return false;
}
-function logged_in_as_admin() {
+# whether currently logged in as admin (can be changed with su)
+function logged_in_as_contractor() {
if(!isset($GLOBALS['logged_in_as_admin'])) {
$GLOBALS['logged_in_as_admin'] = (logged_in() == 1); # logged_in() returns id. id #1 is admin
}
return $GLOBALS['logged_in_as_admin'];
}
-function logged_in_as_contractor() {
+# whether originally logged in as contractor (reguardless of current su)
+function ever_was_contractor() {
return logged_in_as_admin();
}
+
+function enc_money($float) {
+ return format_money($float, $cents = false);
+}
+
+# 1st arg: the correct encrypted password
+# 2nd arg: clear-text password entered by someone
+function check_password($encrypted, $pass) {
+ if(strpos($encrypted, ':') !== 32) {
+ die("password field corrupted");
+ }
+
+ list($md5, $salt) = explode(':', $encrypted);
+
+ if(md5($salt . $pass) == $md5) {
+ return true;
+ }
+
+ return false;
+}
+
+function encrypt_password($plain) {
+ $password = '';
+
+ $salt = substr(md5(rand() . "f"), 0, 2); # FIXME make this more effecient and clear
+
+ $password = md5($salt . $plain) . ':' . $salt;
+
+ return $password;
+}