $qry);
|
|
$a = mysqli_num_rows($r);
|
|
if (! $a ) { return 0; }
|
|
$row = mysqli_fetch_array($r, MYSQLI_NUM);
|
|
$id = $row[0]; // getting the id of that which exists... assuming first column has it.
|
|
$e = mysqli_error($c); if($e) { d_err("sql error: " . $e); }
|
|
if ($a && $full_record) { return $row; } if ($a) { return $id; } return 0; }
|
|
|
|
|
|
function dumpit($var) {
|
|
ob_start();
|
|
var_dump($var);
|
|
$a=ob_get_contents();
|
|
ob_end_clean();
|
|
$a = preg_replace('~[\r\n]+~', '', $a);
|
|
return $a;
|
|
}
|
|
|
|
function insert_or_get_browser($b) {
|
|
global $c;
|
|
$BROWSER = $b; // ok($b);
|
|
$existing = does_exist( "SELECT id FROM www_browsers WHERE string='$BROWSER'", 0);
|
|
if ($existing) { return $existing;
|
|
} else {
|
|
$q = "INSERT INTO www_browsers (string) VALUES ('$BROWSER')";
|
|
single_row_insert($q,0,$c);
|
|
return does_exist( "SELECT id FROM www_browsers WHERE string='$BROWSER'",0,$c); } }
|
|
|
|
|
|
// //
|
|
// // Log everything!
|
|
function log_it($action, $user=860) {
|
|
global $USER, $USER_NAME, $USER_GOO, $USER_EMAIL, $c;
|
|
|
|
if (! $USER) {
|
|
$USER = array( 'user_id'=>'unknown', 'id'=>-1 ); }
|
|
$user_browser = $_SERVER['HTTP_USER_AGENT'];
|
|
$user_ip = $_SERVER['REMOTE_ADDR'];
|
|
|
|
$BROWSER = insert_or_get_browser($user_browser);
|
|
//$ACTION = ok($action) . " / " . dumpit($USER) . " / " . $USER_GOO . " / " . $USER_EMAIL;
|
|
$ACTION = $action . " / " . dumpit($USER) . " / " . $USER_GOO . " / " . $USER_EMAIL;
|
|
|
|
//$persid = $USER->id;
|
|
//if (! $persid) { $persid = -1; }
|
|
$qupdate = "INSERT INTO gavi_logs SET personnel_id='{$user}', action='{$ACTION}',name='{$USER_NAME}',browser=$BROWSER, ip='$user_ip'";
|
|
//print_r($qupdate);
|
|
single_row_insert($qupdate,0,$c);
|
|
return array("result"=>"success","action"=>"logged","query"=>$qupdate,"err"=>mysqli_error($c)); }
|
|
|
|
/*session_destroy();
|
|
echo "ending session";
|
|
exit();
|
|
*/
|
|
|
|
$auth_script = "mAuth.php";
|
|
|
|
log_it($IS_PROD);
|
|
|
|
//if (file_exists($auth_script)) {
|
|
if ($IS_PROD) {
|
|
require_once($auth_script);
|
|
$USER_TYPE = $attributes['Roles'][0];
|
|
$USER_GOO = $attributes['uid'][0];
|
|
$USER_EMAIL = $attributes['EmailGC'][0];
|
|
|
|
log_it("mauth returned user_type=$USER_TYPE, user_goo=$USER_GOO, user_email=$USER_EMAIL.");
|
|
|
|
session_start();
|
|
$SESSION_ID = session_id();
|
|
log_it("new session: " . $SESSION_ID);
|
|
//if ( $SESSION_ID == '' ) { // session_status() == PHP_SESSION_ACTIVE // newer php uses this
|
|
if ( session_status() == PHP_SESSION_ACTIVE ) { // // newer php uses this
|
|
$_SESSION['USER_TYPE'] = $USER_TYPE;
|
|
$_SESSION['USER_GOO'] = $USER_GOO;
|
|
$_SESSION['USER_EMAIL'] = $USER_EMAIL;
|
|
log_it("Logged in Session id: {$SESSION_ID} / {$USER_NAME} / {$USER_EMAIL} / {$USER_GOO}");
|
|
} else { // already logged in....
|
|
$USER_TYPE = $_SESSION['USER_TYPE'];
|
|
$USER_GOO = $_SESSION['USER_GOO'];
|
|
$USER_EMAIL = $_SESSION['USER_EMAIL'];
|
|
log_it("Already logged in: Session id: {$SESSION_ID} / {$USER_NAME} / {$USER_EMAIL} / {$USER_GOO}");
|
|
}
|
|
} else {
|
|
// Handle the error if the file doesn't exist
|
|
$USER_TYPE = 'FACULTY'; $USER_GOO = 'G00102586'; $USER_EMAIL = 'phowell@my.gavilan.edu';
|
|
session_start();
|
|
$_SESSION['USER_TYPE'] = $USER_TYPE;
|
|
$_SESSION['USER_GOO'] = $USER_GOO;
|
|
$_SESSION['USER_EMAIL'] = $USER_EMAIL;
|
|
log_it("mauth failed.");
|
|
}
|
|
// The SSO check should have happened on the actual page. If it gets
|
|
// stuck on an api call the app will break.
|
|
|
|
|
|
//
|
|
// SSO Given email is inconsistent. Lookup by GOO
|
|
//
|
|
$goo = substr($USER_GOO, 3);
|
|
$q0 = "SELECT email,name,id FROM conf_users WHERE goo='{$goo}'";
|
|
//echo $q0;
|
|
$temp_usr = single_row_select($q0,0);
|
|
$USER_NAME = '';
|
|
|
|
// Is this a "MISSING USER?" Create an account for them.
|
|
if (is_null($temp_usr)) {
|
|
$LC_EMAIL = strtolower($USER_EMAIL);
|
|
$result = single_row_insert("INSERT INTO conf_users (goo, email, name) VALUES ('{$goo}','{$LC_EMAIL}','{$USER_NAME}');");
|
|
//echo "INSERT INTO conf_users (goo, email, name) VALUES ('{$goo}','{$LC_EMAIL}','{$USER_NAME}');";
|
|
//print_r($result);
|
|
$USER_NAME = $temp_usr['name'];
|
|
$USER_EMAIL = strtolower($temp_usr['email']);
|
|
|
|
// Set the $USER global
|
|
$usr_qry = "SELECT id AS conf_id, goo AS conf_goo, email AS conf_email, name AS conf_name, active AS conf_active FROM conf_users WHERE goo='{$goo}'";
|
|
$USER = single_row_select($usr_qry, 0);
|
|
|
|
$logaction = log_it("Made a new conf_users row for {$USER_NAME} / {$LC_EMAIL} / {$USER_GOO}", $result);
|
|
|
|
} else {
|
|
$USER_NAME = $temp_usr['name'];
|
|
$USER_EMAIL = strtolower($temp_usr['email']);
|
|
|
|
// Set the $USER global
|
|
$usr_qry = "SELECT id AS conf_id, goo AS conf_goo, email AS conf_email, name AS conf_name, active AS conf_active FROM conf_users WHERE goo='{$goo}'";
|
|
$USER = single_row_select($usr_qry, 0);
|
|
|
|
$logaction = log_it("Successful conf_users lookup for {$temp_usr['name']}", $temp_usr['id']);
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
// Check again for missing user entry. Create an account for them.
|
|
if (is_null($USER)) {
|
|
$LC_EMAIL = strtolower($USER_EMAIL);
|
|
$goo = substr($USER_GOO, 3);
|
|
$USER_NAME = '';
|
|
$result = single_row_insert("INSERT INTO conf_users (goo, email, name) VALUES ('{$goo}','{$LC_EMAIL}','{$USER_NAME}');");
|
|
//echo "INSERT INTO conf_users (goo, email, name) VALUES ('{$goo}','{$LC_EMAIL}','{$USER_NAME}');";
|
|
//print_r($result);
|
|
//$logaction = log_it("Made a new conf_users row for {$USER_NAME} / {$LC_EMAIL} / {$USER_GOO}");
|
|
$usr_qry = "SELECT id AS conf_id, goo AS conf_goo, email AS conf_email, name AS conf_name, active AS conf_active FROM conf_users WHERE LOWER(email)='{$USER_EMAIL}'";
|
|
$USER = single_row_select($usr_qry, 0);
|
|
|
|
}
|
|
*/
|