Quick Authentication

print "<pre>";
print_r($USER);
print "</pre>";

my blog linkedin profile secret sauce

<?php
// quick_auth.php by Brian Moon
// once this script is in place, you will have a $USER variable
// that you can use anywhere you want.
/* eg:
	if($USER["user_id"]){
	    echo "logged into Phorum";
	} else {
	    // echo "logged out";
	}
*/

if(isset($_COOKIE["phorum_session_v5"])){

    if(isset($PHORUM["user"])){

        $GLOBALS["USER"] = $PHORUM["user"];

    } else {

        define("PHORUM", "quick_auth");

        // wrap all this in a function to protect it and other code
        function check_session()
        {
            // one of these needs to be commented out.
            $require = "cookie_sessid_lt";  // long term cookie that will exist over time
            //$require = "sessid_st"; // short term cookie that may not be required at all, but is more secure

            include_once($_SERVER["DOCUMENT_ROOT"]."/phorum/include/db/config.php");

            list( $user_id, $sess_id ) = explode( ":", $_COOKIE["phorum_session_v5"], 2 );

            $user = urldecode($user);

            if(get_magic_quotes_gpc()){
                $user=stripslashes($user);
                $md5pass=stripslashes($md5pass);
            }

            $conn=mysql_connect($PHORUM["DBCONFIG"]["server"], $PHORUM["DBCONFIG"]["user"], $PHORUM["DBCONFIG"]["password"], true);
            mysql_select_db($PHORUM["DBCONFIG"]["name"], $conn);

            $sql="select * from ".$PHORUM["DBCONFIG"]["table_prefix"]."_users where user_id='".mysql_escape_string($user_id)."' and $require='".mysql_escape_string($sess_id)."'";

            $res=mysql_query($sql, $conn);

            if(mysql_num_rows($res)){
                $USER=mysql_fetch_assoc($res);

                // first get names of profile fields from phorum_settings table
                $sql="select `data` from ".$PHORUM["DBCONFIG"]["table_prefix"]."_settings WHERE `name` = 'PROFILE_FIELDS'";
                $res=mysql_query($sql, $conn);
                $row = mysql_fetch_array($res);
                $profile_field_names = unserialize($row["data"]);

                // now get custom profile fields from phorum_user_custom_fields table
                $sql="select * from ".$PHORUM["DBCONFIG"]["table_prefix"]."_user_custom_fields where user_id='".mysql_escape_string($user_id)."'";
                $res=mysql_query($sql, $conn);
                if(mysql_num_rows($res)){
                	while ($row = mysql_fetch_array($res)){
                		$thistype = $row["type"];
                		$thisdata = $row["data"];
                		$thisfield = $profile_field_names[(int)$thistype]["name"];
                		$USER[$thisfield]=$thisdata;
                	}
                }
            } else {
                $USER=array();
            }

            $GLOBALS["USER"]=$USER;

        }
        check_session();
    }
}
?>