mirror of
https://github.com/avecms/AVE.cms.git
synced 2026-08-01 08:45:44 +00:00
77 lines
2.5 KiB
PHP
77 lines
2.5 KiB
PHP
<?php
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------------------
|
|
| AVE.cms
|
|
|--------------------------------------------------------------------------------------
|
|
| @package AVE.cms
|
|
| @file adminx/modules/Users/migrations/002_harden_public_remember_tokens.php
|
|
| @author AVE.cms <support@ave-cms.ru>
|
|
| @copyright 2007-2026 (c) AVE.cms
|
|
| @link https://ave-cms.ru
|
|
| @version 3.3
|
|
*/
|
|
|
|
defined('BASEPATH') || die('Direct access to this location is not allowed.');
|
|
|
|
use App\Common\DatabaseSchema;
|
|
use App\Content\PublicUserTables;
|
|
|
|
return function (array $context = array()) {
|
|
$table = PublicUserTables::table('users_session');
|
|
if (!DatabaseSchema::tableExists($table)) {
|
|
return 0;
|
|
}
|
|
|
|
$operations = 0;
|
|
$columns = array(
|
|
'token_version' => 'TINYINT UNSIGNED NOT NULL DEFAULT 1 AFTER `hash`',
|
|
'created_at' => 'INT UNSIGNED NOT NULL DEFAULT 0 AFTER `last_active`',
|
|
'expires_at' => 'INT UNSIGNED NOT NULL DEFAULT 0 AFTER `created_at`',
|
|
);
|
|
foreach ($columns as $name => $definition) {
|
|
if (!DatabaseSchema::columnExists($table, $name)) {
|
|
DatabaseSchema::alter('ALTER TABLE `' . $table . '` ADD COLUMN `' . $name . '` ' . $definition);
|
|
$operations++;
|
|
}
|
|
}
|
|
|
|
$now = time();
|
|
$ttl = defined('COOKIE_LIFETIME') ? max(3600, (int) COOKIE_LIFETIME) : 1209600;
|
|
DB::query(
|
|
'UPDATE `' . $table . '` SET'
|
|
. ' `hash`=SHA2(`hash`,256),`token_version`=2,'
|
|
. ' `created_at`=IF(`last_active`>0,`last_active`,%i),'
|
|
. ' `expires_at`=IF(`last_active`>0,`last_active`,%i)+%i'
|
|
. ' WHERE `token_version`<2',
|
|
$now,
|
|
$now,
|
|
$ttl
|
|
);
|
|
if (DB::affectedRows() > 0) { $operations++; }
|
|
|
|
DB::query(
|
|
'DELETE old_token FROM `' . $table . '` old_token'
|
|
. ' INNER JOIN `' . $table . '` keep_token'
|
|
. ' ON keep_token.`hash`=old_token.`hash` AND keep_token.`id`>old_token.`id`'
|
|
);
|
|
if (DB::affectedRows() > 0) { $operations++; }
|
|
|
|
DatabaseSchema::alter(
|
|
'ALTER TABLE `' . $table . '` MODIFY `hash` CHAR(64) CHARACTER SET ascii COLLATE ascii_bin NOT NULL'
|
|
);
|
|
$operations++;
|
|
|
|
if (!DatabaseSchema::indexExists($table, 'uniq_remember_hash')) {
|
|
DatabaseSchema::alter('ALTER TABLE `' . $table . '` ADD UNIQUE KEY `uniq_remember_hash` (`hash`)');
|
|
$operations++;
|
|
}
|
|
|
|
if (!DatabaseSchema::indexExists($table, 'idx_remember_expiry')) {
|
|
DatabaseSchema::alter('ALTER TABLE `' . $table . '` ADD KEY `idx_remember_expiry` (`expires_at`)');
|
|
$operations++;
|
|
}
|
|
|
|
return $operations;
|
|
};
|