Initial commit

archive/version_01/admin/includes/classes/sessions.php

@@ -0,0 +1,523 @@
+<?php
+//
+// +----------------------------------------------------------------------+
+// |zen-cart Open Source E-commerce                                       |
+// +----------------------------------------------------------------------+
+// | Copyright (c) 2003 The zen-cart developers                           |
+// |                                                                      |   
+// | http://www.zen-cart.com/index.php                                    |   
+// |                                                                      |   
+// | Portions Copyright (c) 2003 osCommerce                               |
+// +----------------------------------------------------------------------+
+// | This source file is subject to version 2.0 of the GPL license,       |
+// | that is bundled with this package in the file LICENSE, and is        |
+// | available through the world-wide-web at the following url:           |
+// | http://www.zen-cart.com/license/2_0.txt.                             |
+// | If you did not receive a copy of the zen-cart license and are unable |
+// | to obtain it through the world-wide-web, please send a note to       |
+// | license@zen-cart.com so we can mail you a copy immediately.          |
+// +----------------------------------------------------------------------+
+//  $Id: sessions.php 1969 2005-09-13 06:57:21Z drbyte $
+//
+/*
+  Original source from Web Application Development with PHP (Tobias Ratschiller, Till Gerken)
+  Copyright (c) 2000, New Riders Publishing
+*/
+
+  $SID = '';
+
+  class php3session {
+    var $name = PHP_SESSION_NAME;
+    var $auto_start = false;
+    var $referer_check = false;
+
+    var $save_path = PHP_SESSION_SAVE_PATH;
+    var $save_handler = 'php3session_files';
+
+    var $lifetime = 0;
+
+    var $cache_limiter = 'nocache';
+    var $cache_expire = 180;
+
+    var $use_cookies = true;
+    var $cookie_lifetime = 0;
+    var $cookie_path = substr(DIR_WS_ADMIN, 0, -1);
+    var $cookie_domain = '';
+
+    var $gc_probability = 1;
+    var $gc_maxlifetime = 0;
+
+    var $serialize_handler = 'php';
+    var $ID;
+
+    var $nr_open_sessions = 0;
+    var $mod_name = '';
+    var $id;
+    var $delimiter = "\n";
+    var $delimiter_value = '[==]';
+
+    function php3session() {
+      $this->mod_name = $this->save_handler;
+    }
+  }
+
+  class php3session_user {
+    var $open_func, $close_func, $read_func, $write_func, $destroy_func, $gc_func;
+
+    function open($save_path, $sess_name) {
+      $func = $this->open_func;
+      if (function_exists($func)) {
+        return $func($save_path, $sess_name);
+      }
+
+      return true;
+    }
+
+    function close($save_path, $sess_name) {
+      $func = $this->close_func;
+      if (function_exists($func)) {
+        return $func();
+      }
+
+      return true;
+    }
+
+    function read($sess_id) {
+      $func = $this->read_func;
+
+      return $func($sess_id);
+    }
+
+    function write($sess_id, $val) {
+      $func = $this->write_func;
+
+      return $func($sess_id, $val);
+    }
+
+    function destroy($sess_id) {
+      $func = $this->destroy_func;
+      if (function_exists($func)) {
+        return $func($sess_id);
+      }
+
+      return true;
+    }
+
+    function gc($max_lifetime) {
+      $func = $this->gc_func;
+      if (function_exists($func)) {
+        return $func($max_lifetime);
+      }
+
+      return true;
+    }
+  }
+
+  class php3session_files {
+    function open($save_path, $sess_name) {
+      return true;
+    }
+
+    function close() {
+      return true;
+    }
+
+    function read($sess_id) {
+      global $session;
+
+// Open, read in, close file with session data
+      $file = $session->save_path . '/sess_' . $sess_id;
+      if (!file_exists($file)) {
+// Create it
+        touch($file);
+      }
+      $fp = fopen($file, 'r') or die('Could not open session file (' . $file . ').');
+      $val = fread($fp, filesize($file));
+      fclose($fp);
+
+      return $val;
+    }
+
+    function write($sess_id, $val) {
+      global $session;
+
+// Open, write to, close file with session data
+      $file = $session->save_path . '/sess_' . $sess_id;
+      $fp = fopen($file, 'w') or die('Could not write session file (' . $file . ')');
+      $val = fputs($fp, $val);
+      fclose($fp);
+
+      return true;
+    }
+
+    function destroy($sess_id) {
+      global $session;
+
+      $file = $session->save_path . '/sess_' . $sess_id;
+      unlink($file);
+
+      return true;
+    }
+
+    function gc($max_lifetime) {
+// We return true, since all cleanup should be handled by
+// an external entity (i.e. find -ctime x | xargs rm)
+      return true;
+    }
+  }
+
+  function _session_create_id() {
+    return md5(uniqid(microtime()));
+  }
+
+  function _session_cache_limiter() {
+    global $session;
+
+    switch ($session->cache_limiter) {
+      case 'nocache':
+                      header('Expires: Thu, 19 Nov 1981 08:52:00 GMT');
+                      header('Cache-Control: no-cache');
+                      header('Pragma: no-cache');
+                      break;
+      case 'private':
+                      header('Expires: Thu, 19 Nov 1981 08:52:00 GMT');
+                      header(sprintf('Cache-Control: private, max-age=%s', $session->cache_expire * 60));
+                      header('Last-Modified: ' . gmdate('D, d M Y H:i:s', filemtime(basename($GLOBALS['PHP_SELF']))) . ' GMT');
+                      break;
+      case 'public':
+                      $now = time();
+                      $now += $session->cache_expire * 60;
+                      $now = gmdate('D, d M Y H:i:s', $now) . ' GMT';
+                      header('Expires: ' . $now);
+                      header(sprintf('Cache-Control: public, max-age=%s', $session->cache_expire * 60));
+                      header('Last-Modified: ' . gmdate('D, d M Y H:i:s', filemtime(basename($GLOBALS['PHP_SELF']))) . ' GMT');
+                      break;
+      default:
+                      die('Caching method ' . $session->cache_limiter . ' not implemented.');
+    }
+  }
+
+  function _php_encode() {
+    global $session;
+
+    $ret = '';
+// Create a string containing the serialized variables
+    for (reset($session->vars); list($i)=each($session->vars);) {
+      $ret .= $session->vars[$i] . $session->delimiter_value . serialize($GLOBALS[$session->vars[$i]]) . $session->delimiter;
+    }
+
+    return $ret;
+  }
+
+  function _php_decode($data) {
+    global $session;
+
+    $data = trim($data);
+    $vars = explode($session->delimiter, $data);
+
+// Add the variables to the global namespace
+    for (reset($vars); list($i)=each($vars);) {
+      $tmp = explode($session->delimiter_value, $vars[$i]);
+      $name = trim($tmp[0]);
+      $value = trim($tmp[1]);
+      $GLOBALS[$name] = unserialize($value);
+      $session->vars[] = trim($name);
+    }
+  }
+
+  function _wddx_encode($data) {
+    global $session;
+
+    $ret = wddx_serialize_vars($session->vars);
+
+    return $ret;
+  }
+
+  function _wddx_decode($data) {
+    return wddx_deserialize($data);
+  }
+
+  function session_name($name = '') {
+    global $session;
+
+    if (empty($name)) {
+      return $session->name;
+    }
+
+    $session->name = $name;
+  }
+
+  function session_set_save_handler($open, $close, $read, $write, $destroy, $gc) {
+    global $session, $php3session_user;
+
+    $php3session_user = new php3session_user;
+    $php3session_user->open_func = $open;
+    $php3session_user->close_func = $close;
+    $php3session_user->read_func = $read;
+    $php3session_user->write_func = $write;
+    $php3session_user->destroy_func = $destroy;
+    $php3session_user->gc_func = $gc;
+    $session->mod_name = 'php3session_user';
+  }
+
+  function session_module_name($name = '') {
+    global $session;
+
+    if (empty($name)) {
+      return $session->mod_name;
+    }
+
+    $session->mod_name = $name;
+  }
+
+  function session_save_path($path = '') {
+    global $session;
+
+    if(empty($path)) {
+      return $session->save_path;
+    }
+
+    $session->save_path = $path;
+  }
+
+  function session_id($id = '') {
+    global $session;
+
+    if(empty($id)) {
+      return $session->id;
+    }
+
+    $session->id = $id;
+  }
+
+  function session_register($var) {
+    global $session;
+
+    if ($session->nr_open_sessions == 0) {
+      session_start();
+    }
+
+    $session->vars[] = trim($var);
+  }
+
+  function session_unregister($var) {
+    global $session;
+
+    for (reset($session->vars); list($i)=each($session->vars);) {
+      if ($session->vars[$i] == trim($var)) {
+        unset($session->vars[$i]);
+        break;
+      }
+    }
+  }
+
+  function session_is_registered($var) {
+    global $session;
+
+    for (reset($session->vars); list($i)=each($session->vars);) {
+      if ($session->vars[$i] == trim($var)) {
+        return true;
+      }
+    }
+
+    return false;
+  }
+
+  function session_encode() {
+    global $session;
+
+    $serializer = '_' . $session->serialize_handler . '_encode';
+    $ret = $serializer();
+
+    return $ret;
+  }
+
+  function session_decode($data) {
+    global $session;
+
+    $serializer = '_' . $session->serialize_handler . '_decode';
+    $ret = $serializer($data);
+
+    return $ret;
+  }
+
+  function session_start() {
+    global $session, $SID, $_COOKIE, $_GET, $_POST;
+
+// Define the global variable $SID?
+    $define_sid = true;
+
+// Send the session cookie?
+    $send_cookie = true;
+
+// Is track_vars enabled?
+    $track_vars = ( (isset($_COOKIE)) || (isset($_GET)) || (isset($_POST)) ) ? true : false;
+
+// Check if session_start() has been called once already
+    if ($session->nr_open_sessions != 0) {
+      return false;
+    }
+
+// If our only resource is the global symbol_table, then check it.
+// If track_vars are enabled, we prefer these, because they are more
+// reliable, and we always know whether the user has accepted the 
+// cookie.
+    if ( (isset($GLOBALS[$session->name])) && (!empty($GLOBALS[$session->name])) && (!$track_vars) ) {
+      $session->id = $GLOBALS[$session->name];
+      $send_cookie = false;
+    }
+
+// Now check the track_vars. Cookies are preferred, because initially
+// cookie and get variables will be available. 
+    if ( (empty($session->id)) && ($track_vars) ) {
+      if (isset($_COOKIE[$session->name])) {
+        $session->id = $_COOKIE[$session->name];
+        $define_sid = false;
+        $send_cookie = false;
+      }
+
+      if (isset($_GET[$session->name])) {
+        $session->id = $_GET[$session->name];
+      }
+
+      if (isset($_POST[$session->name])) {
+        $session->id = $_POST[$session->name];
+      }
+    }
+
+/*
+// Check the REQUEST_URI symbol for a string of the form
+// '<session-name>=<session-id>' to allow URLs of the form
+// http://yoursite/<session-name>=<session-id>/script.php 
+    if (empty($session->id)) {
+      eregi($session->name . '=([^/]+)', $GLOBALS['REQUEST_URI'], $regs);
+      $regs[1] = trim($regs[1]);
+      if (!empty($regs[1])) {
+        $session->id = $regs[1];
+      }
+    }
+*/
+
+// Check whether the current request was referred to by
+// an external site which invalidates the previously found ID
+    if ( (!empty($session->id)) && ($session->referer_check) ) {
+      $url = parse_url($GLOBALS['HTTP_REFERER']);
+      if (trim($url['host']) != $GLOBALS['SERVER_NAME']) {
+        unset($session->id);
+        $send_cookie = true;
+        $define_sid = true;
+      }
+    }
+
+// Do we have an existing session ID?
+    if (empty($session->id)) {
+// Create new session ID
+      $session->id = _session_create_id();
+    }
+
+// Is use_cookies set to false?
+    if ( (!$session->use_cookies) && ($send_cookie) ) {
+      $define_sid = true;
+      $send_cookie = false;
+    }
+
+// Should we send a cookie?
+    if ($send_cookie) {
+      setcookie($session->name, $session->id, $session->cookie_lifetime, $session->cookie_path, $session->cookie_domain);
+    }
+
+// Should we define the SID?
+    if($define_sid) {
+      $SID = $session->name . '=' . $session->id;
+    }
+
+    $session->nr_open_sessions++;
+
+// Send caching headers
+
+// Start session
+    $mod = $GLOBALS[$session->mod_name];
+    if (!$mod->open($session->save_path, $session->name)) {
+      die('Failed to initialize session module.');
+    }
+
+// Read session data
+    if ($val = $mod->read($session->id)) {
+// Decode session data
+      session_decode($val);
+    }
+
+// Send HTTP cache headers
+    _session_cache_limiter();
+
+// Check if we should clean up (call the garbage collection routines)
+    if ($session->gc_probability > 0) {
+      $randmax = getrandmax();
+      $nrand = (int)(100 * zen_rand() / $randmax);
+      if ($nrand < $session->gc_probability) {
+        $mod->gc($session->gc_maxlifetime);
+      }
+    }
+
+    if ($define_sid) {
+      define('SID', $SID);
+    } else {
+      define('SID', '');
+    }
+
+    return true;
+  }
+
+  function session_destroy() {
+    global $session;
+
+    if ($session->nr_open_sessions == 0) {
+      return false;
+    }
+
+// Destroy session
+    $mod = $GLOBALS[$session->mod_name];
+    if (!$mod->destroy($session->id)) {
+      return false;
+    }
+    unset($session);
+    $session = new php3session;
+
+    return true;
+  }
+
+  function session_close() {
+    global $session, $SID;
+
+    if ($session->nr_open_sessions == 0) {
+      return false;
+    }
+// Encode session
+    $val = session_encode();
+    $len = strlen($val);
+
+// Save session
+    $mod = $GLOBALS[$session->mod_name];
+    if (!$mod->write($session->id, $val)) {
+      die('Session could not be saved.');
+    }
+// Close session
+    if ( (function_exists($session->mod_name . '->close')) && (!$mod->close()) ) {
+      die('Session could not be closed.');
+    }
+    $SID = '';
+    $session->nr_open_sessions--;
+
+    return true;
+  }
+
+  $session = new php3session;
+  $mod = $session->save_handler;
+  $$mod = new $mod;
+
+  if ($session->auto_start) {
+    $ret = session_start() or die('Session could not be started.');
+  }
+
+  register_shutdown_function('session_close');
+?>