Docker image / push (push) Canceled after 0s
包含:登录失败锁定、90天密码有效期、30分钟会话超时、 强制改密、登录审计日志、屏幕水印、企业背景图、 备案信息固定底部、favicon、登录页JS修复等全部改动
42 lines
1.0 KiB
PHP
42 lines
1.0 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
namespace MRBS\Session;
|
|
|
|
use MRBS\User;
|
|
use function MRBS\auth;
|
|
|
|
/**
|
|
* Session management scheme that uses IP addresses to identify users.
|
|
*
|
|
* Anyone who can access the server can make bookings. Administrators are also identified by their IP address.
|
|
*
|
|
* To use this authentication scheme, set the following things in config.inc.php:
|
|
*
|
|
* $auth['type'] = 'none';
|
|
* $auth['session'] = 'ip';
|
|
*
|
|
* Then, you may configure admin users:
|
|
*
|
|
* $auth['admin'][] = '127.0.0.1'; // Local host = the server you're running on
|
|
* $auth['admin'][] = '192.168.0.1';
|
|
*/
|
|
class SessionIp extends Session
|
|
{
|
|
|
|
// No need to prompt for a name - IP address always there
|
|
public function getCurrentUser() : ?User
|
|
{
|
|
global $server;
|
|
|
|
if ((!isset($server['REMOTE_ADDR'])) ||
|
|
(!is_string($server['REMOTE_ADDR'])) ||
|
|
(($server['REMOTE_ADDR'] === '')))
|
|
{
|
|
return parent::getCurrentUser();
|
|
}
|
|
|
|
return auth()->getUser($server['REMOTE_ADDR']);
|
|
}
|
|
|
|
}
|