2010-07-15 16:09:22 +04:00
|
|
|
<?php
|
|
|
|
|
|
|
|
/**
|
|
|
|
* ownCloud
|
|
|
|
*
|
|
|
|
* @author Frank Karlitschek
|
|
|
|
* @copyright 2010 Frank Karlitschek karlitschek@kde.org
|
|
|
|
*
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 3 of the License, or any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
|
2010-07-15 16:09:22 +04:00
|
|
|
/**
|
|
|
|
* Class for usermanagement in a SQL Database
|
|
|
|
* eg mysql, sqlite
|
|
|
|
*/
|
|
|
|
class OC_USER_Database extends OC_USER {
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* check if the login button is pressed and logg the user in
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function loginLisener() {
|
|
|
|
if ( isset($_POST['loginbutton']) AND isset($_POST['password']) AND isset($_POST['login']) ) {
|
|
|
|
if ( OC_USER::login($_POST['login'], $_POST['password']) ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
echo 1;
|
2010-07-15 21:56:13 +04:00
|
|
|
OC_LOG::event($_SESSION['username'], 1, '');
|
2010-07-15 16:09:22 +04:00
|
|
|
echo 2;
|
2010-07-15 21:56:13 +04:00
|
|
|
if ( ( isset($CONFIG_HTTPFORCESSL) AND $CONFIG_HTTPFORCESSL )
|
|
|
|
OR ( isset($_SERVER['HTTPS']) AND ( 'on' === $_SERVER['HTTPS'] ) ) ) {
|
|
|
|
$url = 'https://' . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'];
|
|
|
|
} else {
|
|
|
|
$url = 'http://'. $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'];
|
2010-07-15 16:09:22 +04:00
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
header('Location: $url');
|
2010-07-15 16:09:22 +04:00
|
|
|
die();
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
|
|
|
return 'error';
|
|
|
|
}
|
2010-07-15 16:09:22 +04:00
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
|
2010-07-15 16:09:22 +04:00
|
|
|
return('');
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* try to create a new user
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function createUser($username, $password) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
2010-07-15 21:56:13 +04:00
|
|
|
if ( 0 !== OC_USER::getUserId($username, true) ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
|
|
|
$usernameclean = strtolower($username);
|
|
|
|
$password = sha1($password);
|
|
|
|
$username = OC_DB::escape($username);
|
|
|
|
$usernameclean = OC_DB::escape($usernameclean);
|
|
|
|
$query = "INSERT INTO `{$CONFIG_DBTABLEPREFIX}users` (`user_name` ,`user_name_clean` ,`user_password`) VALUES ('$username', '$usernameclean', '$password')";
|
|
|
|
$result = OC_DB::query($query);
|
2010-07-15 16:09:22 +04:00
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
return ($result) ? true : false;
|
|
|
|
}
|
2010-07-15 16:09:22 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* try to login a user
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function login($username, $password) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
$password = sha1($password);
|
|
|
|
$usernameclean = strtolower($username);
|
|
|
|
$username = OC_DB::escape($username);
|
|
|
|
$usernameclean = OC_DB::escape($usernameclean);
|
2010-07-15 16:09:22 +04:00
|
|
|
$query = "SELECT user_id FROM {$CONFIG_DBTABLEPREFIX}users WHERE user_name_clean = '$usernameclean' AND user_password = '$password' LIMIT 1";
|
2010-07-15 21:56:13 +04:00
|
|
|
$result = OC_DB::select($query);
|
|
|
|
if ( isset($result[0]) AND isset($result[0]['user_id'])) {
|
|
|
|
$_SESSION['user_id'] = $result[0]['user_id'];
|
|
|
|
$_SESSION['username'] = $username;
|
|
|
|
$_SESSION['username_clean'] = $usernameclean;
|
|
|
|
|
2010-07-15 16:09:22 +04:00
|
|
|
return true;
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* check if the logout button is pressed and logout the user
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function logoutLisener() {
|
|
|
|
if ( isset($_GET['logoutbutton']) AND isset($_SESSION['username']) ) {
|
|
|
|
OC_LOG::event($_SESSION['username'], 2, '');
|
|
|
|
$_SESSION['user_id'] = false;
|
|
|
|
$_SESSION['username'] = '';
|
|
|
|
$_SESSION['username_clean'] = '';
|
2010-07-15 16:09:22 +04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* check if a user is logged in
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function isLoggedIn() {
|
|
|
|
if ( isset($_SESSION['user_id']) AND $_SESSION['user_id'] ) {
|
|
|
|
return true;
|
|
|
|
} else {
|
|
|
|
return false;
|
|
|
|
}
|
2010-07-15 16:09:22 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* try to create a new group
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function createGroup($groupname) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
2010-07-15 21:56:13 +04:00
|
|
|
if ( 0 === OC_USER::getGroupId($groupname, true) ) {
|
|
|
|
$groupname = OC_DB::escape($groupname);
|
|
|
|
$query = "INSERT INTO `{$CONFIG_DBTABLEPREFIX}groups` (`group_name`) VALUES ('$groupname')";
|
|
|
|
$result = OC_DB::query($query);
|
|
|
|
|
|
|
|
return ($result) ? true : false;
|
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* get the id of a user
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function getUserId($username, $nocache=false) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
2010-07-15 21:56:13 +04:00
|
|
|
|
|
|
|
$usernameClean = strtolower($username);
|
|
|
|
//try to use cached value to save an sql query
|
|
|
|
if ( !$nocache AND isset($_SESSION['user_id_cache'][$usernameClean]) ) {
|
|
|
|
return $_SESSION['user_id_cache'][$usernameClean];
|
2010-07-15 16:09:22 +04:00
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
$usernameClean = OC_DB::escape($usernameClean);
|
|
|
|
$query = "SELECT user_id FROM {$CONFIG_DBTABLEPREFIX}users WHERE user_name_clean = '$usernameClean'";
|
|
|
|
$result = OC_DB::select($query);
|
|
|
|
if ( !is_array($result) ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return 0;
|
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
if ( isset($result[0]) AND isset($result[0]['user_id']) ) {
|
|
|
|
$_SESSION['user_id_cache'][$usernameClean] = $result[0]['user_id'];
|
2010-07-15 16:09:22 +04:00
|
|
|
return $result[0]['user_id'];
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* get the id of a group
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function getGroupId($groupName, $noCache=false) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
2010-07-15 21:56:13 +04:00
|
|
|
|
|
|
|
//try to use cached value to save an sql query
|
|
|
|
if ( !$noCache AND isset($_SESSION['group_id_cache'][$groupName]) ) {
|
|
|
|
return $_SESSION['group_id_cache'][$groupName];
|
2010-07-15 16:09:22 +04:00
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
$groupName = OC_DB::escape($groupName);
|
|
|
|
$query = "SELECT group_id FROM {$CONFIG_DBTABLEPREFIX}groups WHERE group_name = '$groupName'";
|
|
|
|
$result = OC_DB::select($query);
|
|
|
|
if ( !is_array($result) ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return 0;
|
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
if ( isset($result[0]) AND isset($result[0]['group_id']) ) {
|
|
|
|
$_SESSION['group_id_cache'][$groupName] = $result[0]['group_id'];
|
2010-07-15 16:09:22 +04:00
|
|
|
return $result[0]['group_id'];
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* get the name of a group
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function getGroupName($groupId, $noCache=false) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
2010-07-15 21:56:13 +04:00
|
|
|
|
|
|
|
//try to use cached value to save an sql query
|
|
|
|
if ( !$noCache AND ( $name = array_search($groupId,$_SESSION['group_id_cache']) ) ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return $name;
|
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
$groupId = (integer)$groupId;
|
|
|
|
$query = "SELECT group_name FROM {$CONFIG_DBTABLEPREFIX}groups WHERE group_id = '$groupId' LIMIT 1";
|
|
|
|
$result = OC_DB::select($query);
|
|
|
|
if ( isset($result[0]) AND isset($result[0]['group_name']) ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return $result[0]['group_name'];
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* check if a user belongs to a group
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function inGroup($username, $groupName) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
$userId = OC_USER::getUserId($username);
|
|
|
|
$groupId = OC_USER::getGroupId($groupName);
|
|
|
|
if ( ( $groupId > 0 ) AND ( $userId > 0 ) ) {
|
|
|
|
$query = "SELECT * FROM {$CONFIG_DBTABLEPREFIX}user_group WHERE group_id = '$groupId' AND user_id = '$userId';";
|
|
|
|
$result = OC_DB::select($query);
|
|
|
|
if ( isset($result[0]) AND isset($result[0]['user_group_id']) ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return true;
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* add a user to a group
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function addToGroup($username, $groupName) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
if ( !OC_USER::inGroup($username, $groupName) ) {
|
|
|
|
$userId = OC_USER::getuserid($username);
|
|
|
|
$groupId = OC_USER::getgroupid($groupName);
|
|
|
|
if ( ( 0 != $groupId ) AND ( 0 != $userId ) ) {
|
|
|
|
$query = "INSERT INTO `{$CONFIG_DBTABLEPREFIX}user_group` (`user_id` ,`group_id`) VALUES ('$userId', '$groupId');";
|
|
|
|
$result = OC_DB::query($query);
|
|
|
|
if ( $result ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return true;
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return true;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
public static function generatePassword() {
|
2010-07-15 16:09:22 +04:00
|
|
|
return uniqid();
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* get all groups the user belongs to
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function getUserGroups($username) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
$userId = OC_USER::getUserId($username);
|
|
|
|
$query = "SELECT group_id FROM {$CONFIG_DBTABLEPREFIX}user_group WHERE user_id = '$userId'";
|
|
|
|
$result = OC_DB::select($query);
|
|
|
|
$groups = array();
|
|
|
|
if ( is_array($result) ) {
|
|
|
|
foreach ( $result as $group ) {
|
|
|
|
$groupId = $group['group_id'];
|
|
|
|
$groups[] = OC_USER::getGroupName($groupId);
|
2010-07-15 16:09:22 +04:00
|
|
|
}
|
|
|
|
}
|
2010-07-15 21:56:13 +04:00
|
|
|
|
2010-07-15 16:09:22 +04:00
|
|
|
return $groups;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2010-07-15 21:56:13 +04:00
|
|
|
* set the password of a user
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
public static function setPassword($username, $password) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
$password = sha1($password);
|
|
|
|
$userId = OC_USER::getUserId($username);
|
|
|
|
$query = "UPDATE {$CONFIG_DBTABLEPREFIX}users SET user_password = '$password' WHERE user_id ='$userId'";
|
|
|
|
$result = OC_DB::query($query);
|
|
|
|
if ( $result ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return true;
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* check the password of a user
|
|
|
|
*
|
|
|
|
*/
|
2010-07-15 21:56:13 +04:00
|
|
|
public static function checkPassword($username, $password) {
|
2010-07-15 16:09:22 +04:00
|
|
|
global $CONFIG_DBTABLEPREFIX;
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
$password = sha1($password);
|
|
|
|
$usernameClean = strtolower($username);
|
|
|
|
$username = OC_DB::escape($username);
|
|
|
|
$usernameClean = OC_DB::escape($usernameClean);
|
|
|
|
$query = "SELECT user_id FROM '{$CONFIG_DBTABLEPREFIX}users' WHERE user_name_clean = '$usernameClean' AND user_password = '$password' LIMIT 1";
|
|
|
|
$result = OC_DB::select($query);
|
|
|
|
if ( isset($result[0]) AND isset($result[0]['user_id']) AND ( $result[0]['user_id'] > 0 ) ) {
|
2010-07-15 16:09:22 +04:00
|
|
|
return true;
|
2010-07-15 21:56:13 +04:00
|
|
|
} else {
|
2010-07-15 16:09:22 +04:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2010-07-15 21:56:13 +04:00
|
|
|
}
|