scripts/shells/user.php:
- adopted return value checks to true/false instead of shell-like 0/1 - fixed some messages in interactive mode - various minor fixes - added some TODO notes, but didn't do a full proofreading scripts/models-ext/UserHandler.php: - deleted, replaced with a redirect to /model/UserHandler.php scripts/common.php, scripts/shells/shell.php: - replaced obsolete "... =& new ..." with "... = new ..." git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@909 a1433add-5e2c-0410-b055-b7f2511e0802pull/2/head
Christian Boltz
15 years ago
parent
1a0d584bf9
commit
f963cc33f1
@ -1,313 +1,2 @@
|
||||
<?php
|
||||
|
||||
/**
|
||||
* Simple class to represent a user.
|
||||
*/
|
||||
class UserHandler {
|
||||
|
||||
protected $username = null;
|
||||
|
||||
public $errormsg = array();
|
||||
|
||||
public function __construct($username) {
|
||||
$this->username = strtolower($username);
|
||||
|
||||
|
||||
}
|
||||
|
||||
/**
|
||||
* @return boolean true on success; false on failure
|
||||
* @param string $username
|
||||
* @param string $old_password
|
||||
* @param string $new_passwords
|
||||
*
|
||||
* All passwords need to be plain text; they'll be hashed appropriately
|
||||
* as per the configuration in config.inc.php
|
||||
*/
|
||||
public function change_pw($new_password, $old_password, $match = true) {
|
||||
global $config;
|
||||
$username = $this->username;
|
||||
$tmp = preg_split ('/@/', $username);
|
||||
$domain = $tmp[1];
|
||||
|
||||
$username = escape_string($username);
|
||||
$table_mailbox = table_by_key('mailbox');
|
||||
|
||||
$new_db_password = escape_string(pacrypt($new_password));
|
||||
|
||||
if ($match == true) {
|
||||
$active = db_get_boolean(True);
|
||||
$result = db_query("SELECT * FROM $table_mailbox WHERE username='$username' AND active='$active'");
|
||||
$result = $result['result'];
|
||||
if ($new_db_password != $result['password']) {
|
||||
$this->errormsg[] = 'Passwords do not Match';
|
||||
return 1;
|
||||
}
|
||||
}
|
||||
|
||||
$set = array(
|
||||
'password' => $new_db_password
|
||||
);
|
||||
|
||||
$result = db_update('mailbox', 'username=\''.$username.'\'', $set, array('modified') );
|
||||
|
||||
db_log ('CONSOLE', $domain, 'edit_password', "$username");
|
||||
if ($result != 1) {
|
||||
$this->errormsg[] = Lang::read('pEdit_mailbox_result_error');
|
||||
return 1;
|
||||
}
|
||||
|
||||
return 0;
|
||||
|
||||
}
|
||||
|
||||
/**
|
||||
* Attempt to log a user in.
|
||||
* @param string $username
|
||||
* @param string $password
|
||||
* @return boolean true on successful login (i.e. password matches etc)
|
||||
*/
|
||||
public static function login($username, $password) {
|
||||
global $config;
|
||||
$username = escape_string($username);
|
||||
|
||||
$table_mailbox = table_by_key('mailbox');
|
||||
$active = db_get_boolean(True);
|
||||
$query = "SELECT password FROM $table_mailbox WHERE username='$username' AND active='$active'";
|
||||
|
||||
$result = db_query ($query);
|
||||
if ($result['rows'] == 1)
|
||||
{
|
||||
$row = db_array ($result['result']);
|
||||
$crypt_password = pacrypt ($password, $row['password']);
|
||||
|
||||
if($row['password'] == $crypt_password) {
|
||||
return true;
|
||||
}
|
||||
}
|
||||
return false;
|
||||
}
|
||||
/**
|
||||
* Add mailbox
|
||||
* @param password string password of account
|
||||
* @param gen boolean
|
||||
* @param name string
|
||||
*
|
||||
*/
|
||||
public function add($password, $name = '', $quota = 0, $active = true, $mail = true ) {
|
||||
# FIXME: change default value of $quota to something that is not an allowed value, like "-9" (0 is "unlimited", and I don't like that as default)
|
||||
# FIXME: Should the parameters be optional at all?
|
||||
# TODO: check if parameters are valid/allowed (quota?). Checks should live in a separate function that can be used by add and edit.
|
||||
# TODO: On the longer term, the web interface should also use this class.
|
||||
global $config;
|
||||
$username = $this->username;
|
||||
$tmp = preg_split ('/@/', $username);
|
||||
$domain = $tmp[1];
|
||||
$address = escape_string($username);
|
||||
$username = $tmp[0];
|
||||
|
||||
$table_mailbox = table_by_key('mailbox');
|
||||
$table_alias = table_by_key('alias');
|
||||
|
||||
$active = db_get_boolean($active);
|
||||
|
||||
if(!check_mailbox ($domain)) {
|
||||
$this->errormsg[] = Lang::read('pCreate_mailbox_username_text_error3');
|
||||
return 1;
|
||||
}
|
||||
$result = db_query ("SELECT * FROM $table_alias WHERE address='$address'");
|
||||
if ($result['rows'] == 1){
|
||||
$this->errormsg[] = Lang::read('pCreate_mailbox_username_text_error2');
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
||||
$plain = $password;
|
||||
$password = pacrypt ($password);
|
||||
|
||||
# TODO: Decide if we want to have the encryption method in the encrypted password string, and edit pacrypt() accordingly. No special handling here, please!
|
||||
if ( preg_match("/^dovecot:/", Config::read('encrypt')) ) {
|
||||
$split_method = preg_split ('/:/', Config::read('encrypt'));
|
||||
$method = strtoupper($split_method[1]);
|
||||
$password = '{' . $method . '}' . $password;
|
||||
}
|
||||
|
||||
if (Config::read('domain_path') == "YES")
|
||||
{
|
||||
if (Config::read('domain_in_mailbox') == "YES")
|
||||
{
|
||||
$maildir = $domain . "/" . $address . "/";
|
||||
}
|
||||
else
|
||||
{
|
||||
$maildir = $domain . "/" . $username . "/";
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$maildir = $address . "/";
|
||||
}
|
||||
|
||||
$quota = multiply_quota ($quota);
|
||||
|
||||
|
||||
if ('pgsql'== Config::read('database_type'))
|
||||
{
|
||||
db_query('BEGIN');
|
||||
}
|
||||
|
||||
//$result = db_query ("INSERT INTO $table_alias (address,goto,domain,created,modified,active) VALUES ('$address','$address','$domain',NOW(),NOW(),'$active')");
|
||||
$arr = array(
|
||||
'address' => $address,
|
||||
'goto' => $address,
|
||||
'domain' => $domain,
|
||||
'active' => $active,
|
||||
);
|
||||
|
||||
$result = db_insert('alias', $arr, array('created', 'modified') );
|
||||
if ($result != 1)
|
||||
{
|
||||
$this->errormsg[] = Lang::read('pAlias_result_error') . "\n($address -> $address)\n";
|
||||
return 1;
|
||||
}
|
||||
|
||||
// apparently uppercase usernames really confuse some IMAP clients.
|
||||
$local_part = '';
|
||||
if(preg_match('/^(.*)@/', $address, $matches)) {
|
||||
$local_part = $matches[1];
|
||||
}
|
||||
|
||||
//$result = db_query ("INSERT INTO $table_mailbox (username,password,name,maildir,local_part,quota,domain,created,modified,active) VALUES ('$username','$password','$name','$maildir','$local_part','$quota','$domain',NOW(),NOW(),'$active')");
|
||||
|
||||
|
||||
$arr2 = array(
|
||||
'username' => $address,
|
||||
'password' => $password,
|
||||
'name' => $name,
|
||||
'maildir' => $maildir,
|
||||
'local_part' => $local_part,
|
||||
'quota' => $quota,
|
||||
'domain' => $domain,
|
||||
'active' => $active,
|
||||
);
|
||||
$result = db_insert('mailbox', $arr2, array('created', 'modified') );
|
||||
if ($result != 1 || !mailbox_postcreation($address,$domain,$maildir, $quota))
|
||||
{
|
||||
$this->errormsg[] = Lang::read('pCreate_mailbox_result_error') . "\n($address)\n";
|
||||
db_query('ROLLBACK');
|
||||
return 1;
|
||||
}
|
||||
else
|
||||
{
|
||||
db_query('COMMIT');
|
||||
db_log ('CONSOLE', $domain, 'create_mailbox', "$address");
|
||||
|
||||
|
||||
if ($mail == true)
|
||||
{
|
||||
$fTo = $address;
|
||||
$fFrom = Config::read('admin_email');
|
||||
$fHeaders = "To: " . $fTo . "\n";
|
||||
$fHeaders .= "From: " . $fFrom . "\n";
|
||||
|
||||
$fHeaders .= "Subject: " . encode_header (Lang::read('pSendmail_subject_text')) . "\n";
|
||||
$fHeaders .= "MIME-Version: 1.0\n";
|
||||
$fHeaders .= "Content-Type: text/plain; charset=utf-8\n";
|
||||
$fHeaders .= "Content-Transfer-Encoding: 8bit\n";
|
||||
|
||||
$fHeaders .= Config::read('welcome_text');
|
||||
|
||||
if (!smtp_mail ($fTo, $fFrom, $fHeaders))
|
||||
{
|
||||
$this->errormsg[] = Lang::read('pSendmail_result_error');
|
||||
return 1;
|
||||
}
|
||||
}
|
||||
|
||||
create_mailbox_subfolders($address,$plain);
|
||||
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
public function view() {
|
||||
global $config;
|
||||
|
||||
|
||||
|
||||
$username = $this->username;
|
||||
$table_mailbox = table_by_key('mailbox');
|
||||
|
||||
$result = db_query("SELECT username, name, maildir, quota, local_part, domain, DATE_FORMAT(created, '%d.%m.%y') AS created, DATE_FORMAT(modified, '%d.%m.%y') AS modified, active FROM $table_mailbox WHERE username='$username'");
|
||||
if ($result['rows'] != 0) {
|
||||
$this->return = db_array($result['result']);
|
||||
return 0;
|
||||
}
|
||||
$this->errormsg = $result['error'];
|
||||
return 1;
|
||||
}
|
||||
|
||||
public function delete() {
|
||||
global $config;
|
||||
$username = $this->username;
|
||||
$tmp = preg_split ('/@/', $username);
|
||||
$domain = $tmp[1];
|
||||
$username = escape_string($username);
|
||||
|
||||
|
||||
|
||||
$table_mailbox = table_by_key('mailbox');
|
||||
$table_alias = table_by_key('alias');
|
||||
$table_vacation = table_by_key('vacation');
|
||||
$table_vacation_notification = table_by_key('vacation_notification');
|
||||
|
||||
if (Config::read('database_type') == "pgsql") db_query('BEGIN');
|
||||
/* there may be no aliases to delete */
|
||||
$result = db_query("SELECT * FROM $table_alias WHERE address = '$username' AND domain = '$domain'");
|
||||
if($result['rows'] == 1) {
|
||||
//$result = db_query ("DELETE FROM $table_alias WHERE address='$username' AND domain='$domain'");
|
||||
$result = db_delete('alias', 'address', $username);
|
||||
db_log ('CONSOLE', $domain, 'delete_alias', $username);
|
||||
}
|
||||
|
||||
/* is there a mailbox? if do delete it from orbit; it's the only way to be sure */
|
||||
$result = db_query ("SELECT * FROM $table_mailbox WHERE username='$username' AND domain='$domain'");
|
||||
if ($result['rows'] == 1)
|
||||
{
|
||||
//$result = db_query ("DELETE FROM $table_mailbox WHERE username='$username' AND domain='$domain'");
|
||||
$result = db_delete('mailbox', 'username', $username);
|
||||
$postdel_res=mailbox_postdeletion($username,$domain);
|
||||
if ($result != 1 || !$postdel_res)
|
||||
{
|
||||
|
||||
$tMessage = Lang::read('pDelete_delete_error') . "$username (";
|
||||
if ($result['rows']!=1)
|
||||
{
|
||||
$tMessage.='mailbox';
|
||||
if (!$postdel_res) $tMessage.=', ';
|
||||
}
|
||||
if (!$postdel_res)
|
||||
{
|
||||
$tMessage.='post-deletion';
|
||||
}
|
||||
$this->errormsg[] = $tMessage.')';
|
||||
return 1;
|
||||
}
|
||||
db_log ('CONSOLE', $domain, 'delete_mailbox', $username);
|
||||
}
|
||||
$result = db_query("SELECT * FROM $table_vacation WHERE email = '$username' AND domain = '$domain'");
|
||||
if($result['rows'] == 1) {
|
||||
//db_query ("DELETE FROM $table_vacation WHERE email='$username' AND domain='$domain'");
|
||||
db_delete('vacation', 'email', $username);
|
||||
//db_query ("DELETE FROM $table_vacation_notification WHERE on_vacation ='$username' "); /* should be caught by cascade, if PgSQL */
|
||||
db_delete('vacation_notification', 'on_vacation', $username);
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
/* vim: set expandtab softtabstop=4 tabstop=4 shiftwidth=4: */
|
||||
require('../model/UserHandler.php');
|
||||
|
||||
Loading…
Reference in New Issue