[Koha-cvs] CVS: koha/C4 Auth.pm,1.7,1.8

[Steve Tonnesen]

Update of /cvsroot/koha/koha/C4
In directory usw-pr-cvs1:/tmp/cvs-serv20328

Modified Files:
        Auth.pm 
Log Message:
Auth.pm now caches form submissions and resubmits them if a user logs back in
after being logged out for inactivity.  Also switched from crypt passwords to
md5 passwords stored in borrowers table.  Used Digest::MD5 module.  I ain't
gonna reinvent _that_ wheel.  :)


Index: Auth.pm
===================================================================
RCS file: /cvsroot/koha/koha/C4/Auth.pm,v
retrieving revision 1.7
retrieving revision 1.8
diff -C2 -r1.7 -r1.8
*** Auth.pm     5 Jul 2002 20:33:23 -0000       1.7
--- Auth.pm     9 Jul 2002 05:37:53 -0000       1.8
***************
*** 2,5 ****
--- 2,8 ----
  
  use strict;
+ use Digest::MD5 qw(md5_base64);
+ 
+ 
  require Exporter;
  use C4::Database;
***************
*** 37,41 ****
      if ($sth->rows) {
        my ($userid, $ip, $lasttime) = $sth->fetchrow;
!       if ($lasttime<time()-40 && $userid ne 'tonnesen') {
            # timed logout
            warn "$sessionID logged out due to inactivity.";
--- 40,44 ----
      if ($sth->rows) {
        my ($userid, $ip, $lasttime) = $sth->fetchrow;
!       if ($lasttime<time()-15 && $userid ne 'tonnesen') {
            # timed logout
            warn "$sessionID logged out due to inactivity.";
***************
*** 43,46 ****
--- 46,53 ----
            my $sti=$dbh->prepare("delete from sessions where sessionID=?");
            $sti->execute($sessionID);
+           my $scriptname=$ENV{'SCRIPT_NAME'};
+           my $selfurl=$query->self_url();
+           $sti=$dbh->prepare("insert into sessionqueries (sessionID, userid, 
value) values (?, ?, ?)");
+           $sti->execute($sessionID, $userid, $selfurl);
            open L, ">>/tmp/sessionlog";
            my $time=localtime(time());
***************
*** 79,82 ****
--- 86,98 ----
            my $sti=$dbh->prepare("insert into sessions (sessionID, userid, 
ip,lasttime) values (?, ?, ?, ?)");
            $sti->execute($sessionID, $userid, $ENV{'REMOTE_ADDR'}, time());
+           $sti=$dbh->prepare("select value from sessionqueries where 
sessionID=? and userid=?");
+           $sti->execute($sessionID, $userid);
+           if ($sti->rows) {
+               my $stj=$dbh->prepare("delete from sessionqueries where 
sessionID=?");
+               $stj->execute($sessionID);
+               my ($selfurl) = $sti->fetchrow;
+               print $query->redirect($selfurl);
+               exit;
+           }
            open L, ">>/tmp/sessionlog";
            my $time=localtime(time());
***************
*** 154,159 ****
      $sth->execute($userid);
      if ($sth->rows) {
!       my ($cryptpassword) = $sth->fetchrow;
!       if (crypt($password, $cryptpassword) eq $cryptpassword) {
            return 1;
        }
--- 170,175 ----
      $sth->execute($userid);
      if ($sth->rows) {
!       my ($md5password) = $sth->fetchrow;
!       if (md5_base64($password) eq $md5password) {
            return 1;
        }
***************
*** 162,167 ****
      $sth->execute($userid);
      if ($sth->rows) {
!       my ($cryptpassword) = $sth->fetchrow;
!       if (crypt($password, $cryptpassword) eq $cryptpassword) {
            return 1;
        }
--- 178,183 ----
      $sth->execute($userid);
      if ($sth->rows) {
!       my ($md5password) = $sth->fetchrow;
!       if (md5_base64($password) eq $md5password) {
            return 1;
        }