include_once("aur_po.inc");
# Define global variables
#
$PASS_PHRASE = "Dustyissocool";
$SUPPORTED_LANGS = array(
"en" => 1, # English
"es" => 1, # Español
"de" => 1, # Deutsch
"fr" => 1, # Français
);
# see if the visitor is already logged in
#
function check_sid() {
global $_COOKIE;
if (isset($_COOKIE["AURSID"])) {
$failed = 0;
# the visitor is logged in, try and update the session
#
$dbh = db_connect();
$q = "SELECT LastUpdateTS, UNIX_TIMESTAMP() FROM Sessions ";
$q.= "WHERE SessionID = '" . mysql_escape_string($_COOKIE["AURSID"]) . "'";
$result = mysql_query($q, $dbh);
if (!$result) {
$failed = 1;
} else {
if ($row[0] + 10 >= $row[1]) {
$failed = 1;
}
}
if ($failed) {
# visitor's session id either doesn't exist, or the timeout
# was reached and they must login again, send them back to
# the main page where they can log in again.
#
$q = "DELETE FROM Sessions WHERE SessionID = '";
$q.= mysql_escape_string($_COOKIE["AURSID"]) . "'";
mysql_query($q, $dbh);
setcookie("AURSID", "", time() - (60*60*24*30), "/");
header("Location: /timeout.php");
}
}
return;
}
# a new seed value for mt_srand()
#
function make_seed() {
list($usec, $sec) = explode(' ', microtime());
return (float) $sec + ((float) $usec * 10000);
}
# generate a (hopefully) unique session id
#
function new_sid() {
mt_srand(make_seed());
$ts = time();
$pid = getmypid();
$rand_num = mt_rand();
mt_srand(make_seed());
$rand_str = substr(md5(mt_rand()),2, 20);
$id = $rand_str . strtolower(md5($ts.$pid)) . $rand_num;
return strtoupper(md5($id));
}
# obtain the username if given their current SID
#
function username_from_sid($sid="") {
if (!$sid) {
return "";
}
$dbh = db_connect();
$q = "SELECT Email ";
$q.= "FROM Users, Sessions ";
$q.= "WHERE Users.ID = Sessions.UsersID ";
$q.= "AND SessionID = '" . mysql_escape_string($sid) . "'";
$result = mysql_query($q, $dbh);
if (!$result) {
return "";
}
$row = mysql_fetch_row($result);
return $row[0];
}
# connect to the database
#
function db_connect() {
# NOTE: modify these variables if your MySQL setup is different
#
$AUR_db_host = "localhost:/tmp/mysql.sock";
$AUR_db_name = "AUR";
$AUR_db_user = "aur"; # XXX use something better when deploying
$AUR_db_pass = "aur"; # XXX use something better when deploying
$handle = mysql_pconnect($AUR_db_host, $AUR_db_user, $AUR_db_pass);
if (!$handle) {
die("Error connecting to AUR database: " . mysql_error());
}
mysql_select_db($AUR_db_name, $handle) or
die("Error selecting AUR database: " . mysql_error());
return $handle;
}
# set up the visitor's language
#
function set_lang() {
global $_REQUEST;
global $_COOKIE;
global $LANG;
global $SUPPORTED_LANGS;
$update_cookie = 0;
if (isset($_REQUEST['setlang'])) {
# visitor is requesting a language change
#
$LANG = $_REQUEST['setlang'];
$update_cookie = 1;
} elseif (isset($_COOKIE['AURLANG'])) {
# If a cookie is set, use that
#
$LANG = $_COOKIE['AURLANG'];
} # TODO query the database if the user is logged in
if (!$LANG || !array_key_exists($LANG, $SUPPORTED_LANGS)) {
$LANG = "en"; # default to English
}
if ($update_cookie) {
# TODO do we need to set the domain too? I seem to remember some
# security concerns about not using domains - but it's not like
# we really care if another site can see what language our visitor
# was using....
#
setcookie("AURLANG", $LANG, 0, "/");
}
return;
}
# common header
#
function html_header() {
print "\n";
print "\n";
print "";
print "
";
print "ArchLinux User-community Repository ";
# XXX CSS help - a:link, a:visited, etc are defined, but I don't want to
# use the defaults. Is this the way to override them?
#
print "English ";
print "Español ";
print "Deutsch ";
print "Français";
print "