PHP login script

<?php
error_reporting(E_ALL); 
ini_set("display_errors", 1);

require_once('errorLogger.php');

class Auth 
{
	private $sSalt;
	private $sPepper;
	
	private $sReturnUrl;
	
	public $iUserID;
	public $sUserHash;
	public $sUsername;
	
	private $db;
	private $error;
	
	private $session_id;
	
	private $time_out;
	
	public function __construct($time_out = 60)
	{
		$this->db = new PDO('mysql:host=localhost;dbname=
','
','
');
		$this->db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
		
		$this->error = new errorReporting;

		$this->sSalt = '%fyg#h74$gS6F/e%sC^^$fd';
		$this->sPepper = '#$fe3êr#%^Dgt54fgD$%53D$';
		
		$this->time_out = $time_out;
		
		$this->cleanAttempts();
		$this->cleanLogins();
	}
	
	public function authorisation ($iUserID, $sHash, $sSessionID)
	{
		try
		{
			$qCheckAuthorisedUser = $this->db->query('SELECT ID
														FROM login_current_online
															WHERE user_ID = '.$iUserID.' 
																AND hash = "'.$sHash.'"
																	AND ip_address = "'.$_SERVER['REMOTE_ADDR'].'"
																		AND session_ID = "'.$sSessionID.'"');
															
				$rCheckAuthorisedUser = $qCheckAuthorisedUser->fetch(PDO::FETCH_ASSOC);
				
				if(count($rCheckAuthorisedUser) == 1)
				{
					$qUpdateUserLastActive = $this->db->exec('UPDATE login_current_online
																SET last_active = NOW()
																	WHERE ID = '.$rCheckAuthorisedUser['ID']);
																	
					return true;
				}
				else
				{
					return false;
				}
		}
		catch(PDOException $e)
		{
			$this->error->setDatabaseError($e->getTrace(), $e->getMessage());
			$this->error->log();
			
			return false;
		} 		
	}
	
	public function login($sUsername, $sPassword)
	{
		try 
		{ 
			$qAttempt = $this->db->exec('INSERT INTO 
												login_attempts 
													(ip_address, 
													username, 
													password,
													date) 
											VALUES 
													("'.$_SERVER['REMOTE_ADDR'].'",
													'.$this->db->quote($sUsername).',
													'.$this->db->quote($sPassword).',
													NOW())
											');
													
			$qBruteforce = $this->db->query('SELECT ID 
												FROM login_attempts 
													WHERE date > NOW() - INTERVAL 1 MINUTE');
				
				$aBruteforce = $qBruteforce->fetchAll(PDO::FETCH_ASSOC);
				
				if(count($aBruteforce) < 10)
				{
					$qChkUserInput = $this->db->query('SELECT ID, username, rights
														FROM accounts
															WHERE username = '.$this->db->quote($sUsername).' 
																AND password = '.$this->db->quote($this->hash($sPassword)).'
																AND active = 1'
													  );
													  
						$aChkUserInput = $qChkUserInput->fetch(PDO::FETCH_ASSOC);
														  
						if($aChkUserInput != false)
						{							
							$this->iUserID = $aChkUserInput['ID'];
							$this->sUserHash = $this->userIdentity();
							
								$qInsertUserOnline = $this->db->exec('INSERT INTO 
																			login_current_online 
																				(user_ID,
																				hash,
																				last_active,
																				ip_address,
																				session_ID)
																		VALUES
																				('.$this->iUserID.',
																				"'.$this->sUserHash.'",
																				NOW(),
																				"'.$_SERVER['REMOTE_ADDR'].'",
																				"'.$this->session_id.'")
																	');
							return true;
						}
						else
						{
							return false;
						}
				}
				else
				{
					return false;
				}
		} 
		catch(PDOException $e) 
		{ 
			$this->error->setDatabaseError($e->getTrace(), $e->getMessage());
			$this->error->log();
			
			return false;
		} 		
	}
	
	public function logout ($iUserID, $sUserHash)
	{
		try
		{
			$this->db->exec('DELETE FROM 
								login_current_online
									WHERE user_ID = '.$iUserID.'
										AND hash = "'.$sUserHash.'"');
										
			return true;
		}
		catch(PDOException $e)
		{
			$this->error->setDatabaseError($e->getTrace(), $e->getMessage());
			$this->error->log();
			
			return false;
		}
	}
	
	public function redirect()
	{
		if($this->sReturnUrl != NULL)
		{
			return $this->sReturnUrl;
		}
		else
		{
			if(isset($_SERVER['HTTP_REFERER']) && !empty($_SERVER['HTTP_REFERER']))
			{
				return $_SERVER['HTTP_REFERER'];
			}
			else
			{
				return 'index.php';
			}
		}
	}
	
	public function getUserInfoPerMail ($emailAddress)
	{
		$qUserInfo = $this->db->query('SELECT ID, username 
												FROM accounts 
													WHERE email_address = '.$this->db->quote($emailAddress));
				
			return $qUserInfo->fetch(PDO::FETCH_ASSOC);
	}
	
	public function resetUser($user_id, $password)
	{
		if(ctype_digit($user_id) || !empty($password))
		{
			$qResetUser = $this->db->exec('UPDATE accounts SET password = "'.$password.'" WHERE ID = '.$user_id.' LIMIT 1');
			
			if($qResetUser > 0)
			{
				return true;
			}
			else
			{
				return false;
			}
		}
		else
		{
			return false;
		}
		
	}
	
	public function getUserID ()
	{
		if(!empty($this->iUserID))
		{
			return $this->iUserID;
		}
	}
	
	public function getsUserHash ()
	{
		if(!empty($this->sUserHash))
		{
			return $this->sUserHash;
		}
	}
	
	public function getNewPassword ()
	{
		$sIdentity = '';
		$iIntegers = range(0,9);
		$sLowerCase = range('a','z');
		$return = array();
		
		$aChars = array_merge($iIntegers, $sLowerCase);
		
			for($i = 0; $i <= 4; $i++)
			{
					$sIdentity .= $aChars[rand(0,count($aChars)-1)];
			}
		
		$return['password'] = $sIdentity;
		$return['hash'] = $this->hash($sIdentity);
		
		return $return;
	}
	
	public function setReturnPath ($returnUrl)
	{
		if(!empty($returnUrl))
		{
			$this->sReturnUrl = $returnUrl;
		}
	}
	
	public function setSessionID ($sessionID)
	{
		if(!empty($sessionID))
		{
			$this->session_id = $sessionID;
		}
	}
	
	private function hash ($password)
	{
		return sha1($this->sSalt.$password.$this->sPepper);
	}
	
	private function cleanAttempts ()
	{
		try
		{
			$this->db->exec('DELETE 
								FROM login_attempts 
									WHERE date < NOW() - INTERVAL 7 DAY');
		} 
		catch(PDOException $e) 
		{ 
			$error = '<p><b>A query error has occurred</b><p>'.PHP_EOL;
		    $error .= '<pre>'; 
		    $error .= 'Line number: '.$e->getLine().'<br>'.PHP_EOL; 
		    $error .= 'File: '.$e->getFile().'<br>'.PHP_EOL; 
		    $error .= 'PDO message: '.$e->getMessage().'<br>'.PHP_EOL; 
		    $error .= '</pre>'; 
			
			return $error;
		}
	}
	
	private function cleanLogins ()
	{
		try
		{
			$this->db->exec('DELETE 
								FROM login_current_online
									WHERE last_active < NOW() - INTERVAL '.$this->time_out.' MINUTE');
		}
		catch(PDOException $e)
		{
			$error = '<p><b>A query error has occurred</b><p>'.PHP_EOL;
		    $error .= '<pre>'; 
		    $error .= 'Line number: '.$e->getLine().'<br>'.PHP_EOL; 
		    $error .= 'File: '.$e->getFile().'<br>'.PHP_EOL; 
		    $error .= 'PDO message: '.$e->getMessage().'<br>'.PHP_EOL; 
		    $error .= '</pre>'; 
			
			return $error;
		}
	}
	
	private function userIdentity()
	{
		$sIdentity = '';
		$iIntegers = range(0,100);
		$sLowerCase = range('a','z');
		$sUpperCase = range('A','Z');
		
		$aChars = array_merge($iIntegers, $sLowerCase , $sUpperCase);
		
			for($i = 0; $i <= 50; $i++)
			{
					$sIdentity .= $aChars[rand(0,count($aChars)-1)];
			}
		
		return sha1(microtime().$sIdentity);
	}
}
?>