SproutCMS

/modules/Welcome/Controllers/WelcomeController.php   Highlighted file source

Line 35: use Sprout\Helpers\Session;
Line 50: Session::instance();
Line 97: unset($_SESSION['database_config']);
Line 233: unset($_SESSION['database_config']);
Line 235: $data = Form::loadFromSession('db_conf');
Line 280: $_SESSION['db_conf']['field_values'] = Validator::trim($_POST);
Line 286: $_SESSION['db_conf']['field_errors'] = $valid->getFieldErrors();
Line 289: unset($_SESSION['db_conf']);
Line 292: $_SESSION['database_config'] = $_POST;
Line 324: $config = self::genDbConfig($_SESSION['database_config']);
Line 418: $config = self::genPassConfig($_SESSION['database_config']);
Line 482: Form::loadFromSession('super_op');
Line 501: $users = AdminAuth::injectLocalSuperConf($_SESSION['supeop_config']['user'], $_SESSION['supeop_config']['hash'], $_SESSION['supeop_config']['salt']);
Line 552: $_SESSION['super_op']['field_values'] = Validator::trim($_POST);
Line 584: $_SESSION['super_op']['field_errors'] = $valid->getFieldErrors();
Line 587: unset($_SESSION['super_op']['field_errors']);
Line 608: $_SESSION['supeop_config'] = $_GET;

/sprout/Controllers/Admin/ManagedAdminController.php   Highlighted file source

Line 41: use Sprout\Helpers\Session;
Line 209: Session::instance();
Line 537: // Replace the pre-filled values with session values if found
Line 538: if (!empty($_SESSION['admin']['field_values'])) {
Line 539: $data = $_SESSION['admin']['field_values'];
Line 540: unset ($_SESSION['admin']['field_values']);
Line 574: $_SESSION['admin']['field_values'] = Validator::trim($_POST);
Line 621: $_SESSION['admin']['field_errors'] = $valid->getFieldErrors();
Line 989: // If no mode set, use the session
Line 990: // If a mode is set and valid, save in the session
Line 992: $_GET['main_mode'] = @$_SESSION['admin'][$this->controller_name]['main_mode'];
Line 994: $_SESSION['admin'][$this->controller_name]['main_mode'] = $_GET['main_mode'];
Line 1197: if (!empty($_SESSION['admin']['field_values'])) {
Line 1198: $data = $_SESSION['admin']['field_values'];
Line 1199: unset($_SESSION['admin']['field_values']);
Line 1203: if (!empty($_SESSION['admin']['field_errors'])) {
Line 1204: $errors = $_SESSION['admin']['field_errors'];
Line 1205: unset($_SESSION['admin']['field_errors']);
Line 1394: // Overlay session data
Line 1395: if (!empty($_SESSION['admin']['field_values'])) {
Line 1396: $data = $_SESSION['admin']['field_values'];
Line 1397: unset($_SESSION['admin']['field_values']);
Line 1401: if (!empty($_SESSION['admin']['field_errors'])) {
Line 1402: $errors = $_SESSION['admin']['field_errors'];
Line 1403: unset($_SESSION['admin']['field_errors']);
Line 1556: if (!empty($_SESSION['admin']['field_values'])) {
Line 1557: $data = $_SESSION['admin']['field_values'];
Line 1558: unset ($_SESSION['admin']['field_values']);
Line 1562: if (!empty($_SESSION['admin']['field_errors'])) {
Line 1563: $errors = $_SESSION['admin']['field_errors'];
Line 1564: unset($_SESSION['admin']['field_errors']);

/sprout/Controllers/AdminAjaxController.php   Highlighted file source

Line 35: use Sprout\Helpers\Session;
Line 56: $this->session = Session::instance();
Line 368: Navigation::loadPageTree($_SESSION['admin']['active_subsite'], true);

/sprout/Controllers/CaptchaController.php   Highlighted file source

Line 17: use Sprout\Helpers\Session;
Line 30: * @param int $num Number used to differentiate between multiple CAPTCHA codes held in session
Line 35: Session::instance();
Line 41: $_SESSION['captcha'][$num] = $captcha_code;

/sprout/Controllers/EmailShareController.php   Highlighted file source

Line 26: use Sprout\Helpers\Session;
Line 46: Session::instance();
Line 83: $data = @$_SESSION['email_share']['field_values'];
Line 109: if (!empty($_SESSION['email_share']['field_errors'])) {
Line 110: $form->errors = $_SESSION['email_share']['field_errors'];
Line 114: if (empty($_SESSION['email_share']['captcha_passed'])) {
Line 150: $_SESSION['email_share']['field_values'] = Validator::trim($_POST);
Line 161: if (empty($_SESSION['email_share']['captcha_passed'])) {
Line 163: $_SESSION['email_share']['captcha_passed'] = true;
Line 171: $_SESSION['email_share']['field_errors'] = $valid->getFieldErrors();
Line 192: unset($_SESSION['email_share']);

/sprout/Controllers/MultiStepFormController.php   Highlighted file source

Line 23: use Sprout\Helpers\Session;
Line 41: /** Key for partitioning session data associated with this form, i.e. $_SESSION[$this->session_key] */
Line 42: protected $session_key = 'DUMMY';
Line 74: $session = $this->getSession();
Line 75: $this->checkStep($session, $step);
Line 77: $data = @$session['data'];
Line 87: $view->session_key = $this->session_key;
Line 91: if (!empty($session['field_errors'])) {
Line 92: $view->errors = $session['field_errors'];
Line 133: $session = &self::getSession();
Line 134: $this->checkStep($session, $step);
Line 140: if (!isset($session['data'])) $session['data'] = array();
Line 155: $session['step'] = $step;
Line 175: protected function checkStep($session, $step)
Line 177: $session_step = (int) @$session['step'];
Line 178: if ($session_step < 1) $session_step = 1;
Line 180: if ($session_step >= $step) return;
Line 182: Url::redirect($this->buildUrl($session_step));
Line 187: * Instantiate the session and make sure the session key is useable
Line 190: protected function &getSession() {
Line 191: $session = Session::instance();
Line 192: if (!isset($_SESSION[$this->session_key])) {
Line 193: $_SESSION[$this->session_key] = array();
Line 195: return $_SESSION[$this->session_key];
Line 210: $session = &self::getSession();
Line 221: $session['data'][$name] = @$_POST[$name];
Line 226: $session['field_errors'] = $valid->getFieldErrors();
Line 230: unset($session['field_errors']);
Line 278: * must match those used in the $session['data'] array. Each of the
Line 291: $session = &self::getSession();
Line 292: $data = $session['data'];
Line 294: if (IN_PRODUCTION) unset($_SESSION[$this->session_key]);

/sprout/Helpers/AdminAuth.php   Highlighted file source

Line 60: Session::instance();
Line 61: if (!empty($_SESSION[self::KEY]['login_id'])) {
Line 78: Session::instance();
Line 118: $_SESSION[self::KEY]['tfa_id'] = $admin['id'];
Line 120: $_SESSION[self::KEY]['login_id'] = $admin['id'];
Line 123: $_SESSION[self::KEY]['super'] = false;
Line 124: $_SESSION[self::KEY]['remote'] = false;
Line 125: $_SESSION[self::KEY]['lock_key'] = Admin::createLockKey();
Line 146: Session::instance();
Line 148: $operator_id = $_SESSION[self::KEY]['login_id'];
Line 202: Session::instance();
Line 203: $_SESSION[self::KEY]['super'] = true;
Line 204: $_SESSION[self::KEY]['remote'] = false;
Line 205: $_SESSION[self::KEY]['login_id'] = $uid;
Line 206: $_SESSION[self::KEY]['login_user'] = $user;
Line 207: $_SESSION[self::KEY]['lock_key'] = Admin::createLockKey();
Line 272: // Session::instance();
Line 273: // $_SESSION[self::KEY]['super'] = true;
Line 274: // $_SESSION[self::KEY]['remote'] = true;
Line 275: // $_SESSION[self::KEY]['login_id'] = $uid;
Line 276: // $_SESSION[self::KEY]['lock_key'] = Admin::createLockKey();
Line 292: Session::instance();
Line 294: $operator_id = $_SESSION[self::KEY]['login_id'];
Line 364: Session::instance();
Line 365: unset($_SESSION[self::KEY]);
Line 375: Session::instance();
Line 376: return @$_SESSION[self::KEY]['login_id'];
Line 387: Session::instance();
Line 388: return self::hasDatabaseRecord() ? @$_SESSION[self::KEY]['login_id'] : 0;
Line 400: Session::instance();
Line 406: return Pdb::q($q, [$_SESSION[self::KEY]['login_id']], 'row');
Line 408: } else if ($_SESSION[self::KEY]['remote']) {
Line 414: 'id' => $_SESSION[self::KEY]['login_id'],
Line 415: 'name' => $_SESSION[self::KEY]['login_user'] . ' (super-op)',
Line 416: 'username' => $_SESSION[self::KEY]['login_user'],
Line 432: Session::instance();
Line 434: if ($_SESSION[self::KEY]['login_id'] == false) return false;
Line 435: if ($_SESSION[self::KEY]['super'] == true) return true;
Line 446: $hascat = Pdb::q($q, [$_SESSION[self::KEY]['login_id'], $category_id], 'arr');
Line 460: Session::instance();
Line 462: if ($_SESSION[self::KEY]['login_id'] == false) return array();
Line 471: return Pdb::q($q, [$_SESSION[self::KEY]['login_id']], 'col');
Line 492: Session::instance();
Line 493: return !empty($_SESSION[self::KEY]['super']);
Line 504: Session::instance();
Line 505: return empty($_SESSION[self::KEY]['super']);

/sprout/Helpers/Csrf.php   Highlighted file source

Line 23: * Initialises the PHP session and, if not present, generates a CSRF secret for the session
Line 27: protected static function initialiseSession()
Line 29: Session::instance();
Line 31: if (!isset($_SESSION['csrf_token'])) {
Line 32: $_SESSION['csrf_token'] = Security::randStr(32);
Line 43: self::initialiseSession();
Line 45: return '<input type="hidden" name="edit_token" value="' . Enc::html($_SESSION['csrf_token']) . '">';
Line 56: Session::instance();
Line 59: if (empty($_POST['edit_token']) or empty($_SESSION['csrf_token'])) {
Line 63: if ($_POST['edit_token'] !== $_SESSION['csrf_token']) {
Line 79: Notification::error('Session timeout or missing security token');
Line 95: self::initialiseSession();
Line 97: return $_SESSION['csrf_token'];

/sprout/Helpers/DisplayConditions/Acquisition/Referrer.php   Highlighted file source

Line 17: use Sprout\Helpers\SessionStats;
Line 21: * Display condtion for the full HTTP referrer when the session started
Line 34: return SessionStats::referrer();

/sprout/Helpers/DisplayConditions/Acquisition/UtmMedium.php   Highlighted file source

Line 17: use Sprout\Helpers\SessionStats;
Line 34: return SessionStats::utmMedium();

/sprout/Helpers/DisplayConditions/Session/ThisPageviews.php   Highlighted file source

Line 14: namespace Sprout\Helpers\DisplayConditions\Session;
Line 17: use Sprout\Helpers\SessionStats;
Line 36: return SessionStats::numPageviews($url);

/sprout/Helpers/DisplayConditions/Session/TotalPageviews.php   Highlighted file source

Line 14: namespace Sprout\Helpers\DisplayConditions\Session;
Line 17: use Sprout\Helpers\SessionStats;
Line 21: * Display condition for total pageviews this session
Line 34: return SessionStats::totalPageviews();

/sprout/Helpers/Drivers/Session/Cache.php   Highlighted file source

Line 16: namespace Sprout\Helpers\Drivers\Session;
Line 23: use Sprout\Helpers\Session;
Line 27: * Session cache driver.
Line 29: * Cache library config goes in the session.storage config entry:
Line 35: * overridden by the session expiration setting.
Line 37: class Cache implements Session
Line 46: if (Kohana::config('session.encryption'))
Line 51: Kohana::log('debug', 'Session Cache Driver Initialized');
Line 56: $config = Kohana::config('session.storage');
Line 72: $config['lifetime'] = (Kohana::config('session.expiration') == 0) ? 86400 : Kohana::config('session.expiration');
Line 85: $id = 'session_'.$id;
Line 88: return Kohana::config('session.encryption') ? $this->encrypt->decode($data) : $data;
Line 97: $id = 'session_'.$id;
Line 98: $data = Kohana::config('session.encryption') ? $this->encrypt->encode($data) : $data;
Line 105: $id = 'session_'.$id;
Line 111: session_regenerate_id(TRUE);
Line 113: // Return new session id
Line 114: return session_id();
Line 123: } // End Session Cache Driver

/sprout/Helpers/Drivers/SessionDriver.php   Highlighted file source

Line 20: * Session driver interface
Line 22: interface SessionDriver {
Line 25: * Opens a session.
Line 28: * @param string session name
Line 34: * Closes a session.
Line 41: * Reads a session.
Line 43: * @param string session id
Line 49: * Writes a session.
Line 51: * @param string session id
Line 52: * @param string session data
Line 58: * Destroys a session.
Line 60: * @param string session id
Line 66: * Regenerates the session id.
Line 75: * @param integer session expiration period
Line 80: } // End Session Driver Interface

/sprout/Helpers/FileUpload.php   Highlighted file source

Line 37: * // Expects $_SESSION['file_uploads']['user_details']['avatar']['code'] to be set
Line 41: * @param string $sess_key Session key related to the form, e.g. 'user-register';
Line 79: if (!isset($_SESSION['file_uploads'][$sess_key][$field][$upload_code])) {
Line 80: throw new FileUploadException('Upload session lost');
Line 124: * Generates a fake upload, including a session entry and a temp symlink, from an existing file on disk.
Line 129: * @param string $session_key The session key used for file uploads, e.g. 'user-register'
Line 136: public static function generateFromDisk($filename, $session_key, $field_name)
Line 151: $_SESSION['file_uploads'][$session_key][$field_name][$code] = ['size' => filesize($real_file)];

/sprout/Helpers/Needs.php   Highlighted file source

Line 311: Session::Instance();
Line 312: if (empty($_SESSION['gtm_datalayers'])) $_SESSION['gtm_datalayers'] = [];
Line 313: $_SESSION['gtm_datalayers'][] = $data;
Line 324: Session::Instance();
Line 325: if (empty($_SESSION['gtm_datalayers'])) return;
Line 330: foreach ($_SESSION['gtm_datalayers'] as $data) {
Line 336: unset($_SESSION['gtm_datalayers']);

/sprout/Helpers/Session.php   Highlighted file source

Line 22: use Sprout\Helpers\Drivers\SessionDriver;
Line 25: * Session library.
Line 27: class Session
Line 30: // Session singleton
Line 34: protected static $protect = array('session_id', 'user_agent', 'last_activity', 'ip_address', 'total_hits', '_kf_flash_');
Line 44: * Singleton instance of Session.
Line 48: if (Session::$instance == NULL)
Line 51: new Session;
Line 54: return Session::$instance;
Line 58: * On first session instance creation, sets up the driver and creates session.
Line 63: $_SESSION = [];
Line 68: if (Session::$instance === NULL)
Line 71: Session::$config = Kohana::config('session');
Line 74: Session::$protect = array_combine(Session::$protect, Session::$protect);
Line 77: ini_set('session.gc_probability', (int) Session::$config['gc_probability']);
Line 78: ini_set('session.gc_divisor', 100);
Line 79: ini_set('session.gc_maxlifetime', (Session::$config['expiration'] == 0) ? 86400 : Session::$config['expiration']);
Line 81: // Create a new session
Line 84: if (Session::$config['regenerate'] > 0 AND ($_SESSION['total_hits'] % Session::$config['regenerate']) === 0)
Line 86: // Regenerate session id and update session cookie
Line 90: // Close the session on system shutdown (run before sending the headers), so that
Line 91: // the session cookie(s) can be written.
Line 95: Session::$instance = $this;
Line 100: * Get the session id.
Line 106: return $_SESSION['session_id'];
Line 110: * Create a new session.
Line 117: // Destroy any current sessions
Line 120: if (Session::$config['driver'] !== 'native')
Line 123: $driver = 'Sprout\\Helpers\\Drivers\\Session\\' . ucfirst(Session::$config['driver']);
Line 127: throw new Kohana_Exception('core.driver_not_found', Session::$config['driver'], get_class());
Line 130: Session::$driver = new $driver();
Line 133: if ( ! (Session::$driver instanceof SessionDriver))
Line 134: throw new Kohana_Exception('core.driver_implements', Session::$config['driver'], get_class(), 'SessionDriver');
Line 136: // Register non-native driver as the session handler
Line 137: session_set_save_handler
Line 139: array(Session::$driver, 'open'),
Line 140: array(Session::$driver, 'close'),
Line 141: array(Session::$driver, 'read'),
Line 142: array(Session::$driver, 'write'),
Line 143: array(Session::$driver, 'destroy'),
Line 144: array(Session::$driver, 'gc')
Line 148: // Validate the session name
Line 149: if ( ! preg_match('~^(?=.*[a-z])[a-z0-9_]++$~iD', Session::$config['name']))
Line 150: throw new Kohana_Exception('session.invalid_session_name', Session::$config['name']);
Line 152: // Name the session, this will also be the name of the cookie
Line 153: session_name(Session::$config['name']);
Line 155: // Set the session cookie parameters
Line 156: session_set_cookie_params
Line 158: Session::$config['expiration'],
Line 162: true // never allow javascript to access session cookies
Line 165: // Start the session!
Line 166: session_start();
Line 168: // Put session_id in the session variable
Line 169: $_SESSION['session_id'] = session_id();
Line 172: if ( ! isset($_SESSION['_kf_flash_']))
Line 174: $_SESSION['total_hits'] = 0;
Line 175: $_SESSION['_kf_flash_'] = array();
Line 177: $_SESSION['user_agent'] = Kohana::$user_agent;
Line 178: $_SESSION['ip_address'] = Request::userIp();
Line 182: Session::$flash =& $_SESSION['_kf_flash_'];
Line 185: $_SESSION['total_hits'] += 1;
Line 188: if ($_SESSION['total_hits'] > 1)
Line 190: // Validate the session
Line 191: foreach (Session::$config['validate'] as $valid)
Line 197: if ($_SESSION[$valid] !== Kohana::$user_agent)
Line 203: if ($_SESSION[$valid] !== Request::userIp())
Line 209: if (time() - $_SESSION['last_activity'] > ini_get('session.gc_maxlifetime'))
Line 220: $_SESSION['last_activity'] = time();
Line 223: Session::set($vars);
Line 227: * Regenerates the global session id.
Line 233: if (Session::$config['driver'] === 'native')
Line 235: // Generate a new session id
Line 236: // Note: also sets a new session cookie with the updated id
Line 237: session_regenerate_id(TRUE);
Line 239: // Update session with new id
Line 240: $_SESSION['session_id'] = session_id();
Line 245: $_SESSION['session_id'] = Session::$driver->regenerate();
Line 248: // Get the session name
Line 249: $name = session_name();
Line 253: // Change the cookie value to match the new session id to prevent "lag"
Line 256: $_SESSION['session_id'],
Line 257: Session::$config['expiration'],
Line 267: * Destroys the current session.
Line 273: if (session_id() !== '')
Line 275: // Get the session name
Line 276: $name = session_name();
Line 278: // Destroy the session
Line 279: session_destroy();
Line 282: $_SESSION = array();
Line 284: // Delete the session cookie
Line 290: * Runs the system.session_write event, then calls session_write_close.
Line 302: // Run the events that depend on the session being open
Line 303: Event::run('system.session_write');
Line 308: // Close the session
Line 309: session_write_close();
Line 314: * Set a session variable.
Line 332: if (isset(Session::$protect[$key]))
Line 336: $_SESSION[$key] = $val;
Line 362: Session::$flash[$key] = 'new';
Line 363: Session::set($key, $val);
Line 375: $keys = ($keys === NULL) ? array_keys(Session::$flash) : func_get_args();
Line 379: if (isset(Session::$flash[$key]))
Line 381: Session::$flash[$key] = 'new';
Line 387: * Expires old flash data and removes it from the session.
Line 399: if ( ! empty(Session::$flash))
Line 401: foreach (Session::$flash as $key => $state)
Line 406: unset(Session::$flash[$key], $_SESSION[$key]);
Line 411: Session::$flash[$key] = 'old';
Line 425: * @return mixed Variable data if key specified, otherwise array containing all session data.
Line 430: return $_SESSION;
Line 432: $result = isset($_SESSION[$key]) ? $_SESSION[$key] : Kohana::keyString($_SESSION, $key);
Line 458: $return = Session::get($key, $default);
Line 459: Session::delete($key);
Line 476: if (isset(Session::$protect[$key]))
Line 480: unset($_SESSION[$key]);
Line 486: * Removes all session variables.
Line 490: foreach ($_SESSION as $key => $_) {
Line 491: unset($_SESSION[$key]);
Line 497: * Return the entire session object.
Line 503: return $_SESSION;
Line 506: } // End Session Class

/sprout/Helpers/SproutVariable.php   Highlighted file source

Line 38: public $session;
Line 55: $this->session = new Session();

/sprout/sprout_load.php   Highlighted file source

Line 16: use Sprout\Helpers\SessionStats;
Line 21: SessionStats::init();
Line 66: Register::displayCondition('Sprout\\Helpers\\DisplayConditions\\Session\\TimeOnSite', 'Session', 'Minutes on site');
Line 67: Register::displayCondition('Sprout\\Helpers\\DisplayConditions\\Session\\ThisPageviews', 'Session', 'Pageviews');
Line 68: Register::displayCondition('Sprout\\Helpers\\DisplayConditions\\Session\\TotalPageviews', 'Session', 'Pageviews (total)');
Line 69: Register::displayCondition('Sprout\\Helpers\\DisplayConditions\\Session\\UniquePageviews', 'Session', 'Pageviews (unique)');