5a47da013b
You can now set session expiration in settings -> General Settings -> Miscellaneous if admin is Idles for more than minutes set, he will required to login again, just for account security concerns. you can enable or disable
81 lines
2.6 KiB
PHP
81 lines
2.6 KiB
PHP
<?php
|
|
|
|
/**
|
|
* PHP Mikrotik Billing (https://github.com/hotspotbilling/phpnuxbill/)
|
|
* by https://t.me/ibnux
|
|
**/
|
|
|
|
|
|
class Admin
|
|
{
|
|
|
|
public static function getID()
|
|
{
|
|
global $db_password, $config;
|
|
$enable_session_timeout = $config['enable_session_timeout'];
|
|
$session_timeout_duration = $config['session_timeout_duration'] * 60; // Convert minutes to seconds
|
|
|
|
if (isset($_SESSION['aid']) && isset($_SESSION['aid_expiration']) && $_SESSION['aid_expiration'] > time()) {
|
|
return $_SESSION['aid'];
|
|
} elseif ($enable_session_timeout && isset($_SESSION['aid']) && isset($_SESSION['aid_expiration']) && $_SESSION['aid_expiration'] <= time()) {
|
|
self::removeCookie();
|
|
session_destroy();
|
|
_alert(Lang::T('Session has expired. Please log in again.'), 'danger', "admin");
|
|
return 0;
|
|
}
|
|
// Check if cookie is set and valid
|
|
elseif (isset($_COOKIE['aid'])) {
|
|
// id.time.sha1
|
|
$tmp = explode('.', $_COOKIE['aid']);
|
|
if (sha1($tmp[0] . '.' . $tmp[1] . '.' . $db_password) == $tmp[2]) {
|
|
if (time() - $tmp[1] < 86400 * 7) {
|
|
$_SESSION['aid'] = $tmp[0];
|
|
if ($enable_session_timeout) {
|
|
$_SESSION['aid_expiration'] = time() + $session_timeout_duration;
|
|
}
|
|
return $tmp[0];
|
|
}
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
public static function setCookie($aid)
|
|
{
|
|
global $db_password, $config;
|
|
$enable_session_timeout = $config['enable_session_timeout'];
|
|
$session_timeout_duration = $config['session_timeout_duration'] * 60; // Convert minutes to seconds
|
|
if (isset($aid)) {
|
|
$time = time();
|
|
$token = $aid . '.' . $time . '.' . sha1($aid . '.' . $time . '.' . $db_password);
|
|
setcookie('aid', $token, time() + 86400 * 7);
|
|
$_SESSION['aid'] = $aid;
|
|
if ($enable_session_timeout) {
|
|
$_SESSION['aid_expiration'] = $time + $session_timeout_duration;
|
|
}
|
|
return $token;
|
|
}
|
|
return '';
|
|
}
|
|
|
|
public static function removeCookie()
|
|
{
|
|
if (isset($_COOKIE['aid'])) {
|
|
setcookie('aid', '', time() - 86400);
|
|
}
|
|
}
|
|
|
|
public static function _info($id = 0)
|
|
{
|
|
if (empty($id) && $id == 0) {
|
|
$id = Admin::getID();
|
|
}
|
|
if ($id) {
|
|
return ORM::for_table('tbl_users')->find_one($id);
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
}
|