diff options
| author | friendica <info@friendica.com> | 2012-01-12 15:46:39 -0800 |
|---|---|---|
| committer | friendica <info@friendica.com> | 2012-01-12 15:46:39 -0800 |
| commit | 4b6990e1ff42a509144b9b28f9377b2c9d9df3d9 (patch) | |
| tree | b53b3a9e690c1d8b6af96368eb5c97f2bde2e835 /include/api.php | |
| parent | 0856935d75701fe6076a32ce80a4f0326ba85b2a (diff) | |
| download | volse-hubzilla-4b6990e1ff42a509144b9b28f9377b2c9d9df3d9.tar.gz volse-hubzilla-4b6990e1ff42a509144b9b28f9377b2c9d9df3d9.tar.bz2 volse-hubzilla-4b6990e1ff42a509144b9b28f9377b2c9d9df3d9.zip | |
modularise successful authentication
Diffstat (limited to 'include/api.php')
| -rw-r--r-- | include/api.php | 30 |
1 files changed, 3 insertions, 27 deletions
diff --git a/include/api.php b/include/api.php index 9cf4551bd..aa05f0ad5 100644 --- a/include/api.php +++ b/include/api.php @@ -85,36 +85,12 @@ header('HTTP/1.0 401 Unauthorized'); die('This api requires login'); } - $_SESSION['uid'] = $record['uid']; - $_SESSION['theme'] = $record['theme']; - $_SESSION['authenticated'] = 1; - $_SESSION['page_flags'] = $record['page-flags']; - $_SESSION['my_url'] = $a->get_baseurl() . '/profile/' . $record['nickname']; - $_SESSION['addr'] = $_SERVER['REMOTE_ADDR']; - - //notice( t("Welcome back ") . $record['username'] . EOL); - $a->user = $record; - - if(strlen($a->user['timezone'])) { - date_default_timezone_set($a->user['timezone']); - $a->timezone = $a->user['timezone']; - } - $r = q("SELECT * FROM `contact` WHERE `uid` = %s AND `self` = 1 LIMIT 1", - intval($_SESSION['uid'])); - if(count($r)) { - $a->contact = $r[0]; - $a->cid = $r[0]['id']; - $_SESSION['cid'] = $a->cid; - } - q("UPDATE `user` SET `login_date` = '%s' WHERE `uid` = %d LIMIT 1", - dbesc(datetime_convert()), - intval($_SESSION['uid']) - ); + require_once('include/security.php'); + authenticate_success($record); call_hooks('logged_in', $a->user); - header('X-Account-Management-Status: active; name="' . $a->user['username'] . '"; id="' . $a->user['nickname'] .'"'); } /************************** @@ -125,7 +101,7 @@ foreach ($API as $p=>$info){ if (strpos($a->query_string, $p)===0){ $called_api= explode("/",$p); - #unset($_SERVER['PHP_AUTH_USER']); + //unset($_SERVER['PHP_AUTH_USER']); if ($info['auth']===true && local_user()===false) { api_login($a); } |