root/dev/common/class.session.php @ 30

<?php
require_once('db.php');

class Session
{
    function Session()
    {
        if ($_REQUEST['PHPSESSID'])
        {
            session_start();
        }
//        $this->qry_ = new DBQuery();
//        $this->sql_ = "select *
//                       from kb3_sessions ses
//                      where ses.ses_id = '" . $cookie . "'
//                      and ses.ses_ip = '" . $ip . "'";
    }

    function isAdmin()
    {
        return isset($_SESSION['admin']);

        $this->execQuery();
        return $this->qry_->recordCount() == 1;
    }

    function isSuperAdmin()
    {
        return isset($_SESSION['admin_super']);

        $this->execQuery();
        return ($this->qry_->recordCount() == 1 && $this->row_['ses_super'] == 1);
    }

    function execQuery()
    {
        return true;

        if (!$this->qry_->executed_)
            $this->qry_->execute($this->sql_);

        $this->row_ = $this->qry_->getRow();
    }

    function cleanup()
    {
        return true;

        $qry = new DBQuery();
        $qry->execute("delete from kb3_sessions
                       where ses_logon < date_sub( now(), INTERVAL '120:0' MINUTE_SECOND )");
    }

    function create($super)
    {
        session_start();
        $_SESSION['admin'] = 1;
        $_SESSION['admin_super'] = $super;
//        $current = time();
//        $random = $_SERVER['REMOTE_ADDR'] . $current . KB_SITE;
//        $ses_id = md5($random);
//
//        if (!setcookie("EVK_COOKIE", $ses_id, 0))
//            die("Unable to set cookie");
//
//        $qry = new DBQuery();
//        $qry->execute("insert into kb3_sessions values ('" . $ses_id . "',
//                                                        '" . $_SERVER['REMOTE_ADDR'] . "',
//                                                        now(), " . $super . " )");
    }
}
?>