Fix bug in session handler

[qtadmin.git] / lib / utils.inc.php
diff --git a/lib/utils.inc.php b/lib/utils.inc.php

index 8aa38e083054ae3d3a2e6d6e733d483d5f2b8d90..9e2f6bf0327b5a52b5e7cba3239c3a6d02b95a23 100644 (file)
--- a/lib/utils.inc.php
+++ b/lib/utils.inc.php
@@ -2,13 +2,14 @@
  /* vim: set ts=4 tw=0 sw=4 noet: */
  require_once $CFG->root .'config.php';
  
  /* vim: set ts=4 tw=0 sw=4 noet: */
  require_once $CFG->root .'config.php';
  
-class Utils {
+class Utils implements Serializable {
  
      private static $_instance = null;
      private $server;
      private $user;
      private $is_admin;
      private $loginStatus;
  
      private static $_instance = null;
      private $server;
      private $user;
      private $is_admin;
      private $loginStatus;
+    private $timeout;
      private $header = '<!DOCTYPE html>
  <html>
  <head>
      private $header = '<!DOCTYPE html>
  <html>
  <head>
@@ -54,28 +55,59 @@ class Utils {
          }
          $_SESSION['user'] = $this->user;
          $_SESSION['is_admin'] = $this->is_admin;
          }
          $_SESSION['user'] = $this->user;
          $_SESSION['is_admin'] = $this->is_admin;
+        $_SESSION['Utils'] = serialize($this);
      }
  
      private function __clone() {}
  
      }
  
      private function __clone() {}
  
+    public function serialize() {
+        file_put_contents('/tmp/dump', 'Serialize called: '.var_export($this, true), FILE_APPEND);
+        return serialize(get_object_vars($this));
+    }
+
+    public function unserialize($data) {
+        $values = unserialize($data);
+        foreach ($values as $key=>$value) {
+            $this->$key = $value;
+        }
+    }
+
      private function startSession() {
          global $CFG;
  
          if (isset($CFG->session_timeout)) {
      private function startSession() {
          global $CFG;
  
          if (isset($CFG->session_timeout)) {
-            $timeout = $CFG->session_timeout * 60;
+            $this->timeout = $CFG->session_timeout * 60;
          } else {
          } else {
-            $timeout = 20 * 60;
+            $this->timeout = 20 * 60;
          }
  
          }
  
-        if (ini_get('session.gc_maxlifetime') != $timeout)
-            ini_set('session.gc_maxlifetime', $timeout);
-        if (ini_get('session.cookie_lifetime') != $timeout)
-            ini_set('session.cookie_lifetime', $timeout);
+        if (ini_get('session.gc_maxlifetime') != $this->timeout)
+            ini_set('session.gc_maxlifetime', $this->timeout);
+        if (ini_get('session.cookie_lifetime') != $this->timeout)
+            ini_set('session.cookie_lifetime', $this->timeout);
  
          session_start();
  
  
          session_start();
  
+        //echo ini_get('session.gc_maxlifetime').':'.ini_get('session.cookie_lifetime');
+    }
+
+    public static function getInstance() {
+        global $CFG;
+
+        if (!is_object(self::$_instance)) {
+            if (isset($_SESSION['Utils'])) {
+                self::$_instance = unserialize($_SESSION['Utils']);
+                file_put_contents('/tmp/dump', 'Unserialize called: '.var_export($this, true), FILE_APPEND);
+            } else {
+                self::$_instance = new Utils();
+            }
+        }
+
          $time = $_SERVER['REQUEST_TIME'];
          $time = $_SERVER['REQUEST_TIME'];
-        if (isset($_SESSION['LAST_ACTIVITY']) && ($time - $_SESSION['LAST_ACTIVITY']) >= $timeout) {
+        if (isset($_SESSION['LAST_ACTIVITY']) &&
+                ($time - $_SESSION['LAST_ACTIVITY']) >= self::$_instance->timeout) {
+            echo 'R_TIME: '.date('c', $time).' L_ACT: '.date('c', $_SESSION['LAST_ACTIVITY']);
+            exit;
              session_unset();
              session_destroy();
              self::$_instance->user = null;
              session_unset();
              session_destroy();
              self::$_instance->user = null;
@@ -83,12 +115,6 @@ class Utils {
          } else {
              $_SESSION['LAST_ACTIVITY'] = $time;
          }
          } else {
              $_SESSION['LAST_ACTIVITY'] = $time;
          }
-    }
-
-    public static function getInstance() {
-        if (!is_object(self::$_instance)) {
-            self::$_instance = new Utils();
-        }
  
          return self::$_instance;
      }
  
          return self::$_instance;
      }
@@ -184,6 +210,11 @@ class Utils {
              }
          }
  
              }
          }
  
+        if ($loggedIn == false) {
+            echo '$this->user: '.$this->user.' $_SESSION[\'user\']: '.$_SESSION['user'];
+            echo 'R_TIME: '.date('c', $_SERVER['REQUEST_TIME']).' L_ACT: '.date('c', $_SESSION['LAST_ACTIVITY']);
+            exit;
+        }
          return $loggedIn;
      }
  
          return $loggedIn;
      }