Changeset 1218

Timestamp:

02/23/10 11:55:04 (3 years ago)

Author:

nick_ramsay

Message:

[Branch 1.2] Destroy session and cookie when checking the cookie for deleted, killspammed, banned and suspended users (requires User Signin 0.2)

File:

• branches/1.2/libs/UserAuth.php (modified) (1 diff)

branches/1.2/libs/UserAuth.php

@@ -50 +50 @@
         $this->name = $h_user;
         if ($h_user) {
-            $this->getUserBasic($h, 0, $this->name);
-            $this->loggedIn = true;
-            // update user_lastvisit field when a new session is created
-            if (!session_id()) {
-                $this->updateUserLastVisit($h);
-            }
-            
-            $h->pluginHook('userauth_checkcookie_success');
-        } else {
-            $this->setLoggedOutUser($h);
-            return false; 
-        }
+            $valid = $this->getUserBasic($h, 0, $this->name);
+
+            if ($valid) {
+                $this->loggedIn = true;
+                if (!session_id()) { $this->updateUserLastVisit($h); } // update user_lastvisit field when a new session is created
+                $h->pluginHook('userauth_checkcookie_success'); // user_signin throws out killspammed, banned and suspended users
                 
-        return true;
+                // SUCCESS!!!
+                return true;
+            } else {
+                $h->currentUser->destroyCookieAndSession(); // removes cookie and session for physically deleted users
+            }
+        }
+        
+        // otherwise, give them "logged out" permissions
+        $this->setLoggedOutUser($h);
+        return false; 
     }