93 lines
2.7 KiB
PHP
93 lines
2.7 KiB
PHP
<?php
|
|
class Application_Controller_Plugin_Auth extends Zend_Controller_Plugin_Abstract
|
|
{
|
|
/**
|
|
* Vérifie les autorisations
|
|
* Utilise _request et _response hérités et injectés par le FC
|
|
*
|
|
* @param Zend_Controller_Request_Abstract $request : non utilisé, mais demandé par l'héritage
|
|
*/
|
|
public function preDispatch(Zend_Controller_Request_Abstract $request)
|
|
{
|
|
$checkAuth = true;
|
|
if ($request->getControllerName()=='user' && $request->getActionName()=='login'){
|
|
$checkAuth = false;
|
|
}
|
|
|
|
if ($checkAuth)
|
|
{
|
|
$login = $request->getParam('login');
|
|
$pass = $request->getParam('pass', '');
|
|
$hach = $request->getParam('hach');
|
|
$checkIp = $request->getParam('checkIp');
|
|
|
|
$auth = Zend_Auth::getInstance();
|
|
|
|
//Est ce que l'on a checkIp=only lors de la requête
|
|
$iponly = false;
|
|
if ($checkIp=='only') {
|
|
$hach = 'iponly:'.$_SERVER['REMOTE_ADDR'];
|
|
$iponly = true;
|
|
}
|
|
|
|
//On vérifie le tout lors d'une connexion par url
|
|
if ( !empty($login) && !empty($hach) ) {
|
|
|
|
$authAdapter = new Scores_AuthAdapter($login, $hach, $iponly);
|
|
$result = $auth->authenticate($authAdapter);
|
|
|
|
if (!$result->isValid()) {
|
|
$messageF = '';
|
|
foreach ($result->getMessages() as $message) {
|
|
$messageF.= $message."<br/>";
|
|
}
|
|
$request->setModuleName('default')
|
|
->setControllerName('user')
|
|
->setActionName('logout')
|
|
->setParam('message', $messageF);
|
|
} else {
|
|
$storage = new Zend_Auth_Storage_Session();
|
|
$session = new Zend_Session_Namespace($storage->getNamespace());
|
|
//$session->setExpirationSeconds(86400);
|
|
$auth->setStorage($storage);
|
|
}
|
|
|
|
//Sinon on reste sur le standard
|
|
} else {
|
|
|
|
//Pas authentifié
|
|
if ( !$auth->hasIdentity() || time() > $auth->getIdentity()->time ) {
|
|
|
|
$auth->clearIdentity();
|
|
$session = new Zend_Session_Namespace('login');
|
|
$session->url = $_SERVER['REQUEST_URI'];
|
|
|
|
$layout = Zend_Layout::getMVCInstance();
|
|
if ( !$layout->isEnabled() ) {
|
|
echo "Identification incorrect ou périmé.";
|
|
} else {
|
|
$this->_response->setRedirect('/user/login')->sendResponse();
|
|
}
|
|
|
|
//Authentifié => on met à jour la session
|
|
} else {
|
|
|
|
$identity = $auth->getIdentity();
|
|
$identity->time = time() + $identity->timeout;
|
|
$auth->getStorage()->write($identity);
|
|
|
|
if ( $identity->profil=="SuperAdministrateur" ) {
|
|
$layout = Zend_Layout::getMVCInstance();
|
|
$view = $layout->getView();
|
|
$view->admin = true;
|
|
}
|
|
|
|
if (Zend_Session::namespaceIsset('login')){
|
|
Zend_Session::namespaceUnset('login');
|
|
}
|
|
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |