AdminAccount.php

Go to the documentation of this file.

<?php

namespace Combu;

class AdminAccount extends DataClass {

    const TABLE_NAME = "AdminAccount";

    public $Id = 0;
    public $Username = "";
    public $Password = "";

    public function __construct($src = null, $stripSlashes = false) {
        global $Database;
        if ($src == null)
            return;
        if (is_array($src)) {
            // Load by array
            $this->_loadByRow($src, $stripSlashes);
        } else if (is_numeric($src) && intval($src) > 0) {
            // Load by Id
            $this->_loadFilter(self::GetTableName(__CLASS__), "Id = " . intval($src));
        } else {
            // Load by Username
            $this->_loadFilter(self::GetTableName(__CLASS__), "Username = '" . $Database->Escape($src) . "'");
        }
    }

    public function ExistsUsername() {
        global $Database;
        $sql = "SELECT Id FROM " . self::GetTableName(__CLASS__) . " WHERE Username = '" . $Database->Escape($this->Username) . "'";
        if ($this->Id > 0)
            $sql .= " AND Id <> " . $this->Id;
        $res = $Database->Query($sql);
        if ($res) {
            $row = $Database->FetchAssoc($res);
            if ($row)
                return TRUE;
        }
        return FALSE;
    }

    public function IsLogged() {
        global $AdminLogged;
        return ($this->Id > 0 && $this->Id == $AdminLogged->Id);
    }

    public static function Load($username = "", $limit = null, $offset = null, &$count = null, $returnArray = false) {
        global $Database;
        $where = "";
        if ($username != "")
            $where .= ($where == "" ? "" : " AND ") . "Username LIKE '" . $Database->Escape($username) . "%'";
        return self::_load(self::GetTableName(__CLASS__), ($returnArray ? "" : __CLASS__), $where, "Username", $limit, $offset, $count);
    }

    public static function CheckLogin($username, $password, &$account = null) {
        global $Database;
        $account = null;
        $query = sprintf("SELECT * FROM " . self::GetTableName(__CLASS__) . " WHERE Username = '%s' AND Password = '%s'", $Database->Escape($username), $Database->Escape(md5($password)));
        $res = $Database->Query($query);
        if ($res) {
            $row = $Database->FetchAssoc($res);
            if ($row) {
                $account = new self($row);
                return TRUE;
            }
        }
        return FALSE;
    }

    public static function GetSession() {
        $id = (!isset($_SESSION["AdminId"]) ? 0 : intval($_SESSION["AdminId"]));
        $account = new self($id);
        return $account;
    }

    public static function SetSession(&$account) {
        global $AdminLogged, $Database;
        if ($account && is_a($account, __CLASS__) && $account->Id > 0) {
            $AdminLogged = $account;
            $_SESSION["AdminId"] = $account->Id;
        }
    }

    public static function UnsetSession() {
        global $AdminLogged;
        $AdminLogged = new self();
        $_SESSION["AdminId"] = 0;
    }

    public static function Logout() {
        self::UnsetSession();
    }

    public function Save() {
        global $Database;
        if ($this->Id < 1) {
            $query = sprintf("INSERT INTO %s (Username, Password) VALUES ('%s', '%s')",
                    self::GetTableName(__CLASS__),
                    $Database->Escape($this->Username),
                    $Database->Escape($this->Password));
        } else {
            $query = sprintf("UPDATE %s SET Username = '%s', Password = '%s' WHERE Id = %d",
                    self::GetTableName(__CLASS__),
                    $Database->Escape($this->Username),
                    $Database->Escape($this->Password),
                    $this->Id);
        }
        $saved = $Database->Query($query);
        if ($saved) {
            if ($this->Id <= 0)
                $this->Id = $Database->InsertedId();
            return TRUE;
        }
        return FALSE;
    }

    public function Delete() {
        if ($this->Id < 1)
            return FALSE;
        return $this->_Delete(self::GetTableName(__CLASS__), "Id = " . $this->Id);
    }

    public function ToJson () {
        if ($this->Id < 1)
            return json_decode(array());
        $array = Utils::ObjectToArray($this);
        // Remove password from response
        unset($array["Password"]);
        return json_encode($array);
    }
}