tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 12:05:37 +00:00
Code Issues Projects Releases Wiki Activity

Merged [47059]: Session expiry times can now be set based on the client's IP address.

Browse Source 
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@60485 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
Hayden Smith 2008-08-12 04:46:04 +00:00
parent ff0f0b4294
commit af60007c9b
1 changed files with 65 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
core/Session.php
View File

@ -15,6 +15,38 @@
* @subpackage control * @subpackage control
*/ */
class Session { class Session {
/**
* @var $timeout Set session timeout
*/
static protected $timeout = 0;
static protected $session_ips = array();
/**
* Provide an <code>array</code> of rules specifing timeouts for IPv4 address ranges or
* individual IPv4 addresses. The key is an IP address or range and the value is the time
* until the session expires in seconds. For example:
*
* Session::set_timeout_ips(array(
* '127.0.0.1' => 36000
* ));
*
* Any user connecting from 127.0.0.1 (localhost) will have their session expired after 10 hours.
*
* Session::set_timeout is used to set the timeout value for any users whose address is not in the given IP range.
*
* @param array $session_ips Array of IPv4 rules.
*/
public static function set_timeout_ips($session_ips) {
if(!is_array($session_ips)) {
user_error("Session::set_timeout_ips expects an array as its argument", E_USER_NOTICE);
self::$session_ips = array();
} else {
self::$session_ips = $session_ips;
}
}
public static function set($name, $val) { public static function set($name, $val) {
return Controller::curr()->getSession()->inst_set($name, $val); return Controller::curr()->getSession()->inst_set($name, $val);
} }
@ -158,11 +190,43 @@ class Session {
} }
public static function start() { public static function start() {
self::load_config();
if(!session_id() && !headers_sent()) { if(!session_id() && !headers_sent()) {
session_set_cookie_params(0, Director::baseURL()); session_set_cookie_params(self::$timeout, Director::baseURL());
session_start(); session_start();
} }
} }
/**
* Use the Session::$session_ips array to set timeouts based on IP address or IP address
* range.
*
* Note: The use of _sessions.php is deprecated.
*/
public static function load_config() {
foreach(self::$session_ips as $sessionIP => $timeout) {
if(preg_match('/^([0-9.]+)\s?-\s?([0-9.]+)$/', $sessionIP, $ips)) {
$minIP = ip2long($ips[1]);
$maxIP = ip2long($ips[2]);
$clientIP = ip2long($_SERVER['REMOTE_ADDR']);
if($minIP <= $clientIP && $clientIP <= $maxIP) {
return self::set_timeout($timeout);
}
}
// TODO - Net masks or something
}
}
/**
* Enter description here...
*
* @param int $timeout Time until a session expires in seconds. Defaults to expire when browser is closed.
*/
public static function set_timeout($timeout) {
self::$timeout = intval($timeout);
}
} }
?> ?>