人事系统开发
48092cab42
Docker image / push (push) Canceled after 0s
包含：登录失败锁定、90天密码有效期、30分钟会话超时、 强制改密、登录审计日志、屏幕水印、企业背景图、 备案信息固定底部、favicon、登录页JS修复等全部改动
71 lines
1.7 KiB
PHP
71 lines
1.7 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
namespace MRBS\Session;
|
|
|
|
use MRBS\SessionHandler\Cookie;
|
|
use MRBS\SessionHandler\SessionHandlerCookie;
|
|
use SessionHandler;
|
|
use function MRBS\get_cookie_path;
|
|
|
|
/**
|
|
* Manage sessions via cookies stored in the client browser.
|
|
*/
|
|
class SessionCookie extends SessionPhp
|
|
{
|
|
|
|
public function __construct()
|
|
{
|
|
global $auth;
|
|
|
|
// We have to use output buffering to ensure that the cookies are set before any other output is sent.
|
|
ob_start();
|
|
|
|
// Delete old-style cookies
|
|
if (!empty($_COOKIE) && isset($_COOKIE["UserName"]))
|
|
{
|
|
setcookie('UserName', '', time()-42000, get_cookie_path());
|
|
}
|
|
|
|
// Set the session lifetime
|
|
$this->lifetime = $auth['session_cookie']['session_expire_time'] ?? 0;
|
|
|
|
parent::__construct();
|
|
}
|
|
|
|
|
|
protected function getSessionHandler() : SessionHandlerCookie
|
|
{
|
|
global $auth;
|
|
|
|
// Set the session handler
|
|
return new SessionHandlerCookie(
|
|
$auth['session_cookie']['secret'],
|
|
$auth['session_cookie']['hash_algorithm'],
|
|
$auth['session_cookie']['include_ip']
|
|
);
|
|
}
|
|
|
|
|
|
public function init(int $lifetime) : void
|
|
{
|
|
$old_session_id = session_id();
|
|
parent::init($lifetime);
|
|
$new_session_id = session_id();
|
|
SessionHandlerCookie::updateExpiry($new_session_id, ($lifetime === 0) ? 0 : time() + $lifetime);
|
|
// Not entirely sure why this is necessary, but the old session data cookie is sometimes not deleted.
|
|
if (($old_session_id !== '') && ($old_session_id !== $new_session_id))
|
|
{
|
|
Cookie::delete($old_session_id);
|
|
}
|
|
}
|
|
|
|
|
|
public function logoffUser() : void
|
|
{
|
|
unset($_SESSION['user']);
|
|
session_regenerate_id(true);
|
|
session_write_close();
|
|
}
|
|
|
|
}
|