SMF Authentication

function smf_LoginById($username, $cookieLength = 3600){

	global $smf_connection, $smf_settings;	

	// enable binary look up for MODx workaround.
	$binaryLookup = !empty($smf_settings['reserveCase']) ?  'BINARY':'';

     $sql = "SELECT *
          FROM $smf_settings[db_prefix]members 
          WHERE $binaryLookup memberName = '".mysql_escape_string($username)."'
          LIMIT 1";
     $request = smf_query($sql, __FILE__, __LINE__);
     $smf_user = mysql_fetch_assoc($request);
     
    //Now login
    smf_setLoginCookie($cookieLength, $smf_user['ID_MEMBER'], sha1($smf_user['passwd'] . $smf_user['passwordSalt']));
    return smf_authenticateUser();
}

// Log out user - Added by Raymond
function smf_LogoutById($username){

	global $smf_connection, $smf_settings;

function smf_authenticateUser()
{
	global $smf_connection, $smf_settings, $smf_user_info;

	// No connection, no authentication!
	if (!$smf_connection)
		return false;

	// Check first the cookie, then the session.
	if (isset($_COOKIE[$smf_settings['cookiename']]))
	{
		$_COOKIE[$smf_settings['cookiename']] = stripslashes($_COOKIE[$smf_settings['cookiename']]);

		// Fix a security hole in PHP 4.3.9 and below...
		if (preg_match('~^a:[34]:\{i:0;(i:\d{1,6}|s:[1-8]:"\d{1,8}");i:1;s:(0|40):"([a-fA-F0-9]{40})?";i:2;[id]:\d{1,14};(i:3;i:\d;)?\}$~', $_COOKIE[$smf_settings['cookiename']]) == 1)
		{
			list ($ID_MEMBER, $password) = @unserialize($_COOKIE[$smf_settings['cookiename']]);
			$ID_MEMBER = !empty($ID_MEMBER) ? (int) $ID_MEMBER : 0;
		}
		else
			$ID_MEMBER = 0;
	}
	elseif (isset($_SESSION['login_' . $smf_settings['cookiename']]))
	{
		list ($ID_MEMBER, $password, $login_span) = @unserialize(stripslashes($_SESSION['login_' . $smf_settings['cookiename']]));
		$ID_MEMBER = !empty($ID_MEMBER) && $login_span > time() ? (int) $ID_MEMBER : 0;
	}
	else
		$ID_MEMBER = 0;

function smf_LogoutById($username){

	global $smf_connection, $smf_settings;	

	// enable binary look up for MODx workaround - Raymond
	$binaryLookup = !empty($smf_settings['reserveCase']) ? 'BINARY':'';

	// shouldn't have to do this but it works!!
	$sql = "SELECT *
	  FROM $smf_settings[db_prefix]members 
	  WHERE $binaryLookup memberName = '".mysql_escape_string($username)."'
	  LIMIT 1";
	$request = smf_query($sql, __FILE__, __LINE__);
	$smf_user = mysql_fetch_assoc($request);
	smf_query("DELETE FROM $smf_settings[db_prefix]log_online WHERE ID_MEMBER = '".$smf_user['ID_MEMBER']."' LIMIT 1", __FILE__, __LINE__);

    unset($_SESSION['login_' . $smf_settings['cookiename']]);
    smf_setLoginCookie(-3600, $smf_user['ID_MEMBER']);
    smf_setLoginCookie(-3600, 0);

}

function AutoLogin()
	{
		global $modx;
		
		$cookieName = 'WebLoginPE';
		
		$cookie = explode('|', $_COOKIE[$cookieName]);
		$this->Username = $cookie[0];
		$this->Password = $cookie[1];
		
		$web_users = $modx->getFullTableName('web_users');
		$web_user_attributes = $modx->getFullTableName('web_user_attributes');
		
		$query = "SELECT * FROM ".$web_users.", ".$web_user_attributes." WHERE MD5(".$web_users.".`username`) = '".$this->Username."' AND ".$web_user_attributes.".`internalKey` = ".$web_users.".`id`";
		$dataSource = $modx->db->query($query);
		$limit = $modx->db->getRecordCount($dataSource);
		if ($limit == 0 || $limit > 1)
		{
			$this->User = NULL;
			return false;
		}
		else
		{
			$this->User = $modx->db->getRow($dataSource);
			$this->Username = $this->User['username'];
		}
		
		if ($this->User['password'] !== $this->Password){
			return false;
		}
		
		$this->UserIsBlocked();
		$this->Authenticate();
		$this->SessionHandler('start');
		$this->UserDocumentGroups();
		if ($type !== 'taconite')
		{
			$this->LoginHomePage();
		}
	}
	

switch($e->name) {

	case "OnWebAuthentication": 
		// check to see if this user was imported from SMF database
		if (strpos('<SMF>',$savedpassword)!==false) {
			$password = array();
			// get hased password
			$sql = "SELECT * FROM $smf_settings[db_prefix]members 
			  		WHERE $binaryLookup memberName = '".$modx->db->escape($username)."' LIMIT 1";
			$request = smf_query($sql, __FILE__, __LINE__);
			$smf_user = mysql_fetch_assoc($request);
			$hashPassword = $smf_user['passwd']; 	
			// build password hash list
			$passwords[] = @sha1(strtolower($username) . $userpassword); // version 1.1 encryption
			if($smf_user['passwordSalt']==''){
				// other password hash formats
				$passwords[] = sha1($userpassword);
				$passwords[] = md5($userpassword);
				$passwords[] = md5($userpassword.strtolower($username));
				$passwords[] = md5_hmac($userpassword,strtolower($username));
			}
			// compare passwords
			if(in_array($hashPassword, $passwords)) {
				// update user account with MODx hash format
				$tbl = $modx->getFullTableName('web_users');				
				$fld = array('password'=>md5($userpassword));
				$modx->db->update($fld,$tbl,"username='".mysql_escape_string($username)."'");
				$e->output(TRUE);
			}
			
		}
		cms_smf_reset_db(); // set MODx DB as the default
		break;