[Koha-cvs] CVS: koha logout.pl,NONE,1.1 shelves.pl,1.5,1.6

[Steve Tonnesen]

Update of /cvsroot/koha/koha
In directory usw-pr-cvs1:/tmp/cvs-serv19965

Modified Files:
	shelves.pl 
Added Files:
	logout.pl 
Log Message:
Additions to authentication scheme.  Logs to /tmp/sessionlog.  Will move this
to a db table.


--- NEW FILE ---
#!/usr/bin/perl

use CGI;
use C4::Database;

my $query=new CGI;

my $sessionID=$query->cookie('sessionID');

my $sessions;
open (S, "/tmp/sessions");
while (my ($sid, $u, $lasttime) = split(/:/, <S>)) {
    chomp $lasttime;
    (next) unless ($sid);
    (next) if ($sid eq $sessionID);
    $sessions->{$sid}->{'userid'}=$u;
    $sessions->{$sid}->{'lasttime'}=$lasttime;
}
open (S, ">/tmp/sessions");
foreach (keys %$sessions) {
    my $userid=$sessions->{$_}->{'userid'};
    my $lasttime=$sessions->{$_}->{'lasttime'};
    print S "$_:$userid:$lasttime\n";
}

my $dbh=C4Connect;

# Check that this is the ip that created the session before deleting it

my $sth=$dbh->prepare("select userid,ip from sessions where sessionID=?");
$sth->execute($sessionID);
my ($userid, $ip);
if ($sth->rows) {
    ($userid,$ip) = $sth->fetchrow;
    if ($ip ne $ENV{'REMOTE_ADDR'}) {
       # attempt to logout from a different ip than cookie was created at
       exit;
    }
}

$sth=$dbh->prepare("delete from sessions where sessionID=?");
$sth->execute($sessionID);
open L, ">>/tmp/sessionlog";
print L "$userid from $ip logged out at ".localtime(time())." (manual log out).\n";
close L;

my $cookie=$query->cookie(-name => 'sessionID',
			  -value => '',
			  -expires => '+1y');

print $query->redirect("shelves.pl");

exit;
if ($sessionID) {
    print "Logged out of $sessionID<br>\n";
    print "<a href=shelves.pl>Login</a>";
} else {
    print "Not logged in.<br>\n";
    print "<a href=shelves.pl>Login</a>";
}




Index: shelves.pl
===================================================================
RCS file: /cvsroot/koha/koha/shelves.pl,v
retrieving revision 1.5
retrieving revision 1.6
diff -C2 -r1.5 -r1.6
*** shelves.pl	4 Jul 2002 19:42:48 -0000	1.5
--- shelves.pl	4 Jul 2002 21:09:43 -0000	1.6
***************
*** 27,31 ****
  
  
! print "Logged in as: $loggedinuser  <a href=logout.pl>Log Out</a><br>\n";
  
  
--- 27,31 ----
  
  
! print "Logged in as: $loggedinuser<br><a href=logout.pl>Log Out</a><br>\n";
  
  
***************
*** 170,173 ****
--- 170,177 ----
  #
  # $Log$
+ # Revision 1.6  2002/07/04 21:09:43  tonnesen
+ # Additions to authentication scheme.  Logs to /tmp/sessionlog.  Will move this
+ # to a db table.
+ #
  # Revision 1.5  2002/07/04 19:42:48  tonnesen
  # Minor changes