Cosmetics: death to tabs

The refactoring I've been doing has reminded me of my strong preference
for spaces, and I feel inclined to impose my will on the tree.

1 files changed, 651 insertions, 651 deletions

diff --git a/lib/class/vauth.class.php b/lib/class/vauth.class.php
index b978c35c..e6dcab43 100644
--- a/lib/class/vauth.class.php
+++ b/lib/class/vauth.class.php
@@ -1,5 +1,5 @@
 <?php
-/* vim:set tabstop=8 softtabstop=8 shiftwidth=8 noexpandtab: */
+/* vim:set softtabstop=4 shiftwidth=4 expandtab: */
 /**
  *
  * LICENSE: GNU General Public License, version 2 (GPLv2)
@@ -30,691 +30,691 @@
  */
 class vauth {
 
-	/**
-	 * Constructor
-	 * This should never be called
-	 */
-	private function __construct() {
-		// Rien a faire
-	} // __construct
+    /**
+     * Constructor
+     * This should never be called
+     */
+    private function __construct() {
+        // Rien a faire
+    } // __construct
 
-	/**
-	 * open
-	 * This function is for opening a new session so we just verify that we
-	 * have a database connection, nothing more is needed
-	 */
-	public static function open($save_path, $session_name) {
+    /**
+     * open
+     * This function is for opening a new session so we just verify that we
+     * have a database connection, nothing more is needed
+     */
+    public static function open($save_path, $session_name) {
 
-		if (!is_resource(Dba::dbh())) {
-			debug_event('SESSION', 'Error: no database connection session failed', '1');
-			return false;
-		}
+        if (!is_resource(Dba::dbh())) {
+            debug_event('SESSION', 'Error: no database connection session failed', '1');
+            return false;
+        }
 
-		return true;
+        return true;
 
-	} // open
+    } // open
 
-	/**
-	 * close
-	 * This is run on the end of a session, nothing to do here for now
-	 */
-	public static function close() {
+    /**
+     * close
+     * This is run on the end of a session, nothing to do here for now
+     */
+    public static function close() {
 
-		return true;
+        return true;
 
-	} // close
+    } // close
 
-	/**
-	 * read
-	 * This takes a key and then looks in the database and returns the value
-	 */
-	public static function read($key) {
+    /**
+     * read
+     * This takes a key and then looks in the database and returns the value
+     */
+    public static function read($key) {
 
-		$results = self::get_session_data($key);
+        $results = self::get_session_data($key);
 
-		if (!is_array($results)) {
-			debug_event('SESSION', 'Unable to read session from key ' . $key . ' no data found', 5);
-			return '';
-		}
+        if (!is_array($results)) {
+            debug_event('SESSION', 'Unable to read session from key ' . $key . ' no data found', 5);
+            return '';
+        }
 
-		return $results['value'];
+        return $results['value'];
 
-	} // read
+    } // read
 
-	/**
-	 * write
-	 * This saves the session information into the database
-	 */
-	public static function write($key, $value) {
+    /**
+     * write
+     * This saves the session information into the database
+     */
+    public static function write($key, $value) {
 
-		if (defined('NO_SESSION_UPDATE')) { return true; }
-
-		$length		= Config::get('session_length');
-		$value		= Dba::escape($value);
-		$key 		= Dba::escape($key);
-		// Check to see if remember me cookie is set, if so use remember
-		// length, otherwise use the session length
-		$expire
-			= isset($_COOKIE[Config::get('session_name') . '_remember']) 
-			? time() + Config::get('remember_length') 
-			: time() + Config::get('session_length');
+        if (defined('NO_SESSION_UPDATE')) { return true; }
+
+        $length        = Config::get('session_length');
+        $value        = Dba::escape($value);
+        $key         = Dba::escape($key);
+        // Check to see if remember me cookie is set, if so use remember
+        // length, otherwise use the session length
+        $expire
+            = isset($_COOKIE[Config::get('session_name') . '_remember']) 
+            ? time() + Config::get('remember_length') 
+            : time() + Config::get('session_length');
 
-		$sql = "UPDATE `session` SET `value`='$value', " .
-			"`expire`='$expire' WHERE `id`='$key'";
-		$db_results = Dba::read($sql);
+        $sql = "UPDATE `session` SET `value`='$value', " .
+            "`expire`='$expire' WHERE `id`='$key'";
+        $db_results = Dba::read($sql);
 
-		debug_event('SESSION', 'Writing to ' . $key . ' with expire ' . $expire . ' ' . Dba::error(), '6');
+        debug_event('SESSION', 'Writing to ' . $key . ' with expire ' . $expire . ' ' . Dba::error(), '6');
 
-		return $db_results;
+        return $db_results;
 
-	} // write
+    } // write
 
-	/**
-	 * destroy
-	 * This removes the specified session from the database
-	 */
-	public static function destroy($key) {
+    /**
+     * destroy
+     * This removes the specified session from the database
+     */
+    public static function destroy($key) {
 
-		$key = Dba::escape($key);
+        $key = Dba::escape($key);
 
-		if (!strlen($key)) { return false; }
+        if (!strlen($key)) { return false; }
 
-		// Remove anything and EVERYTHING
-		$sql = "DELETE FROM `session` WHERE `id`='$key'";
-		$db_results = Dba::write($sql);
+        // Remove anything and EVERYTHING
+        $sql = "DELETE FROM `session` WHERE `id`='$key'";
+        $db_results = Dba::write($sql);
 
-		debug_event('SESSION', 'Deleting Session with key:' . $key, '6');
+        debug_event('SESSION', 'Deleting Session with key:' . $key, '6');
 
-		// Destroy our cookie!
-		setcookie(Config::get('session_name'), '', time() - 86400);
+        // Destroy our cookie!
+        setcookie(Config::get('session_name'), '', time() - 86400);
 
-		return true;
+        return true;
 
-	} // destroy
+    } // destroy
 
-	/**
-	 * gc
-	 * This function is randomly called and it cleans up the spoo
-	 */
-	public static function gc($maxlifetime) {
+    /**
+     * gc
+     * This function is randomly called and it cleans up the spoo
+     */
+    public static function gc($maxlifetime) {
 
-		$sql = "DELETE FROM `session` WHERE `expire` < '" . time() . "'";
-		$db_results = Dba::write($sql);
+        $sql = "DELETE FROM `session` WHERE `expire` < '" . time() . "'";
+        $db_results = Dba::write($sql);
 
-		// Also clean up things that use sessions as keys
-		Query::gc();
-		Tmp_Playlist::gc();
+        // Also clean up things that use sessions as keys
+        Query::gc();
+        Tmp_Playlist::gc();
 
-		return true;
+        return true;
 
-	} // gc
+    } // gc
 
-	/**
-	 * logout
-	 * This is called when you want to log out and nuke your session
-	 * This is the function used for the Ajax logouts, if no id is passed
-	 * it tries to find one from the session
-	 */
-	public static function logout($key='', $relogin=true) {
+    /**
+     * logout
+     * This is called when you want to log out and nuke your session
+     * This is the function used for the Ajax logouts, if no id is passed
+     * it tries to find one from the session
+     */
+    public static function logout($key='', $relogin=true) {
 
-		// If no key is passed try to find the session id
-		$key = $key ? $key : session_id();
+        // If no key is passed try to find the session id
+        $key = $key ? $key : session_id();
 
-		// Nuke the cookie before all else
-		self::destroy($key);
-		if ((! $relogin) && Config::get('logout_redirect')) {
-			$target = Config::get('logout_redirect');
-		}
-		else {
-			$target = Config::get('web_path') . '/login.php';
-		}
+        // Nuke the cookie before all else
+        self::destroy($key);
+        if ((! $relogin) && Config::get('logout_redirect')) {
+            $target = Config::get('logout_redirect');
+        }
+        else {
+            $target = Config::get('web_path') . '/login.php';
+        }
 
-		// Do a quick check to see if this is an AJAXed logout request
-		// if so use the iframe to redirect
-		if (defined('AJAX_INCLUDE')) {
-			ob_end_clean();
-			ob_start();
-
-			/* Set the correct headers */
-			header("Content-type: text/xml; charset=" . Config::get('site_charset'));
-			header("Content-Disposition: attachment; filename=ajax.xml");
-			header("Expires: Tuesday, 27 Mar 1984 05:00:00 GMT");
-			header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
-			header("Cache-Control: no-store, no-cache, must-revalidate");
-			header("Pragma: no-cache");
-
-			$results['rfc3514'] = '<script type="text/javascript">reloadRedirect("' . $target . '")</script>';
-			echo xml_from_array($results);
-		}
-		else {
-			/* Redirect them to the login page */
-			header('Location: ' . $target);
-		}
-
-		exit;
-
-	} // logout
-
-	/**
-	 * get_session_data
-	 * This takes a key and returns the raw data from the database, nothing
-	 * to see here move along people
-	 */
-	public static function get_session_data($key) {
-
-		$key = Dba::escape($key);
-
-		$sql = "SELECT * FROM `session` WHERE `id`='$key' AND `expire` > '" . time() . "'";
-		$db_results = Dba::read($sql);
-
-		if ($results = Dba::fetch_assoc($db_results)) {
-			return $results;
-		}
-
-		return false;
-
-	} // get_session_data
-
-	/**
-	 * create_cookie
-	 * This is separated into its own function because of some flaws in
-	 * specific webservers *cough* IIS *cough* which prevent us from setting
-	 * a cookie at the same time as a header redirect. As such on view of a
-	 * login a cookie is set with the proper name
-	 */
-	public static function create_cookie() {
-
-		/* Setup the cookie prefs before we throw down, this is very important */
-		$cookie_life	= Config::get('cookie_life');
-		$cookie_path	= Config::get('cookie_path');
-		$cookie_domain	= false;
-		$cookie_secure	= Config::get('cookie_secure');
-
-		session_set_cookie_params($cookie_life,$cookie_path,$cookie_domain,$cookie_secure);
-
-		session_name(Config::get('session_name'));
-
-		/* Start the session */
-		self::ungimp_ie();
-		session_start();
-
-	} // create_cookie, just watch out for the cookie monster
-
-	/**
-	 * create_remember_cookie
-	 * This function just creates the remember me cookie, nothing special
-	 */
-	public static function create_remember_cookie() {
-
-		$remember_length = Config::get('remember_length');
-		$session_name = Config::get('session_name');
-
-		Config::set('cookie_life', $remember_length, true);
-		setcookie($session_name . '_remember',"Rappelez-vous, rappelez-vous le 27 mars", time() + $remember_length, '/');
-
-	} // create_remember_cookie
-
-	/**
-	 * session_create
-	 * This is called when you want to create a new session
-	 * it takes care of setting the initial cookie, and inserting the first
-	 * chunk of data, nifty ain't it!
-	 */
-	public static function session_create($data) {
-
-		// Regenerate the session ID to prevent fixation
-		switch ($data['type']) {
-			case 'xml-rpc':
-			case 'api':
-				$key = md5(uniqid(rand(), true));
-			break;
-			case 'mysql':
-			default:
-				session_regenerate_id();
-
-				// Before refresh we don't have the cookie so we
-				// have to use session ID
-				$key = session_id();
-			break;
-		} // end switch on data type
-
-		$username	= Dba::escape($data['username']);
-		$ip		= $_SERVER['REMOTE_ADDR'] 
-				? Dba::escape(inet_pton($_SERVER['REMOTE_ADDR'])) 
-				: '0';
-		$type		= Dba::escape($data['type']);
-		$value		= Dba::escape($data['value']);
-		$agent		= Dba::escape(substr($_SERVER['HTTP_USER_AGENT'], 0, 254));
-		$expire		= Dba::escape(time() + Config::get('session_length'));
-
-		/* We can't have null things here people */
-		if (!strlen($value)) { $value = ' '; }
-
-		/* Insert the row */
-		$sql = "INSERT INTO `session` (`id`,`username`,`ip`,`type`,`agent`,`value`,`expire`) " .
-			" VALUES ('$key','$username','$ip','$type','$agent','$value','$expire')";
-		$db_results = Dba::write($sql);
-
-		if (!$db_results) {
-			debug_event('SESSION', "Session Creation Failed with Query: $sql and " . Dba::error(), '1');
-			return false;
-		}
-
-		debug_event('SESSION', 'Session Created:' . $key, '6');
-
-		return $key;
-
-	} // session_create
-
-	/**
-	 * check_session
-	 * This checks for an existing session. If it's still valid we go ahead
-	 * and start it and return true.
-	 */
-	public static function check_session() {
-
-		$session_name = Config::get('session_name');
-
-		// No cookie no go!
-		if (!isset($_COOKIE[$session_name])) { return false; }
-
-		// Check for a remember me
-		if (isset($_COOKIE[$session_name . '_remember'])) {
-			self::create_remember_cookie();
-		}
-
-		// Set up the cookie params before we start the session.
-		// This is vital
-		session_set_cookie_params(
-			Config::get('cookie_life'),
-			Config::get('cookie_path'),
-			Config::get('cookie_domain'),
-			Config::get('cookie_secure'));
-
-		// Set name
-		session_name($session_name);
-
-		// Ungimp IE and go
-		self::ungimp_ie();
-		session_start();
-
-		return true;
-
-	} // check_session
-
-	/**
-	 * session_exists
-	 * This checks to see if the specified session of the specified type
-	 * exists, it also provides an array of key'd data that may be required
-	 * based on the type
-	 */
-	public static function session_exists($type, $key, $data=array()) {
-
-		// Switch on the type they pass
-		switch ($type) {
-			case 'xml-rpc':
-			case 'api':
-				$key = Dba::escape($key);
-				$time = time();
-				$sql = "SELECT * FROM `session` WHERE " .
-					"`id`='$key' AND `expire` > '$time' " .
-					"AND `type`='$type'";
-				$db_results = Dba::read($sql);
-
-				if (Dba::num_rows($db_results)) {
-					return true;
-				}
-			break;
-			case 'interface':
-				$key = Dba::escape($key);
-				$time = time();
-				// Build a list of enabled authentication types
-				$types = Config::get('auth_methods');
-				if (!Config::get('use_auth')) {
-					$types[] = '';
-				}
-				$enabled_types = implode("','", $types);
-				$sql = "SELECT * FROM `session` WHERE " .
-					"`id`='$key' AND `expire` > '$time' " .
-					"AND `type` IN('$enabled_types')"; 
-				$db_results = Dba::read($sql);
-
-				if (Dba::num_rows($db_results)) {
-					return true;
-				}
-			break;
-			case 'stream':
-				$key	= Dba::escape($key);
-				$ip	= Dba::escape(inet_pton($data['ip']));
-				$agent	= Dba::escape($data['agent']);
-				$sql = "SELECT * FROM `session_stream` WHERE " .
-					"`id`='$key' AND `expire` > '$time' " .
-					"AND `ip`='$ip' AND `agent`='$agent'";
-				$db_results = Dba::read($sql);
-
-				if (Dba::num_rows($db_results)) {
-					return true;
-				}
-
-			break;
-			default:
-				return false;
-			break;
-		} // type
-
-		// Default to false
-		return false;
-
-	} // session_exists
-
-	/**
-	 * session_extend
-	 * This should really be extend_session but hey you gotta go with the
-	 * flow.
-	 * This takes a SID and extends its expiration.
-	 */
-	public static function session_extend($sid) {
-		$time = time();
-		$sid = Dba::escape($sid);
-		$expire = isset($_COOKIE[Config::get('session_name') . '_remember']) 
-			? $time + Config::get('remember_length') 
-			: $time + Config::get('session_length');
-
-		$sql = "UPDATE `session` SET `expire`='$expire' WHERE `id`='$sid'";
-		$db_results = Dba::write($sql);
-
-		debug_event('SESSION', $sid . ' has been extended to ' . date('r', $expire) . ' extension length ' . ($expire - $time), 5);
-
-		return $db_results;
-	} // session_extend
-
-	/**
-	 * _auto_init
-	 * This function is called when the object is included, this sets up the
-	 * session_save_handler
-	 */
-	public static function _auto_init() {
-
-		if (!function_exists('session_start')) {
-			header("Location:" . Config::get('web_path') . "/test.php");
-			exit;
-		}
-
-		session_set_save_handler(
-			array('vauth', 'open'),
-			array('vauth', 'close'),
-			array('vauth', 'read'),
-			array('vauth', 'write'),
-			array('vauth', 'destroy'),
-			array('vauth', 'gc'));
-
-	} // auto init
-
-	/**
-	 * ungimp_ie
-	 * This function sets the cache limiting to public if you are running
-	 * some flavor of IE. The detection used here is very conservative so
-	 * feel free to fix it. This only has to be done if we're rolling HTTPS.
-	 */
-	public static function ungimp_ie() {
-
-		// If no https, no ungimpage required
-		if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'on') {
-			return true;
-		}
-
-		// Try to detect IE
-		$agent = trim($_SERVER['HTTP_USER_AGENT']);
-
-		if ((strpos($agent, 'MSIE') !== false) ||
-			(strpos($agent,'Internet Explorer/') !== false)) {
-			session_cache_limiter('public');
-		}
-
-		return true;
-
-	} // ungimp_ie
-
-	/**
- 	 * authenticate
-	 * This takes a username and password and then returns the results
-	 * based on what happens when we try to do the auth.
-	 */
-	public static function authenticate($username, $password) {
-
-		// Foreach the auth methods
-		foreach (Config::get('auth_methods') as $method) {
-
-			// Build the function name and call it
-			$function_name = $method . '_auth';
-
-			if (!method_exists('vauth', $function_name)) { 
-				continue;
-			}
-
-			$results = self::$function_name($username, $password);
-
-			// If we achieve victory return
-			if ($results['success']) { break; }
-
-		} // end foreach
-
-		return $results;
-
-	} // authenticate
-
-	/**
-	 * mysql_auth
-	 *
-	 * This is the core function of our built-in authentication.
-	 */
-	private static function mysql_auth($username, $password) {
-
-		$username = Dba::escape($username);
-
-		if (strlen($password) && strlen($username)) {
-			$sql = "SELECT `password` FROM `user` WHERE " .
-				"`username`='$username'";
-			$db_results = Dba::read($sql);
-			if ($row = Dba::fetch_assoc($db_results)) {
-
-				// Use SHA2 now... cooking with fire.
-				// For backwards compatibility, we hash a couple
-				// of different variations of the password.  
-				// Increases collision chances, but doesn't
-				// break things.
-				$hashed_password[] = hash('sha256', $password);
-				$hashed_password[] = hash('sha256', 
-					Dba::escape(scrub_in($password)));
-
-				// Automagically update the password if it's 
-				// old and busted.
-				if($row['password'] == $hashed_password[1] &&
-					$hashed_password[0] != $hashed_password[1]) {
-					$user = User::get_from_username($username);
-					$user->update_password($password);
-				}
-
-				if(in_array($row['password'], $hashed_password)) {
-					$results['success']	= true;
-					$results['type']	= 'mysql';
-					$results['username']	= $username;
-					return $results;
-				}
-			}
-		}
-
-		// Default to failure
-		$results['success']	= false;
-		$results['error']	= 'MySQL login attempt failed';
-		return $results;
-
-	} // mysql_auth
-
-	/**
-	 * local_auth
-	 * Check to make sure the pam_auth function is implemented (module is 
-	 * installed), then check the credentials.
-	 */
-	private static function local_auth($username, $password) {
-		if (!function_exists('pam_auth')) {
-			$results['success']	= false;
-			$results['error']	= 'The PAM PHP module is not installed';
-			return $results;
-		}
-
-		$password = scrub_in($password);
-
-		if (pam_auth($username, $password)) {
-			$results['success']	= true;
-			$results['type']	= 'local';
-			$results['username']	= $username;
-		}
-		else {
-			$results['success']	= false;
-			$results['error']	= 'PAM login attempt failed';
-		}
-
-		return $results;
-	} // local_auth
-
-	/**
-	 * ldap_auth
-	 * Step one, connect to the LDAP server and perform a search for the
-	 * username provided.
-	 * Step two, attempt to bind using that username and the password
-	 * provided.
-	 * Step three, figure out if they are authorized to use ampache:
-	 * TODO: in config but unimplemented:
-	 *      * require-dn "Grant access if the DN in the directive matches 
-	 *        the DN fetched from the LDAP directory"
-	 *      * require-attribute "an attribute fetched from the LDAP 
-	 *        directory matches the given value"
-	 */
-	private static function ldap_auth($username, $password) {
-
-		$ldap_username	= Config::get('ldap_username');
-		$ldap_password	= Config::get('ldap_password');
-
-		$require_group	= Config::get('ldap_require_group');
-
-		// This is the DN for the users (required)
-		$ldap_dn	= Config::get('ldap_search_dn');
-
-		// This is the server url (required)
-		$ldap_url	= Config::get('ldap_url');
-
-		// This is the ldap filter string (required)
-		$ldap_filter	= Config::get('ldap_filter');
-
-		//This is the ldap objectclass (required)
-		$ldap_class	= Config::get('ldap_objectclass');
-
-		if (!($ldap_dn && $ldap_url && $ldap_filter && $ldap_class)) {
-			debug_event('ldap_auth', 'Required config value missing', 1);
-			$results['success'] = false;
-			$results['error'] = 'Incomplete LDAP config';
-			return $results;
-		}
-
-		$ldap_name_field	= Config::get('ldap_name_field');
-		$ldap_email_field	= Config::get('ldap_email_field');
-
-		if ($ldap_link = ldap_connect($ldap_url) ) {
-
-			/* Set to Protocol 3 */
-			ldap_set_option($ldap_link, LDAP_OPT_PROTOCOL_VERSION, 3);
-
-			// bind using our auth if we need to for initial search
-			if (!ldap_bind($ldap_link, $ldap_username, $ldap_password)) {
-				$results['success'] = false;
-				$results['error'] = 'Could not bind to LDAP server.';
-				return $results;
-			} // If bind fails
-
-			$sr = ldap_search($ldap_link, $ldap_dn, "(&(objectclass=$ldap_class)($ldap_filter=$username))");
-			$info = ldap_get_entries($ldap_link, $sr);
-
-			if ($info["count"] == 1) {
-				$user_entry = ldap_first_entry($ldap_link, $sr);
-				$user_dn    = ldap_get_dn($ldap_link, $user_entry);
-				$password   = scrub_in($password);
-				// bind using the user..
-				$retval = ldap_bind($ldap_link, $user_dn, $password);
-
-				if ($retval) {
-					// When the current user needs to be in
-					// a specific group to access Ampache,
-					// check whether the 'member' list of 
-					// the group contains the DN
-					if ($require_group) {
-						$group_result = ldap_read($ldap_link, $require_group, 'objectclass=*', array('member'));
-						if (!$group_result) {
-							debug_event('ldap_auth', "Failure reading $require_group", 1);
-							$results['success'] = false;
-							$results['error'] = 'The LDAP group could not be read';
-							return $results;
-						}
-
-						$group_info = ldap_get_entries($ldap_link, $group_result);
-
-						if ($group_info['count'] < 1) {
-							debug_event('ldap_auth', "No members found in $require_group", 1);
-							$results['success'] = false;
-							$results['error'] = 'Empty LDAP group';
-							return $results;
-						}
-
-						$group_match = preg_grep("/^$user_dn\$/i", $group_info[0]['member']);
-						if (!$group_match) {
-							debug_event('ldap_auth', "$user_dn is not a member of $require_group",1);
-							$results['success'] = false;
-							$results['error'] = 'LDAP login attempt failed';
-							return $results;
-						}
-					}
-					ldap_close($ldap_link);
-					$results['success']  = true;
-					$results['type']     = "ldap";
-					$results['username'] = $username;
-					$results['name']     = $info[0][$ldap_name_field][0];
-					$results['email']    = $info[0][$ldap_email_field][0];
-
-					return $results;
-
-				} // if we get something good back
-
-			} // if something was sent back
-
-		} // if failed connect
-
-		/* Default to bad news */
-		$results['success'] = false;
-		$results['error']   = 'LDAP login attempt failed';
-
-		return $results;
-
-	} // ldap_auth
-
-	/**
-	 * http_auth
-	 * This auth method relies on HTTP auth from the webserver
-	 */
-	private static function http_auth($username, $password) {
-		if (($_SERVER['REMOTE_USER'] == $username) ||
-			($_SERVER['HTTP_REMOTE_USER'] == $username)) {
-			$results['success']	= true;
-			$results['type']	= 'http';
-			$results['username']	= $username;
-			$results['name']	= $username;
-			$results['email']	= '';
-		}
-		else {
-			$results['success'] = false;
-			$results['error']   = 'HTTP auth login attempt failed';
-		}
-		return $results;
-	} // http_auth
+        // Do a quick check to see if this is an AJAXed logout request
+        // if so use the iframe to redirect
+        if (defined('AJAX_INCLUDE')) {
+            ob_end_clean();
+            ob_start();
+
+            /* Set the correct headers */
+            header("Content-type: text/xml; charset=" . Config::get('site_charset'));
+            header("Content-Disposition: attachment; filename=ajax.xml");
+            header("Expires: Tuesday, 27 Mar 1984 05:00:00 GMT");
+            header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
+            header("Cache-Control: no-store, no-cache, must-revalidate");
+            header("Pragma: no-cache");
+
+            $results['rfc3514'] = '<script type="text/javascript">reloadRedirect("' . $target . '")</script>';
+            echo xml_from_array($results);
+        }
+        else {
+            /* Redirect them to the login page */
+            header('Location: ' . $target);
+        }
+
+        exit;
+
+    } // logout
+
+    /**
+     * get_session_data
+     * This takes a key and returns the raw data from the database, nothing
+     * to see here move along people
+     */
+    public static function get_session_data($key) {
+
+        $key = Dba::escape($key);
+
+        $sql = "SELECT * FROM `session` WHERE `id`='$key' AND `expire` > '" . time() . "'";
+        $db_results = Dba::read($sql);
+
+        if ($results = Dba::fetch_assoc($db_results)) {
+            return $results;
+        }
+
+        return false;
+
+    } // get_session_data
+
+    /**
+     * create_cookie
+     * This is separated into its own function because of some flaws in
+     * specific webservers *cough* IIS *cough* which prevent us from setting
+     * a cookie at the same time as a header redirect. As such on view of a
+     * login a cookie is set with the proper name
+     */
+    public static function create_cookie() {
+
+        /* Setup the cookie prefs before we throw down, this is very important */
+        $cookie_life    = Config::get('cookie_life');
+        $cookie_path    = Config::get('cookie_path');
+        $cookie_domain    = false;
+        $cookie_secure    = Config::get('cookie_secure');
+
+        session_set_cookie_params($cookie_life,$cookie_path,$cookie_domain,$cookie_secure);
+
+        session_name(Config::get('session_name'));
+
+        /* Start the session */
+        self::ungimp_ie();
+        session_start();
+
+    } // create_cookie, just watch out for the cookie monster
+
+    /**
+     * create_remember_cookie
+     * This function just creates the remember me cookie, nothing special
+     */
+    public static function create_remember_cookie() {
+
+        $remember_length = Config::get('remember_length');
+        $session_name = Config::get('session_name');
+
+        Config::set('cookie_life', $remember_length, true);
+        setcookie($session_name . '_remember',"Rappelez-vous, rappelez-vous le 27 mars", time() + $remember_length, '/');
+
+    } // create_remember_cookie
+
+    /**
+     * session_create
+     * This is called when you want to create a new session
+     * it takes care of setting the initial cookie, and inserting the first
+     * chunk of data, nifty ain't it!
+     */
+    public static function session_create($data) {
+
+        // Regenerate the session ID to prevent fixation
+        switch ($data['type']) {
+            case 'xml-rpc':
+            case 'api':
+                $key = md5(uniqid(rand(), true));
+            break;
+            case 'mysql':
+            default:
+                session_regenerate_id();
+
+                // Before refresh we don't have the cookie so we
+                // have to use session ID
+                $key = session_id();
+            break;
+        } // end switch on data type
+
+        $username    = Dba::escape($data['username']);
+        $ip        = $_SERVER['REMOTE_ADDR'] 
+                ? Dba::escape(inet_pton($_SERVER['REMOTE_ADDR'])) 
+                : '0';
+        $type        = Dba::escape($data['type']);
+        $value        = Dba::escape($data['value']);
+        $agent        = Dba::escape(substr($_SERVER['HTTP_USER_AGENT'], 0, 254));
+        $expire        = Dba::escape(time() + Config::get('session_length'));
+
+        /* We can't have null things here people */
+        if (!strlen($value)) { $value = ' '; }
+
+        /* Insert the row */
+        $sql = "INSERT INTO `session` (`id`,`username`,`ip`,`type`,`agent`,`value`,`expire`) " .
+            " VALUES ('$key','$username','$ip','$type','$agent','$value','$expire')";
+        $db_results = Dba::write($sql);
+
+        if (!$db_results) {
+            debug_event('SESSION', "Session Creation Failed with Query: $sql and " . Dba::error(), '1');
+            return false;
+        }
+
+        debug_event('SESSION', 'Session Created:' . $key, '6');
+
+        return $key;
+
+    } // session_create
+
+    /**
+     * check_session
+     * This checks for an existing session. If it's still valid we go ahead
+     * and start it and return true.
+     */
+    public static function check_session() {
+
+        $session_name = Config::get('session_name');
+
+        // No cookie no go!
+        if (!isset($_COOKIE[$session_name])) { return false; }
+
+        // Check for a remember me
+        if (isset($_COOKIE[$session_name . '_remember'])) {
+            self::create_remember_cookie();
+        }
+
+        // Set up the cookie params before we start the session.
+        // This is vital
+        session_set_cookie_params(
+            Config::get('cookie_life'),
+            Config::get('cookie_path'),
+            Config::get('cookie_domain'),
+            Config::get('cookie_secure'));
+
+        // Set name
+        session_name($session_name);
+
+        // Ungimp IE and go
+        self::ungimp_ie();
+        session_start();
+
+        return true;
+
+    } // check_session
+
+    /**
+     * session_exists
+     * This checks to see if the specified session of the specified type
+     * exists, it also provides an array of key'd data that may be required
+     * based on the type
+     */
+    public static function session_exists($type, $key, $data=array()) {
+
+        // Switch on the type they pass
+        switch ($type) {
+            case 'xml-rpc':
+            case 'api':
+                $key = Dba::escape($key);
+                $time = time();
+                $sql = "SELECT * FROM `session` WHERE " .
+                    "`id`='$key' AND `expire` > '$time' " .
+                    "AND `type`='$type'";
+                $db_results = Dba::read($sql);
+
+                if (Dba::num_rows($db_results)) {
+                    return true;
+                }
+            break;
+            case 'interface':
+                $key = Dba::escape($key);
+                $time = time();
+                // Build a list of enabled authentication types
+                $types = Config::get('auth_methods');
+                if (!Config::get('use_auth')) {
+                    $types[] = '';
+                }
+                $enabled_types = implode("','", $types);
+                $sql = "SELECT * FROM `session` WHERE " .
+                    "`id`='$key' AND `expire` > '$time' " .
+                    "AND `type` IN('$enabled_types')"; 
+                $db_results = Dba::read($sql);
+
+                if (Dba::num_rows($db_results)) {
+                    return true;
+                }
+            break;
+            case 'stream':
+                $key    = Dba::escape($key);
+                $ip    = Dba::escape(inet_pton($data['ip']));
+                $agent    = Dba::escape($data['agent']);
+                $sql = "SELECT * FROM `session_stream` WHERE " .
+                    "`id`='$key' AND `expire` > '$time' " .
+                    "AND `ip`='$ip' AND `agent`='$agent'";
+                $db_results = Dba::read($sql);
+
+                if (Dba::num_rows($db_results)) {
+                    return true;
+                }
+
+            break;
+            default:
+                return false;
+            break;
+        } // type
+
+        // Default to false
+        return false;
+
+    } // session_exists
+
+    /**
+     * session_extend
+     * This should really be extend_session but hey you gotta go with the
+     * flow.
+     * This takes a SID and extends its expiration.
+     */
+    public static function session_extend($sid) {
+        $time = time();
+        $sid = Dba::escape($sid);
+        $expire = isset($_COOKIE[Config::get('session_name') . '_remember']) 
+            ? $time + Config::get('remember_length') 
+            : $time + Config::get('session_length');
+
+        $sql = "UPDATE `session` SET `expire`='$expire' WHERE `id`='$sid'";
+        $db_results = Dba::write($sql);
+
+        debug_event('SESSION', $sid . ' has been extended to ' . date('r', $expire) . ' extension length ' . ($expire - $time), 5);
+
+        return $db_results;
+    } // session_extend
+
+    /**
+     * _auto_init
+     * This function is called when the object is included, this sets up the
+     * session_save_handler
+     */
+    public static function _auto_init() {
+
+        if (!function_exists('session_start')) {
+            header("Location:" . Config::get('web_path') . "/test.php");
+            exit;
+        }
+
+        session_set_save_handler(
+            array('vauth', 'open'),
+            array('vauth', 'close'),
+            array('vauth', 'read'),
+            array('vauth', 'write'),
+            array('vauth', 'destroy'),
+            array('vauth', 'gc'));
+
+    } // auto init
+
+    /**
+     * ungimp_ie
+     * This function sets the cache limiting to public if you are running
+     * some flavor of IE. The detection used here is very conservative so
+     * feel free to fix it. This only has to be done if we're rolling HTTPS.
+     */
+    public static function ungimp_ie() {
+
+        // If no https, no ungimpage required
+        if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'on') {
+            return true;
+        }
+
+        // Try to detect IE
+        $agent = trim($_SERVER['HTTP_USER_AGENT']);
+
+        if ((strpos($agent, 'MSIE') !== false) ||
+            (strpos($agent,'Internet Explorer/') !== false)) {
+            session_cache_limiter('public');
+        }
+
+        return true;
+
+    } // ungimp_ie
+
+    /**
+      * authenticate
+     * This takes a username and password and then returns the results
+     * based on what happens when we try to do the auth.
+     */
+    public static function authenticate($username, $password) {
+
+        // Foreach the auth methods
+        foreach (Config::get('auth_methods') as $method) {
+
+            // Build the function name and call it
+            $function_name = $method . '_auth';
+
+            if (!method_exists('vauth', $function_name)) { 
+                continue;
+            }
+
+            $results = self::$function_name($username, $password);
+
+            // If we achieve victory return
+            if ($results['success']) { break; }
+
+        } // end foreach
+
+        return $results;
+
+    } // authenticate
+
+    /**
+     * mysql_auth
+     *
+     * This is the core function of our built-in authentication.
+     */
+    private static function mysql_auth($username, $password) {
+
+        $username = Dba::escape($username);
+
+        if (strlen($password) && strlen($username)) {
+            $sql = "SELECT `password` FROM `user` WHERE " .
+                "`username`='$username'";
+            $db_results = Dba::read($sql);
+            if ($row = Dba::fetch_assoc($db_results)) {
+
+                // Use SHA2 now... cooking with fire.
+                // For backwards compatibility, we hash a couple
+                // of different variations of the password.  
+                // Increases collision chances, but doesn't
+                // break things.
+                $hashed_password[] = hash('sha256', $password);
+                $hashed_password[] = hash('sha256', 
+                    Dba::escape(scrub_in($password)));
+
+                // Automagically update the password if it's 
+                // old and busted.
+                if($row['password'] == $hashed_password[1] &&
+                    $hashed_password[0] != $hashed_password[1]) {
+                    $user = User::get_from_username($username);
+                    $user->update_password($password);
+                }
+
+                if(in_array($row['password'], $hashed_password)) {
+                    $results['success']    = true;
+                    $results['type']    = 'mysql';
+                    $results['username']    = $username;
+                    return $results;
+                }
+            }
+        }
+
+        // Default to failure
+        $results['success']    = false;
+        $results['error']    = 'MySQL login attempt failed';
+        return $results;
+
+    } // mysql_auth
+
+    /**
+     * local_auth
+     * Check to make sure the pam_auth function is implemented (module is 
+     * installed), then check the credentials.
+     */
+    private static function local_auth($username, $password) {
+        if (!function_exists('pam_auth')) {
+            $results['success']    = false;
+            $results['error']    = 'The PAM PHP module is not installed';
+            return $results;
+        }
+
+        $password = scrub_in($password);
+
+        if (pam_auth($username, $password)) {
+            $results['success']    = true;
+            $results['type']    = 'local';
+            $results['username']    = $username;
+        }
+        else {
+            $results['success']    = false;
+            $results['error']    = 'PAM login attempt failed';
+        }
+
+        return $results;
+    } // local_auth
+
+    /**
+     * ldap_auth
+     * Step one, connect to the LDAP server and perform a search for the
+     * username provided.
+     * Step two, attempt to bind using that username and the password
+     * provided.
+     * Step three, figure out if they are authorized to use ampache:
+     * TODO: in config but unimplemented:
+     *      * require-dn "Grant access if the DN in the directive matches 
+     *        the DN fetched from the LDAP directory"
+     *      * require-attribute "an attribute fetched from the LDAP 
+     *        directory matches the given value"
+     */
+    private static function ldap_auth($username, $password) {
+
+        $ldap_username    = Config::get('ldap_username');
+        $ldap_password    = Config::get('ldap_password');
+
+        $require_group    = Config::get('ldap_require_group');
+
+        // This is the DN for the users (required)
+        $ldap_dn    = Config::get('ldap_search_dn');
+
+        // This is the server url (required)
+        $ldap_url    = Config::get('ldap_url');
+
+        // This is the ldap filter string (required)
+        $ldap_filter    = Config::get('ldap_filter');
+
+        //This is the ldap objectclass (required)
+        $ldap_class    = Config::get('ldap_objectclass');
+
+        if (!($ldap_dn && $ldap_url && $ldap_filter && $ldap_class)) {
+            debug_event('ldap_auth', 'Required config value missing', 1);
+            $results['success'] = false;
+            $results['error'] = 'Incomplete LDAP config';
+            return $results;
+        }
+
+        $ldap_name_field    = Config::get('ldap_name_field');
+        $ldap_email_field    = Config::get('ldap_email_field');
+
+        if ($ldap_link = ldap_connect($ldap_url) ) {
+
+            /* Set to Protocol 3 */
+            ldap_set_option($ldap_link, LDAP_OPT_PROTOCOL_VERSION, 3);
+
+            // bind using our auth if we need to for initial search
+            if (!ldap_bind($ldap_link, $ldap_username, $ldap_password)) {
+                $results['success'] = false;
+                $results['error'] = 'Could not bind to LDAP server.';
+                return $results;
+            } // If bind fails
+
+            $sr = ldap_search($ldap_link, $ldap_dn, "(&(objectclass=$ldap_class)($ldap_filter=$username))");
+            $info = ldap_get_entries($ldap_link, $sr);
+
+            if ($info["count"] == 1) {
+                $user_entry = ldap_first_entry($ldap_link, $sr);
+                $user_dn    = ldap_get_dn($ldap_link, $user_entry);
+                $password   = scrub_in($password);
+                // bind using the user..
+                $retval = ldap_bind($ldap_link, $user_dn, $password);
+
+                if ($retval) {
+                    // When the current user needs to be in
+                    // a specific group to access Ampache,
+                    // check whether the 'member' list of 
+                    // the group contains the DN
+                    if ($require_group) {
+                        $group_result = ldap_read($ldap_link, $require_group, 'objectclass=*', array('member'));
+                        if (!$group_result) {
+                            debug_event('ldap_auth', "Failure reading $require_group", 1);
+                            $results['success'] = false;
+                            $results['error'] = 'The LDAP group could not be read';
+                            return $results;
+                        }
+
+                        $group_info = ldap_get_entries($ldap_link, $group_result);
+
+                        if ($group_info['count'] < 1) {
+                            debug_event('ldap_auth', "No members found in $require_group", 1);
+                            $results['success'] = false;
+                            $results['error'] = 'Empty LDAP group';
+                            return $results;
+                        }
+
+                        $group_match = preg_grep("/^$user_dn\$/i", $group_info[0]['member']);
+                        if (!$group_match) {
+                            debug_event('ldap_auth', "$user_dn is not a member of $require_group",1);
+                            $results['success'] = false;
+                            $results['error'] = 'LDAP login attempt failed';
+                            return $results;
+                        }
+                    }
+                    ldap_close($ldap_link);
+                    $results['success']  = true;
+                    $results['type']     = "ldap";
+                    $results['username'] = $username;
+                    $results['name']     = $info[0][$ldap_name_field][0];
+                    $results['email']    = $info[0][$ldap_email_field][0];
+
+                    return $results;
+
+                } // if we get something good back
+
+            } // if something was sent back
+
+        } // if failed connect
+
+        /* Default to bad news */
+        $results['success'] = false;
+        $results['error']   = 'LDAP login attempt failed';
+
+        return $results;
+
+    } // ldap_auth
+
+    /**
+     * http_auth
+     * This auth method relies on HTTP auth from the webserver
+     */
+    private static function http_auth($username, $password) {
+        if (($_SERVER['REMOTE_USER'] == $username) ||
+            ($_SERVER['HTTP_REMOTE_USER'] == $username)) {
+            $results['success']    = true;
+            $results['type']    = 'http';
+            $results['username']    = $username;
+            $results['name']    = $username;
+            $results['email']    = '';
+        }
+        else {
+            $results['success'] = false;
+            $results['error']   = 'HTTP auth login attempt failed';
+        }
+        return $results;
+    } // http_auth
 
 } // end of vauth class