sysPass/app/modules/web/Forms/UserForm.php

<?php
/**
 * sysPass
 *
 * @author    nuxsmin
 * @link      https://syspass.org
 * @copyright 2012-2019, Rubén Domínguez nuxsmin@$syspass.org
 *
 * This file is part of sysPass.
 *
 * sysPass is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * sysPass is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 *  along with sysPass.  If not, see <http://www.gnu.org/licenses/>.
 */

namespace SP\Modules\Web\Forms;

use SP\Core\Acl\ActionsInterface;
use SP\Core\Exceptions\ValidationException;
use SP\DataModel\UserData;

/**
 * Class UserForm
 *
 * @package SP\Modules\Web\Forms
 */
final class UserForm extends FormBase implements FormInterface
{
    /**
     * @var UserData
     */
    protected $userData;
    /**
     * @var int
     */
    protected $isLdap = 0;

    /**
     * Validar el formulario
     *
     * @param $action
     *
     * @return UserForm
     * @throws ValidationException
     */
    public function validate($action)
    {
        switch ($action) {
            case ActionsInterface::USER_CREATE:
                $this->analyzeRequestData();
                $this->checkCommon();
                $this->checkPass();
                break;
            case ActionsInterface::USER_EDIT:
                $this->analyzeRequestData();
                $this->checkCommon();
                break;
            case ActionsInterface::USER_EDIT_PASS:
                $this->analyzeRequestData();
                $this->checkPass();
                break;
            case ActionsInterface::USER_DELETE:
                $this->checkDelete();
                break;
        }

        return $this;
    }

    /**
     * Analizar los datos de la petición HTTP
     *
     * @return void
     */
    protected function analyzeRequestData()
    {
        $this->isLdap = $this->request->analyzeInt('isLdap', 0);

        $this->userData = new UserData();
        $this->userData->setId($this->itemId);
        $this->userData->setName($this->request->analyzeString('name'));
        $this->userData->setLogin($this->request->analyzeString('login'));
        $this->userData->setSsoLogin($this->request->analyzeString('login_sso'));
        $this->userData->setEmail($this->request->analyzeEmail('email'));
        $this->userData->setNotes($this->request->analyzeUnsafeString('notes'));
        $this->userData->setUserGroupId($this->request->analyzeInt('usergroup_id'));
        $this->userData->setUserProfileId($this->request->analyzeInt('userprofile_id'));
        $this->userData->setIsAdminApp($this->request->analyzeBool('adminapp_enabled', false));
        $this->userData->setIsAdminAcc($this->request->analyzeBool('adminacc_enabled', false));
        $this->userData->setIsDisabled($this->request->analyzeBool('disabled', false));
        $this->userData->setIsChangePass($this->request->analyzeBool('changepass_enabled', false));
        $this->userData->setPass($this->request->analyzeEncrypted('password'));
        $this->userData->setIsLdap($this->isLdap);
    }

    /**
     * @throws ValidationException
     */
    protected function checkCommon()
    {
        if (!$this->isLdap && !$this->userData->getName()) {
            throw new ValidationException(__u('An username is needed'));
        }

        if (!$this->isLdap && !$this->userData->getLogin()) {
            throw new ValidationException(__u('A login is needed'));
        }

        if (!$this->userData->getUserProfileId()) {
            throw new ValidationException(__u('A profile is needed'));
        }

        if (!$this->userData->getUserGroupId()) {
            throw new ValidationException(__u('A group is needed'));
        }

        if (!$this->isLdap && !$this->userData->getEmail()) {
            throw new ValidationException(__u('An email is needed'));
        }

        if ($this->isDemo()) {
            throw new ValidationException(__u('Ey, this is a DEMO!!'));
        }
    }

    /**
     * @return bool
     */
    private function isDemo()
    {
        return $this->configData->isDemoEnabled()
            && $this->itemId === 2 // FIXME: Ugly!!
            && $this->context->getUserData()->getIsAdminApp() === 0;
    }

    /**
     * @throws ValidationException
     */
    protected function checkPass()
    {
        $userPassR = $this->request->analyzeEncrypted('password_repeat');

        if ($this->isDemo()) {
            throw new ValidationException(__u('Ey, this is a DEMO!!'));
        }

        if (!$userPassR || !$this->userData->getPass()) {
            throw new ValidationException(__u('Password cannot be blank'));
        }

        if ($userPassR !== $this->userData->getPass()) {
            throw new ValidationException(__u('Passwords do not match'));
        }
    }

    /**
     * @throws ValidationException
     */
    protected function checkDelete()
    {
        if ($this->isDemo()) {
            throw new ValidationException(__u('Ey, this is a DEMO!!'));
        }

        $userData = $this->context->getUserData();

        if ((is_array($this->itemId) && in_array($userData->getId(), $this->itemId))
            || $this->itemId === $userData->getId()
        ) {
            throw new ValidationException(__u('Unable to delete, user in use'));
        }
    }

    /**
     * @return UserData
     */
    public function getItemData()
    {
        return $this->userData;
    }

    /**
     * @return int
     */
    public function getIsLdap()
    {
        return $this->isLdap;
    }
}