<?php //encoding: utf-8
/*
"The contents of this file are subject to the Mozilla Public License
Version 1.1 (the "License"); you may not use this file except in
compliance with the License. You may obtain a copy of the License at
http://www.mozilla.org/MPL/

Software distributed under the License is distributed on an "AS IS"
basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the
License for the specific language governing rights and limitations
under the License.

The Original Code is kalosori.

The Initial Developer of the Original Code is Pascal Guimier.
Copyright (C) Pascal Guimier. All Rights Reserved.

Alternatively, the contents of this file may be used under the terms
of the GPL license (the  "Gniu Public License"), in which case the
provisions of GPL License are applicable instead of those
above. If you wish to allow use of your version of this file only
under the terms of the GPL License and not to allow others to use
your version of this file under the MPL, indicate your decision by
deleting the provisions above and replace them with the notice and
other provisions required by the GPL License. If you do not delete
the provisions above, a recipient may use your version of this file
under either the MPL or the GPL License."
*/
#######################################################
################################################## AUTH
#######################################################

function AUTH_Check()
{
	if ($_SERVER['REQUEST_METHOD'] == "POST" && isset($_POST["username"]) && isset($_POST["password"]))
		AUTH_DoAuth();
	else
	{
		if (isset($_GET["logout"])) AUTH_Logout();
		else AUTH_Verify();//récupération du cookie
	}
}

function AUTH_DoAuth()
{
	global $config,$admin_pass;
	$login = $_POST["username"];
	$passwd = $_POST["password"];

	if($login=="admin" && isset($admin_pass) && $passwd==$admin_pass)
    {
        setcookie("kalosori_user", $login, time() + (86400*30));
        setcookie("md5",md5($passwd), time() + (86400*30));
        $config->user=array('id'=>1,'nom'=>'Administrateur','login'=>'admin','statuts'=>'administrateur','id_territoires'=>'1');
    }
    else
    {
        # QUERY
        $m = new mysql();
        $u = $m->select_uniq("utilisateurs", "*", "login='".$login."' and password='".$passwd."'");
        if (count($u)) {
            setcookie("kalosori_user", $u['login'], time() + (86400*30));
            setcookie("md5",md5($u['password']), time() + (86400*30));
            unset($u['password']);
            $config->user=$u;
        } else $config->user=array('statuts'=>'visiteur');
    }
}

function AUTH_Verify() {
	# GET COOKIE
	global $config;
	$login = $_COOKIE["kalosori_user"];
	$passwd = $_COOKIE["md5"];
//	$userinfo = $_COOKIE["userinfo"];

	# QUERY
	$m=new mysql();
	$l=$m->select_uniq("utilisateurs", "*", "login='".$login."'");


	# RETURN
	if (md5($l["password"]) == $passwd) {
		unset($l['password']);
		$config->user=$l;
	} else $config->user=array('statuts'=>'visiteur');
}

function AUTH_Logout()
{
	global $config;
	setcookie("kalosori_user", "");
	setcookie("md5","");
	$config->user=array('statuts'=>'visiteur');
}

AUTH_Check();

?>