dreamjob/app/Controller/Component/MiconwareSessionComponent.php

<?php
App::uses('Component', 'Controller');
class MiconwareSessionComponent extends Component {
	
	public $components = array('Session');
	
	public function init($controller){
		$controller->Security->requireSecure();
		$this->User = ClassRegistry::init('User');
	}
	
	public function initWeb($controller){
		$controller->set("isLoggedin",$this->isLoggedin());
		$controller->set("isStaff",$this->isStaff());
		$controller->set("MEDIA_URL","http://dev.dreamjob.cc/media/");
		$controller->set('default',array(
			'inputDefaults' => array(
				'div' => array('class' => 'control-group'),
				'label' => array('class' => 'control-label'),
				'between' => '<div class="controls">',
				'after' => '</div>',
				'class' => ''))
			);
	}
	
	public function isLoggedin(){
		return $this->Session->check('user');
	}
	
	public function isStaff(){
		return true;
	}

	public function login($mail,$password){
		$users=$this->User->find('first', array(
			'fields' => array('User.id','User.password'),
			'conditions' => array('User.mail' => $mail)
		));
		if($this->validate_password($password,$users['User']['password']) and !$this->isLoggedin()){
			echo $users['User']['id'];
			$this->Session->write('user',$users['User']['id']);
			return true;
		}
		return false;
	}

	public function logout(){
		if($this->isLoggedin()){
			$this->Session->delete('user');
			return true;
		}
		return false;
	}

	public function setFlash($message,$element = 'flash',$params = array(),$key = 'flash') {
		$this->Session->setFlash($message, $element,$params,$key);
	}
	
	public function getApplication($appDirectory,$user_id=false){
		if(!$user_id)
			$user_id = $this->Session->read('user');
		$this->$appDirectory = ClassRegistry::init($appDirectory);
		return $this->$appDirectory->find('first',array(
			'conditions' => array('AppUser.user_id' => $user_id)
		));
	}
	/**
	 * PasswordHasg
	 */
	private function create_hash($password)
	{
		$salt = base64_encode(mcrypt_create_iv(8, MCRYPT_DEV_URANDOM));
		return "pbkdf2_sha1$10000$" .  $salt . "$" .base64_encode($this->pbkdf2("sha1",$password,$salt,10000,20,true));
	}

	private function validate_password($password, $correct_hash)
	{
		$params = explode("$", $correct_hash);
		if(count($params) < 4) return false; 
			$pbkdf2 = base64_decode($params[3]);
		return $this->slow_equals($pbkdf2,$this->pbkdf2($params[0],$password,$params[2],(int)$params[1],strlen($pbkdf2),true));
	}

	private function slow_equals($a, $b)
	{
		$diff = strlen($a) ^ strlen($b);
		for($i = 0; $i < strlen($a) && $i < strlen($b); $i++)
			$diff |= ord($a[$i]) ^ ord($b[$i]);
		return $diff === 0; 
	}

	private function pbkdf2($algorithm, $password, $salt, $count, $key_length, $raw_output = false)
	{
		$algorithm = strtolower(ltrim($algorithm,"pbkdf2_"));
		if(!in_array($algorithm, hash_algos(), true))
			die('PBKDF2 ERROR: Invalid hash algorithm.');
		if($count <= 0 || $key_length <= 0)
			die('PBKDF2 ERROR: Invalid parameters.');
		if (function_exists("hash_pbkdf2")) {
			if (!$raw_output)
				$key_length = $key_length * 2;
			return hash_pbkdf2($algorithm, $password, $salt, $count, $key_length, $raw_output);
		}
		$hash_length = strlen(hash($algorithm, "", true));
		$block_count = ceil($key_length / $hash_length);
		$output = "";
		for($i = 1; $i <= $block_count; $i++) {
			$last = $salt . pack("N", $i);
			$last = $xorsum = hash_hmac($algorithm, $last, $password, true);
			for ($j = 1; $j < $count; $j++)
				$xorsum ^= ($last = hash_hmac($algorithm, $last, $password, true));
			$output .= $xorsum;
		}    
		if($raw_output)
			return substr($output, 0, $key_length);
		else
			return bin2hex(substr($output, 0, $key_length));
	}
}
?>