###############################################
# Authentication settings - read AUTHENTICATION
###############################################
$auth["session"] = "php"; # How to get and keep the user ID. One of
           # "http" "php" "cookie" "ip" "host" "nt" "omni".
$auth["type"] = "db_ext"; # How to validate the user/password. One of "none"
                          # "config" "db" "db_ext" "pop3" "imap" "ldap" "nis"
                          # "nw" "ext".

# The list of administrators (can modify other peoples settings)
#$auth["admin"][] = "127.0.0.1";   # localhost IP address. Useful with IP sessions.
$auth["admin"][] = "admin";   # A user name from the user list. Useful
                                    #with most other session schemes.

# 'auth_config' user database
# Format: $auth["user"]["name"] = "password";

# 'session_http' configuration settings
$auth["realm"]  = "mrbs";

# 'auth_ext' configuration settings
$auth["prog"]   = "";
$auth["params"] = "";

# 'auth_db_ext' configuration settings
$auth['db_ext']['db_host'] = 'localhost';
$auth['db_ext']['db_username'] = 'dbuser';
$auth['db_ext']['db_password'] = 'secret';
$auth['db_ext']['db_name'] = 'joomla';
$auth['db_ext']['db_table'] = 'jos_users';
$auth['db_ext']['column_name_username'] = 'username';
$auth['db_ext']['column_name_password'] = 'password';
# Either 'md5', 'sha1', 'crypt' or 'plaintext'
$auth['db_ext']['password_format'] = 'md5';

case 'joomla':
list($hash, $salt) = explode(':', $row[0]);
$cryptpass = md5($pass.$salt);
if ($hash == $cryptpass)
{
$retval = 1;
}
break;

$auth["session"] = "php";
$auth["type"] = "db_ext";

# 'auth_db_ext' configuration settings
$auth['db_ext']['db_host'] = 'localhost';
$auth['db_ext']['db_username'] = 'dbuser';
$auth['db_ext']['db_password'] = 'dbpass';
$auth['db_ext']['db_name'] = 'joomla';
$auth['db_ext']['db_table'] = 'jos_users';
$auth['db_ext']['column_name_username'] = 'username';
$auth['db_ext']['column_name_password'] = 'password';
# Either 'md5', 'sha1', 'crypt' or 'plaintext'
$auth['db_ext']['password_format'] = 'joomla'; # This refers to the case in auth_db_ext.inc

<?php
/*****************************************************************************
*
*   File name       auth_db_ext.inc
*
*   Description     Authenticate users from a table in another database.
*
*   Notes           To use this authentication scheme, set in config.inc.php:
*         $auth["type"]  = "db_ext";
*                   Assumes passwords are stored in the other table in
*                   plaintext, authValidateUser() will need to be changed if
*                   the password is stored differently.
*
*   History
*    Available in the source control system
*
******************************************************************************/

// $Id: auth_db_ext.inc 994 2009-01-14 21:48:50Z jberanek $


/* authValidateUser($user, $pass)
*
* Checks if the specified username/password pair are valid
*
* $user  - The user name
* $pass  - The password
*
* Returns:
*   0        - The pair are invalid or do not exist
*   non-zero - The pair are valid
*/

function authValidateUser($user, $pass)
{






  global $auth;

  $retval = 0;

  $user = strtolower($user);

  if (empty($auth['db_ext']['db_system'])
  {
    $auth['db_ext']['db_system'] = 'mysql';
  }

  $conn = sql_connect($auth['db_ext']['db_system'],
                      $auth['db_ext']['db_host'],
                      $auth['db_ext']['db_username'],
                      $auth['db_ext']['db_password'],
                      $auth['db_ext']['db_name']);

  $user = addslashes($user);

  if ($auth['db_ext']['use_md5_passwords'] == 1)
  {
    $pass = md5($pass);
  }

  $query = "SELECT " . $auth['db_ext']['column_name_password'] .
           " FROM " . $auth['db_ext']['db_table'] .
           " WHERE ". $auth['db_ext']['column_name_username'] . "='$user'";

  $r = sql_query($query, $conn);

  if ($r && (sql_count($r, $conn) == 1)) // force a unique match
  {
    $row = sql_row($r, 0, $conn);

    switch ($auth['db_ext']['password_format'])
    {
   
         case 'joomla':
list($hash, $salt) = explode(':', $row[0]);
$cryptpass = md5($pass.$salt);
if ($hash == $cryptpass)
{
$retval = 1;
}
break;
   
   
   
   
   
      case 'md5':
        if (md5($pass) == $row[0])
        {
          $retval = 1;
        }
        break;

      case 'sha1':
        if (sha1($pass) == $row[0])
        {
          $retval = 1;
        }
        break;

      case 'crypt':
        $recrypt = crypt($pass,$row[0]);
        if ($row[0] == $recrypt)
        {
          $retval = 1;
        }
        break;

      default:
        // Otherwise assume plaintext
        if ($pass == $row[0])
        {
          $retval = 1;
        }
        break;
      
      

      
      
    }
  }




  return $retval;
}

/* authGetUserLevel($user)
*
* Determines the users access level
*
* $user - The user name
*
* Returns:
*   The users access level
*/
function authGetUserLevel($user, $lev1_admin)
{
  // User not logged in, user level '0'
  if(!isset($user))
  {
    return 0;
  }

  // Check if the user is can modify
  for($i = 0; isset($lev1_admin[$i]); $i++)
  {
    if(strcasecmp($user, $lev1_admin[$i]) == 0)
    {
      return 2;
    }
  }

  // Everybody else is access level '1'
  return 1;
}

?>