/var/www/allseasontrans.com/www/models
Edit: /var/www/allseasontrans.com/www/models/class.login_model.php (6190B)
_redirect = (isset($_SERVER['HTTP_REFERER']) && strlen($_SERVER['HTTP_REFERER'])>0)?$_SERVER['HTTP_REFERER']:URL;
}
public function out (){
$this->database->log('Пользователь '.session::get('login').' вышел с системы.',get_class($this).'->'.__FUNCTION__);
session::destroy();
header("Location:".$this->_redirect);
exit;
}
public function run (){
if (strlen($_POST['login'])<4){
if(ajax::check_ajax_request()) {
echo '{"fail":"Логин не может состоять меньше 4 символов."}';
exit;
}else{
$msg='Логин не может состоять меньше 4 символов.';
session::set('msg',$msg);
$this->database->log($msg,get_class($this).'->'.__FUNCTION__);
header('Location:'.$this->_redirect );
exit;
}
}
$sth = $this->database->prepare("SELECT * FROM `users` WHERE `login`=:login AND `password`=:password AND `block`='0' ;");
$sth->execute(array(':login' => $_POST['login'], ':password' =>hash::create('sha256',$_POST['password'],HASH_STATIC)));
$count = $sth->rowCount();
$sth->setFetchMode(PDO::FETCH_ASSOC);
$data=$sth->fetch();
if ($count > 0) {
$this->database->query("UPDATE `users` SET `ip`='{$_SERVER["REMOTE_ADDR"]}' , `sid` ='".session_id()."', `lastvisit` =now(), `online_times`='".time()."' WHERE id={$data['id']}");
$sth= $this->database->query("SELECT DATE_FORMAT(lastvisit,'%d %M %Y %H:%i:%s') as DATE FROM `users` WHERE `id`={$data['id']} ");
$sth->execute();
$time= $sth->fetch();
$obj = $this->database->query("SELECT * FROM `objects` WHERE `deleted`='0'");
$obj->execute();
$obj_arr = $obj->fetchAll();
session::set('objects', $obj_arr);
session::set('current_object', 1);
session::set('id_user', $data['id']);
session::set('login', $data['login']);
session::set('fio', $data['FIO']);
session::set('time', $time['DATE']);
session::set('logedIn', true);
$msg='Вы вошли как '.$data['login'];
session::set('msg',$msg);
$this->database->log($msg,get_class($this).'->'.__FUNCTION__);
if(ajax::check_ajax_request()) {
ajax::success($data['login']);
exit;
}else{
header('Location:'.$this->_redirect);
exit;
}
} else {
if(ajax::check_ajax_request()) {
$msg='Ошибка авторизации. Неправильный логин или пароль ';
$this->database->log($msg,get_class($this).'->'.__FUNCTION__);
echo '{"fail":"'.$msg.'"}';
return false;
}else{
$msg='Ошибка авторизации. Неправильный логин или пароль ';
session::set('msg',$msg);
$this->database->log($msg,get_class($this).'->'.__FUNCTION__);
header('Location:'.$this->_redirect );
exit;
}
}
}
public function getChildrens ($id){
try{
$sth = $this->database->query("SELECT p.id,p.name,d.id as PiD,p.artcount
FROM `category` p
LEFT OUTER JOIN category d
ON (p.id = d.pid)
WHERE p.pid ={$id} AND p.deleted = '0' GROUP BY p.id, p.name");
}catch(PDOEception $e){
echo ($e->getMessage());
}
$data = $sth->fetchAll();
$arr = array();
foreach ($data as $k=>$v){
if($v['artcount']!=0){
$arr [$k]['title']=$v['name'];
}else{
$arr [$k]['title']=$v['name'];
}
$arr [$k]['id']=$v['id'];
$arr [$k]['isFolder']=($v['PiD']==NULL)?false:true;
$arr [$k]['hideCheckbox'] = ($v['artcount']>0)?false:true;
$arr [$k]['isLazy']=($v['PiD']==NULL)?false:true;
}
header('Content-type: application/json');
echo json_encode($arr,JSON_NUMERIC_CHECK);
}
public function tree()
{
try{
$sth = $this->database->query("SELECT p.id,p.name,d.id as PiD ,p.artcount
FROM `category` p
LEFT OUTER JOIN category d
ON (p.id = d.pid)
WHERE p.pid =0 AND p.deleted = '0' GROUP BY p.id, p.name");
}catch(PDOEception $e){
echo ($e->getMessage());
}
$data = $sth->fetchAll();
$arr = array();
foreach ($data as $k=>$v){
if($v['artcount']!=0){
$arr [$k]['title']=$v['name'];
}else{
$arr [$k]['title']=$v['name'];
}
$arr [$k]['id']=$v['id'];
$arr [$k]['isFolder'] = ($v['PiD']==NULL)?false:true;
$arr [$k]['hideCheckbox'] = ($v['artcount']>0)?false:true;
$arr [$k]['isLazy'] = ($v['PiD']==NULL)?false:true;
}
header('Content-type: application/json');
echo json_encode($arr,JSON_NUMERIC_CHECK);
}
}