--- /dev/null
+package C4::Auth;
+
+use strict;
+require Exporter;
+use C4::Database;
+
+use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS);
+
+# set the version for version checking
+$VERSION = 0.01;
+
+@ISA = qw(Exporter);
+@EXPORT = qw(
+ &checkauth
+);
+
+
+
+sub checkauth {
+ my $query=shift;
+ my $sessionID=$query->cookie('sessionID');
+ my $message='';
+ warn "SID: ".$sessionID;
+
+ my $dbh=C4Connect();
+ my $sth=$dbh->prepare("select userid,ip,lasttime from sessions where sessionid=?");
+ $sth->execute($sessionID);
+ if ($sth->rows) {
+ my ($userid, $ip, $lasttime) = $sth->fetchrow;
+ if ($lasttime<time()-20) {
+ # timed logout
+ warn "$sessionID logged out due to inactivity.";
+ $message="You have been logged out due to inactivity.";
+ my $sti=$dbh->prepare("delete from sessions where sessionID=?");
+ $sti->execute($sessionID);
+ } elsif ($ip ne $ENV{'REMOTE_ADDR'}) {
+ # Different ip than originally logged in from
+ warn "$sessionID came from a new ip address.";
+ $message="ERROR ERROR ERROR ERROR<br>Attempt to re-use a cookie from a different ip address.";
+ } else {
+ my $cookie=$query->cookie(-name => 'sessionID',
+ -value => $sessionID,
+ -expires => '+1y');
+ warn "$sessionID had a valid cookie.";
+ my $sti=$dbh->prepare("update sessions set lasttime=? where sessionID=?");
+ $sti->execute(time(), $sessionID);
+ return ($userid, $cookie, $sessionID);
+ }
+ }
+
+
+
+ warn "$sessionID wasn't in sessions table.";
+
+ ($sessionID) || ($sessionID=int(rand()*100000).'-'.time());
+ my $userid=$query->param('userid');
+ my $password=$query->param('password');
+ if ($userid eq 'librarian' && $password eq 'koha') {
+ my $sti=$dbh->prepare("insert into sessions (sessionID, userid, ip,lasttime) values (?, ?, ?, ?)");
+ $sti->execute($sessionID, $userid, $ENV{'REMOTE_ADDR'}, time());
+ return ($userid, $sessionID, $sessionID);
+ } else {
+ if ($userid) {
+ $message="Invalid userid or password entered.";
+ }
+ my $parameters;
+ foreach (param $query) {
+ $parameters->{$_}=$query->{$_};
+ }
+ my $cookie=$query->cookie(-name => 'sessionID',
+ -value => $sessionID,
+ -expires => '+1y');
+ print $query->header(-cookie=>$cookie);
+ print qq|
+<html>
+<body background=/images/kohaback.jpg>
+<center>
+<h2>$message</h2>
+<form method=post>
+<table border=1>
+<tr><th colspan=2><font size=+2>Koha Login</font></th></tr>
+<tr><td>Name:</td><td><input name=userid></td></tr>
+<tr><td>Password:</td><td><input type=password name=password></td></tr>
+<tr><td colspan=2 align=center><input type=submit value=login></td></tr>
+</table>
+</form>
+</body>
+</html>
+|;
+ exit
+ }
+}
+
+
+END { } # module clean-up code here (global destructor)
use C4::Output;
use C4::BookShelves;
use C4::Circulation::Circ2;
+use C4::Auth;
my $env;
my $query = new CGI;
-print $query->header;
+my ($userid, $cookie, $sessionID) = checkauth($query);
+print $query->header(-cookie => $cookie);
my $headerbackgroundcolor='#663266';
my $circbackgroundcolor='#555555';
my $circbackgroundcolor='#550000';
print startmenu('catalogue');
+print "SessionID: $sessionID<br>\n";
my ($shelflist) = GetShelfList();
<input type=hidden name=shelfnumber value=$shelfnumber>
<input type=hidden name=modifyshelfcontents value=1>
<input type=hidden name=viewshelf value=$shelfnumber>
- <input type=submit value="Modify Shelf List">
+ <input type=submit value="Remove Selected Items">
</form>
EOF
}
#
# $Log$
-# Revision 1.3 2002/07/02 17:48:06 tonnesen
-# Merged in updates from rel-1-2
+# Revision 1.4 2002/07/04 19:21:29 tonnesen
+# Beginning of authentication api. Applied to shelves.pl for now as a test case.
#
# Revision 1.2.2.1 2002/06/26 20:28:15 tonnesen
# Some udpates that I made here locally a while ago. Still won't be useful, but
projects / koha_gimpoz / commitdiff