PHP zrušení validace pro přístup do administrace

22. 4. 2018 10:10:27

Ahoj všem,

změnil jsem heslo v databázi sha1 ... a nedaří se mi na něj přihlásit.....u totožného webu to bylo bez problémů..., u tohoto je tam nějaký problém ?

Proto bych chtěl tkusit vypnout validaci, aby mě to přihlásilo do administrace..pak bych to vrátil...a zaregistroval bych nového uživatele....

Tohle mi nefunguje ->setValidationScope(false);

.Fatal error: Call to undefined method FormInputElement::setValidationScope() in /data/web/virtuals/175844/virtual/www/domains/justliving.cz/core/Admin.php on line 28

Zde je admin.php

class Admin{  const MENU_IN_TPL = '__MENU__';  const TPLUSER = '_USER';  //----------------------------------------------------------------------------  // METHODS  /** checkLogin   */  public static function checkLogin()  {      //if admin and not logged      if(App::isAdmin() && !User::isLogged(User::ADMIN, true))      {        $form = new Form('loginform','div');        $form->addClass('adminLoginForm');        $form->setValidateModeHTML();        $form->addText('adm_login', 'Přihlašovací jméno')             ->addRule(Form::FILLED, "Zadejte přihlašovací jméno. ");        $form->addPass('adm_pass', 'Heslo')             ->noLastValue()             ->addRule(Form::FILLED, "Zadejte heslo. ");        $form->addSubmit('Přihlásit');                switch(User::getCode())        {          case User::UNAUTHORIZED :              User::logout();              $form->addErr('Nemáte práva pro vstup do administrace. Byl jste odhlášen. ');              break;          case User::EXPIRED :              User::logout();              $form->addErr('Byl jste odhlášen z důvodu neaktivity. ');              break;        }        if($form->isSubmited(true))        {          if($form->isValid())          {            if(User::login($_POST, $_POST))            {              // KCEFINDER SETTINGS              $SES_KCFINDER = '__KCFINDER__';              $_SESSION = array();              $_SESSION = false;              $filesDir = App::getFilesDir();              $filesUrl = '/'.str_replace(App::getDocumentRootDir(), '', $filesDir);              $admin = '__kcfinder__/admin';              $_SESSION= $filesUrl.$admin;              $_SESSION= $filesDir.$admin;              Header::close();              Header::location();              die();            }            else              $form->addErr('Chybné přihlašovací jméno nebo heslo. ');          }        }        $tmpl = Tmpl::getInstance();        $tmpl->assign('loginForm', (string) $form);        $admLogTmlSett = App::getAdminLoginTmplSetting();        $tmpl->d($admLogTmlSett, true, $admLogTmlSett);        die();      }  }  /** menu_Render   *  for routine actions in Admin (before routing)   */  public static function routine()  {    $tmpl = Tmpl::getInstance();    $tmpl->assign(self::TPLUSER, User::getUser());  }  /** menu_Render   */  public static function menu_Render()  {    $menu = Module::getMenu();    $modules = Module::getModules();    $modulesUriActions = array();    foreach($modules as $mod)    {      $moduleName = $mod;      if(isset($mod))      foreach($mod as $routeLists)      {        foreach($routeLists as $routeItm)        {          $uri = isset($routeItm) ? $routeItm : $routeItm;          $modulesUriActions[] = $routeItm;        }      }    }    // nalinkovani akci na menu url    //print_r($menu);    self::menuLinksActions($menu, $modulesUriActions);    $smarty = Tmpl::getInstance();    $enabledModulesActions = User::getEnabledModuleActions(false);    $smarty->assign('__enabledModulesActions', $enabledModulesActions);    $smarty->assign(self::MENU_IN_TPL, $menu);    return $smarty->fetch('render/_menu.tpl');  }  /** submenu_Render   */  public static function submenu_Render()  {    if(Router::isModuleAccessFailed()) return;    $activeRoute = Router::getActiveRoute();    //print_r($activeRoute);    $menu = Module::getMenu($activeRoute);    $_menu = array($menu);    function recursive($menu, $activeRoute, $submenu_uris=array())    {      foreach($menu as $mitm)      {        //print_r($mitm);        //echo '|'.$mitm.'=='.$activeRoute.'|'."n";        //global $submenu_uris; = array();        if(is_array($mitm))          foreach($mitm as $key=>$rec)            $submenu_uris[] = $rec;        $url = implode('/', UrlParser::getParsed());        $pattern = "/^".(str_replace('/', '/', $mitm))."/list-()+$/";        $pattern2 = "/^".(str_replace('/', '/', $mitm))."/?$/";        //$pattern3 = "/^".(str_replace('/', '/', $mitm))."/.*$/";        $pattern3 = "/^".(str_replace('/', '/', $mitm))."/+$/";        if(($mitm==$activeRoute && isset($mitm))              || preg_match($pattern, $url)//pro listovani              || preg_match($pattern2, $url) // pro /?               || ( preg_match($pattern3, $url, $matches3) && !in_array($matches3, $submenu_uris) )        )        {    //echo 'matches3:'.var_export($mitm, true).'|';print_r($matches3);          return $mitm;        }        if(isset($mitm))        {          //print_r($mitm);          //return recursive($mitm, $activeRoute, $submenu_uris);          $r = recursive($mitm, $activeRoute, $submenu_uris);          if(count($r)) return $r;        }      }      return array();    }    $menu = recursive($_menu, $activeRoute, array());    $inc = 0;    foreach(Module::getRuntimeMenu() as $rmitm)    {      $poradiflag = sprintf("%010s", $rmitm).'_'.$inc;      $menu = $rmitm;      $inc++;    }    if(is_array($menu)) ksort($menu);    $modules = Module::getModules();    $modulesUriActions = array();    foreach($modules as $mod)    {      $moduleName = $mod;      if(isset($mod))      foreach($mod as $routeLists)      {        foreach($routeLists as $routeItm)        {          $uri = isset($routeItm) ? $routeItm : $routeItm;          $modulesUriActions[] = $routeItm;        }      }    }    // nalinkovani akci na menu url    self::menuLinksActions($menu, $modulesUriActions);    $smarty = Tmpl::getInstance();    $smarty->assign(self::MENU_IN_TPL, $menu);    return $smarty->fetch('render/_submenu.tpl');  }  private static function menuLinksActions(&$menu, $modulesUriActions)  {    if(is_array($menu))      foreach($menu as &$menuItm)      {        $module = $menuItm;        $uri = $menuItm;        if(isset($modulesUriActions))          foreach($modulesUriActions as $action)          {            $menuItm = $action;          }        if(isset($menuItm))          self::menuLinksActions($menuItm, $modulesUriActions);      }  }}?>

22. 4. 2018 10:10:27

0 0

Líbí se: zatím nikdo

Nelíbí se: zatím nikdo

https://webtrh.cz/diskuse/php-zruseni-validace-pro-pristup-do-administrace/#reply1342124

Registrace

(1 hodnocení)

22. 4. 2018 10:52:11

Ta validace není tady, ale v třídě User, ve funkci Login.

22. 4. 2018 10:52:11

0 0

Líbí se: zatím nikdo

Nelíbí se: zatím nikdo

https://webtrh.cz/diskuse/php-zruseni-validace-pro-pristup-do-administrace/#reply1342123

Petr Gargulák

(12 hodnocení)

22. 4. 2018 10:54:50

Napsal Registrace;1458472
Ta validace není tady, ale v třídě User, ve funkci Login.

user.php

<?php

class User
{
  //----------------------------------------------------------------------------
  // CONSTANTS
  //----------------------------------------------------------------------------
  const NS_SESSSION = '__AuTh__';
  const SESSION_ISLOGGED = '__iS__loGgEd__';
  const SESSION_EXPIRE = '__ExPIRe__';
  const SESSION_IP = '__iP__';
  const LOGGEDUSER = '__LgEd&UsR__';
  const SESNS_NOTREGISTID = '__no_regist_user__';

const DBTABLEUSERS = 'users';
  const DBTABLEUSERSNOTREGIST = 'users_not_regist';
  const DBCOL_ID = 'id';
  const DBCOL_LOGIN = 'login';
  const DBCOL_PASS = 'pass';
  const DBCOL_ROLE = 'role';
  const DBCOL_AUTH = 'auth'; // for confirmation registration by mail
  const DBCOL_DELETED = 'deleted';

const DBCOL_NAME = 'name';
  const DBCOL_LASTNAME = 'lastname';
  const DBCOL_STREET = 'street';
  const DBCOL_CITY = 'city';
  const DBCOL_ZIP = 'zip';
  const DBCOL_STATE = 'state';
  const DBCOL_PHONE = 'phone';
  const DBCOL_EMAIL = 'email';
  const DBCOL_FAX = 'fax';
  const DBCOL_F_FIRMNAME = 'f_firmname';
  const DBCOL_F_IC = 'f_ic';
  const DBCOL_F_DIC = 'f_dic';
  const DBCOL_D_NAME = 'd_name';
  const DBCOL_D_LASTNAME = 'd_lastname';
  const DBCOL_D_STREET = 'd_street';
  const DBCOL_D_CITY = 'd_city';
  const DBCOL_D_ZIP = 'd_zip';
  const DBCOL_D_STATE = 'd_state';
  const DBCOL_D_PHONE = 'd_phone';
  const DBCOL_D_FIRMNAME = 'd_firmname';
  const DBCOL_REGDATE = 'regdate';
  const DBCOL_LOGLAST = 'loglast';
  const DBCOL_IP = 'ip';
  const DBCOL_HOST = 'host';
  const DBCOL_NOTES = 'notes';
  const DBCOL_IDCENIK = 'idcenik';

const TABLE_USERS_LOGINS = 'users_logins';
  const COL_L_ID = 'id';
  const COL_L_IDUSER = 'iduser';
  const COL_L_LOGGED = 'logged';
  const COL_L_IP = 'ip';

const GUEST  = 'dsa';//0x;
  const MEMBER = 2;//0x100;
  const ADMIN  = 1;//0x10000;

const NOTLOGGED = -1;
  const UNAUTHORIZED = -2;
  const NORIGHTS = -2;
  const NOTRIGHTS = -2;
  const WRONGLOGIN = -3;
  const BADLOGINPASS = -3;
  const EXPIRED = -4;

const LOGGED = 1;
  const LOGGEDOK = 1;
  const RIGHTSOK = 2;
  const AUTHORIZED = 2;

const AUTOLOGIN_URL_VAR = 'direct_login';
  const AUTOLOGIN_KEY_REGFLAG = 'regflag';
  const AUTOLOGIN_KEY_USERID = 'userid';
  const AUTOLOGIN_KEY_LOGIN = 'login';
  const AUTOLOGIN_KEY_PASS = 'pass';
  //----------------------------------------------------------------------------
  // VARIABLES
  //----------------------------------------------------------------------------

private static $useDbRoles = true;
  private static $isLogged = false;
  private static $authCode = self::NOTLOGGED;
  private static $expireTime = 3600; //in sec

private static $gettedUser = null; // pro eliminaci vynenasobnych sql po voleni getUser()

private static $cenikCoeff = null;

const ESHOPVAL = "";

//----------------------------------------------------------------------------
  // METHODS
  //----------------------------------------------------------------------------

public static function isLogged($role=self::MEMBER, $asAdmin=false)
  {
    return self::isAuth($role, $asAdmin);
  }
  public static function getAuth($role=self::MEMBER, $asAdmin=false)
  {
    return self::isAuth($role, $asAdmin);
  }
  public static function isAuth($role=self::MEMBER, $asAdmin=false)
  {
    $code = self::NOTLOGGED;

$ses = Session::getNS(self::NS_SESSSION);

if($ses->{self::SESSION_ISLOGGED}
          && time()<=$ses->{self::SESSION_EXPIRE}
              && $ses->{self::SESSION_IP}==$_SERVER)
    {
      $expireTime = self::getExpireTime();
      if($role==self::ADMIN) $expireTime = 7200;

// logged => refresh expired
      $ses->{self::SESSION_EXPIRE} = time() + $expireTime;

//echo time()-$ses->{self::SESSION_EXPIRE};
      $code = self::LOGGED;
      $code = self::NORIGHTS;

$user = self::getUser();

$roles_role = UserRole::getRoles($user);

if($asAdmin==true && $roles_role==1)
          $code = self::AUTHORIZED;
      elseif($user && self::_hasPrivilegies($user, $role))
      {
        $code = self::AUTHORIZED;
      }
    }
    elseif($ses->{self::SESSION_ISLOGGED} && time()>$ses->{self::SESSION_EXPIRE})
      $code = self::EXPIRED;

self::$authCode = $code;

if($code<0) return false;
    return true;
  }

public static function isDbRoles()
  {
    return self::isUsedDbRoles();
  }
  public static function isUsedDbRoles()
  {
    return self::$useDbRoles;
  }

public static function getCode()
  {
    return self::$authCode;
  }

private static function getLUser($username, $pass)
  {
    $usr = DB::getRow("SELECT * FROM `".self::DBTABLEUSERS."`
                        WHERE `".self::DBCOL_LOGIN."`='".DB::escapeString($username)."'
                          AND `".self::DBCOL_PASS."`='".sha1(DB::escapeString($pass))."'
                          AND `".self::DBCOL_AUTH."` AND NOT `".self::DBCOL_DELETED."` "
       ."AND eshop = 'ega'");
      /*echo "SELECT * FROM `".self::DBTABLEUSERS."`
                        WHERE `".self::DBCOL_LOGIN."`='".DB::escapeString($username)."'
                          AND `".self::DBCOL_PASS."`='".sha1(DB::escapeString($pass))."'
                          AND `".self::DBCOL_AUTH."` AND NOT `".self::DBCOL_DELETED."` "
       ."AND eshop = 'ega'";
      exit();*/
	   /*echo "SELECT * FROM `".self::DBTABLEUSERS."`
                        WHERE `".self::DBCOL_LOGIN."`='".DB::escapeString($username)."'
                          AND `".self::DBCOL_PASS."`='".sha1(DB::escapeString($pass))."'
                          AND `".self::DBCOL_AUTH."` AND NOT `".self::DBCOL_DELETED."` "
       ."AND eshop = 'ega'<br>";
	   print_r($usr);
	   exit();*/
    if($usr && DB::tableExists(self::TABLE_USERS_LOGINS))
    {
      $ins = array(self::COL_L_IDUSER=>$usr,
                   self::COL_L_LOGGED=>date('Y-m-d H:i:s'),
                   self::COL_L_IP=>self::getRealIp());
      DB::loguser($usr);
      DB::insert(self::TABLE_USERS_LOGINS, $ins);
    }
    return $usr;
  }

public static function login($username=null, $login=null)
  {
    $LoggedUser = false;

if($username===null || $login===null)
      $LoggedUser = true;
    else
      $LoggedUser = self::getLUser($username, $login);

return self::saveLogin($LoggedUser);
  }

private static function saveLogin($LoggedUser)
  {
    if($LoggedUser)
    {
      if(isset($LoggedUser)) unset($LoggedUser);
      Session::removeNS(self::NS_SESSSION);
      $ses = Session::getNS(self::NS_SESSSION);
      $ses->setLifeTime(self::getExpireTime());
      $ses->{self::SESSION_ISLOGGED} = true;
      $ses->{self::SESSION_EXPIRE} = time() + self::getExpireTime();
      $ses->{self::SESSION_IP} = self::getRealIP();
      $ses->{self::LOGGEDUSER} = $LoggedUser;
      return true;
    }
    return false;
  }

public static function login_RoutineAction($ajax=false)
  {
    if(!isset($_POST) || !isset($_POST)) return false;

$model = Module::loadModel('users');
    $const = $model->__getConstants();

$logged = User::login($_POST, $_POST);

if($ajax)
    {
      echo $logged === true ? 'true' : 'false';
      die();
    }

return $logged;
  }

public static function logout_RoutineAction()
  {
    Session::destroy();

Header::close();
    Header::location(App::getAppUrl());
    die();
  }

/*
  public static function getUser()
  {
    $ses = Session::getNS(self::NS_SESSSION);
    if(!isset($ses)) return null;
    if(!isset($ses->{self::SESSION_ISLOGGED}) || !$ses->{self::SESSION_ISLOGGED} ) return null;
    if(!isset($ses->{self::SESSION_EXPIRE}) || $ses->{self::SESSION_EXPIRE} < time()) return null;

if(isset($ses->{self::LOGGEDUSER}))
    return $ses->{self::LOGGEDUSER};

return null;
  }
  */

public static function getUser()
  {
    if(self::$gettedUser) return self::$gettedUser;

$ses = Session::getNS(self::NS_SESSSION);

if(!$ses->{self::SESSION_ISLOGGED}
          || time()>$ses->{self::SESSION_EXPIRE}
              || $ses->{self::SESSION_IP}!=self::getRealIP())
    {
      return false;
    }

$l = $ses->{self::LOGGEDUSER};
    $id = $l;

if(!((int)$id>0)) return false;

$sql = "SELECT
                `".self::DBCOL_ID."` AS ID,
                `".self::DBCOL_LOGIN."` AS LOGIN,
                `".self::DBCOL_ROLE."` AS ROLE,
                `".self::DBCOL_AUTH."` AS AUTH,
                `".self::DBCOL_DELETED."` AS DELETED,
                `".self::DBCOL_NAME."` AS NAME,
                `".self::DBCOL_LASTNAME."` AS LASTNAME,
                `".self::DBCOL_STREET."` AS STREET,
                `".self::DBCOL_CITY."` AS CITY,
                `".self::DBCOL_ZIP."` AS ZIP,
                `".self::DBCOL_STATE."` AS STATE,
                `".self::DBCOL_PHONE."` AS PHONE,
                `".self::DBCOL_EMAIL."` AS EMAIL,
                `".self::DBCOL_FAX."` AS FAX,
                `".self::DBCOL_F_FIRMNAME."` AS F_FIRMNAME,
                `".self::DBCOL_F_IC."` AS F_IC,
                `".self::DBCOL_F_DIC."` AS F_DIC,
                `".self::DBCOL_D_NAME."` AS D_NAME,
                `".self::DBCOL_D_LASTNAME."` AS D_LASTNAME,
                `".self::DBCOL_D_STREET."` AS D_STREET,
                `".self::DBCOL_D_CITY."` AS D_CITY,
                `".self::DBCOL_D_ZIP."` AS D_ZIP,
                `".self::DBCOL_D_STATE."` AS D_STATE,
                `".self::DBCOL_D_PHONE."` AS D_PHONE,
                `".self::DBCOL_D_FIRMNAME."` AS D_FIRMNAME,
                `".self::DBCOL_REGDATE."` AS REGDATE,
                `".self::DBCOL_LOGLAST."` AS LOGLAST,
                `".self::DBCOL_IP."` AS IP,
                `".self::DBCOL_HOST."` AS HOST,
                `".self::DBCOL_IDCENIK."` AS IDCENIK
            FROM `".self::DBTABLEUSERS."` WHERE `".self::DBCOL_ID."`=".$id;
    $res = DB::getRow($sql);

$res = States::getStateName($res);
    $res = States::getStateName($res);

self::$gettedUser = $res;

return $res;
  }

public static function logout()
  {
    Session::removeNS(self::NS_SESSSION);
  }

public static function setExpireTime($sec)
  {
    self::$expireTime = $sec;
  }

public static function getExpireTime()
  {
    return self::$expireTime;
  }

private static function _hasPrivilegies($userRoleId, $authRole)
  {

if(!self::$useDbRoles)
    {
      if($userRoleId >= $authRole) return true;
      return false;
    }

if($userRoleId==$authRole) return true;

if(self::_recursiveCheck($userRoleId, $authRole)) return true;

return false;
  }

private static function _recursiveCheck($userRoleId, $idrole)
  {
      static $checkedIds = array();//proti zacykleni

$role = UserRole::getRoles($userRoleId);

$subrolesOfRole = explode(';', $role);
      foreach($subrolesOfRole as $sr)
      {
        if(trim($sr)=='' || trim($sr)=='0') continue;
        if(trim($sr)==$idrole) return true;
        $isin = in_array($sr, $checkedIds);
        $checkedIds[] = $sr;
        if(!$isin) return self::_recursiveCheck($sr, $idrole);
      }

return false;
  }

/** getEnabledModules
   *  ziska povolene moduly prihlaseneho uzivatele
   */
  public static function getEnabledModules()
  {
    $enabledModulesSection = array();
    if(!($loggedUser = self::getUser()))
      return array();

$role = UserRole::getRoles($loggedUser);
    $enabledModules = unserialize($role);
    $section = App::getAppMode();
    $enabledModulesSection = isset($enabledModules) ? $enabledModules : array();
    $activeRoute = Router::getActiveRoute();
    $module = $activeRoute;
    //pro dedene role
    function recursiveSubrolesProccess($dbsubroles, $section, &$enabledModulesSection)
    {
      $subroles = explode(';', $dbsubroles);
      foreach($subroles as $roleid)
      {
        if(((int)$roleid)>0)
        {
          $role = UserRole::getRoles($roleid);
          $enabledModules = unserialize($role);
          if(isset($enabledModules))
             foreach($enabledModules as $module)
                $enabledModulesSection[] = $module;
          recursiveSubrolesProccess($role, $section, $enabledModulesSection);
        }
      }
    }
    recursiveSubrolesProccess($role, $section, $enabledModulesSection);
    //print_r($enabledModulesSection);
    return $enabledModulesSection;
  }

public static function getEnabledModuleActions($specificModule=true)
  {
    $enabledModulesSection = array();
    if(!($loggedUser = self::getUser()))
      return array();

$role = UserRole::getRoles($loggedUser);
    $enabledModules = unserialize($role);

$activeRoute = Router::getActiveRoute();
    if($specificModule) $module = $activeRoute;
    else $module = null;
    $section = App::getAppMode();
    if($module!==null)
      $enabledModulesSection = isset($enabledModules) ? $enabledModules : array();
    else
      $enabledModulesSection = isset($enabledModules) ? $enabledModules : array();

//pro dedene role
    self::getEnabledModuleActions_recursiveSubrolesProccess($role, $section, $module, $enabledModulesSection);
    //print_r($enabledModulesSection);
    return $enabledModulesSection;
  }

private static function getEnabledModuleActions_recursiveSubrolesProccess($dbsubroles, $section, $module, &$enabledModulesSection)
  {
      $subroles = explode(';', $dbsubroles);

foreach($subroles as $roleid)
      {
        if(((int)$roleid)>0)
        {
          $role = UserRole::getRoles($roleid);
          $enabledModules = unserialize($role);
          if($module===null && isset($enabledModules))
          {
            foreach($enabledModules as $moduleName=>$modulesActions)
              foreach($modulesActions as $action)
                $enabledModulesSection[] = $action;
          }
          elseif(isset($enabledModules))
          {
             foreach($enabledModules as $action)
                $enabledModulesSection[] = $action;
          }
          self::getEnabledModuleActions_recursiveSubrolesProccess($role, $section, $module, $enabledModulesSection);
        }
      }
  }

public static function getUsersByIds($ids=array())
  {
    if(!is_array($ids) || !count($ids)) return null;

$sql = "SELECT
                `".self::DBCOL_ID."` AS ID,
                `".self::DBCOL_LOGIN."` AS LOGIN,
                `".self::DBCOL_ROLE."` AS ROLE,
                `".self::DBCOL_AUTH."` AS AUTH,
                `".self::DBCOL_DELETED."` AS DELETED,
                `".self::DBCOL_NAME."` AS NAME,
                `".self::DBCOL_LASTNAME."` AS LASTNAME,
                `".self::DBCOL_STREET."` AS STREET,
                `".self::DBCOL_CITY."` AS CITY,
                `".self::DBCOL_ZIP."` AS ZIP,
                `".self::DBCOL_STATE."` AS STATE,
                `".self::DBCOL_PHONE."` AS PHONE,
                `".self::DBCOL_EMAIL."` AS EMAIL,
                `".self::DBCOL_FAX."` AS FAX,
                `".self::DBCOL_F_FIRMNAME."` AS F_FIRMNAME,
                `".self::DBCOL_F_IC."` AS F_IC,
                `".self::DBCOL_F_DIC."` AS F_DIC,
                `".self::DBCOL_D_NAME."` AS D_NAME,
                `".self::DBCOL_D_LASTNAME."` AS D_LASTNAME,
                `".self::DBCOL_D_STREET."` AS D_STREET,
                `".self::DBCOL_D_CITY."` AS D_CITY,
                `".self::DBCOL_D_ZIP."` AS D_ZIP,
                `".self::DBCOL_D_STATE."` AS D_STATE,
                `".self::DBCOL_D_PHONE."` AS D_PHONE,
                `".self::DBCOL_D_FIRMNAME."` AS D_FIRMNAME,
                `".self::DBCOL_REGDATE."` AS REGDATE,
                `".self::DBCOL_LOGLAST."` AS LOGLAST,
                `".self::DBCOL_IP."` AS IP,
                `".self::DBCOL_HOST."` AS HOST,
                `".self::DBCOL_IDCENIK."` AS IDCENIK
            FROM `".self::DBTABLEUSERS."`
            WHERE `".self::DBCOL_ID."` IN (".implode(', ', $ids).") ".//AND NOT `".self::DBCOL_DELETED."`
            "ORDER BY `".self::DBCOL_ID."` DESC ";

return DB::getRows($sql, 'ID');
  }

public static function checkAutoLogin($redirect=true)
  {
    if(isset($_GET))
    {
      $urlParams = UrlParser::decode($_GET);

if( isset($urlParams) &&
          isset($urlParams) &&
          isset($urlParams) &&
          isset($urlParams)  )
      {
        //
        //print_r($urlParams);
        //die();

if(self::loginAutoLogin($urlParams,
                                $urlParams,
                                $urlParams,
                                $urlParams))
        {
          $ruri = UrlParser::getRequestUri();
          $expl = explode("?", $ruri, 2);
          $newruri = $expl;

$queryStr = array();
          foreach($_GET as $key=>$value)
          {
            if($key!=self::AUTOLOGIN_URL_VAR)
              $queryStr[] = $key.'='.$value;
          }

if($redirect===false) return true;

Header::close();
          Header::location($newruri.(count($queryStr)? "?".implode('&', $queryStr) :""));
          die();
        }
      }

if($redirect===false) return false;

Header::close();
      Header::location(App::getAppUrl());
      die();
    }
  }

private static function getLUserAutoLogin($regFlag, $userID, $user, $pass)
  {
    $sql = "SELECT * FROM `".($regFlag ? self::DBTABLEUSERS : self::DBTABLEUSERS/*self::DBTABLEUSERSNOTREGIST*/ )."`
                        WHERE `".self::DBCOL_ID."`=".$userID."
                          AND SHA1(`".self::DBCOL_LOGIN."`)='".$user."'
                          AND `".self::DBCOL_PASS."`='".$pass."'
                          AND `".self::DBCOL_AUTH."` AND NOT `".self::DBCOL_DELETED."` ";
    $usr = DB::getRow($sql);

if($usr && DB::tableExists(self::TABLE_USERS_LOGINS))
    {

$ins = array(self::COL_L_IDUSER=>$usr,
                   self::COL_L_LOGGED=>date('Y-m-d H:i:s'),
                   self::COL_L_IP=>self::getRealIP());
      DB::insert(self::TABLE_USERS_LOGINS, $ins);
    }
    return $usr;
  }

private static function loginAutoLogin($regFlag, $userID, $user, $pass)
  {
    $LoggedUser = false;

$LoggedUser = self::getLUserAutoLogin($regFlag, $userID, $user, $pass);

return self::saveLogin($LoggedUser);
  }

public static function getCenikCoeff()
  {
    if(self::$cenikCoeff!==null) return self::$cenikCoeff;

$coeff = 1.0;

self::$cenikCoeff = $coeff;

if(App::isAdmin()) return $coeff;

if(!V3::isDealerPrices()) return $coeff;

$user = self::getUser();
    if(!$user) return $coeff;

$idcenik = $user;

if(!((int)$idcenik>0)) return $coeff;

$cenikModel = Module::loadModel('users', 'cenikyModel');
    $cenikConst = $cenikModel->__getConstants();

$cenik = $cenikModel->getCenik($idcenik);

if(!$cenik)  return $coeff;

if($cenik) return $coeff;

if((float)$cenik<0 || (float)$cenik>1) return $coeff;

self::$cenikCoeff = (float) $cenik;

return (float) $cenik;
  }

public static function getUserById($id, $registFlag=1)
  {
    $sql = "SELECT
                `".self::DBCOL_ID."` AS ID,
                `".self::DBCOL_LOGIN."` AS LOGIN,
                `".self::DBCOL_ROLE."` AS ROLE,
                `".self::DBCOL_AUTH."` AS AUTH,
                `".self::DBCOL_DELETED."` AS DELETED,
                `".self::DBCOL_NAME."` AS NAME,
                `".self::DBCOL_LASTNAME."` AS LASTNAME,
                `".self::DBCOL_STREET."` AS STREET,
                `".self::DBCOL_CITY."` AS CITY,
                `".self::DBCOL_ZIP."` AS ZIP,
                `".self::DBCOL_STATE."` AS STATE,
                `".self::DBCOL_PHONE."` AS PHONE,
                `".self::DBCOL_EMAIL."` AS EMAIL,
                `".self::DBCOL_FAX."` AS FAX,
                `".self::DBCOL_F_FIRMNAME."` AS F_FIRMNAME,
                `".self::DBCOL_F_IC."` AS F_IC,
                `".self::DBCOL_F_DIC."` AS F_DIC,
                `".self::DBCOL_D_NAME."` AS D_NAME,
                `".self::DBCOL_D_LASTNAME."` AS D_LASTNAME,
                `".self::DBCOL_D_STREET."` AS D_STREET,
                `".self::DBCOL_D_CITY."` AS D_CITY,
                `".self::DBCOL_D_ZIP."` AS D_ZIP,
                `".self::DBCOL_D_STATE."` AS D_STATE,
                `".self::DBCOL_D_PHONE."` AS D_PHONE,
                `".self::DBCOL_D_FIRMNAME."` AS D_FIRMNAME,
                `".self::DBCOL_REGDATE."` AS REGDATE,
                `".self::DBCOL_LOGLAST."` AS LOGLAST,
                `".self::DBCOL_IP."` AS IP,
                `".self::DBCOL_HOST."` AS HOST

FROM `".($registFlag ? self::DBTABLEUSERS : self::DBTABLEUSERSNOTREGIST)."`

WHERE `".self::DBCOL_ID."`=".$id;

$res = DB::getRow($sql);

if((int)$res>0) {
			$res = States::getStateName($res);
		}else{
			$res = '';
		}

if((int)$res>0) {
			$res = States::getStateName($res);
    }else{
			$res = '';
		}

return $res;
  }

private static function getRealIP()
  {
    if (!empty($_SERVER))   //check ip from share internet
    {
       $ip=$_SERVER;
    }
    elseif (!empty($_SERVER))   //to check ip is pass from proxy
    {
        $ip=$_SERVER;
    }
    else
    {
        $ip=$_SERVER;
    }

return $ip;
  }

}

class UserRole
{
  //----------------------------------------------------------------------------
  // CONSTANTS
  //----------------------------------------------------------------------------
  const TABLE_ROLES = 'user_roles';
  const ID = 'id';
  const SUBROLES = 'subroles';
  const NAME = 'name';
  const ADMROLE = 'adm_role'; // admin role
  const DISABLEDMODULES = 'disabledmodules'; // disabled modules
  const ENABLEDMODULES = 'enabledmodules'; // enabled modules
  const DISABLEDURIS = 'disableduris';
  const ENABLEDURIS = 'enableduris';
  const ENABLEDACTIONS = 'enabledactions';
  const DISABLEDACTIONS = 'disabledactions';
  const DELETED = 'deleted';

private static $loadedRoles = null;
  private static $loadedAllRoles = null;

public static function getRoles($id=null)
  {
    if(!DB::tableExists(self::TABLE_ROLES))
    {
      return array(self::MEMEBER=>'User::Member', self::ADMIN=>'User::Admin');
      //return false;
    }

if($id!==null && isset(self::$loadedRoles)) return self::$loadedRoles;
    elseif($id===null && self::$loadedAllRoles!==null) return self::$loadedAllRoles;

$sql = "SELECT
              `".self::ID."` AS ID,
              `".self::SUBROLES."` AS SUBROLES,
              `".self::NAME."` AS NAME,
              `".self::ADMROLE."` AS ADMROLE,
              `".self::DISABLEDMODULES."` AS DISABLEDMODULES,
              `".self::ENABLEDMODULES."` AS ENABLEDMODULES,
              `".self::DISABLEDURIS."` AS DISABLEDURIS,
              `".self::DISABLEDURIS."` AS DISABLEDURIS,
              `".self::ENABLEDURIS."` AS ENABLEDURIS,
              `".self::ENABLEDACTIONS."` AS ENABLEDACTIONS,
              `".self::DISABLEDACTIONS."` AS DISABLEDACTIONS,
              `".self::DELETED."` AS DELETED
            FROM `".self::TABLE_ROLES."`";

if($id!==null)
    {
      $where = " WHERE `".self::ID."`=".$id;
      $res = DB::getRow($sql.$where);
      if($res) self::$loadedRoles] = $res;
      return $res;
    }

$res = DB::getRows($sql, 'ID');
    if($res) self::$loadedAllRoles = self::$loadedRoles = $res;
    return $res;
  }

public static function parseRoleEnabledModules($serialized, $section=null)
  {
    $unserialized = unserialize($serialized);
    if(!is_array($unserialized)) return false;
    //print_R($unserialized);

if($section===null) return $unserialized;

if(isset($unserialized)) return $unserialized;

return false;
  }

public static function parseRoleEnabledModuleActions($serialized, $section=null, $module=null)
  {
    $unserialized = unserialize($serialized);
    if(!is_array($unserialized)) return false;
    //print_R($unserialized);

if($section===null) return $unserialized;

if(isset($unserialized))
    {
      if($module===null) return $unserialized;

if(isset($unserialized)) return $unserialized;
    }

return false;
  }

}

22. 4. 2018 10:54:50

0 0

Líbí se: zatím nikdo

Nelíbí se: zatím nikdo

https://webtrh.cz/diskuse/php-zruseni-validace-pro-pristup-do-administrace/#reply1342122

Registrace

(1 hodnocení)

22. 4. 2018 11:11:59

Pokud opravdu chceš, aby se to přihlásilo bez validace hesla, tak ve funkci getLUser smaž řádek

Pak to prostě nebude heslo vůbec řešit a přihlásí tě to na základě username. Jinak tohle není správný řešení problémů s hesly a mělo by se to řešit nějak jinak. Což je ale na jiný téma. Nicméně pokud ti to pomůže a nejde o web v produkci (kdy by se mohl třeba náhodně zrovna v ten moment, kdy tam nebudeš mít ten řádek, pokusit přihlásit někdo jinej), tak budiž.

22. 4. 2018 11:11:59

0 0

Líbí se: zatím nikdo

Nelíbí se: zatím nikdo

https://webtrh.cz/diskuse/php-zruseni-validace-pro-pristup-do-administrace/#reply1342121

Petr Gargulák

(12 hodnocení)

22. 4. 2018 11:19:19

Já se prostě potřebuji dostat jenom do administrace, pak to zase vrátím... v databázi jsem změnil heslo.. hash(sha1,"heslo") vygenerovalo mi to kod a já ho tam k uživatelskému jménu přiřadil.... ak jsou tam ještě funkce deleted apod.

Jinak mi to nefunguje i když to umažu....jak jste napsal. šlo by to udělat nějak staticky...jako admin a heslo zatím..... do proměnný a pak, když se přihlásím...tak to vezme to co jsem dal do té proměnné ? , až se dostanu do administrace tak to změním zase zpátky...jen co tam nastavím vše potřebné.

---------- Příspěvek doplněn 22.04.2018 v 11:21 ----------

Ale jinak to reaguje, když v databázi změním název eshopu tak mi to napíše tu hlášku, že nemám authorizaci k přístupu.

---------- Příspěvek doplněn 22.04.2018 v 11:32 ----------