oidplusalarmingautosfxaysaliacalllibchecksum-toolscolormanagercryptochatcurrency_converterdecoderdelphiutilsdistributeddpcstudiodpg2fastphpfileformatsfilter_foundryforestgridgameht46f47_simulatorindexer_suiteipe_artfile_utilsjavautilsjumperlightgamelogviewermusikboxmystic_houseoidconverteroidinfo_apioidinfo_new_designpersonal-webbasephp_antispamphp_clientchallengephp_guestbookphp_utilsplumbersprependrecyclebinunitsimple_log_eventsokobanspacemissionstackmanuserdetect2uuid_mac_utilsvgwhoisvnagwebcounterwinbugtrackeryt_downloader

BlueGreycalmElegant

Català-Valencià – Catalan中文 – Chinese (Simplified)中文 – Chinese (Traditional)Česky – CzechDansk – DanishNederlands – DutchEnglish – EnglishSuomi – FinnishFrançais – FrenchDeutsch – Germanעברית – Hebrewहिंदी – HindiMagyar – HungarianBahasa Indonesia – IndonesianItaliano – Italian日本語 – Japanese한국어 – KoreanМакедонски – Macedonianमराठी – MarathiNorsk – NorwegianPolski – PolishPortuguês – PortuguesePortuguês – Portuguese (Brazil)Русский – RussianSlovenčina – SlovakSlovenščina – SlovenianEspañol – SpanishSvenska – SwedishTürkçe – TurkishУкраїнська – UkrainianOëzbekcha – Uzbek

Compare Revisions

• This comparison shows the changes necessary to convert path

  → /trunk/includes/classes/OIDplusSessionHandler.class.php @ 568

  → /trunk/includes/classes/OIDplusSessionHandler.class.php @ 569

  ↔ Reverse comparison

• Compare Path:	Rev

  With Path:	Rev

Regard whitespace Rev 568 → Rev 569

/trunk/includes/classes/OIDplusSessionHandler.class.php
19,7 → 19,7
if (!defined('INSIDE_OIDPLUS')) die();
class OIDplusSessionHandler {
class OIDplusSessionHandler implements OIDplusConfigInterface {
private $secret = '';
protected $sessionLifetime = '';
94,17 → 94,37
$_SESSION[$name] = self::encrypt($value, $this->secret);
}
public function getValue($name) {
public function getValue($name, $default = NULL) {
if (isset($this->cacheSetValues[$name])) return self::decrypt($this->cacheSetValues[$name], $this->secret);
if (!isset($_COOKIE[session_name()])) return null; // GDPR: Only start a session when we really need one
if (!isset($_COOKIE[session_name()])) return $default; // GDPR: Only start a session when we really need one
$this->sessionSafeStart();
OIDplus::cookieUtils()->setcookie(session_name(),session_id(),time()+$this->sessionLifetime);
if (!isset($_SESSION[$name])) return null;
if (!isset($_SESSION[$name])) return $default;
return self::decrypt($_SESSION[$name], $this->secret);
}
public function exists($name) {
if (isset($this->cacheSetValues[$name])) return true;
if (!isset($_COOKIE[session_name()])) return false; // GDPR: Only start a session when we really need one
$this->sessionSafeStart();
OIDplus::cookieUtils()->setcookie(session_name(),session_id(),time()+$this->sessionLifetime);
if (!isset($_SESSION[$name])) return false;
}
public function delete($name) {
if (isset($this->cacheSetValues[$name])) unset($this->cacheSetValues[$name]);
if (!isset($_COOKIE[session_name()])) return; // GDPR: Only start a session when we really need one
$this->sessionSafeStart();
OIDplus::cookieUtils()->setcookie(session_name(),session_id(),time()+$this->sessionLifetime);
unset($_SESSION[$name]);
}
public function destroySession() {
if (!isset($_COOKIE[session_name()])) return;
117,10 → 137,6
OIDplus::cookieUtils()->unsetcookie(session_name()); // remove cookie, so GDPR people are happy
}
public function exists($name) {
return isset($_SESSION[$name]);
}
protected static function encrypt($data, $key) {
if (function_exists('openssl_encrypt')) {
$iv = random_bytes(16); // AES block size in CBC mode