log = "session() called
";
$ret = true;
/*
All the session variables are available in the data[] array. Unless you
know what you are doing, Do not use these array keys as they are used
internally by the class:
logged_in
page_destination
*/
$this->data = array();
/*
If you will have some pages that require login, set your login page here.
Defaults to login.php in current dir.
*/
$this->login_page = "login.php";
/*
Define the directory to save session files in. This defaults to the current
dir, but this is probably not what you want. For one thing, it is INSECURE!
It also will prevent your sessions from working between scripts in different
dirs. It is highly recommended that you set this to a non web-accessible
dir. End this value with a "/".
*/
$this->dir = realpath("./")."/";
if ($this->exists()) {
$this->log .= "sid: ".$this->id."
";
if (!$this->load()) {
/*
This is not necessarily a show-stopper. This will happen if you've
previously started a session, but never saved it. This would also occur
if you delete the session's cache file during a live session.
*/
$this->log .= "Could not restore session.
";
$ret = true;
}
} else {
if (!$this->newId()) {
$this->log .= "Could not create new session.
";
$ret = false;
}
$this->log .= "sid: ".$this->id."
";
}
if ($login_required) {
$this->log .= "Require login requested
";
if (!$this->data['logged_in']) {
$this->log .= "Not logged in, redirecting to "
.$this->login_page."
";
$this->data['page_destination'] = $_SERVER['SCRIPT_NAME'];
$this->save();
header("Location: ".$this->login_page);
}
}
return $ret;
}
/*
expire() is useful for a logout feature. It will empty the session data,
delete the session file, and expire the sid cookie.
*/
function expire() {
$this->log .= "expire() called
";
$ret = true;
$this->data = array();
if (!file_exists($this->filename)) {
$this->log .= $this->filename." does not exist.
";
$ret = false;
} else {
if (!@unlink($this->filename)) {
$this->log .= "session file delete failed for "
.$this->filename."
";
$ret = false;
}
}
if (!setcookie('sid' ,$this->id, time()-3600, "/")) {
$this->log .= "sid cookie expire failed. This may be due to browser"
." output started prior.
";
$ret = false;
}
return $ret;
}
/*
exists() checks if sid cookie exists on user's computer. If so, set id.
*/
function exists() {
$this->log .= "exists() called
";
if (!isset($_COOKIE['sid'])) {
$this->log .= "sid cookie does not exist.
";
return false;
}
$this->id = $_COOKIE['sid'];
$this->filename = $this->dir."sid_".$this->id;
return true;
}
/*
newId() generates a 32 character identifier that is extremely difficult to
predict. Save to a cookie to persist between pages.
*/
function newId() {
$this->log .= "newId() called
";
$this->id = md5(uniqid(rand(), true));
$this->filename = $this->dir."sid_".$this->id;
if (!setcookie('sid' ,$this->id, null, "/")) {
$this->log .= "sid cookie save failed. This may be due to browser"
." output started prior or the user has disabled cookies.
";
return false;
}
return true;
}
/*
load() reads in session data stored in session file.
*/
function load() {
$this->log .= "load() called
";
if (!file_exists($this->filename)) {
$this->log .= $this->filename." does not exist.
";
return false;
}
if (!$x = @file_get_contents($this->filename)) {
$this->log .= "Could not read ".$this->filename."
";
return false;
}
if (!$this->data = unserialize($x)) {
$this->log .= "unserialize failed
";
$this->data = array();
return false;
}
return true;
}
/*
save() stores session data in session file to persist data between pages.
*/
function save() {
$this->log .= "save() called
";
if (count($this->data) < 1) {
$this->log .= "Nothing to save.
";
return false;
}
//create file pointer
if (!$fp=@fopen($this->filename,"w")) {
$this->log .= "Could not create or open ".$this->filename."
";
return false;
}
//write to file
if (!@fwrite($fp,serialize($this->data))) {
$this->log .= "Could not write to ".$this->filename."
";
fclose($fp);
return false;
}
//close file pointer
fclose($fp);
return true;
}
/*
cleanAll() will clean up your session dir removing all 'sid_' files with a
modified date older than the number of minutes passed in. This method is here
as a convenience. You probably want to create a cron job that cleans this up
on a daily basis.
*/
function cleanAll($minutes) {
$this->log .= "cleanAll() called to delete sessions older than "
.$minutes." minutes
";
chdir($this->dir);
$ret = shell_exec("find -type f -name 'sid_*' -maxdepth 1 -mmin +".$minutes." -exec rm -f {} \;");
}
}
?>