svn/view/login.inc.php

<?php

// Copyright (c) 2009 Katsuhisa Yuasa <berupon [at] gmail.com>
// License http://www.opensource.org/licenses/mit-license.html

require_once('master/user/model.php');

class LoginValidator extends Validator
{
        var $con;
        
        function __construct($con) {
                $this->con = $con;
        }
        
        function settings() {
                return array(
                        'userid' => array(
                                'notBlank   : ユーザーID が 空です。',
                                'word       : ユーザーID には半角英数数字とアンダーバーのみ使用出来ます。',
                                ),
                        'digested_password' => array(
                                'notBlank   : パスワード が 空です。',
                                'isValidPassword : 認証に失敗しました。',
                                ),
                );
        }
        
        function isValidPassword() {
                return UserData::ValidatePassword(
                        $this->con,
                        $this->values['userid'],
                        $this->values['digested_password'],
                        $this->values['nonce']
                );
        }
        
}

$paramNames = explodeTrim('
        userid,
        digested_password
');

initMembers($tpl, $paramNames, '');
$tpl['realm'] = REALM;
$tpl['messages'] = null;

updateOnetimeToken($params);

if (array_keys_exist($paramNames, $params)) {
        
        checkOnetimeToken($params);
        
        if (!array_key_exists('nonce', $_SESSION)) {
                exit('invalid access');
        }
        
        $params['nonce'] = $_SESSION['nonce'];
        
        copyMembers(getMembers($params, $paramNames), $tpl);
        
        $validator = new LoginValidator($con);
        $errors = $validator->validate($params);
        if (count($errors)) {
                $tpl['messages'] = Validator::GetErrorMessages($errors);
        }else {
                unset($_SESSION['nonce']);
                $_SESSION['userid'] = $params['userid'];
                $_SESSION['authenticated'] = true;
                header("Location: index.php");
                exit;
        }
}

$nonce = hash('sha256', session_id() . ':' . uniqid(mt_rand(), true));
$_SESSION['nonce'] = $nonce;
$tpl['nonce'] = $nonce;

display_template(__FILE__);
