4 +-----------------------------------------------------------------------+
5 | program/include/session.inc |
7 | This file is part of the RoundCube Webmail client |
8 | Copyright (C) 2005-2007, RoundCube Dev. - Switzerland |
9 | Licensed under the GNU GPL |
12 | Provide database supported session management |
14 +-----------------------------------------------------------------------+
15 | Author: Thomas Bruederli <roundcube@gmail.com> |
16 +-----------------------------------------------------------------------+
18 $Id: session.inc 850 2007-10-03 00:13:32Z ihug $
23 function sess_open($save_path, $session_name)
37 function sess_read($key)
39 global $DB, $SESS_CHANGED, $SESS_CLIENT_IP;
44 $sql_result = $DB->query("SELECT vars, ip, ".$DB->unixtimestamp('changed')." AS changed
45 FROM ".get_table_name('session')."
49 if ($sql_arr = $DB->fetch_assoc($sql_result))
51 $SESS_CHANGED = $sql_arr['changed'];
52 $SESS_CLIENT_IP = $sql_arr['ip'];
54 if (strlen($sql_arr['vars']))
55 return $sql_arr['vars'];
63 function sess_write($key, $vars)
70 $sql_result = $DB->query("SELECT 1
71 FROM ".get_table_name('session')."
75 if ($DB->num_rows($sql_result))
77 session_decode($vars);
78 $DB->query("UPDATE ".get_table_name('session')."
80 changed=".$DB->now()."
87 $DB->query("INSERT INTO ".get_table_name('session')."
88 (sess_id, vars, ip, created, changed)
89 VALUES (?, ?, ?, ".$DB->now().", ".$DB->now().")",
92 $_SERVER['REMOTE_ADDR']);
101 // handler for session_destroy()
102 function sess_destroy($key)
109 // delete session entries in cache table
110 $DB->query("DELETE FROM ".get_table_name('cache')."
114 $DB->query("DELETE FROM ".get_table_name('session')."
122 // garbage collecting function
123 function sess_gc($maxlifetime)
130 // get all expired sessions
131 $sql_result = $DB->query("SELECT sess_id
132 FROM ".get_table_name('session')."
133 WHERE ".$DB->unixtimestamp($DB->now())."-".$DB->unixtimestamp('changed')." > ?",
136 $a_exp_sessions = array();
137 while ($sql_arr = $DB->fetch_assoc($sql_result))
138 $a_exp_sessions[] = $sql_arr['sess_id'];
141 if (sizeof($a_exp_sessions))
143 // delete session cache records
144 $DB->query("DELETE FROM ".get_table_name('cache')."
145 WHERE session_id IN ('".join("','", $a_exp_sessions)."')");
147 // delete session records
148 $DB->query("DELETE FROM ".get_table_name('session')."
149 WHERE sess_id IN ('".join("','", $a_exp_sessions)."')");
152 // also run message cache GC
153 rcmail_message_cache_gc();
160 function sess_regenerate_id()
163 $randval = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
165 for ($i=1; $i <= $randlen; $i++)
166 $random .= substr($randval, rand(0,(strlen($randval) - 1)), 1);
168 // use md5 value for id or remove capitals from string $randval
169 $random = md5($random);
171 // delete old session record
172 sess_destroy(session_id());
175 $cookie = session_get_cookie_params();
176 setcookie(session_name(), $random, $cookie['lifetime'], $cookie['path']);
182 // set custom functions for PHP session management
183 session_set_save_handler('sess_open', 'sess_close', 'sess_read', 'sess_write', 'sess_destroy', 'sess_gc');