root/original/common/class.session.php

<?
  require_once( "db.php" );

  class Session {

    function Session( $cookie, $ip )
    {
      $this->qry_ = new DBQuery();
      $this->sql_ = "select *
                       from kb3_sessions ses
                      where ses.ses_id = '".$cookie."'
                        and ses.ses_ip = '".$ip."'";
    }

    function isAdmin()
    {
      $this->execQuery();
      return $this->qry_->recordCount() == 1;
    }

    function isSuperAdmin()
    {
      $this->execQuery();
      return $this->qry_->recordCount() == 1 && $this->row_['ses_super'] = 1;
    }

    function execQuery()
    {
      if ( !$this->qry_->executed_ )
        $this->qry_->execute( $this->sql_ );

      $this->row_ = $this->qry_->getRow();
    }

    function cleanup()
    {
      $qry = new DBQuery();
      $qry->execute( "delete from kb3_sessions
                       where ses_logon < date_sub( now(),
                                                   INTERVAL '120:0'
                                                   MINUTE_SECOND )" );
    }

    function create( $super )
    {
      $current = time();
      $random = $_SERVER['REMOTE_ADDR'].$current.KB_SITE;
      $ses_id = md5( $random );
                                                                                
      if ( !setcookie( "EVK_COOKIE", $ses_id, 0 ) )
        die( "Unable to set cookie" );

      $qry = new DBQuery();
      $qry->execute( "insert into kb3_sessions values ( '".$ses_id."',
                                                        '".$_SERVER['REMOTE_ADDR']."',
                                                        now(),
                                                        ".$super." )" );
      
    }
  }
?>