Class: OO Auth

This class is meant to create and manage sessions used for authentication of users at a given site.

The class manages the storage of some control values in the session and also any variables defined by the developers and set by the application scripts.

It can create a session and validate its integrity to prevent stealing by verifying the if the IP address of the user that created the session is the same during all accesses, thus enforcing an additional security level.

It can also limit the life time of a session by verifying if it passed a given timeout period since its creation.

If the session is no longer valid because it was stolen or it exceeded its life time limit, the class will destroy the session and redirect to a given URL or display an error message. Error message can be localized.

If you know an application of this package, send a message to the author to add a link here.