From 7fae58283dff2b2f4f33c1b9c3554b7677f3f062 Mon Sep 17 00:00:00 2001
From: Connor Thomson <blumatrikz@gmail.com>
Date: Sun, 20 Sep 2026 14:19:07 -0700
Subject: Switch to session ids

---
 php/session.php | 50 ++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100755 php/session.php

(limited to 'php/session.php')

diff --git a/php/session.php b/php/session.php
new file mode 100755
index 0000000..7895dfb
--- /dev/null
+++ b/php/session.php
@@ -0,0 +1,50 @@
+<?php
+/*
+ *  GNUfault.org - GNUfault's website
+ *  Copyright (C) 2026  Connor Thomson
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU Affero General Public License as published by
+ *  the Free Software Foundation, either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU Affero General Public License for more details.
+ *
+ *  You should have received a copy of the GNU Affero General Public License
+ *  along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+function start_session(): void {
+    if (session_status() === PHP_SESSION_ACTIVE) {
+        return;
+    }
+
+    session_set_cookie_params([
+        'lifetime' => 0,
+        'path'     => '/',
+        'secure'   => true,
+        'httponly' => true,
+        'samesite' => 'Strict'
+    ]);
+
+    session_start();
+}
+
+function set_user_id(int $user_id): void {
+    start_session();
+
+    session_regenerate_id(true);
+
+    $_SESSION['user_id'] = $user_id;
+}
+
+function get_user_id(): ?int {
+    start_session();
+
+    return isset($_SESSION['user_id']) ? (int)$_SESSION['user_id'] : null;
+}
+
+?>
-- 
cgit v1.2.3