includes/api_user.php

   1 <?php
   2 /*=====================================================================*\
   3 || ###################################################################
   4 || # Bugdar [#]version[#]
   5 || # Copyright ©2002-[#]year[#] Iris Studios, Inc.
   6 || #
   7 || # This program is free software; you can redistribute it and/or modify
   8 || # it under the terms of the GNU General Public License as published by
   9 || # the Free Software Foundation; version [#]gpl[#] of the License.
  10 || #
  11 || # This program is distributed in the hope that it will be useful, but
  12 || # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  13 || # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  14 || # more details.
  15 || #
  16 || # You should have received a copy of the GNU General Public License along
  17 || # with this program; if not, write to the Free Software Foundation, Inc.,
  18 || # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
  19 || ###################################################################
  20 \*=====================================================================*/
  21
  22 $GLOBALS['isso:callback']->load('api', null);
  23
  24 require_once('./includes/functions_datastore.php');
  25
  26 /**
  27 * API: User
  28 *
  29 * @author               Iris Studios, Inc.
  30 * @copyright    Copyright ©2002 - [#]year[#], Iris Studios, Inc.
  31 * @version              $Revision$
  32 * @package              Bugdar
  33 *
  34 */
  35 class UserAPI extends API
  36 {
  37         /**
  38         * Database fields
  39         * @var  array
  40         * @access       private
  41         */
  42         var $fields = array(
  43                 'userid'                => array(TYPE_UINT,     REQ_AUTO,       'verify_nozero'),
  44                 'email'                 => array(TYPE_STR,      REQ_YES,        ':self'),
  45                 'displayname'   => array(TYPE_STR,      REQ_YES,        ':self'),
  46                 'usergroupid'   => array(TYPE_UINT,     REQ_YES,        ':self'),
  47                 'password'              => array(TYPE_STR,      REQ_YES,        'verify_noempty'),
  48                 'salt'                  => array(TYPE_STR,      REQ_SET),
  49                 'authkey'               => array(TYPE_STR,      REQ_SET),
  50                 'showemail'             => array(TYPE_BOOL,     REQ_NO),
  51                 'showcolours'   => array(TYPE_BOOL,     REQ_NO),
  52                 'languageid'    => array(TYPE_UINT,     REQ_NO),
  53                 'timezone'              => array(TYPE_INT,      REQ_NO),
  54                 'usedst'                => array(TYPE_BOOL,     REQ_NO)
  55         );
  56
  57         /**
  58         * Database table
  59         * @var  string
  60         * @access       private
  61         */
  62         var $table = 'user';
  63
  64         /**
  65         * Table prefix
  66         * @var  string
  67         * @access       private
  68         */
  69         var $prefix = TABLE_PREFIX;
  70
  71         // ###################################################################
  72         /**
  73         * Set field: salt
  74         *
  75         * @access       private
  76         */
  77         function set_salt()
  78         {
  79                 $this->set('salt', $this->registry->funct->rand(array(1, 15)));
  80         }
  81
  82         // ###################################################################
  83         /**
  84         * Set field: authkey
  85         *
  86         * @access       private
  87         */
  88         function set_authkey()
  89         {
  90                 $this->set('authkey', $this->registry->funct->rand());
  91         }
  92
  93         // ###################################################################
  94         /**
  95         * Pre-insert
  96         *
  97         * @access       private
  98         */
  99         function pre_insert()
 100         {
 101                 $this->set('password', md5(md5($this->values['password']) . md5($this->values['salt'])));
 102         }
 103
 104         // ###################################################################
 105         /**
 106         * Post-insert
 107         *
 108         * @access       protected
 109         */
 110         function post_insert()
 111         {
 112                 build_assignedto();
 113         }
 114
 115         // ###################################################################
 116         /**
 117         * Verify: email
 118         *
 119         * @access       private
 120         */
 121         function verify_email()
 122         {
 123                 $this->verify_noempty('displayname');
 124
 125                 if ($this->registry->funct->is_valid_email($this->values['email']))
 126                 {
 127                         return $this->registry->lang->string('The specified email is invalid.');
 128                 }
 129                 if ($this->registry->db->query_first("SELECT * FROM " . TABLE_PREFIX . "user WHERE email = '" . $this->registry->db->escape_string($this->values['email']) . "' AND userid <> " . $this->values['userid']))
 130                 {
 131                         return $this->registry->lang->string('The specified email is already in use.');
 132                 }
 133                 return true;
 134         }
 135
 136         // ###################################################################
 137         /**
 138         * Verify: displayname
 139         *
 140         * @access       private
 141         */
 142         function verify_displayname()
 143         {
 144                 $this->verify_noempty('displayname');
 145
 146                 if ($this->registry->db->query_first("SELECT * FROM " . TABLE_PREFIX . "user WHERE displayname = '" . $this->registry->db->escape_string($this->values['displayname']) . "' AND userid <> " . $this->values['userid']))
 147                 {
 148                         return $this->registry->lang->string('That display name is already in use by another user.');
 149                 }
 150                 return true;
 151         }
 152
 153         // ###################################################################
 154         /**
 155         * Verify: usergroupid
 156         *
 157         * @access       private
 158         */
 159         function verify_usergroupid()
 160         {
 161                 if (!isset($this->registry->datastore['usergroup'][ $this->values['usergroupid'] ]))
 162                 {
 163                         return false;
 164                 }
 165                 return true;
 166         }
 167
 168         // ###################################################################
 169         /**
 170         * Pre-update
 171         *
 172         * @access       private
 173         */
 174         function pre_update()
 175         {
 176                 $this->set_condition();
 177                 $this->fetch();
 178
 179                 if ($this->values['password'] == '')
 180                 {
 181                         $this->set('password', $this->objdata['password']);
 182                 }
 183                 else
 184                 {
 185                         $this->registry->debug("updating password = true");
 186                         $this->set('password', md5(md5($this->values['password']) . md5($this->objdata['salt'])));
 187                 }
 188         }
 189
 190         // ###################################################################
 191         /**
 192         * Post-update
 193         *
 194         * @access       protected
 195         */
 196         function post_update()
 197         {
 198                 build_assignedto();
 199         }
 200
 201         // ###################################################################
 202         /**
 203         * Pre-delete
 204         *
 205         * @access       protected
 206         */
 207         function pre_delete()
 208         {
 209                 if ($this->values['userid'] == $this->registry->userinfo['userid'])
 210                 {
 211                         $this->error($lang->string('You cannot delete your own account!'));
 212                 }
 213
 214                 if ($this->values['usergroupid'] == 6)
 215                 {
 216                         $count = $this->registry->db->query_first("SELECT COUNT(*) AS count FROM " . TABLE_PREFIX . "user WHERE usergroupid = 6 AND userid <> " . $this->values['userid']);
 217                         if ($count['count'] < 1)
 218                         {
 219                                 $this->error($lang->string('At least one other administrator needs to be present before you can delete this user'));
 220                         }
 221                 }
 222         }
 223
 224         // ###################################################################
 225         /**
 226         * Post-delete
 227         *
 228         * @todo         Finish post-delete user data cleanup
 229         *
 230         * @access       protected
 231         */
 232         function post_delete()
 233         {
 234                 $this->registry->db->query("DELETE FROM " . TABLE_PREFIX . "user WHERE userid = " . $this->values['userid']);
 235                 $this->registry->db->query("DELETE FROM " . TABLE_PREFIX . "favourite WHERE userid = " . $this->values['userid']);
 236                 $this->registry->db->query("DELETE FROM " . TABLE_PREFIX . "useractivation WHERE userid = " . $this->values['userid']);
 237
 238                 build_assignedto();
 239         }
 240 }
 241
 242 /*=====================================================================*\
 243 || ###################################################################
 244 || # $HeadURL$
 245 || # $Id$
 246 || ###################################################################
 247 \*=====================================================================*/
 248 ?>