Nephthys

<?php

/***************************************************************************

 *

 * Nephthys - file sharing management

 * Copyright (c) by Andreas Unterkircher, unki@netshadow.at

 *

 *  This file is part of Nephthys.

 *

 *  Nephthys is free software: you can redistribute it and/or modify

 *  it under the terms of the GNU General Public License as published by

 *  the Free Software Foundation, either version 3 of the License, or

 *  (at your option) any later version.

 *

 *  Nephthys is distributed in the hope that it will be useful,

 *  but WITHOUT ANY WARRANTY; without even the implied warranty of

 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 *  GNU General Public License for more details.

 *

 *  You should have received a copy of the GNU General Public License

 *  along with Nephthys. If not, see <http://www.gnu.org/licenses/>.

 *

 ***************************************************************************/

class NEPHTHYS_PROFILE {

   private $db;

   private $parent;

   private $tmpl;

   /**

    * NEPHTHYS_PROFILE constructor

    *

    * Initialize the NEPHTHYS_PROFILE class

    */

   public function __construct()

   {

      global $nephthys;

      $this->parent =& $nephthys;

      $this->db =& $nephthys->db;

      $this->tmpl =& $nephthys->tmpl;

   } // __construct()

   /* interface output */

   public function show()

   {

      if(!$this->parent->is_logged_in()) {

         $this->parent->_error($this->parent->_("##MANAGE_USERS##") ." - ". $this->parent->_("##NOT_ALLOWED##"));

         return 0;

      }

      if(!isset($_GET['mode'])) 

         $_GET['mode'] = "show";

      switch($_GET['mode']) {

         default:

         case 'edit':

            return $this->showEdit();

            break;

      }

   } // show()

   /**

    * display interface to edit profile settings

    */

   private function showEdit()

   {

      /* If authentication is enabled, check permissions */

      if(!$this->parent->is_logged_in()) {

         $this->parent->_error($this->parent->_("##MANAGE_USERS##") ." - ". $this->parent->_("##NOT_ALLOWED##"));

         return 0;

      }

      $user = $this->db->db_fetchSingleRow("

         SELECT *

         FROM nephthys_users

         WHERE

            user_idx='". $_SESSION['login_idx'] ."'

      ");

      $this->tmpl->assign('user_idx', $_SESSION['login_idx']);

      $this->tmpl->assign('user_name', $this->parent->unescape($user->user_name));

      $this->tmpl->assign('user_full_name', $this->parent->unescape($user->user_full_name));

      $this->tmpl->assign('user_email', $this->parent->unescape($user->user_email));

      $this->tmpl->assign('user_default_expire', $user->user_default_expire);

      $this->tmpl->assign('user_auto_created', $user->user_auto_created);

      $this->tmpl->assign('user_deny_chpwd', $user->user_deny_chpwd);

      $this->tmpl->assign('user_language', $user->user_language);

      return $this->tmpl->fetch("profile.tpl");

   } // showEdit()

   /** 

    * store user values

    */

   public function store()

   {

      if($this->parent->check_privileges('user') && isset($_POST['user_name'])) {

         return $this->parent->_("##FAILURE_CHANGE_LOGIN##");

      }

      if($this->parent->check_privileges('user') &&

         !$this->parent->is_auto_created($_SESSION['login_idx'])

         && isset($_POST['user_email'])) {

         return $this->parent->_("##FAILURE_CHANGE_EMAIL##");

      }

      if(!$this->parent->check_privileges('user') && (!isset($_POST['user_name']) ||

         empty($_POST['user_name']))) {

         return $this->parent->_("##FAILURE_ENTER_USERNAME##");

      }

      if(!$this->parent->is_deny_chpwd($_SESSION['login_idx']) && empty($_POST['user_pass1'])) {

         return $this->parent->_("##FAILURE_EMPTY_PASSWORD##");

      }

      /* it's not a must that the password needs to be available, as

         the user may not have the right to change its Nephthys password.

      */

      if(isset($_POST['user_pass1']) && isset($_POST['user_pass2']) &&

         $_POST['user_pass1'] != $_POST['user_pass2']) {

         return $this->parent->_("##FAILURE_PASSWORD_NOT_MATCH##");

      }

      /* user-privileged are not allowed to change their user-names */

      if(!$this->parent->check_privileges('user')) {

         $sth = $this->db->db_prepare("

            UPDATE nephthys_users

            SET

               user_name=?

            WHERE

               user_idx=?

         ");

         $this->db->db_execute($sth, array(

            $_POST['user_name'],

            $_POST['user_idx'],

         ));

      }

      /* handling email-address update. only privileged- or auto-created users

         are allowed to change their email address. Manually created users are

         not permitted to change their email address.

      */

      if(!$this->parent->check_privileges('user') ||

         $this->parent->is_auto_created($_SESSION['login_idx'])) {

         if(!isset($_POST['user_email']) || empty($_POST['user_email'])) {

            return $this->parent->_("##FAILURE_ENTER_EMAIL##");

         }

         if(!$this->parent->validate_email($_POST['user_email'])) {

            return $this->parent->_("##FAILURE_ENTER_VALID_EMAIL##");

         }

         $sth = $this->db->db_prepare("

            UPDATE nephthys_users

            SET

               user_email=?

            WHERE

               user_idx=?

         ");

         $this->db->db_execute($sth, array(

            $_POST['user_email'],

            $_POST['user_idx'],

         ));

      }

      /* update user's full name, default-expiry and langugage time */

      $sth = $this->db->db_prepare("

         UPDATE nephthys_users

         SET

            user_full_name=?,

            user_default_expire=?,

            user_language=?

         WHERE

            user_idx=?

      ");

      $this->db->db_execute($sth, array(

         $_POST['user_full_name'],

         $_POST['user_default_expire'],

         $_POST['user_language'],

         $_POST['user_idx'],

      ));

      if(isset($_POST['user_pass1'])) {

         /* if a password change was requested, change it here. */

         if($_POST['user_pass1'] != " nochangeMS " &&

            !$this->parent->is_deny_chpwd($_SESSION['login_idx'])) {

            $sth = $this->db->db_prepare("

               UPDATE nephthys_users

               SET

                  user_pass=?

               WHERE

                  user_idx=?

            ");

            $this->db->db_execute($sth, array(

               sha1($_POST['user_pass1']),

               $_POST['user_idx'],

            ));

         }

      }

      return "ok";

   } // store()

} // class NEPHTHYS_PROFILE

// vim: set filetype=php expandtab softtabstop=3 tabstop=3 shiftwidth=3 autoindent smartindent:

?>