lib/class.reguser.php

   1 <?php
   2 // $Id$
   3
   4 /* Registered user, but not logged in */
   5 class reguser extends anonuser
   6 {
   7         public $userid;
   8
   9         function __construct($userid, $prefetch = null)
  10         {
  11                 parent::__construct();
  12
  13                 $this->userid = $userid;
  14                 $this->attrcache = array();
  15
  16                 $fields = array('`alias`', '`level`', '`timezone`', '`theme`');
  17                 if ( $prefetch )
  18                         $fields = array_merge($fields, $prefetch);
  19
  20                 $this->attrcache = $GLOBALS['DB']->query('SELECT '.implode(', ', $fields).'
  21                                 FROM `users` WHERE `userid` = '.$userid)->fetch_assoc();
  22                 $this->namecache[$userid] = $this->alias;
  23         }
  24
  25         function __get($varname)
  26         {
  27                 if ( !array_key_exists($varname, $this->attrcache) ) {
  28                         switch ( $varname ) {
  29                                 case 'reg_ip':
  30                                 case 'last_ip':
  31                                 case 'last_login_ip':
  32                                         $fieldname = 'INET_NTOA(`'.$varname.'`)';
  33                                         break;
  34                                 case 'password':
  35                                         $fieldname = 'AES_DECRYPT(`'.$varname.'`, `reg_ip`)';
  36                                         break;
  37                                 default:
  38                                         $fieldname = '`'.$varname.'`';
  39                                         break;
  40                         }
  41
  42                         $q = $GLOBALS['DB']->query('SELECT '.$fieldname.' AS `'.$varname.'` FROM `users` WHERE `userid` = '.$this->userid);
  43                         if ( $GLOBALS['DB']->error )
  44                                 throw new OutOfBoundsException('MySQL error in authuser::_get('.$varname.'): '.$GLOBALS['DB']->error);
  45                         else
  46                                 $this->attrcache[$varname] = $q->fetch_object()->$varname;
  47                 }
  48                 if ( array_key_exists($varname, $this->attrcache) ) {
  49                         return $this->attrcache[$varname];
  50                 } else
  51                         throw new OutOfBoundsException('Error in $user->_get('.$varname.' => '.$fieldname.'): attribute not available.');
  52         }
  53
  54         function __set($varname, $value)
  55         {
  56                 $this->attrcache[$varname] = $value;
  57                 switch ( $varname ) {
  58                         case 'reg_ip':
  59                         case 'last_ip':
  60                         case 'last_login_ip':
  61                                 if ( strpos($value, ':') !== false ) {
  62                                         $value = 'NULL';
  63                                         break;
  64                                 }
  65                                 $value = 'INET_ATON(\''.$value.'\')';
  66                                 break;
  67                         case 'password':
  68                                 $value = 'AES_ENCRYPT(\''.$value.'\', `reg_ip`)';
  69                                 break;
  70                         case 'points':
  71                                 if ( $value > 20 && sqrt($value) == floor(sqrt($value))
  72                                                 && $GLOBALS['DB']->query('SELECT COUNT(*) AS `c` FROM `invites`
  73                                                                 WHERE `userid` = '.$this->userid)->fetch_object()->c < 5 )
  74                                         $GLOBALS['DB']->query('INSERT INTO `invites` VALUES (NULL, '.$this->userid.', UUID())');
  75                         default:
  76                                 if ( is_int($value) )
  77                                         break;
  78                                 $value = '\''.$GLOBALS['DB']->escape_string($value).'\'';
  79                                 break;
  80                 }
  81                 $GLOBALS['DB']->query('UPDATE `users` SET `'.$varname.'` = '.$value.' WHERE `userid` = '.$this->userid);
  82                 if ( $GLOBALS['DB']->error )
  83                         throw new UnexpectedValueException('MySQL error in authuser::_set('.$varname.' = '.$value.'): '.$GLOBALS['DB']->error);
  84         }
  85 }
  86 ?>