=========================== */ ?> db = $db; $this->conf = $conf; $this->cookie_life = 60*24*3600; $this->cookieTime = time(); } function isAdmin() { if ((!empty($_SESSION["user_id"]) && !empty($_SESSION["user_login"])) && (isset($_SESSION['authenticated']) && $_SESSION['authenticated']==true)) { return true; } if(isset($_COOKIE["PHPSESSID"]) && $_COOKIE["PHPSESSID"]!="") { if ((!empty($_SESSION["user_id"]) && !empty($_SESSION["user_login"])) && (isset($_SESSION['authenticated']) && $_SESSION['authenticated']==true)) { return true; } } return false; } function validateUser($username="", $password="") { if ($this->db->ejecutarConsulta("SELECT id_user, login, password FROM ".$this->conf->tablePrefix."users WHERE login='".$this->db->sql_escape($username)."' AND password='".$password."'")) { if ($this->db->contarRegistros()>0) { $register = $this->db->obtenerRegistro(); $_SESSION['user_id']=$register["id_user"]; $_SESSION['user_login']=$register["login"]; $_SESSION['authenticated'] = true; if (isset($_POST["save_pass"])) { $this->persist = true; setcookie("PHPSESSID",session_id(),$this->cookieTime+$this->cookie_life); } return true; } else { return false; } } else { return false; } } function closeSession() { if (!$this->persist) session_destroy(); return true; } function userExist($user="") { if ($this->db->ejecutarConsulta("SELECT * FROM ".$this->conf->tablePrefix."users WHERE login='".$user."'")) { if ($this->db->contarRegistros()>0) { return true; } else { return false; } } } function isAuthenticated() { return $this->isAdmin(); } function addUser($fieldsArray) { if ($this->db->ejecutarConsulta("SELECT id_user FROM ".$this->conf->tablePrefix."users WHERE login='".$fieldsArray['login']."'")) { if ($this->db->contarRegistros()==0) { $realPassword = ($fieldsArray["password"]); $fieldsArray["password"] = md5($fieldsArray["password"]); if ($this->db->insertarDeFormulario($this->conf->tablePrefix."users", $fieldsArray)) { $this->confirmationEmail($fieldsArray['email'], $fieldsArray['login'], $realPassword); header("Location: ".$this->conf->urlGelato."/admin/admin.php?added=true"); die(); } else { header("Location: ".$this->conf->urlGelato."/admin/admin.php?error=2&des=".$this->merror); die(); } } else { header("Location: ".$this->conf->urlGelato."/admin/admin.php?error=1"); die(); } } } function modifyUser($fieldsArray, $id_user) { $fieldsArray["password"] = md5($fieldsArray["password"]); if ($this->db->modificarDeFormulario($this->conf->tablePrefix."users", $fieldsArray, "id_user=$id_user")) { header("Location: ".$this->conf->urlGelato."/admin/admin.php?modified=true"); die(); } else { header("Location: ".$this->conf->urlGelato."/admin/admin.php?error=2&des=".$this->merror); die(); } } function deleteUser($idUser) { $this->db->ejecutarConsulta("DELETE FROM ".$this->conf->tablePrefix."users WHERE id_user=".$idUser); } function getUsers($show="10", $from="0") { $sqlStr = "select * from ".$this->conf->tablePrefix."users ORDER BY id_user DESC LIMIT $from,$show"; $this->db->ejecutarConsulta($sqlStr); return $this->db->mid_consulta; } function getUserByID($idUser) { if ($this->db->ejecutarConsulta("select * from ".$this->conf->tablePrefix."users where id_user=".$idUser)) { if ($this->db->contarRegistros()>0) { return $registro=$this->db->obtenerRegistro(); } else { return false; } } } function confirmationEmail($email="", $user="", $password="") { $msg = "Account information on gelato CMS

"; $msg .= "Visit the conf->urlGelato."/admin/\">tumblelog panel

"; $msg .= "Username: ".$user."

"; $msg .= "Password: ".$password."

"; $msg .= "Don't tell your password to anybody!!

"; sendMail($email, "Register confirmation on gelato CMS", $msg, "no-reply@gelatocms.com"); } } ?>