218 lines
8.1 KiB
PHP
218 lines
8.1 KiB
PHP
<?php
|
|
Class Database{
|
|
static function connectToDB(){
|
|
//Defineer vars
|
|
$sql_server = "localhost";
|
|
$sql_username = "root";
|
|
$sql_password = "kankerlow";
|
|
$sql_database = "webforum";
|
|
$dsn = "mysql:host=$sql_server;dbname=$sql_database";
|
|
//Maak verbinding
|
|
$con = new PDO($dsn, $sql_username, $sql_password);
|
|
return $con;
|
|
}
|
|
//Controleert of het email adres al in de database voorkomt. Returnt true indien wel.
|
|
static function checkUsedEmail($email){
|
|
//Verbind met de database
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("SELECT * FROM users where email = :email");
|
|
//Bind parameters
|
|
$query->bindParam(':email', $email, PDO::PARAM_STR, 256);
|
|
//Voer de query uit
|
|
$query->execute();
|
|
//Check de hoeveelheid rijen die de database returnt.
|
|
if($query->rowCount() == 0){
|
|
//Email adres is niet in gebruik, return false
|
|
return false;
|
|
}
|
|
else{
|
|
//Email is al in gebruik of komt meer dan een keer voor. Beide gevallen zijn een probleem dus return true.
|
|
return true;
|
|
}
|
|
}
|
|
//Controleert of de gebruikersnaam al in de database voorkomt. Returnt true indien wel.
|
|
static function checkUsedUsername($username){
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("SELECT * FROM users where username = :username");
|
|
//Bind parameters
|
|
$query->bindParam(':username', $username, PDO::PARAM_STR, 256);
|
|
//Voer de query uit
|
|
$query->execute();
|
|
//Check de hoeveelheid rijen die de database returnt.
|
|
if($query->rowCount() == 0){
|
|
//Username adres is niet in gebruik, return false
|
|
return false;
|
|
}
|
|
else{
|
|
//Username is al in gebruik of komt meer dan een keer voor. Beide gevallen zijn een probleem dus return true.
|
|
return true;
|
|
}
|
|
}
|
|
//Registreert een gebruiker. Neemt als invoer email, wachtwoord, gebruikersnaam.
|
|
static function registerUser($email, $password, $username){
|
|
$ip = $_SERVER['REMOTE_ADDR'];
|
|
//Initit db connection
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("INSERT INTO users (username, email, password, reg_ip) VALUES (:username, :email, :password, :ip)");
|
|
//Bind parameters
|
|
$query->bindParam(':username', $username, PDO::PARAM_STR, 256);
|
|
$query->bindParam(':email', $email, PDO::PARAM_STR, 256);
|
|
$query->bindParam(':password', $password, PDO::PARAM_STR, 256);
|
|
$query->bindParam(':ip', $ip, PDO::PARAM_STR, 256);
|
|
//Voer query uit
|
|
$query->execute();
|
|
}
|
|
//Check of gegeven login info in de database voorkomt
|
|
static function isLoginValid($email, $password){
|
|
//Init db connection
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("SELECT * FROM users where email = :email AND password = :password");
|
|
//Bind params
|
|
$query->bindParam(':email', $email, PDO::PARAM_STR, 256);
|
|
$query->bindParam(':password', $password, PDO::PARAM_STR, 256);
|
|
//Voer query it
|
|
$query->execute();
|
|
//Check hoeveelheid teruggestuurde rijen
|
|
if($query->rowCount() == 1){
|
|
//login correct (komt voor in de db)
|
|
return true;
|
|
}
|
|
else{
|
|
//Incorrect
|
|
return false;
|
|
}
|
|
}
|
|
//Vraag gebruikers ID op doormiddel van email en pass
|
|
static function getUID($email, $password){
|
|
//Init db connection
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("SELECT id FROM users where email = :email AND password = :password");
|
|
//Bind params
|
|
$query->bindParam(':email', $email, PDO::PARAM_STR, 256);
|
|
$query->bindParam(':password', $password, PDO::PARAM_STR, 256);
|
|
//Voer query it
|
|
$query->execute();
|
|
//Check hoeveelheid teruggestuurde rijen
|
|
if($query->rowCount() == 1){
|
|
//login correct, return uid
|
|
$result = $query->fetch(PDO::FETCH_COLUMN);
|
|
return $result;
|
|
}
|
|
else{
|
|
//something went wrong, return -1
|
|
return -1;
|
|
}
|
|
}
|
|
static function getUsername($uid){
|
|
$con = Database::connectToDB();
|
|
$query = $con->prepare("SELECT username FROM users where id = :uid");
|
|
$query->bindParam(':uid', $uid, PDO::PARAM_STR, 256);
|
|
$query->execute();
|
|
if($query->rowCount() == 1){
|
|
//login correct, return uid
|
|
$result = $query->fetch(PDO::FETCH_COLUMN);
|
|
return $result;
|
|
}
|
|
else{
|
|
//something went wrong, return -1
|
|
return "dbfetcherror";
|
|
}
|
|
}
|
|
static function isSessionTokenInUse($token){
|
|
//Init db connection
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("SELECT * FROM usersessions where token = :token");
|
|
//Bind params
|
|
$query->bindParam(':token', $token, PDO::PARAM_STR, 256);
|
|
//Voer query it
|
|
$query->execute();
|
|
//Check hoeveelheid teruggestuurde rijen
|
|
if($query->rowCount() == 0){
|
|
return false;
|
|
}
|
|
else{
|
|
return true;
|
|
}
|
|
}
|
|
static function registerNewSession($uid, $token, $expires){
|
|
//Init db connection
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("INSERT INTO usersessions (uid, token, expires) VALUES (:uid, :token, :expires)");
|
|
//Bind params
|
|
$query->bindParam(':uid', $uid, PDO::PARAM_INT);
|
|
$query->bindParam(':token', $token, PDO::PARAM_STR, 256);
|
|
$query->bindParam(':expires', $expires, PDO::PARAM_STR);
|
|
//Voer query it
|
|
$query->execute();
|
|
}
|
|
static function isSessionValid($token, $uid){
|
|
//Init db connection
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("SELECT * FROM usersessions where token = :token AND uid = :uid AND expires > NOW()");
|
|
//Bind params
|
|
$query->bindParam(':token', $token, PDO::PARAM_STR, 256);
|
|
$query->bindParam(':uid', $uid, PDO::PARAM_STR, 256);
|
|
//Voer query it
|
|
$query->execute();
|
|
//Check hoeveelheid teruggestuurde rijen
|
|
if($query->rowCount() == 1){
|
|
return true;
|
|
}
|
|
else{
|
|
return false;
|
|
}
|
|
}
|
|
static function invalidateSession($token){
|
|
//Init db connection
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("DELETE FROM usersessions WHERE token = :token");
|
|
//Bind params
|
|
$query->bindParam(':token', $token, PDO::PARAM_STR, 256);
|
|
//Voer query it
|
|
$query->execute();
|
|
}
|
|
static function invalidateSessionByUID($uid){
|
|
//Init db connection
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("DELETE FROM usersessions WHERE uid = :uid");
|
|
//Bind params
|
|
$query->bindParam(':token', $uid, PDO::PARAM_INT);
|
|
//Voer query it
|
|
$query->execute();
|
|
}
|
|
static function deleteExpiredSessions(){
|
|
$con = Database::connectToDB();
|
|
//Bereid query voor
|
|
$query = $con->prepare("DELETE FROM usersessions WHERE expires < NOW()");
|
|
$query->execute();
|
|
}
|
|
static function getSessionExpiryDate($token){
|
|
$con = Database::connectToDB();
|
|
$query = $con->prepare("SELECT expires FROM usersessions where token = :token");
|
|
$query->bindParam(':token', $token, PDO::PARAM_STR, 256);
|
|
$query->execute();
|
|
if($query->rowCount() == 1){
|
|
//login correct, return uid
|
|
$result = $query->fetch(PDO::FETCH_COLUMN);
|
|
return $result;
|
|
}
|
|
else{
|
|
//something went wrong, return -1
|
|
return "2000-01-01 00:00:00";
|
|
}
|
|
}
|
|
static function createThread(){
|
|
|
|
}
|
|
}
|
|
?>
|