Drupal
/
drupal
mirror of https://git.drupalcode.org/project/drupal.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

* Integrated the database abstraction layer into the account pages. One 

reason for doing so is because the database abstraction layer provides
  build-in error checking and a debug mode for easy development.
3-00
Dries Buytaert 2000-06-22 09:08:12 +00:00
parent 8720cbf69e
commit b32b897ab4
3 changed files with 22 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
account.php
View File

@ -96,9 +96,8 @@ function validateUser($user) {
if ($ban = ban_match($user[email], $type[addresses])) $rval = "the specified e-mail address is banned for the following reason: <I>$ban->reason</I>."; if ($ban = ban_match($user[email], $type[addresses])) $rval = "the specified e-mail address is banned for the following reason: <I>$ban->reason</I>.";
### Verify whether username and e-mail address are unique: ### Verify whether username and e-mail address are unique:
dbconnect(); if (db_num_rows(db_query("SELECT userid FROM users WHERE LOWER(userid)=LOWER('$user[userid]')")) > 0) $rval = "the specified username is already taken.";
if (mysql_num_rows(mysql_query("SELECT userid FROM users WHERE LOWER(userid)=LOWER('$user[userid]')")) > 0) $rval = "the specified username is already taken."; if (db_num_rows(db_query("SELECT email FROM users WHERE LOWER(email)=LOWER('$user[email]')")) > 0) $rval = "the specified e-mail address is already registered.";
if (mysql_num_rows(mysql_query("SELECT email FROM users WHERE LOWER(email)=LOWER('$user[email]')")) > 0) $rval = "the specified e-mail address is already registered.";
return($rval); return($rval);
} }

12
database.inc
View File

@ -35,6 +35,18 @@ function db_fetch_object($qid) {
if ($qid) return mysql_fetch_object($qid); if ($qid) return mysql_fetch_object($qid);
} }
function db_num_rows($qid) {
if ($qid) return mysql_num_rows($qid);
}
function db_fetch_row($qid) {
if ($qid) return mysql_fetch_row($qid);
}
function db_fetch_array($qid) {
if ($qid) return mysql_fetch_array($qid);
}
# #
# Automatically connect to database: # Automatically connect to database:
# #

19
user.class.php
View File

@ -5,10 +5,9 @@ $access = array("Administrator" => 0x00000001,
class User { class User {
function User($userid, $passwd="") { function User($userid, $passwd="") {
dbconnect(); $result = db_query("SELECT * FROM users WHERE LOWER(userid)=LOWER('$userid') && passwd=PASSWORD('$passwd') && STATUS=0");
$result = mysql_query("SELECT * FROM users WHERE LOWER(userid)=LOWER('$userid') && passwd=PASSWORD('$passwd') && STATUS=0") or die(sprintf("Critical error at line %d in %s: %s", __LINE__, __FILE__, mysql_error())); if (db_num_rows($result) == 1) {
if (mysql_num_rows($result) == 1) { foreach (db_fetch_row($result) as $key=>$value) { $field = mysql_field_name($result, $key); $this->$field = stripslashes($value); $this->field[] = $field; }
foreach (mysql_fetch_row($result) as $key=>$value) { $field = mysql_field_name($result, $key); $this->$field = stripslashes($value); $this->field[] = $field; }
} }
} }
function save() { function save() {
@ -17,13 +16,12 @@ class User {
foreach ($this->field as $key=>$field) { $value = $this->$field; $query .= "$field = '". addslashes($value) ."', "; } foreach ($this->field as $key=>$field) { $value = $this->$field; $query .= "$field = '". addslashes($value) ."', "; }
$query .= " id = $this->id WHERE id = $this->id"; $query .= " id = $this->id WHERE id = $this->id";
### Perform query: ### Perform query:
mysql_query($query); db_query($query);
} }
function rehash() { function rehash() {
dbconnect(); $result = db_query("SELECT * FROM users WHERE id=$this->id");
$result = mysql_query("SELECT * FROM users WHERE id=$this->id") or die(sprintf("Critical error at line %d in %s: %s", __LINE__, __FILE__, mysql_error())); if (db_num_rows($result) == 1) {
if (mysql_num_rows($result) == 1) { foreach (db_fetch_array($result) as $key=>$value) { $this->$key = stripslashes($value); }
foreach (mysql_fetch_array($result) as $key=>$value) { $this->$key = stripslashes($value); }
} }
} }
function valid($access=0) { function valid($access=0) {
@ -31,8 +29,7 @@ class User {
$this->rehash(); // synchronisation purpose $this->rehash(); // synchronisation purpose
$this->last_access = time(); $this->last_access = time();
$this->last_host = (!empty($GLOBALS[REMOTE_HOST]) ? $GLOBALS[REMOTE_HOST] : $GLOBALS[REMOTE_ADDR] ); $this->last_host = (!empty($GLOBALS[REMOTE_HOST]) ? $GLOBALS[REMOTE_HOST] : $GLOBALS[REMOTE_ADDR] );
dbconnect(); db_query("UPDATE users SET last_access='$this->last_access',last_host='$this->last_host' WHERE id=$this->id");
mysql_query("UPDATE users SET last_access='$this->last_access',last_host='$this->last_host' WHERE id=$this->id") or die(sprintf("Critical error at line %d in %s: %s", __LINE__, __FILE__, mysql_error()));
if ($this->access & $access || $access == 0) return 1; if ($this->access & $access || $access == 0) return 1;
} }
return 0; return 0;