leilukin-tumbleblog/includes/class/Session.php

154 lines
4.1 KiB
PHP
Raw Permalink Normal View History

2024-06-20 14:10:42 +00:00
<?php
/**
* Class: Session
* Handles visitor sessions.
*/
class Session implements SessionHandlerInterface {
# Variable: $data
# Caches session data.
private $data = null;
# Variable: $created_at
# Session creation date.
private $created_at = null;
# Boolean: $deny
# Deny session storage?
private $deny = false;
/**
* Function: open
* Opens the session and decides if session storage will be denied.
*
* Parameters:
* $path - Filesystem path.
* $name - The session name.
*/
public function open($path, $name): bool {
$this->created_at = datetime();
$this->deny = (SESSION_DENY_BOT and BOT_UA);
return true;
}
/**
* Function: close
* Executed when the session is closed.
*/
public function close(): bool {
return true;
}
/**
* Function: read
* Reads a session from the database.
*
* Parameters:
* $id - Session ID.
*/
public function read($id): string|false {
$result = SQL::current()->select(
tables:"sessions",
fields:array("data", "created_at"),
conds:array("id" => $id)
)->fetch();
if (!empty($result)) {
$this->data = $result["data"];
$this->created_at = $result["created_at"];
}
return isset($this->data) ? $this->data : "" ;
}
/**
* Function: write
* Writes a session to the database.
*
* Parameters:
* $id - Session ID.
* $data - Data to write.
*/
public function write($id, $data): bool {
$sql = SQL::current();
$visitor = Visitor::current();
if ($this->deny)
return true;
if (isset($data) and $data != $this->data) {
$sql->replace(
table:"sessions",
keys:array("id"),
data:array(
"id" => $id,
"data" => $data,
"user_id" => $visitor->id,
"created_at" => $this->created_at,
"updated_at" => datetime()
)
);
}
return true;
}
/**
* Function: destroy
* Deletes a session from the database.
*
* Parameters:
* $id - Session ID.
*/
public function destroy($id): bool {
SQL::current()->delete("sessions", array("id" => $id));
return true;
}
/**
* Function: gc
* Deletes sessions not updated for 30+ days, or with no stored data.
*
* Parameters:
* $lifetime - The configured maximum session lifetime in seconds.
*/
public function gc($lifetime): int|false {
SQL::current()->delete(
"sessions",
"updated_at < :expired_cookie OR data = '' OR data IS NULL",
array(":expired_cookie" => datetime(time() - COOKIE_LIFETIME))
);
return true;
}
/**
* Function: hash_token
* Generates an authentication token for this session.
*/
public static function hash_token(): bool|string {
$id = session_id();
if ($id === "")
return false;
return token($id);
}
/**
* Function: check_token
* Validates an authentication token for this session.
*
* Parameters:
* $hash - The token to validate.
*/
public static function check_token($hash): bool {
$token = self::hash_token();
if ($token === false)
return false;
return hash_equals($token, $hash);
}
}