Overview

Namespaces

  • Core
    • Auth
    • Exceptions
    • Helpers
    • Providers
  • Kernel
    • Dispatch
    • Providers
  • None
  • Vendor
    • ExampleVendor

Classes

  • Controller
  • Core\AbstractClass
  • Core\Auth\AuthenticateController
  • Core\Auth\PasswordModel
  • Core\ErrorController
  • Core\Exceptions\Exception
  • Core\Helpers\Flash
  • Core\Helpers\Hooks
  • Core\Language
  • Core\ParentController
  • Core\ParentModel
  • Core\Providers\Config
  • Core\Providers\Service
  • Core\Providers\Session
  • ErrorController
  • HomeController
  • HomeModel
  • Kernel\AppKernel
  • Kernel\Dispatch\Logger
  • Kernel\Dispatch\Mailer
  • Kernel\Dispatch\Mailer_PHP
  • Kernel\Providers\Permission
  • Kernel\Providers\Router
  • LoginController
  • LoginModel
  • Model
  • Vendor\ExampleVendor\ExampleVendorController
  • Vendor\ExampleVendor\ExampleVendorModel
  • Vendor\VendorController

Functions

  • _die
  • asset
  • clock_end
  • clock_start
  • clock_time
  • config
  • ddie
  • deleteDir
  • email_png
  • env
  • folder_action
  • folder_recurse
  • generateFile
  • getClientIP
  • getClientUserAgent
  • getVersion
  • isAjax
  • isAuth
  • isDev
  • isLocalServer
  • isProd
  • nocache
  • php
  • ppie
  • query
  • queryIndexed
  • save_ini_file
  • t
  • versioning
  • view
  • write_ini
  • Overview
  • Namespace
  • Class
  • Download
 1:  2:  3:  4:  5:  6:  7:  8:  9: 10: 11: 12: 13: 14: 15: 16: 17: 18: 19: 20: 21: 22: 23: 24: 25: 26: 27: 28: 29: 30: 31: 32: 33: 34: 35: 36: 37: 38: 39: 40: 41: 42: 43: 44: 45: 46: 47: 48: 49: 50: 51: 52: 53: 54: 55: 56: 57: 58: 59: 60: 61: 62: 63: 64: 65: 66: 67: 
<?php

namespace Core\Auth;
use Core\ParentModel;

/**
 * Contains the default logic to retrieve a user from the database.
 * @package Core
 */
class PasswordModel extends ParentModel {

    /**
     * @var PasswordModel The class instance.
     * @internal
     */
    protected static $instance;

    /**
     * Returns the class instance, creating it if it did not exist.
     * @return PasswordModel
     */
    public static function singleton() {
        if (!self::$instance) {
            $v = __CLASS__;
            self::$instance = new $v;
        }
        return self::$instance;
    }

    /**
     * Gets an user from the database and updates last_login and attempts
     * @param string $username The name of the user
     * @param string $password The <b>unhashed</b> password of the user
     * @return mixed $user on success, FALSE on error
     */
    public function getUser($username, $password) {
        $db = $this->config->get('Login');
        $loginTable = $db['TABLE'];
        $usernameRow = $db['TABLE_COLUMN_USER'];
        $passwordRow = $db['TABLE_COLUMN_PASS'];
        $password = sha1($password . $db['SALT']);
        $query = "SELECT * FROM $loginTable WHERE `$usernameRow` = :username AND `$passwordRow` = :password LIMIT 1";
        $result = $this->query(
                $query, 
                array(
                    ':username' => $username, 
                    ':password' => $password
                ), TRUE);
        if ($result && is_array($result)) {
            $user = array_pop($result);

            //We update the Last_Login column
            //The reason we use 2 queries is because not all "user" tables may have both columns!
            $update = "UPDATE $loginTable SET last_login = CURRENT_TIMESTAMP WHERE id = :id";
            $this->query($update, array(':id' => $user['id']));

            // We update the Attempts column
            $update = "UPDATE $loginTable SET attempts = 0 WHERE id = :id";
            $this->query($update, array(':id' => $user['id']));

            return $user;
        } else {
            return FALSE;
        }
    }
}
Ribosome API documentation generated by ApiGen