Allow users to upload files only when they're logged in to SSW.

1 files changed, 59 insertions, 0 deletions

diff --git a/static/php/classes/Login.class.php b/static/php/classes/Login.class.php
new file mode 100644
index 0000000..8c15a7a
--- /dev/null
+++ b/static/php/classes/Login.class.php
@@ -0,0 +1,59 @@
+<?php
+/**
+ * Handles user logins to Wandystan’s systems.
+ *
+ * @copyright Copyright (c) 2017 Paulina Laura Emilia <vilene@posteo.net>
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+class Login
+{
+    /**
+     * Number of seconds in one non-leap year.
+     *
+     * @var int ONE_YEAR
+     */
+    const ONE_YEAR = 31536000;
+
+    /**
+     * Starts a server session and sets correctly the cookie parameters.
+     */
+    public function __construct()
+    {
+        if (session_status() !== PHP_SESSION_NONE) {
+            throw new Exception(
+                'No session support or session already started',
+                500
+            );
+        } else {
+            session_set_cookie_params(self::ONE_YEAR, '/', '.wandystan.eu');
+            session_start();
+        }
+    }
+
+    /**
+     * Check if the user is logged in.
+     *
+     * @return bool
+     */
+    public function isLoggedIn()
+    {
+        return $_SESSION['c2_logowanie'] === 'ON' && !empty($_SESSION['c2_id']);
+    }
+}