mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-09-06 17:51:34 +02:00
c6a0bf260a
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@41771 467b73ca-7a2a-4603-9d3b-597d59a354a9
68 lines
2.1 KiB
PHP
68 lines
2.1 KiB
PHP
<?php
|
|
|
|
/**
|
|
* An SQLite store.
|
|
*
|
|
* @package OpenID
|
|
*/
|
|
|
|
/**
|
|
* Require the base class file.
|
|
*/
|
|
require_once "Auth/OpenID/SQLStore.php";
|
|
|
|
/**
|
|
* An SQL store that uses SQLite as its backend.
|
|
*
|
|
* @package OpenID
|
|
*/
|
|
class Auth_OpenID_SQLiteStore extends Auth_OpenID_SQLStore {
|
|
function setSQL()
|
|
{
|
|
$this->sql['nonce_table'] =
|
|
"CREATE TABLE %s (server_url VARCHAR(2047), timestamp INTEGER, ".
|
|
"salt CHAR(40), UNIQUE (server_url, timestamp, salt))";
|
|
|
|
$this->sql['assoc_table'] =
|
|
"CREATE TABLE %s (server_url VARCHAR(2047), handle VARCHAR(255), ".
|
|
"secret BLOB(128), issued INTEGER, lifetime INTEGER, ".
|
|
"assoc_type VARCHAR(64), PRIMARY KEY (server_url, handle))";
|
|
|
|
$this->sql['set_assoc'] =
|
|
"INSERT OR REPLACE INTO %s VALUES (?, ?, ?, ?, ?, ?)";
|
|
|
|
$this->sql['get_assocs'] =
|
|
"SELECT handle, secret, issued, lifetime, assoc_type FROM %s ".
|
|
"WHERE server_url = ?";
|
|
|
|
$this->sql['get_expired'] =
|
|
"SELECT server_url FROM %s WHERE issued + lifetime < ?";
|
|
|
|
$this->sql['get_assoc'] =
|
|
"SELECT handle, secret, issued, lifetime, assoc_type FROM %s ".
|
|
"WHERE server_url = ? AND handle = ?";
|
|
|
|
$this->sql['remove_assoc'] =
|
|
"DELETE FROM %s WHERE server_url = ? AND handle = ?";
|
|
|
|
$this->sql['add_nonce'] =
|
|
"INSERT INTO %s (server_url, timestamp, salt) VALUES (?, ?, ?)";
|
|
}
|
|
|
|
/**
|
|
* @access private
|
|
*/
|
|
function _add_nonce($server_url, $timestamp, $salt)
|
|
{
|
|
// PECL SQLite extensions 1.0.3 and older (1.0.3 is the
|
|
// current release at the time of this writing) have a broken
|
|
// sqlite_escape_string function that breaks when passed the
|
|
// empty string. Prefixing all strings with one character
|
|
// keeps them unique and avoids this bug. The nonce table is
|
|
// write-only, so we don't have to worry about updating other
|
|
// functions with this same bad hack.
|
|
return parent::_add_nonce('x' . $server_url, $timestamp, $salt);
|
|
}
|
|
}
|
|
|
|
?>
|