芝麻web文件管理V1.00

编辑当前文件:/home/prismawe/www/resupres/dddse/application/classes/Auth/user.php

<?php

class Auth_User extends Auth {

/**
     * Check if the login/password are correct.
     * 
     * @param type $username
     * @param type $password
     * @param type $remember
     * 
     * @return boolean
     */
    protected function _login($username, $password, $remember) {
        // Instanciate user.
        $user = ORM::factory('user');
        $user = $user->where('login', '=', $username)
                ->where('password', '=', $user->hash_password($password))
                ->find();
        $userObj = $user->object();
        if($user->loaded()) {
            // Connect the user.
            $session = Session::instance();
            $session->set('connected', true);

// Add values in current session.
            $session->set('user', $user->object()); // login, password (hashed) and id.
            $session->set('access_right', $user->type);

return true;
        }else{
            return false;
        }
    }

public function password($username) {
        parent::password($username);
    }

public function check_password($password) {
        parent::check_password($password);
    }

/**
     * Check if there is an active session. Optionally allows checking for a
     * specific role. 
     * @param type $role - String or array.
     * @return boolean
     * 
     * @todo DO an exception if the role is not string or array.
     */
    public function logged_in($role = NULL) {
        $session = Session::instance();

if ($session->get('connected')) {
            if ($role !== NULL) {
                if (is_string($role)) {
                    if ($session->get('access_right') == $role) {
                        // The user is connected and has the role required.
                        return true;
                    } else {
                        // Don't have the role required.
                        return false;
                    }
                } else if (is_array($role)) {
                    if (in_array($session->get('access_right'), $role)) {
                        // The user is connected and has one of the roles required.
                        return true;
                    } else {
                        // Don't have one role required.
                        return false;
                    }
                } else {
                    // ERROR must be string or array.
                    // @TODO Exception.
                    return false;
                }
            } else {
                // Need just know if the user is connected, so return false.
                return true;
            }
        } else {
            // The user don't log in.
            return false;
        }
    }

public function get_user($default = NULL) {
        parent::get_user($default);
    }

}