<?
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");
header('Access-Control-Allow-Origin: *');

function EncerrarSessao() {
	conectar();
	$cookie=$_COOKIE['authtoken']??null;
	if (!empty($cookie)){
		dbquery("DELETE FROM SESSAO WHERE TOKEN='$cookie'");
	}
	unset($_SESSION['login']);
	unset($_COOKIE['authtoken']); 
    setcookie('authtoken', null, -1, '/'); 
	session_destroy();
}
function ip() {
    $ipaddress = '';
    if (isset($_SERVER['HTTP_CLIENT_IP']))
        $ipaddress = $_SERVER['HTTP_CLIENT_IP'];
    else if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
        $ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR'];
    else if(isset($_SERVER['HTTP_X_FORWARDED']))
        $ipaddress = $_SERVER['HTTP_X_FORWARDED'];
    else if(isset($_SERVER['HTTP_FORWARDED_FOR']))
        $ipaddress = $_SERVER['HTTP_FORWARDED_FOR'];
    else if(isset($_SERVER['HTTP_FORWARDED']))
        $ipaddress = $_SERVER['HTTP_FORWARDED'];
    else if(isset($_SERVER['REMOTE_ADDR']))
        $ipaddress = $_SERVER['REMOTE_ADDR'];
    else
        $ipaddress = 'UNKNOWN';
    return $ipaddress;
}
function conectar() {
	global $cfg;
	$ret= dbConnect($cfg['host'], $cfg['user'], $cfg['pass'],$cfg['dbname']);
	mysqli_set_charset($cfg['link'],'utf8');
	mysqli_query($cfg['link'],"SET SESSION character_set_results = 'UTF8'");
	return $ret;
}
function generate_hash($password, $cost=11){
        /* To generate the salt, first generate enough random bytes. Because
         * base64 returns one character for each 6 bits, the we should generate
         * at least 22*6/8=16.5 bytes, so we generate 17. Then we get the first
         * 22 base64 characters
         */
        $salt=substr(base64_encode(openssl_random_pseudo_bytes(17)),0,22);
        /* As blowfish takes a salt with the alphabet ./A-Za-z0-9 we have to
         * replace any '+' in the base64 string with '.'. We don't have to do
         * anything about the '=', as this only occurs when the b64 string is
         * padded, which is always after the first 22 characters.
         */
        $salt=str_replace("+",".",$salt);
        /* Next, create a string that will be passed to crypt, containing all
         * of the settings, separated by dollar signs
         */
        $param='$'.implode('$',array(
                "2y", //select the most secure version of blowfish (>=PHP 5.3.7)
                str_pad($cost,2,"0",STR_PAD_LEFT), //add the cost in two digits
                $salt //add the salt
        ));
       
        //now do the actual hashing
        return crypt($password,$param);
}
/*
function SessaoOK() {
	//echo generate_hash(123);
	//exit;
	
	global $cfg;
	date_default_timezone_set('America/Belem');
	$datatime = date("Y-m-d H:i:s");
	$ret = FALSE;
	if (conectar()) {
		
		$email=addslashes($_POST['usuario']?? null);
		$senha=addslashes($_POST['senha']?? null);
		//PRINT_r($_SESSION);
  		
		if (($_SESSION['login']['expira']?? null) < time() || ($_POST['senha']?? null)) {	
			//ECHO $_SESSION['login']['expira']."-".time();
			if ($email){
				$q = dbQuery("select * FROM CLIENTE WHERE EMAIL = '$email' AND SNATIVO = 'S'");
				if ($_SESSION['login'] = dbfetcharray($q)) { 
						//ECHO crypt($senha,$_SESSION[login][SENHA]);
						//echo $_SESSION[login][SENHA];
						if (crypt($senha,$_SESSION['login']['SENHA']) === $_SESSION['login']['SENHA']) {
							
							$_SESSION['login']['expira'] = time() + $cfg['sessao']* 60;
							$_SESSION['login']['TIPO_USUARIO'] = 'CLIENTE';
							$ret=true;
							
						} else {
							$_SESSION['login']['erro']="EMAIL/Senha inválidos";
						}
									
				} else {
					$_SESSION['login']=array();
					$_SESSION['login']['erro']="EMAIL/Senha inválidos";
				}
			} else {
				$_SESSION['login']['erro']="EMAIL/Senha inválidos";
				
			}			
		
		} else {

				//echo "aqui";
				$_SESSION['login']['expira'] = time() + $cfg['sessao'] * 60;
				$ret = TRUE; 
			
		}	
   	
	} else {
		$_SESSION['login']['erro']="Problema de conexão com o servidor, tente novamente em alguns instantes";
	}
	#return true;
	//echo $return;
	return $ret;
}
*/

function SessaoOK($forcar=false) {
	//echo generate_hash(123);
	//exit;
	
	global $cfg;
	date_default_timezone_set('America/Belem');
	$datatime = date("Y-m-d H:i:s");
	$ret = FALSE;
	if (conectar()) {
		
		$email=addslashes($_POST['usuario']?? null);
		$senha=addslashes($_POST['senha']?? null);
		//PRINT_r($_SESSION);
		if ($forcar){
				//ECHO $_SESSION[login][expira]."-".time();
				if ($email){
					$q = dbQuery($c="select * FROM CLIENTE WHERE EMAIL = '$email' AND SNATIVO = 'S'");
					if ($_SESSION['login'] = dbfetcharray($q)) { 
							//ECHO crypt($senha,$_SESSION[login][SENHA]);
							//echo $_SESSION[login][SENHA];
							if (crypt($senha,$_SESSION['login']['SENHA']) === $_SESSION['login']['SENHA']) {
								$cookie=aleatorio().md5("$email");
								setcookie("authtoken", $cookie, time() + (86400 * 30 *12 *10), "/");
								$ip=ip();
								dbquery("insert into SESSAO (EMAIL,TOKEN,IP) values ('$email','$cookie','$ip')");
								$_SESSION['login']['TIPO_USUARIO'] = 'CLIENTE';
								$ret=true;
								
							} else {
								$_SESSION['login']['erro']="EMAIL/Senha inválidos";
							}
										
					} else {
						$_SESSION['login']=array();
						$_SESSION['login']['erro']="EMAIL/Senha inválidos";
					}
				} else {
					$_SESSION['login']['erro']="EMAIL/Senha inválidos";
					
				}			

		} else {
						
			$cookie=$_COOKIE['authtoken']??null;
			if (!empty($cookie)){
				$email=dbfetchScalar("SELECT EMAIL from SESSAO WHERE TOKEN='$cookie'");
				if (!empty($email)){
					$q = dbQuery($c="select * FROM CLIENTE WHERE EMAIL = '$email' AND SNATIVO = 'S'");
					if ($_SESSION['login']=dbfetcharray($q)){
						$_SESSION['login']['TIPO_USUARIO'] = 'CLIENTE';
						$ret=true;
//print_r($_SESSION);
					} else {
						$_SESSION['login']['erro']="Sessão Inválida";
					}
				} else {
					$_SESSION['login']['erro']="Sessão Inválida";
				}
				
			} else {
				$_SESSION['login']['erro']="Sessão Inválida";
			}
		}   	
	} else {
		$_SESSION['login']['erro']="Problema de conexão com o servidor, tente novamente em alguns instantes";
	}
	#return true;
	//echo $return;
	return $ret;
}

function aleatorio() {
    $alphabet = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890';
    $pass = array(); //remember to declare $pass as an array
    $alphaLength = strlen($alphabet) - 1; //put the length -1 in cache
    for ($i = 0; $i < 10; $i++) {
        $n = rand(0, $alphaLength);
        $pass[] = $alphabet[$n];
    }
    return implode($pass); //turn the array into a string
}
?>