29 |
32 | loggedIn()) { 34 | echo "
39 |
";
56 | }
57 | ?>
58 |
59 |
61 | Demo page by BlackCetha
62 |
63 |
64 |
65 |
66 |
--------------------------------------------------------------------------------
/steamauthOOP.class.php:
--------------------------------------------------------------------------------
1 | "", // Get yours today from http://steamcommunity.com/dev/apikey
11 | "domainname" => "", // Displayed domain in the login-screen
12 | "loginpage" => "", // Returns to last page if not set
13 | "logoutpage" => "",
14 | "skipAPI" => false // true = dont get the data from steam, just return the steamid64
15 | );
16 |
17 | function __construct() {
18 | if (session_id() == "") session_start(); // Start a session if none exists
19 | if ($this->settings["apikey"] == "") die("SteamAuthOOP: Please supply a valid API-Key!");
20 | if ($this->settings["loginpage"] == "") $this->settings["loginpage"] = /* [ */ (!empty($_SERVER['HTTPS']) ? 'https' : 'http') . '://' . $_SERVER['HTTP_HOST'] . $_SERVER['SCRIPT_NAME']; // Code (c) 2010 ichimonai.com, released under MIT-License
21 | if (isset($_GET["openid_assoc_handle"]) && !isset($_SESSION["steamdata"]["steamid"])) { // Did we just return from steam login-page? If so, validate idendity and save the data
22 | $steamid = $this->validate();
23 | if ($steamid != "") { // ID Proven, get data from steam and save them
24 | if ($this->settings["skipAPI"]) {
25 | $_SESSION["steamdata"]["steamid"] = $steamid;
26 | return; // Skip API here
27 | }
28 | @$apiresp = json_decode(file_get_contents("https://api.steampowered.com/ISteamUser/GetPlayerSummaries/v0002/?key=".$this->settings["apikey"]."&steamids=".$steamid),true);
29 | foreach ($apiresp["response"]["players"][0] as $key => $value) $_SESSION["steamdata"][$key] = $value;
30 | }
31 | }
32 | if (isset($_SESSION["steamdata"]["steamid"])) { // If we are logged in, make user-data accessable through $steam->var
33 | foreach ($_SESSION["steamdata"] as $key => $value) $this->{$key} = $value;
34 | }
35 | }
36 |
37 | /**
38 | * Generate SteamLogin-URL
39 | * @copyright loginUrl function (c) 2010 ichimonai.com, released under MIT-License
40 | * Modified by BlackCetha for OOP use
41 | */
42 | function loginUrl()
43 | {
44 | $params = array(
45 | 'openid.ns' => 'http://specs.openid.net/auth/2.0',
46 | 'openid.mode' => 'checkid_setup',
47 | 'openid.return_to' => $this->settings["loginpage"],
48 | 'openid.realm' => (!empty($_SERVER['HTTPS']) ? 'https' : 'http') . '://' . $_SERVER['HTTP_HOST'],
49 | 'openid.identity' => 'http://specs.openid.net/auth/2.0/identifier_select',
50 | 'openid.claimed_id' => 'http://specs.openid.net/auth/2.0/identifier_select',
51 | );
52 | return 'https://steamcommunity.com/openid/login' . '?' . http_build_query($params, '', "&");
53 | }
54 |
55 | /*
56 | * Validate data against Steam-Servers
57 | * @copyright validate function (c) 2010 ichimonai.com, released under MIT-License
58 | * Modified by BlackCetha for OOP use
59 | */
60 | private static function validate()
61 | {
62 | // Star off with some basic params
63 | $params = array(
64 | 'openid.assoc_handle' => $_GET['openid_assoc_handle'],
65 | 'openid.signed' => $_GET['openid_signed'],
66 | 'openid.sig' => $_GET['openid_sig'],
67 | 'openid.ns' => 'http://specs.openid.net/auth/2.0',
68 | );
69 |
70 | // Get all the params that were sent back and resend them for validation
71 | $signed = explode(',', $_GET['openid_signed']);
72 | foreach($signed as $item)
73 | {
74 | $val = $_GET['openid_' . str_replace('.', '_', $item)];
75 | $params['openid.' . $item] = get_magic_quotes_gpc() ? stripslashes($val) : $val;
76 | }
77 |
78 | // Finally, add the all important mode.
79 | $params['openid.mode'] = 'check_authentication';
80 |
81 | // Stored to send a Content-Length header
82 | $data = http_build_query($params);
83 | $context = stream_context_create(array(
84 | 'http' => array(
85 | 'method' => 'POST',
86 | 'header' =>
87 | "Accept-language: en\r\n".
88 | "Content-type: application/x-www-form-urlencoded\r\n" .
89 | "Content-Length: " . strlen($data) . "\r\n",
90 | 'content' => $data,
91 | ),
92 | ));
93 |
94 | $result = file_get_contents("https://steamcommunity.com/openid/login", false, $context);
95 |
96 | // Validate wheather it's true and if we have a good ID
97 | preg_match("#^https?://steamcommunity.com/openid/id/([0-9]{17,25})#", $_GET['openid_claimed_id'], $matches);
98 | $steamID64 = is_numeric($matches[1]) ? $matches[1] : 0;
99 |
100 | // Return our final value
101 | return preg_match("#is_valid\s*:\s*true#i", $result) == 1 ? $steamID64 : '';
102 | }
103 | function logout() {
104 | if (!$this->loggedIn()) return false;
105 | unset($_SESSION["steamdata"]); // Delete the users info from the cache, DOESNT DESTROY YOUR SESSION!
106 | if (!isset($_SESSION[0])) session_destroy(); // End the session if theres no more data in it
107 | if ($this->settings["logoutpage"] != "") header("Location: ".$this->settings["logoutpage"]); // If the logout-page is set, go there
108 | return true;
109 | }
110 | function loggedIn() {
111 | return (isset($_SESSION["steamdata"]["steamid"]) && $_SESSION["steamdata"]["steamid"] != "") ? true : false;
112 | }
113 | function forceReload() {
114 | if (!isset($_SESSION["steamdata"]["steamid"])) return false; // User is not logged in, nothing to reload
115 | @$apiresp = json_decode(file_get_contents("https://api.steampowered.com/ISteamUser/GetPlayerSummaries/v0002/?key=".$this->settings["apikey"]."&steamids=".$_SESSION["steamdata"]["steamid"]),true);
116 | foreach ($apiresp["response"]["players"][0] as $key => $value) $_SESSION["steamdata"][$key] = $value;
117 | foreach ($_SESSION["steamdata"] as $key => $value) $this->{$key} = $value; // Make user-data accessable through $steam->var
118 | return true;
119 | }
120 | /**
121 | * Prints debug information about steamauth
122 | */
123 | function debug() {
124 | echo "SteamAuthOOP Demo
30 | for SteamAuthOOP 1.0 31 |32 | loggedIn()) { 34 | echo "
Welcome Guest! Please log in!
";
37 | } else {
38 | echo "39 |
Steam WebAPI-Output: There are more variables ready to use but not listed here as they are not always available.
Log out 40 || Variable name | Value | Description |
| \$steam->loggedIn() | ".$steam->loggedIn()." | 1 (true) - Logged in, 0 (false) - not |
| \$steam->steamid | ".$steam->steamid." | SteamID64 of the user |
| \$steam->communityvisibilitystate | ".$steam->communityvisibilitystate." | 1 - Account not visible; 3 - Account is public (Depends on the relationship of your account to the others) |
| \$steam->profilestate | ".$steam->profilestate." | 1 - The user has a Steam Community profile; 0 - if not |
| \$steam->personaname | ".$steam->personaname." | Public name of the user |
| \$steam->lastlogoff | ".$steam->lastlogoff." | Unix timestamp of the user's last logoff |
| \$steam->profileurl | ".$steam->profileurl." | Link to the user's profile |
| \$steam->personastate | ".$steam->personastate." | 0 - Offline, 1 - Online, 2 - Busy, 3 - Away, 4 - Snooze, 5 - looking to trade, 6 - looking to play |
| \$steam->realname | ".$steam->realname." | \"Real\" name |
| \$steam->primaryclanid | ".$steam->primaryclanid." | The ID of the user's primary group |
| \$steam->timecreated | ".$steam->timecreated." | Unix timestamp for the time the user's account was created |
| \$steam->avatar | ".$steam->avatar." | Address of the user's 32x32px avatar |
| \$steam->avatarmedium | ".$steam->avatarmedium." | Address of the user's 64x64px avatar |
| \$steam->avatarfull | ".$steam->avatarfull." | Address of the user's 184x184px avatar |
59 |
This page is powered by Steam
60 | GitHub Repo61 | Demo page by BlackCetha
SteamAuth debug report
Settings-array:
"; 125 | echo "
".print_r($this->settings,true).""; 126 | echo "
Data:
"; 127 | echo "
".print_r($_SESSION["steamdata"],true).""; 128 | } 129 | } 130 | ?> 131 | --------------------------------------------------------------------------------