Mirrors/sysPass
2
0
Fork 0
mirror of https://github.com/nuxsmin/sysPass.git synced 2026-03-03 07:04:07 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
v1.1
sysPass/inc/account.class.php

1192 lines
42 KiB
PHP
Raw Permalink Blame History

<?php
/**
* sysPass
*
* @author nuxsmin
* @link http://syspass.org
* @copyright 2012-2015 Rubén Domínguez nuxsmin@syspass.org
*
* This file is part of sysPass.
*
* sysPass is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* sysPass is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with sysPass. If not, see <http://www.gnu.org/licenses/>.
*
*/
defined('APP_ROOT') || die(_('No es posible acceder directamente a este archivo'));
/**
* Esta clase es la encargada de realizar las operaciones sobre las cuentas de sysPass.
*/
class SP_Account
{
static $accountSearchTxt;
static $accountSearchCustomer;
static $accountSearchCategory;
static $accountSearchOrder;
static $accountSearchKey;
var $accountId;
var $accountParentId;
var $accountUserId;
var $accountUsersId;
var $accountUserGroupId;
var $accountUserGroupsId;
var $accountUserEditId;
var $accountName;
var $accountCustomerId;
var $accountCategoryId;
var $accountLogin;
var $accountUrl;
var $accountPass;
var $accountIV;
var $accountNotes;
var $accountOtherUserEdit;
var $accountOtherGroupEdit;
var $accountModHash;
var $lastAction;
var $lastId;
var $query; // Variable de consulta
var $queryNumRows;
var $accountIsHistory = 0; // Variable para indicar si la cuenta es desde el histórico
var $accountCacheUserGroupsId; // Cache para grupos de usuarios de las cuentas
var $accountCacheUsersId; // Cache para usuarios de las cuentas
// Variable para la caché de parámetros
var $cacheParams;
/**
* Obtener los datos de usuario y modificador de una cuenta.
*
* @param int $accountId con el Id de la cuenta
* @return false|object con el id de usuario y modificador.
*/
public static function getAccountRequestData($accountId)
{
$query = "SELECT account_userId,"
. "account_userEditId,"
. "account_name,"
. "customer_name "
. "FROM accounts "
. "LEFT JOIN customers ON account_customerId = customer_id "
. "WHERE account_id = " . (int)$accountId . " LIMIT 1";
$queryRes = DB::getResults($query, __FUNCTION__);
if ($queryRes === false) {
return false;
}
return $queryRes;
}
/**
* Obtiene el listado con el nombre de los usuaios de una cuenta.
*
* @param int $accountId con el Id de la cuenta
* @return false|array con los nombres de los usuarios ordenados
*/
public static function getAccountUsersName($accountId)
{
$query = "SELECT user_name "
. "FROM accUsers "
. "JOIN usrData ON accuser_userId = user_id "
. "WHERE accuser_accountId = " . (int)$accountId;
$queryRes = DB::getResults($query, __FUNCTION__);
if ($queryRes === false) {
return false;
}
if (!is_array($queryRes)) {
return false;
}
foreach ($queryRes as $users) {
$usersName[] = $users->user_name;
}
sort($usersName, SORT_STRING);
return $usersName;
}
/**
* Obtener las cuentas de una búsqueda.
*
* @param array $searchFilter Filtros de búsqueda
* @return bool Resultado de la consulta
*/
public function getAccounts($searchFilter)
{
$isAdmin = ($_SESSION["uisadminapp"] || $_SESSION["uisadminacc"]);
$globalSearch = (SP_Config::getValue('globalsearch', 0) && $searchFilter["globalSearch"] === 1);
$arrFilterCommon = array();
$arrFilterSelect = array();
$arrFilterUser = array();
$arrQueryWhere = array();
switch ($searchFilter["keyId"]) {
case 1:
$orderKey = "account_name";
break;
case 2:
$orderKey = "category_name";
break;
case 3:
$orderKey = "account_login";
break;
case 4:
$orderKey = "account_url";
break;
case 5:
$orderKey = "account_customerId";
break;
default :
$orderKey = "customer_name, account_name";
break;
}
$querySelect = "SELECT SQL_CALC_FOUND_ROWS DISTINCT "
. "account_id,"
. "account_customerId,"
. "category_name,"
. "account_name,"
. "account_login,"
. "account_url,"
. "account_notes,"
. "account_userId,"
. "account_userGroupId,"
. "account_otherUserEdit,"
. "account_otherGroupEdit,"
. "usergroup_name,"
. "customer_name "
. "FROM accounts "
. "LEFT JOIN categories ON account_categoryId = category_id "
. "LEFT JOIN usrGroups ug ON account_userGroupId = usergroup_id "
. "LEFT JOIN customers ON customer_id = account_customerId "
. "LEFT JOIN accUsers ON accuser_accountId = account_id "
. "LEFT JOIN accGroups ON accgroup_accountId = account_id";
if ($searchFilter["txtSearch"]) {
$arrFilterCommon[] = "account_name LIKE '%" . DB::escape($searchFilter["txtSearch"]) . "%'";
$arrFilterCommon[] = "account_login LIKE '%" . DB::escape($searchFilter["txtSearch"]) . "%'";
$arrFilterCommon[] = "account_url LIKE '%" . DB::escape($searchFilter["txtSearch"]) . "%'";
$arrFilterCommon[] = "account_notes LIKE '%" . DB::escape($searchFilter["txtSearch"]) . "%'";
}
if ($searchFilter["categoryId"] != 0) {
$arrFilterSelect[] = "category_id = " . $searchFilter["categoryId"];
}
if ($searchFilter["customerId"] != 0) {
$arrFilterSelect[] = "account_customerId = " . $searchFilter["customerId"];
}
if (count($arrFilterCommon) > 0) {
$arrQueryWhere[] = "(" . implode(" OR ", $arrFilterCommon) . ")";
}
if (count($arrFilterSelect) > 0) {
$arrQueryWhere[] = "(" . implode(" AND ", $arrFilterSelect) . ")";
}
if (!$isAdmin && !$globalSearch) {
$arrFilterUser[] = "account_userGroupId = " . (int)$searchFilter["groupId"];
$arrFilterUser[] = "account_userId = " . $searchFilter["userId"];
$arrFilterUser[] = "accgroup_groupId = " . $searchFilter["groupId"];
$arrFilterUser[] = "accuser_userId = " . $searchFilter["userId"];
$arrQueryWhere[] = "(" . implode(" OR ", $arrFilterUser) . ")";
}
$order = ($searchFilter["txtOrder"] == 0) ? 'ASC' : 'DESC';
$queryOrder = " ORDER BY $orderKey " . $order;
if ($searchFilter["limitCount"] != 99) {
$queryLimit = "LIMIT " . $searchFilter["limitStart"] . ", " . $searchFilter["limitCount"];
}
if (count($arrQueryWhere) === 1) {
$query = $querySelect . " WHERE " . implode($arrQueryWhere) . " " . $queryOrder . " " . $queryLimit;
} elseif (count($arrQueryWhere) > 1) {
$query = $querySelect . " WHERE " . implode(" AND ", $arrQueryWhere) . " " . $queryOrder . " " . $queryLimit;
} else {
$query = $querySelect . $queryOrder . " " . $queryLimit;
}
$this->query = $query;
// Consulta de la búsqueda de cuentas
$queryRes = DB::getResults($query, __FUNCTION__, true);
if ($queryRes === false) {
return false;
}
// Obtenemos el número de registros totales de la consulta sin contar el LIMIT
$resQueryNumRows = DB::getResults("SELECT FOUND_ROWS() as numRows", __FUNCTION__);
$this->queryNumRows = $resQueryNumRows->numRows;
$_SESSION["accountSearchTxt"] = $searchFilter["txtSearch"];
$_SESSION["accountSearchCustomer"] = $searchFilter["customerId"];
$_SESSION["accountSearchCategory"] = $searchFilter["categoryId"];
$_SESSION["accountSearchOrder"] = $searchFilter["txtOrder"];
$_SESSION["accountSearchKey"] = $searchFilter["keyId"];
$_SESSION["accountSearchStart"] = $searchFilter["limitStart"];
$_SESSION["accountSearchLimit"] = $searchFilter["limitCount"];
$_SESSION["accountGlobalSearch"] = $searchFilter["globalSearch"];
return $queryRes;
}
/**
* Obtener los datos del histórico de una cuenta.
* Esta funcion realiza la consulta a la BBDD y guarda los datos del histórico
* en las variables de la clase.
*
* @return false|object
*/
public function getAccountHistory()
{
$query = "SELECT acchistory_accountId as account_id,"
. "acchistory_customerId as account_customerId,"
. "acchistory_categoryId as account_categoryId,"
. "acchistory_name as account_name,"
. "acchistory_login as account_login,"
. "acchistory_url as account_url,"
. "acchistory_pass as account_pass,"
. "acchistory_IV as account_IV,"
. "acchistory_notes as account_notes,"
. "acchistory_countView as account_countView,"
. "acchistory_countDecrypt as account_countDecrypt,"
. "acchistory_dateAdd as account_dateAdd,"
. "acchistory_dateEdit as account_dateEdit,"
. "acchistory_userId as account_userId,"
. "acchistory_userGroupId as account_userGroupId,"
. "acchistory_userEditId as account_userEditId,"
. "acchistory_isModify,"
. "acchistory_isDeleted,"
. "acchistory_otherUserEdit as account_otherUserEdit,"
. "acchistory_otherGroupEdit as account_otherGroupEdit,"
. "u1.user_name,"
. "u1.user_login,"
. "usergroup_name,"
. "u2.user_name as user_editName,"
. "u2.user_login as user_editLogin,"
. "category_name, customer_name "
. "FROM accHistory "
. "LEFT JOIN categories ON acchistory_categoryId = category_id "
. "LEFT JOIN usrGroups ON acchistory_userGroupId = usergroup_id "
. "LEFT JOIN usrData u1 ON acchistory_userId = u1.user_id "
. "LEFT JOIN usrData u2 ON acchistory_userEditId = u2.user_id "
. "LEFT JOIN customers ON acchistory_customerId = customer_id "
. "WHERE acchistory_id = " . (int)$this->accountId . " LIMIT 1";
$queryRes = DB::getResults($query, __FUNCTION__);
if ($queryRes === false) {
return false;
}
$this->accountUserId = $queryRes->account_userId;
$this->accountUserGroupId = $queryRes->account_userGroupId;
$this->accountOtherUserEdit = $queryRes->account_otherUserEdit;
$this->accountOtherGroupEdit = $queryRes->account_otherGroupEdit;
return $queryRes;
}
/**
* Actualiza los datos de una cuenta en la BBDD.
*
* @param bool $isRestore si es una restauración de cuenta
* @return bool
*/
public function updateAccount($isRestore = false)
{
$message['action'][] = __FUNCTION__;
// Guardamos una copia de la cuenta en el histórico
if (!$this->addHistory($this->accountId, $this->accountUserEditId, false)) {
$message['text'][] = _('Error al actualizar el historial');
SP_Log::wrLogInfo($message);
return false;
}
if (!$isRestore) {
$message['action'] = _('Actualizar Cuenta');
if (!SP_Groups::updateGroupsForAccount($this->accountId, $this->accountUserGroupsId)) {
$message['text'][] = _('Error al actualizar los grupos secundarios');
SP_Log::wrLogInfo($message);
$message['text'] = array();
}
if (!SP_Users::updateUsersForAccount($this->accountId, $this->accountUsersId)) {
$message['text'][] = _('Error al actualizar los usuarios de la cuenta');
SP_Log::wrLogInfo($message);
$message['text'] = array();
}
} else {
$message['action'] = _('Restaurar Cuenta');
}
$query = "UPDATE accounts SET "
. "account_customerId = " . (int)$this->accountCustomerId . ","
. "account_categoryId = " . (int)$this->accountCategoryId . ","
. "account_name = '" . DB::escape($this->accountName) . "',"
. "account_login = '" . DB::escape($this->accountLogin) . "',"
. "account_url = '" . DB::escape($this->accountUrl) . "',"
. "account_notes = '" . DB::escape($this->accountNotes) . "',"
. "account_userEditId = " . (int)$this->accountUserEditId . ","
. "account_dateEdit = NOW(), "
. "account_otherUserEdit = " . (int)$this->accountOtherUserEdit . ","
. "account_otherGroupEdit = " . (int)$this->accountOtherGroupEdit . " "
. "WHERE account_id = " . (int)$this->accountId;
if (DB::doQuery($query, __FUNCTION__) === false) {
return false;
}
$accountInfo = array('customer_name');
$this->getAccountInfoById($accountInfo);
$message['action'] = _('Cuenta actualizada');
$message['text'][] = SP_Html::strongText(_('Cliente') . ": ") . $this->cacheParams['customer_name'];
$message['text'][] = SP_Html::strongText(_('Cuenta') . ": ") . "$this->accountName ($this->accountId)";
SP_Log::wrLogInfo($message);
SP_Common::sendEmail($message);
return true;
}
/**
* Crear un nuevo registro de histório de cuenta en la BBDD.
*
* @param bool $isDelete indica que la cuenta es eliminada
* @return bool
*/
private function addHistory($isDelete = false)
{
$objAccountHist = new SP_Account;
$objAccountHist->accountId = $this->accountId;
$accountData = $objAccountHist->getAccount();
$isModify = ($isDelete === false) ? 1 : 0;
$isDelete = ($isDelete === false) ? 0 : 1;
$query = "INSERT INTO accHistory SET "
. "acchistory_accountId = " . $objAccountHist->accountId . ","
. "acchistory_categoryId = " . $accountData->account_categoryId . ","
. "acchistory_customerId = " . $accountData->account_customerId . ","
. "acchistory_name = '" . DB::escape($accountData->account_name) . "',"
. "acchistory_login = '" . DB::escape($accountData->account_login) . "',"
. "acchistory_url = '" . DB::escape($accountData->account_url) . "',"
. "acchistory_pass = '" . DB::escape($accountData->account_pass) . "',"
. "acchistory_IV = '" . DB::escape($accountData->account_IV) . "',"
. "acchistory_notes = '" . DB::escape($accountData->account_notes) . "',"
. "acchistory_countView = " . $accountData->account_countView . ","
. "acchistory_countDecrypt = " . $accountData->account_countDecrypt . ","
. "acchistory_dateAdd = '" . $accountData->account_dateAdd . "',"
. "acchistory_dateEdit = '" . $accountData->account_dateEdit . "',"
. "acchistory_userId = " . $accountData->account_userId . ","
. "acchistory_userGroupId = " . $accountData->account_userGroupId . ","
. "acchistory_userEditId = " . $accountData->account_userEditId . ","
. "acchistory_isModify = " . $isModify . ","
. "acchistory_isDeleted = " . $isDelete . ","
. "acchistory_otherUserEdit = " . $accountData->account_otherUserEdit . ","
. "acchistory_otherGroupEdit = " . $accountData->account_otherGroupEdit . ","
. "acchistory_mPassHash = '" . DB::escape(SP_Config::getConfigValue('masterPwd')) . "'";
if (DB::doQuery($query, __FUNCTION__) === false) {
return false;
}
return true;
}
/**
* Obtener los datos de una cuenta.
* Esta funcion realiza la consulta a la BBDD y guarda los datos en las variables de la clase.
*
* @return object|false
*/
public function getAccount()
{
$query = "SELECT account_id,"
. "account_name,"
. "account_categoryId,"
. "account_userId,"
. "account_customerId,"
. "account_userGroupId,"
. "account_userEditId,"
. "category_name,"
. "account_login,"
. "account_url,"
. "account_pass,"
. "account_IV,"
. "account_notes,"
. "account_countView,"
. "account_countDecrypt,"
. "account_dateAdd,"
. "account_dateEdit,"
. "account_otherUserEdit,"
. "account_otherGroupEdit,"
. "u1.user_name,"
. "u1.user_login,"
. "u2.user_name as user_editName,"
. "u2.user_login as user_editLogin,"
. "usergroup_name,"
. "customer_name, "
. "CONCAT(account_name,account_categoryId,account_customerId,account_login,account_url,account_notes,BIN(account_otherUserEdit),BIN(account_otherGroupEdit)) as modHash "
. "FROM accounts "
. "LEFT JOIN categories ON account_categoryId = category_id "
. "LEFT JOIN usrGroups ug ON account_userGroupId = usergroup_id "
. "LEFT JOIN usrData u1 ON account_userId = u1.user_id "
. "LEFT JOIN usrData u2 ON account_userEditId = u2.user_id "
. "LEFT JOIN customers ON account_customerId = customer_id "
. "WHERE account_id = " . (int)$this->accountId . " LIMIT 1";
$queryRes = DB::getResults($query, __FUNCTION__);
if ($queryRes === false) {
return false;
}
$this->accountUserId = $queryRes->account_userId;
$this->accountUserGroupId = $queryRes->account_userGroupId;
$this->accountOtherUserEdit = $queryRes->account_otherUserEdit;
$this->accountOtherGroupEdit = $queryRes->account_otherGroupEdit;
$this->accountModHash = $queryRes->modHash;
return $queryRes;
}
/**
* Obtener los datos de una cuenta con el id.
* Se guardan los datos en la variable $cacheParams de la clase para consultarlos
* posteriormente.
*
* @param array $params con los campos de la BBDD a obtener
* @return bool
*/
private function getAccountInfoById($params)
{
if (!is_array($params)) {
return false;
}
if (is_array($this->cacheParams)) {
$cache = true;
foreach ($params as $param) {
if (!array_key_exists($param, $this->cacheParams)) {
$cache = false;
}
}
if ($cache) {
return true;
}
}
$query = "SELECT " . implode(',', $params) . " "
. "FROM accounts "
. "LEFT JOIN usrGroups ug ON account_userGroupId = usergroup_id "
. "LEFT JOIN usrData u1 ON account_userId = u1.user_id "
. "LEFT JOIN usrData u2 ON account_userEditId = u2.user_id "
. "LEFT JOIN customers ON account_customerId = customer_id "
. "WHERE account_id = " . (int)$this->accountId . " LIMIT 1";
$queryRes = DB::getResults($query, __FUNCTION__);
if ($queryRes === false) {
return false;
}
foreach ($queryRes as $param => $value) {
$this->cacheParams[$param] = $value;
}
return true;
}
/**
* Crea una nueva cuenta en la BBDD
*
* @return bool
*/
public function createAccount()
{
$query = "INSERT INTO accounts SET "
. "account_customerId = " . (int)$this->accountCustomerId . ","
. "account_categoryId = " . (int)$this->accountCategoryId . ","
. "account_name = '" . DB::escape($this->accountName) . "',"
. "account_login = '" . DB::escape($this->accountLogin) . "',"
. "account_url = '" . DB::escape($this->accountUrl) . "',"
. "account_pass = '" . DB::escape($this->accountPass). "',"
. "account_IV = '" . DB::escape($this->accountIV) . "',"
. "account_notes = '" . DB::escape($this->accountNotes) . "',"
. "account_dateAdd = NOW(),"
. "account_userId = " . (int)$this->accountUserId . ","
. "account_userGroupId = " . (int)$this->accountUserGroupId . ","
. "account_otherUserEdit = " . (int)$this->accountOtherUserEdit . ","
. "account_otherGroupEdit = " . (int)$this->accountOtherGroupEdit;
if (DB::doQuery($query, __FUNCTION__) === false) {
return false;
}
$this->accountId = DB::$lastId;
$message['action'] = __FUNCTION__;
if (is_array($this->accountUserGroupsId)) {
if (!SP_Groups::addGroupsForAccount($this->accountId, $this->accountUserGroupsId)) {
$message['text'][] = _('Error al actualizar los grupos secundarios');
SP_Log::wrLogInfo($message);
$message['text'] = array();
}
}
if (is_array($this->accountUsersId)) {
if (!SP_Users::addUsersForAccount($this->accountId, $this->accountUsersId)) {
$message['text'][] = _('Error al actualizar los usuarios de la cuenta');
SP_Log::wrLogInfo($message);
$message['text'] = array();
}
}
$accountInfo = array('customer_name');
$this->getAccountInfoById($accountInfo);
$message['action'] = _('Nueva Cuenta');
$message['text'][] = SP_Html::strongText(_('Cliente') . ": ") . $this->cacheParams['customer_name'];
$message['text'][] = SP_Html::strongText(_('Cuenta') . ": ") . "$this->accountName ($this->accountId)";
SP_Log::wrLogInfo($message);
SP_Common::sendEmail($message);
return true;
}
/**
* Elimina los datos de una cuenta en la BBDD.
*
* @return bool
*/
public function deleteAccount()
{
// Guardamos una copia de la cuenta en el histórico
$this->addHistory(true) || die (_('ERROR: Error en la operación.'));
$accountInfo = array('account_name,customer_name');
$this->getAccountInfoById($accountInfo);
$message['action'] = _('Eliminar Cuenta');
$message['text'][] = SP_Html::strongText(_('Cliente') . ": ") . $this->cacheParams['customer_name'];
$message['text'][] = SP_Html::strongText(_('Cuenta') . ": ") . $this->cacheParams['account_name'] . " ($this->accountId)";
$query = "DELETE FROM accounts "
. "WHERE account_id = " . (int)$this->accountId . " LIMIT 1";
if (DB::doQuery($query, __FUNCTION__) === false) {
return false;
}
if (!SP_Groups::deleteGroupsForAccount($this->accountId)) {
$message['text'][] = _('Error al eliminar grupos asociados a la cuenta');
}
if (!SP_Users::deleteUsersForAccount($this->accountId)) {
$message['text'][] = _('Error al eliminar usuarios asociados a la cuenta');
}
if (!SP_Files::deleteAccountFiles($this->accountId)) {
$message['text'][] = _('Error al eliminar archivos asociados a la cuenta');
}
SP_Log::wrLogInfo($message);
SP_Common::sendEmail($message);
return true;
}
/**
* Obtiene el listado del histórico de una cuenta.
*
* @return false|array Con los registros con id como clave y fecha - usuario como valor
*/
public function getAccountHistoryList()
{
$query = "SELECT acchistory_id,"
. "acchistory_dateEdit,"
. "u1.user_login as user_edit,"
. "u2.user_login as user_add,"
. "acchistory_dateAdd "
. "FROM accHistory "
. "LEFT JOIN usrData u1 ON acchistory_userEditId = u1.user_id "
. "LEFT JOIN usrData u2 ON acchistory_userId = u2.user_id "
. "WHERE acchistory_accountId = " . $_SESSION["accParentId"] . " "
. "ORDER BY acchistory_id DESC";
$queryRes = DB::getResults($query, __FUNCTION__, true);
if ($queryRes === false) {
return false;
}
$arrHistory = array();
foreach ($queryRes as $history) {
if ($history->acchistory_dateEdit == '0000-00-00 00:00:00') {
$arrHistory[$history->acchistory_id] = $history->acchistory_dateAdd . " - " . $history->user_add;
} else {
$arrHistory[$history->acchistory_id] = $history->acchistory_dateEdit . " - " . $history->user_edit;
}
}
return $arrHistory;
}
/**
* Incrementa el contador de visitas de una cuenta en la BBDD
*
* @return bool
*/
public function incrementViewCounter()
{
$query = "UPDATE accounts "
. "SET account_countView = (account_countView + 1) "
. "WHERE account_id = " . (int)$this->accountId;
if (DB::doQuery($query, __FUNCTION__) === false) {
return false;
}
return true;
}
/**
* Incrementa el contador de vista de clave de una cuenta en la BBDD
*
* @return bool
*/
public function incrementDecryptCounter()
{
$query = "UPDATE accounts SET account_countDecrypt = (account_countDecrypt + 1) "
. "WHERE account_id = " . (int)$this->accountId;
if (DB::doQuery($query, __FUNCTION__) === false) {
return false;
}
return true;
}
/**
* Obtiene el número de cuentas que un usuario puede ver.
*
* @return false|int con el número de registros
*/
public function getAccountMax()
{
$userGroupId = $_SESSION["ugroup"];
$userId = $_SESSION["uid"];
$userIsAdminApp = $_SESSION['uisadminapp'];
$userIsAdminAcc = $_SESSION['uisadminacc'];
if (!$userIsAdminApp && !$userIsAdminAcc) {
$query = "SELECT COUNT(DISTINCT account_id) as numacc "
. "FROM accounts "
. "LEFT JOIN accGroups ON account_id = accgroup_accountId "
. "WHERE account_userGroupId = " . (int)$userGroupId . " "
. "OR account_userId = " . (int)$userId . " "
. "OR accgroup_groupId = " . (int)$userGroupId;
} else {
$query = "SELECT COUNT(account_id) as numacc FROM accounts";
}
$queryRes = DB::getResults($query, __FUNCTION__);
if ($queryRes === false) {
return false;
}
return $queryRes->numacc;
}
/**
* Actualiza las claves de todas las cuentas con la nueva clave maestra.
*
* @param string $currentMasterPass con la clave maestra actual
* @param string $newMasterPass con la nueva clave maestra
* @return bool
*/
public function updateAllAccountsMPass($currentMasterPass, $newMasterPass)
{
$accountsOk = array();
$userId = $_SESSION["uid"];
$errorCount = 0;
$demoEnabled = SP_Util::demoIsEnabled();
$message['action'] = _('Actualizar Clave Maestra');
$message['text'][] = _('Inicio');
SP_Log::wrLogInfo($message);
// Limpiar 'text' para los próximos mensajes
$message['text'] = array();
if (!SP_Crypt::checkCryptModule()) {
$message['text'][] = _('Error en el módulo de encriptación');
SP_Log::wrLogInfo($message);
return false;
}
$accountsPass = $this->getAccountsPassData();
if (!$accountsPass) {
$message['text'][] = _('Error al obtener las claves de las cuentas');
SP_Log::wrLogInfo($message);
return false;
}
foreach ($accountsPass as $account) {
$this->accountId = $account->account_id;
$this->accountUserEditId = $userId;
// No realizar cambios si está en modo demo
if ($demoEnabled) {
$accountsOk[] = $this->accountId;
continue;
}
$decryptedPass = SP_Crypt::getDecrypt($account->account_pass, $currentMasterPass, $account->account_IV);
$this->accountPass = SP_Crypt::mkEncrypt($decryptedPass, $newMasterPass);
$this->accountIV = SP_Crypt::$strInitialVector;
if ($this->accountPass === false) {
$errorCount++;
continue;
}
if (!$this->updateAccountPass(true)) {
$errorCount++;
$message['text'][] = _('Fallo al actualizar la clave de la cuenta') . "(" . $this->accountId . ")";
}
$accountsOk[] = $this->accountId;
}
// Vaciar el array de mensaje de log
if (count($message['text']) > 0) {
SP_Log::wrLogInfo($message);
$message['text'] = array();
}
if ($accountsOk) {
$message['text'][] = _('Cuentas actualizadas:') . ": " . implode(',', $accountsOk);
SP_Log::wrLogInfo($message);
$message['text'] = array();
}
$message['text'][] = _('Fin');
SP_Log::wrLogInfo($message);
SP_Common::sendEmail($message);
if ($errorCount > 0) {
return false;
}
return true;
}
/**
* Obtener los datos relativos a la clave de todas las cuentas.
*
* @return false|array Con los datos de la clave
*/
private function getAccountsPassData()
{
$query = "SELECT account_id,"
. "account_pass,"
. "account_IV "
. "FROM accounts";
$queryRes = DB::getResults($query, __FUNCTION__, true);
if ($queryRes === false) {
return false;
}
return $queryRes;
}
/**
* Actualiza la clave de una cuenta en la BBDD.
*
* @param bool $isMassive para no actualizar el histórico ni enviar mensajes
* @param bool $isRestore indica si es una restauración
* @return bool
*/
public function updateAccountPass($isMassive = false, $isRestore = false)
{
$message['action'] = __FUNCTION__;
// No actualizar el histórico si es por cambio de clave maestra o restauración
if (!$isMassive && !$isRestore) {
// Guardamos una copia de la cuenta en el histórico
if (!$this->addHistory($this->accountId, $this->accountUserEditId, false)) {
$message['text'][] = _('Error al actualizar el historial');
SP_Log::wrLogInfo($message);
return false;
}
}
$query = "UPDATE accounts SET "
. "account_pass = '" . DB::escape($this->accountPass) . "',"
. "account_IV = '" . DB::escape($this->accountIV) . "',"
. "account_userEditId = " . (int)$this->accountUserEditId . ","
. "account_dateEdit = NOW() "
. "WHERE account_id = " . (int)$this->accountId;
if (DB::doQuery($query, __FUNCTION__) === false) {
return false;
}
// No escribir en el log ni enviar correos si la actualización es
// por cambio de clave maestra o restauración
if (!$isMassive && !$isRestore) {
$accountInfo = array('customer_name', 'account_name');
$this->getAccountInfoById($accountInfo);
$message['action'] = _('Modificar Clave');
$message['text'][] = SP_Html::strongText(_('Cliente') . ": ") . $this->cacheParams['customer_name'];
$message['text'][] = SP_Html::strongText(_('Cuenta') . ": ") . $this->cacheParams['account_name'] . " ($this->accountId)";
SP_Log::wrLogInfo($message);
SP_Common::sendEmail($message);
}
return true;
}
/**
* Actualiza las claves de todas las cuentas en el histórico con la nueva clave maestra.
*
* @param string $currentMasterPass con la clave maestra actual
* @param string $newMasterPass con la nueva clave maestra
* @param string $newHash con el nuevo hash de la clave maestra
* @return bool
*/
public function updateAllAccountsHistoryMPass($currentMasterPass, $newMasterPass, $newHash)
{
$idOk = array();
$errorCount = 0;
$demoEnabled = SP_Util::demoIsEnabled();
$message['action'] = _('Actualizar Clave Maestra (H)');
$message['text'][] = _('Inicio');
SP_Log::wrLogInfo($message);
// Limpiar 'text' para los próximos mensajes
$message['text'] = array();
if (!SP_Crypt::checkCryptModule()) {
$message['text'][] = _('Error en el módulo de encriptación');
SP_Log::wrLogInfo($message);
return false;
}
$accountsPass = $this->getAccountsHistoryPassData();
if (!$accountsPass) {
$message['text'][] = _('Error al obtener las claves de las cuentas');
SP_Log::wrLogInfo($message);
return false;
}
foreach ($accountsPass as $account) {
// No realizar cambios si está en modo demo
if ($demoEnabled) {
$idOk[] = $account->acchistory_id;
continue;
}
if (!$this->checkAccountMPass($account->acchistory_id)) {
$errorCount++;
$message['text'][] = _('La clave maestra del registro no coincide') . " (" . $account->acchistory_id . ")";
continue;
}
$decryptedPass = SP_Crypt::getDecrypt($account->acchistory_pass, $currentMasterPass, $account->acchistory_IV);
$this->accountPass = SP_Crypt::mkEncrypt($decryptedPass, $newMasterPass);
$this->accountIV = SP_Crypt::$strInitialVector;
if ($this->accountPass === false) {
$errorCount++;
continue;
}
if (!$this->updateAccountHistoryPass($account->acchistory_id, $newHash)) {
$errorCount++;
$message['text'][] = _('Fallo al actualizar la clave del histórico') . " (" . $account->acchistory_id . ")";
}
$idOk[] = $account->acchistory_id;
}
// Vaciar el array de mensaje de log
if (count($message['text']) > 0) {
SP_Log::wrLogInfo($message);
$message['text'] = array();
}
if ($idOk) {
$message['text'][] = _('Registros actualizados:') . ": " . implode(',', $idOk);
SP_Log::wrLogInfo($message);
$message['text'] = array();
}
$message['text'][] = _('Fin');
SP_Log::wrLogInfo($message);
if ($errorCount > 0) {
return false;
}
return true;
}
/**
* Obtener los datos relativo a la clave de todas las cuentas del histórico.
*
* @return false|array con los datos de la clave
*/
private function getAccountsHistoryPassData()
{
$query = "SELECT acchistory_id,"
. "acchistory_pass,"
. "acchistory_IV "
. "FROM accHistory";
$queryRes = DB::getResults($query, __FUNCTION__, true);
if ($queryRes === false) {
return false;
}
return $queryRes;
}
/**
* Comprueba el hash de la clave maestra del registro de histórico de una cuenta.
*
* @param int $id opcional, con el Id del registro a comprobar
* @return bool
*/
public function checkAccountMPass($id = NULL)
{
if (is_null($id)) {
$id = $this->accountId;
}
$query = "SELECT acchistory_mPassHash "
. "FROM accHistory "
. "WHERE acchistory_id = " . (int)$id;
$queryRes = DB::getResults($query, __FUNCTION__);
if ($queryRes === false) {
return false;
}
if ($queryRes->acchistory_mPassHash != SP_Config::getConfigValue('masterPwd')) {
return false;
}
return true;
}
/**
* Actualiza la clave del histórico de una cuenta en la BBDD.
*
* @param int $id con el id del registro a actualizar
* @param string $newHash con el hash de la clave maestra
* @return bool
*/
public function updateAccountHistoryPass($id, $newHash)
{
$query = "UPDATE accHistory SET "
. "acchistory_pass = '" . DB::escape($this->accountPass) . "',"
. "acchistory_IV = '" . DB::escape($this->accountIV) . "',"
. "acchistory_mPassHash = '" . DB::escape($newHash) . "' "
. "WHERE acchistory_id = " . (int)$id;
if (DB::doQuery($query, __FUNCTION__) === false) {
return false;
}
return true;
}
/**
* Calcular el hash de los datos de una cuenta.
* Esta función se utiliza para verificar si los datos de un formulario han sido cambiados
* con respecto a los guardados
*
* @return string con el hash
*/
public function calcChangesHash()
{
$groups = 0;
$users = 0;
if (is_array($this->accountUserGroupsId)) {
$groups = implode($this->accountUserGroupsId);
} elseif (is_array($this->accountCacheUserGroupsId)) {
foreach ($this->accountCacheUserGroupsId as $group) {
if (is_array($group)) {
// Ordenar el array para que el hash sea igual
sort($group, SORT_NUMERIC);
$groups = implode($group);
}
}
}
if (is_array($this->accountUsersId)) {
$users = implode($this->accountUsersId);
} elseif (is_array($this->accountCacheUsersId)) {
foreach ($this->accountCacheUsersId as $user) {
if (is_array($user)) {
// Ordenar el array para que el hash sea igual
sort($user, SORT_NUMERIC);
$users = implode($user);
}
}
}
if (!empty($this->accountModHash)) {
$hashItems = $this->accountModHash . (int)$users . (int)$groups;
//error_log("HASH MySQL: ".$hashItems);
} else {
$hashItems = $this->accountName .
$this->accountCategoryId .
$this->accountCustomerId .
$this->accountLogin .
$this->accountUrl .
$this->accountNotes .
$this->accountOtherUserEdit .
$this->accountOtherGroupEdit .
(int)$users .
(int)$groups;
//error_log("HASH PHP: ".$hashItems);
}
return md5($hashItems);
}
/**
* Devolver datos de la cuenta para comprobación de accesos.
*
* @param int $accountId con el id de la cuenta
* @return array con los datos de la cuenta
*/
public function getAccountDataForACL($accountId = null)
{
$accId = (!is_null($accountId)) ? $accountId : $this->accountId;
return array(
'id' => $accId,
'user_id' => $this->accountUserId,
'group_id' => $this->accountUserGroupId,
'users_id' => $this->getUsersAccount(),
'groups_id' => $this->getGroupsAccount(),
'otheruser_edit' => $this->accountOtherUserEdit,
'othergroup_edit' => $this->accountOtherGroupEdit
);
}
/**
* Obtiene el listado usuarios con acceso a una cuenta.
*
* @return array Con los registros con id de cuenta como clave e id de usuario como valor
*/
public function getUsersAccount()
{
$accId = ($this->accountIsHistory && $this->accountParentId) ? $this->accountParentId : $this->accountId;
if (!is_array($this->accountCacheUsersId)) {
//error_log('Users cache MISS');
$this->accountCacheUsersId = array($accId => array());
} else {
if (array_key_exists($accId, $this->accountCacheUsersId)) {
//error_log('Users cache HIT');
return $this->accountCacheUsersId[$accId];
}
}
//error_log('Users cache MISS '.$accId);
$users = SP_Users::getUsersForAccount($accId);
if (!is_array($users)) {
return array();
}
foreach ($users as $user) {
$this->accountCacheUsersId[$accId][] = $user->accuser_userId;
}
return $this->accountCacheUsersId[$accId];
}
/**
* Obtiene el listado de grupos secundarios de una cuenta.
*
* @return array con los registros con id de cuenta como clave e id de grupo como valor
*/
public function getGroupsAccount()
{
$accId = ($this->accountIsHistory && $this->accountParentId) ? $this->accountParentId : $this->accountId;
if (!is_array($this->accountCacheUserGroupsId)) {
//error_log('Groups cache NO_INIT');
$this->accountCacheUserGroupsId = array($accId => array());
} else {
if (array_key_exists($accId, $this->accountCacheUserGroupsId)) {
//error_log('Groups cache HIT');
return $this->accountCacheUserGroupsId[$accId];
}
}
//error_log('Groups cache MISS');
$groups = SP_Groups::getGroupsForAccount($accId);
if (!is_array($groups)) {
return array();
}
foreach ($groups as $group) {
$this->accountCacheUserGroupsId[$accId][] = $group->accgroup_groupId;
}
return $this->accountCacheUserGroupsId[$accId];
}
}
Reference in New Issue View Git Blame Copy Permalink