USERS Module

Database

In order to use USERS module, you need to have a MySQL database and the following tables in it:

-- ----------------------------------------------------------------------------
-- User tables
-- ----------------------------------------------------------------------------

-- users

create table users (
    id integer auto_increment primary key,
    login char(30) character set utf8 not null,
    email char(120) character set utf8,
    name char(60) character set utf8,
    passwd1 char(30) not null,
    passwd2 char(30) not null,
    about char(250) character set utf8,
    status tinyint not null,    -- 0 = created, 1 = mail sent, 2 = mail confirmed, 3 = locked, 4 = pswd reset link sent
    created datetime not null,
    last_login datetime,
    visits integer not null,
    settings integer not null,
    ula_time datetime,          -- unsuccessful login attempt time
    ula_cnt integer not null,   -- and count
    deleted char(1) not null    -- 'Y' / 'N'
);

create index users_login on users (login);
create index users_email on users (email);


-- user settings

create table users_settings (
    user_id integer,
    us_key char(15),
    us_val char(60) character set utf8,
    primary key (user_id, us_key)
);


-- user logins

create table users_logins (
    ip char(15),
    uagent char(120),
    sesid char(15),
    user_id integer not null,
    created datetime not null,
    last_used datetime not null,
    primary key (ip, uagent, sesid)
);


-- password resets

create table users_p_resets (
    user_id integer,
    linkkey char(30),
    created datetime not null,
    primary key (user_id, linkkey)
);


-- messages

create table users_messages (
    user_id integer,
    msg_id integer,
    email char(120) character set utf8,
    message text character set utf8,    -- 64 kB limit
    created datetime not null,
    primary key (user_id, msg_id)
);

Compilation script

Then of course, both DBMYSQL and USERS compilation switches must be present. Also, you need to add silgy_usr.c to compilation, and MySQL library path and name, so your m script would look like this:

#!/bin/sh

g++ silgy_app.cpp silgy_eng.c silgy_lib.c silgy_usr.c \
-D DBMYSQL -D USERS \
-o ../bin/silgy_app \
-L/usr/lib64/mysql -lmysqlclient

Sample code

You can download Toy Facebook project as a template for typical web application with users.

Logged in user sessions in Silgy

Successful libusr_do_login() call does the following:

• Sets the uses array record values (accessible via US macro),
• Adds record to users_logins table,
• Adds ls cookie to the response,
• Updates users.visits and users.last_login.

Keep Me Logged In

Adding keep=on to the login request will set ls cookie expiration to date to +30 days. Therefore — until you call libusr_log_out() — every subsequent request with valid ls cookie and the same User Agent as in the initial request, will automatically mark session as "logged in". Note that libusr_log_out() removes all records that belong to the user so it will log them out from every device.

Otherwise

Without keep=on cookie does not have expiration time, so by default it will expire by the end of the current browser session.

Caching

Logged in sessions are cached for 30 minutes after last activity. Within this range there is no need to query users_logins table.

Unsuccessful logins

Unsuccessful login count and time is stored in users.ula_cnt and users.ula_time. User can try 3 times without negative consequences. Then, to prevent brute-force attacks, the fourth attempt requires waiting for 1 minute, fifth — for 10 minutes, sixth — for 1 hour.