| The Red Matrix

- Main Page
- Related Pages
- Namespaces
- Classes
- Files

- File List
- File Members

All Classes Namespaces Files Functions Variables Pages
Functions | Variables
auth.php File Reference

Functions and inline functionality for authentication. More...

## Functions
| nuke_session ()
| Resets the current session. More...
| account_verify_password ($email, $pass)
| Verify login credentials. More...
if((x($_POST, 'auth-params'))&&$_POST['auth-params']=== 'login') | match_openid ($authid)
| Returns the channel_id for a given openid_identity. More...

## Variables
if((isset($_SESSION))&&(x($_SESSION, 'authenticated'))&&((!(x($_POST, 'auth-params')))||($_POST['auth-params']!== 'login'))) | else

## Detailed Description

Functions and inline functionality for authentication.

This file provides some functions for authentication handling and inline functionality. Look for auth parameters or re-validate an existing session also handles logout. Also provides a function for OpenID identiy matching.

## Function Documentation

account_verify_password | ( |  | $email,
|  |  | $pass
| ) |  |

Verify login credentials.

Parameters

  string | $email | The email address to verify.
  string | $pass | The provided password to verify.

Returns
  array|null Returns account record on success, null on failure.

A plugin indicates successful login by setting 'authenticated' to non-zero value and returning a user record Plugins should never set 'authenticated' except to indicate success - as hooks may be chained and later plugins should not interfere with an earlier one that succeeded.

Referenced by api_login(), removeaccount_post(), removeme_post(), and RedBasicAuth\validateUserPass().

if ((x($_POST, 'auth-params'))&&$_POST['auth-params']=== 'login') match_openid | ( |  | $authid | ) |

Returns the channel_id for a given openid_identity.

Queries the values from pconfig configuration for the given openid_identity and returns the corresponding channel_id.

How do we prevent that an OpenID identity is used more than once?

Parameters

  string | $authid | The given openid_identity

Returns
  int|bool Return channel_id from pconfig or false.

Referenced by openid_content().

nuke_session | ( |  | ) |

Resets the current session.

Returns
  void

Referenced by api_account_logout().

## Variable Documentation

if ((isset($_SESSION))&&(x($_SESSION, 'authenticated'))&&((!(x($_POST, 'auth-params')))||($_POST['auth-params']!== 'login'))) else

Initial value:
{
if(isset($_SESSION)) {
nuke_session();
}
if((x($_POST, 'password')) && strlen($_POST['password']))
$encrypted = hash('whirlpool', trim($_POST['password']))

Inline - not a function look for auth parameters or re-validate an existing session also handles logout