mirror of
https://github.com/nuxsmin/sysPass.git
synced 2026-03-03 07:04:07 +01:00
10d11e6fdc
Fix error on retrieving profile data while closing session. Give focus to "inputs" after loading content. Update translations.
1432 lines
52 KiB
PHP
1432 lines
52 KiB
PHP
<?php
|
|
|
|
/**
|
|
* sysPass
|
|
*
|
|
* @author nuxsmin
|
|
* @link http://syspass.org
|
|
* @copyright 2012 Rubén Domínguez nuxsmin@syspass.org
|
|
*
|
|
* This file is part of sysPass.
|
|
*
|
|
* sysPass is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* sysPass is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with sysPass. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
defined('APP_ROOT') || die(_('No es posible acceder directamente a este archivo'));
|
|
|
|
/**
|
|
* Esta clase es la encargada de realizar las operaciones osbre los usuarios de sysPass
|
|
*/
|
|
class SP_Users {
|
|
|
|
// Variables de usuario
|
|
var $userId;
|
|
var $userName;
|
|
var $userGroupId;
|
|
var $userGroupName;
|
|
var $userLogin;
|
|
var $userPass;
|
|
var $userEmail;
|
|
var $userNotes;
|
|
var $userProfileId;
|
|
var $userIsAdminApp;
|
|
var $userIsAdminAcc;
|
|
var $userIsDisabled;
|
|
var $userIsLdap;
|
|
// Variables de grupos
|
|
var $groupId;
|
|
var $groupName;
|
|
var $groupDesc;
|
|
// Variables de Perfil
|
|
var $profileId;
|
|
var $profileName;
|
|
// Variables de consulta
|
|
static $queryRes;
|
|
static $querySelect;
|
|
static $queryFrom;
|
|
static $queryWhere;
|
|
static $queryCount;
|
|
var $queryLastId;
|
|
|
|
function __construct() {
|
|
$this->debugOn = SP_Config::getValue('debug');
|
|
$this->remoteIP = $_SERVER["REMOTE_ADDR"];
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener los datos de un usuario desde la BBDD
|
|
* @return bool
|
|
*
|
|
* Esta función obtiene los datos de un usuario y los guarda en las variables de la clase.
|
|
*/
|
|
public function getUserInfo() {
|
|
$query = "SELECT user_id, user_name, user_groupId, user_login, user_email, user_notes, user_count, user_profileId,
|
|
usergroup_name, user_isAdminApp, user_isAdminAcc, user_isLdap, user_isDisabled
|
|
FROM usrData
|
|
LEFT JOIN usrGroups ON user_groupId = usergroup_id
|
|
LEFT JOIN usrProfiles ON user_profileId = userprofile_id
|
|
WHERE user_login = '" . DB::escape($this->userLogin) . "' LIMIT 1";
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
|
|
$this->userId = (int) $queryRes[0]->user_id;
|
|
$this->userName = $queryRes[0]->user_name;
|
|
$this->userGroupId = (int) $queryRes[0]->user_groupId;
|
|
$this->userGroupName = $queryRes[0]->usergroup_name;
|
|
$this->userEmail = $queryRes[0]->user_email;
|
|
$this->userProfileId = (int) $queryRes[0]->user_profileId;
|
|
$this->userIsAdminApp = (int) $queryRes[0]->user_isAdminApp;
|
|
$this->userIsAdminAcc = (int) $queryRes[0]->user_isAdminAcc;
|
|
$this->userIsLdap = (int) $queryRes[0]->user_isLdap;
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener los detalles de una consulta para generar una tabla
|
|
* @return bool
|
|
*/
|
|
public static function getItemDetail() {
|
|
if (!isset(self::$querySelect) || self::$querySelect == "") {
|
|
return FALSE;
|
|
}
|
|
if (!isset(self::$queryFrom) || self::$queryFrom == "") {
|
|
return FALSE;
|
|
}
|
|
|
|
$query = self::$querySelect . ' ' . self::$queryFrom . ' ' . self::$queryWhere;
|
|
self::$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if (self::$queryRes === FALSE || !is_array(self::$queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
self::$queryCount = count(self::$queryRes);
|
|
|
|
if (self::$queryCount === 0) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Establecer las variables para la consulta de usuarios
|
|
* @param int $itemId opcional, con el Id del usuario a consultar
|
|
* @return none
|
|
*/
|
|
public static function setQueryUsers($itemId = NULL) {
|
|
if (!is_null($itemId)) {
|
|
self::$querySelect = "SELECT user_id, user_name, user_login, user_profileId, user_groupId, user_email, user_notes,
|
|
user_isAdminApp, user_isAdminAcc, user_isLdap, user_isDisabled";
|
|
self::$queryWhere = "WHERE user_id = " . (int) $itemId . " LIMIT 1";
|
|
} else {
|
|
self::$querySelect = "SELECT user_id, user_name, user_login, userprofile_name, usergroup_name, user_isAdminApp,
|
|
user_isAdminAcc, user_isLdap, user_isDisabled";
|
|
self::$queryWhere = ( $_SESSION["uisadminapp"] == 0 ) ? "WHERE user_isAdminApp = 0 ORDER BY user_name" : "ORDER BY user_name";
|
|
}
|
|
|
|
self::$queryFrom = "FROM usrData
|
|
LEFT JOIN usrProfiles ON user_profileId = userprofile_id
|
|
LEFT JOIN usrGroups ON usrData.user_groupId = usergroup_id";
|
|
}
|
|
|
|
/**
|
|
* @brief Establecer las variables para la consulta de grupos
|
|
* @param int $itemId opcional, con el Id del grupo a consultar
|
|
* @return none
|
|
*/
|
|
public static function setQueryUserGroups($itemId = NULL) {
|
|
if (!is_null($itemId)) {
|
|
self::$querySelect = "SELECT usergroup_id, usergroup_name, usergroup_description";
|
|
self::$queryWhere = "WHERE usergroup_id = " . (int) $itemId . " LIMIT 1";
|
|
} else {
|
|
self::$querySelect = "SELECT usergroup_id, usergroup_name, usergroup_description";
|
|
self::$queryWhere = "ORDER BY usergroup_name";
|
|
}
|
|
|
|
self::$queryFrom = "FROM usrGroups";
|
|
}
|
|
|
|
/**
|
|
* @brief Establecer las variables para la consulta de perfiles
|
|
* @param int $itemId opcional, con el Id del usuario a perfiles
|
|
* @return none
|
|
*/
|
|
public static function setQueryUserProfiles($itemId = NULL) {
|
|
if (!is_null($itemId)) {
|
|
self::$querySelect = "SELECT userprofile_id, userprofile_name, userProfile_pView, userProfile_pViewPass,
|
|
userProfile_pViewHistory, userProfile_pEdit, userProfile_pEditPass, userProfile_pAdd,
|
|
userProfile_pDelete, userProfile_pFiles, userProfile_pConfig, userProfile_pConfigCategories,
|
|
userProfile_pConfigMasterPass, userProfile_pConfigBackup, userProfile_pUsers,
|
|
userProfile_pGroups, userProfile_pProfiles, userProfile_pEventlog";
|
|
self::$queryWhere = "WHERE userprofile_id = " . (int) $itemId . " LIMIT 1";
|
|
} else {
|
|
self::$querySelect = "SELECT userprofile_id, userprofile_name";
|
|
self::$queryWhere = "ORDER BY userprofile_name";
|
|
}
|
|
|
|
self::$queryFrom = "FROM usrProfiles";
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener los datos para generar un select
|
|
* @param string $tblName con el nombre de la tabla a cunsultar
|
|
* @param string $tblColId con el nombre de la columna a mostrar
|
|
* @param array $arrFilter con las columnas a filtrar
|
|
* @return array con los valores del select con el Id como clave y el nombre como valor
|
|
*/
|
|
public static function getValuesForSelect($tblName, $tblColId, $tblColName, $arrFilter = "") {
|
|
if (!$tblName || !$tblColId || !$tblColName) {
|
|
return;
|
|
}
|
|
|
|
$strFilter = ( is_array($arrFilter) ) ? " WHERE " . implode(" OR ", $arrFilter) : "";
|
|
|
|
$query = "SELECT $tblColId, $tblColName FROM $tblName $strFilter";
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
$arrValues = array();
|
|
|
|
foreach ($queryRes as $row) {
|
|
$arrValues[$row->$tblColId] = $row->$tblColName;
|
|
}
|
|
|
|
return $arrValues;
|
|
}
|
|
|
|
/**
|
|
* @brief Devolver la tabla de usuarios, grupos o perfiles
|
|
* @param array $arrUsersTableProp con las propiedades de la tabla
|
|
* @return none
|
|
*/
|
|
public static function getUsrGrpTable($arrUsersTableProp) {
|
|
$sk = SP_Common::getSessionKey(TRUE);
|
|
|
|
echo '<div class="action fullWidth">';
|
|
echo '<ul>';
|
|
echo '<LI><img src="imgs/add.png" title="' . _('Nuevo') . '" class="inputImg" OnClick="usrgrpDetail(0,' . $arrUsersTableProp["newActionId"] . ',\'' . $sk . '\',' . $arrUsersTableProp["active"] . ');" /></LI>';
|
|
echo '</ul>';
|
|
echo '</div>';
|
|
|
|
if ($arrUsersTableProp["header"]) {
|
|
echo '<div id="title" class="midroundup titleNormal">' . $arrUsersTableProp["header"] . '</div>';
|
|
}
|
|
|
|
echo '<form name="' . $arrUsersTableProp["frmId"] . '" id="' . $arrUsersTableProp["frmId"] . '" OnSubmit="return false;" >';
|
|
echo '<div id="' . $arrUsersTableProp["tblId"] . '" class="data-header" >';
|
|
echo '<ul class="round header-grey">';
|
|
|
|
$cellWidth = floor(85 / count($arrUsersTableProp["tblHeaders"]));
|
|
|
|
foreach ($arrUsersTableProp["tblHeaders"] as $header) {
|
|
if (is_array($header)) {
|
|
echo '<li class="' . $header['class'] . '" style="width: ' . $cellWidth . '%;">' . $header['name'] . '</li>';
|
|
} else {
|
|
echo '<li style="width: ' . $cellWidth . '%;">' . $header . '</li>';
|
|
}
|
|
}
|
|
|
|
echo '</ul>';
|
|
echo '</div>';
|
|
|
|
echo '<div class="data-rows">';
|
|
|
|
foreach (self::$queryRes as $item) {
|
|
$intId = $item->$arrUsersTableProp["tblRowSrcId"];
|
|
$action_check = array();
|
|
|
|
$lnkEdit = '<img src="imgs/edit.png" title="' . _('Editar') . '" class="inputImg" Onclick="return usrgrpDetail(' . $intId . ',' . $arrUsersTableProp["actionId"] . ',\'' . $sk . '\', ' . $arrUsersTableProp["active"] . ');" />';
|
|
$lnkDel = '<img src="imgs/delete.png" title="' . _('Eliminar') . '" class="inputImg" Onclick="return usersMgmt(' . $arrUsersTableProp["active"] . ', 1,' . $intId . ',' . $arrUsersTableProp["actionId"] . ',\'' . $sk . '\', ' . $arrUsersTableProp["active"] . ');" />';
|
|
$lnkPass = '<img src="imgs/key.png" title="' . _('Cambiar clave') . '" class="inputImg" Onclick="return usrUpdPass(' . $intId . ');" />';
|
|
|
|
echo '<ul>';
|
|
|
|
foreach ($arrUsersTableProp["tblRowSrc"] as $rowSrc) {
|
|
// If row is an array handle images in it
|
|
if (is_array($rowSrc)) {
|
|
echo '<li class="cell-nodata" style="width: ' . $cellWidth . '%;">';
|
|
foreach ($rowSrc as $rowName => $imgProp) {
|
|
if ($item->$rowName) {
|
|
echo '<img src="imgs/' . $imgProp['img_file'] . '" title="' . $imgProp['img_title'] . '" />';
|
|
$action_check[$rowName] = 1;
|
|
}
|
|
}
|
|
echo '</li>';
|
|
} else {
|
|
echo '<li class="cell-data" style="width: ' . $cellWidth . '%;">';
|
|
echo ( $item->$rowSrc ) ? $item->$rowSrc : ' '; // Fix height
|
|
echo '</li>';
|
|
}
|
|
}
|
|
|
|
echo '<li class="cell-actions round" style="width: ' . $cellWidth . '%;">';
|
|
foreach ($arrUsersTableProp["actions"] as $action) {
|
|
switch ($action) {
|
|
case "edit":
|
|
echo $lnkEdit;
|
|
break;
|
|
case "del":
|
|
echo $lnkDel;
|
|
break;
|
|
case "pass":
|
|
echo (!isset($action_check['user_isLdap']) ) ? $lnkPass : '';
|
|
break;
|
|
}
|
|
}
|
|
echo '</li>';
|
|
echo '</ul>';
|
|
}
|
|
|
|
echo '</div></form>';
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener los datos de un usuario
|
|
* @param int $id con el Id del usuario a consultar
|
|
* @return array con el nombre de la columna como clave y los datos como valor
|
|
*/
|
|
public static function getUserData($id = 0) {
|
|
$user = array('user_id' => 0,
|
|
'user_name' => '',
|
|
'user_login' => '',
|
|
'user_profileId' => 0,
|
|
'user_groupId' => 0,
|
|
'user_email' => '',
|
|
'user_notes' => '',
|
|
'user_isAdminApp' => 0,
|
|
'user_isAdminAcc' => 0,
|
|
'user_isLdap' => 0,
|
|
'user_isDisabled' => 0,
|
|
'action' => 1);
|
|
|
|
if ($id > 0) {
|
|
self::setQueryUsers($id);
|
|
|
|
if (self::getItemDetail()) {
|
|
$user['checks'] = array();
|
|
|
|
foreach (self::$queryRes as $row) {
|
|
foreach ($row as $name => $value) {
|
|
// Check if field is a checkbox one
|
|
if (preg_match('/^.*_is[A-Z].*$/', $name)) {
|
|
$user['checks'][$name] = ( (int) $value === 1 ) ? 'CHECKED' : '';
|
|
}
|
|
|
|
$user[$name] = $value;
|
|
}
|
|
}
|
|
|
|
$user['action'] = 2;
|
|
}
|
|
}
|
|
|
|
return $user;
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener los datos de un grupo
|
|
* @param int $id con el Id del grupo a consultar
|
|
* @return array con el nombre de la columna como clave y los datos como valor
|
|
*/
|
|
public static function getGroupData($id = 0) {
|
|
$group = array('usergroup_id' => 0,
|
|
'usergroup_name' => '',
|
|
'usergroup_description' => '',
|
|
'action' => 1);
|
|
|
|
if ($id > 0) {
|
|
self::setQueryUserGroups($id);
|
|
|
|
if (self::getItemDetail()) {
|
|
foreach (self::$queryRes as $row) {
|
|
foreach ($row as $name => $value) {
|
|
$group[$name] = $value;
|
|
}
|
|
}
|
|
$group['action'] = 2;
|
|
}
|
|
}
|
|
|
|
return $group;
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener los datos de un perfil
|
|
* @param int $id con el Id del perfil a consultar
|
|
* @return array con el nombre de la columna como clave y los datos como valor
|
|
*/
|
|
public static function getProfileData($id = 0) {
|
|
|
|
$profile = array('userprofile_id' => 0,
|
|
'userprofile_name' => '',
|
|
'userProfile_pView' => 0,
|
|
'userProfile_pViewPass' => 0,
|
|
'userProfile_pViewHistory' => 0,
|
|
'userProfile_pEdit' => 0,
|
|
'userProfile_pEditPass' => 0,
|
|
'userProfile_pAdd' => 0,
|
|
'userProfile_pDelete' => 0,
|
|
'userProfile_pFiles' => 0,
|
|
'userProfile_pConfig' => 0,
|
|
'userProfile_pConfigCategories' => 0,
|
|
'userProfile_pConfigMasterPass' => 0,
|
|
'userProfile_pConfigBackup' => 0,
|
|
'userProfile_pUsers' => 0,
|
|
'userProfile_pGroups' => 0,
|
|
'userProfile_pProfiles' => 0,
|
|
'userProfile_pEventlog' => 0,
|
|
'action' => 1);
|
|
|
|
if ($id > 0) {
|
|
self::setQueryUserProfiles($id);
|
|
|
|
if (self::getItemDetail()) {
|
|
foreach (self::$queryRes as $row) {
|
|
foreach ($row as $name => $value) {
|
|
if (preg_match('/^.*_p[A-Z].*$/', $name)) {
|
|
$profile[$name] = ( (int) $value === 1 ) ? "CHECKED" : "";
|
|
} else {
|
|
$profile[$name] = $value;
|
|
}
|
|
}
|
|
}
|
|
|
|
$profile['action'] = 2;
|
|
}
|
|
}
|
|
|
|
return $profile;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si un usuario/email existen en la BBDD
|
|
* @return bool|int Devuelve bool si error y int si existe el usuario/email
|
|
*/
|
|
public function checkUserExist() {
|
|
$userLogin = strtoupper($this->userLogin);
|
|
$userEmail = strtoupper($this->userEmail);
|
|
|
|
$query = "SELECT user_login, user_email FROM usrData
|
|
WHERE (UPPER(user_login) = '" . DB::escape($userLogin) . "'
|
|
OR UPPER(user_email) = '" . DB::escape($userEmail) . "')
|
|
AND user_id != " . (int) $this->userId;
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
foreach ($queryRes as $userData) {
|
|
$resULogin = strtoupper($userData->user_login);
|
|
$resUEmail = strtoupper($userData->user_email);
|
|
|
|
if ($resULogin == $userLogin) {
|
|
return 1;
|
|
} elseif ($resUEmail == $userEmail) {
|
|
return 2;
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si un grupo existe en la BBDD
|
|
* @return bool
|
|
*/
|
|
public function checkGroupExist() {
|
|
$strGroupName = strtoupper($this->groupName);
|
|
|
|
if ($this->groupId) {
|
|
$query = "SELECT usergroup_name FROM usrGroups
|
|
WHERE UPPER(usergroup_name) = '" . DB::escape($strGroupName) . "'
|
|
AND usergroup_id != " . (int) $this->groupId;
|
|
} else {
|
|
$query = "SELECT usergroup_name FROM usrGroups
|
|
WHERE UPPER(usergroup_name) = '" . DB::escape($strGroupName) . "'";
|
|
}
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
if (count(DB::$last_result) >= 1) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si un perfil existe
|
|
* @return bool
|
|
*/
|
|
public function checkProfileExist() {
|
|
$profileName = strtoupper($this->profileName);
|
|
|
|
if ($this->profileId) {
|
|
$query = "SELECT userprofile_name FROM usrProfiles
|
|
WHERE UPPER(userprofile_name) = '" . DB::escape($profileName) . "'
|
|
AND userprofile_id != " . (int) $this->profileId;
|
|
} else {
|
|
$query = "SELECT userprofile_name FROM usrProfiles
|
|
WHERE UPPER(userprofile_name) = '" . DB::escape($profileName) . "'";
|
|
}
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
if (count(DB::$last_result) >= 1) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si un grupo está en uso
|
|
* @return bool
|
|
*
|
|
* Esta función comprueba si un grupo está en uso por usuarios o cuentas.
|
|
*/
|
|
public function checkGroupInUse() {
|
|
// Número de usuarios con el grupo
|
|
$query = "SELECT user_id FROM usrData WHERE user_groupId = " . (int) $this->groupId;
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE){
|
|
return FALSE;
|
|
}
|
|
|
|
$numRows = count(DB::$last_result);
|
|
$txt = _('Usuarios') . " (" . $numRows . ")";
|
|
|
|
if ($numRows) {
|
|
return $txt;
|
|
}
|
|
|
|
// Número de cuentas con el grupo como primario
|
|
$query = "SELECT account_id FROM accounts WHERE account_userGroupId = " . (int) $this->groupId;
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$numRows = count(DB::$last_result);
|
|
$txt = _('Cuentas') . " (" . $numRows . ")";
|
|
|
|
if ($numRows) {
|
|
return $txt;
|
|
}
|
|
|
|
// Número de cuentas con el grupo como secundario
|
|
$query = "SELECT accgroup_id FROM accGroups WHERE accgroup_groupId = " . (int) $this->groupId;
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$numRows = count(DB::$last_result);
|
|
$txt = _('Cuentas') . " (" . $numRows . ")";
|
|
|
|
if ($numRows) {
|
|
return $txt;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si un perfil está en uso
|
|
* @return bool
|
|
*/
|
|
public function checkProfileInUse() {
|
|
$query = "SELECT user_id FROM usrData WHERE user_profileId = " . (int) $this->profileId;
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$numRows = count(DB::$last_result);
|
|
|
|
if ($numRows >= 1) {
|
|
return "Usuarios ($numRows)";
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar la clave de usuario en la BBDD
|
|
* @return bool
|
|
*
|
|
* Esta función comprueba la clave del usuario. Si el usuario necesita ser migrado desde phpPMS,
|
|
* se ejecuta el proceso para actualizar la clave.
|
|
*/
|
|
public function checkUserPass() {
|
|
if ($this->checkUserIsMigrate()) {
|
|
if (!$this->migrateUser()) {
|
|
return FALSE;
|
|
}
|
|
}
|
|
|
|
$query = "SELECT user_login, user_pass FROM usrData
|
|
WHERE user_login = '" . DB::escape($this->userLogin) . "'
|
|
AND user_isMigrate = 0
|
|
AND user_pass = SHA1(CONCAT(user_hashSalt,'" . DB::escape($this->userPass) . "')) LIMIT 1";
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
if (count(DB::$last_result) == 0) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si un usuario está deshabilitado
|
|
* @return bool
|
|
*/
|
|
public function checkUserIsDisabled() {
|
|
$query = "SELECT user_isDisabled FROM usrData
|
|
WHERE user_login = '" . DB::escape($this->userLogin) . "' LIMIT 1";
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
if ($queryRes[0]->user_isDisabled == 0) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si los datos del usuario de LDAP están en la BBDD
|
|
* @return bool
|
|
*/
|
|
public function checkUserLDAP() {
|
|
$query = "SELECT user_login FROM usrData
|
|
WHERE user_login = '" . DB::escape($this->userLogin) . "' LIMIT 1";
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
if (count(DB::$last_result) == 0) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si un usuario está migrado desde phpPMS
|
|
* @return bool
|
|
*/
|
|
private function checkUserIsMigrate() {
|
|
$query = "SELECT user_isMigrate FROM usrData
|
|
WHERE user_login = '" . DB::escape($this->userLogin) . "' LIMIT 1";
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
if ($queryRes[0]->user_isMigrate == 0) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Actualizar la clave de un usuario desde phpPMS
|
|
* @return bool
|
|
*
|
|
* Esta función actualiza la clave de un usuario que ha sido migrado desde phpPMS
|
|
*/
|
|
private function migrateUser() {
|
|
$passdata = $this->makeUserPass();
|
|
|
|
$query = "UPDATE usrData SET
|
|
user_pass = '" . $passdata['pass'] . "',
|
|
user_hashSalt = '" . $passdata['salt'] . "',
|
|
user_lastUpdate = NOW(),
|
|
user_isMigrate = 0
|
|
WHERE user_login = '" . DB::escape($this->userLogin) . "'
|
|
AND user_isMigrate = 1
|
|
AND (user_pass = SHA1(CONCAT(user_hashSalt,'" . DB::escape($this->userPass) . "'))
|
|
OR user_pass = MD5('" . DB::escape($this->userPass) . "')) LIMIT 1";
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$message['action'] = __FUNCTION__;
|
|
$message['text'][] = _('Usuario actualizado');
|
|
$message['text'][] = 'Login: ' . $this->userLogin;
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Crear la clave de un usuario
|
|
* @return array con la clave y salt del usuario
|
|
*/
|
|
private function makeUserPass() {
|
|
$salt = SP_Crypt::makeHashSalt();
|
|
$userPass = DB::escape(sha1($salt . DB::escape($this->userPass)));
|
|
|
|
return array('salt' => $salt, 'pass' => $userPass);
|
|
}
|
|
|
|
/**
|
|
* @brief Crear un nuevo usuario en la BBDD con los datos de LDAP
|
|
* @return bool
|
|
*
|
|
* Esta función crea los unusario de LDAP en la BBDD para almacenar infomación del mismo
|
|
* y utilizarlo en caso de fallo de LDAP
|
|
*/
|
|
public function newUserLDAP() {
|
|
$passdata = $this->makeUserPass();
|
|
|
|
$query = "INSERT INTO usrData SET
|
|
user_name = '" . DB::escape($this->userName) . "',
|
|
user_groupId = 0,
|
|
user_login = '" . DB::escape($this->userLogin) . "',
|
|
user_pass = '" . $passdata['pass'] . "',
|
|
user_hashSalt = " . $passdata['salt'] . ",
|
|
user_email = '" . DB::escape($this->userEmail) . "',
|
|
user_notes = 'LDAP',
|
|
user_profileId = 0,
|
|
user_isLdap = 1,
|
|
user_isDisabled = 1";
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$message['action'] = _('Activación Cuenta');
|
|
$message['text'][] = _('Su cuenta está pendiente de activación.');
|
|
$message['text'][] = _('En breve recibirá un email de confirmación.');
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
SP_Common::sendEmail($message, $this->userEmail);
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Gestión de los datos de los usuario de la BBDD
|
|
* @param string $strAction con la acción a realizar
|
|
* @return bool
|
|
*
|
|
* Esta función realiza las operaciones de alta, modificación, eliminación y cambio de clave
|
|
* de los usuarios de la BBDD
|
|
*/
|
|
public function manageUser($actionName) {
|
|
$passdata = $this->makeUserPass();
|
|
|
|
switch ($actionName) {
|
|
case "add":
|
|
$query = "INSERT INTO usrData SET
|
|
user_name = '" . DB::escape($this->userName) . "',
|
|
user_login = '" . DB::escape($this->userLogin) . "',
|
|
user_email = '" . DB::escape($this->userEmail) . "',
|
|
user_notes = '" . DB::escape($this->userNotes) . "',
|
|
user_groupId = " . (int) $this->userGroupId . ",
|
|
user_profileId = " . (int) $this->userProfileId . ",
|
|
user_isAdminApp = " . (int) $this->userIsAdminApp . ",
|
|
user_isAdminAcc = " . (int) $this->userIsAdminAcc . ",
|
|
user_pass = '" . $passdata['pass'] . "',
|
|
user_hashSalt = '" . $passdata['salt'] . "',
|
|
user_isLdap = 0";
|
|
break;
|
|
case "update":
|
|
$query = "UPDATE usrData SET
|
|
user_name = '" . DB::escape($this->userName) . "',
|
|
user_login = '" . DB::escape($this->userLogin) . "',
|
|
user_email = '" . DB::escape($this->userEmail) . "',
|
|
user_notes = '" . DB::escape($this->userNotes) . "',
|
|
user_groupId = " . (int) $this->userGroupId . ",
|
|
user_profileId = " . (int) $this->userProfileId . ",
|
|
user_isAdminApp = " . (int) $this->userIsAdminApp . ",
|
|
user_isAdminAcc = " . (int) $this->userIsAdminAcc . ",
|
|
user_isDisabled = " . (int) $this->userIsDisabled . ",
|
|
user_lastUpdate = NOW()
|
|
WHERE user_id = " . (int) $this->userId . " LIMIT 1";
|
|
break;
|
|
case "updatepass":
|
|
$query = "UPDATE usrData SET
|
|
user_pass = '" . $passdata['pass'] . "',
|
|
user_hashSalt = '" . $passdata['salt'] . "',
|
|
user_lastUpdate = NOW()
|
|
WHERE user_id = " . (int) $this->userId . " LIMIT 1";
|
|
break;
|
|
case "delete":
|
|
$query = "DELETE FROM usrData WHERE user_id = " . (int) $this->userId . " LIMIT 1";
|
|
break;
|
|
default :
|
|
return FALSE;
|
|
}
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$this->queryLastId = DB::$lastId;
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Gestión de los datos de los grupos de la BBDD
|
|
* @param string $actionName con la acción a realizar
|
|
* @return bool
|
|
*
|
|
* Esta función realiza las operaciones de alta, modificación y eliminación
|
|
* de los grupos de la BBDD
|
|
*/
|
|
public function manageGroup($actionName) {
|
|
switch ($actionName) {
|
|
case "add":
|
|
$query = "INSERT INTO usrGroups SET
|
|
usergroup_name = '" . DB::escape($this->groupName) . "',
|
|
usergroup_description = '" . DB::escape($this->groupDesc) . "'";
|
|
break;
|
|
case "update":
|
|
$query = "UPDATE usrGroups SET
|
|
usergroup_name = '" . DB::escape($this->groupName) . "',
|
|
usergroup_description = '" . $this->groupDesc . "'
|
|
WHERE usergroup_id = " . (int) $this->groupId;
|
|
break;
|
|
case "delete":
|
|
$query = "DELETE FROM usrGroups WHERE usergroup_id = " . (int) $this->groupId . " LIMIT 1";
|
|
break;
|
|
default :
|
|
return FALSE;
|
|
}
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$this->queryLastId = DB::$lastId;
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Gestión de los datos de los perfiles de la BBDD
|
|
* @param string $actionName con la acción a realizar
|
|
* @param array $profileProp con los permisos sobre los perfiles de usuarios y configuración
|
|
* @return bool
|
|
*
|
|
* Esta función realiza las operaciones de alta, modificación y eliminación
|
|
* de los perfiles de la BBDD
|
|
*/
|
|
public function manageProfiles($actionName, $profileProp = "") {
|
|
$enableConfig = (int) ( $profileProp["pConfig"] || $profileProp["pConfigCat"] || $profileProp["pConfigMpw"] || $profileProp["pConfigBack"]);
|
|
$enableusers = (int) ( $profileProp["pUsers"] || $profileProp["pGroups"] || $profileProp["pProfiles"]);
|
|
|
|
switch ($actionName) {
|
|
case "add":
|
|
$query = "INSERT INTO usrProfiles SET
|
|
userprofile_name = '" . DB::escape($this->profileName) . "',
|
|
userProfile_pView = " . $profileProp["pAccView"] . ",
|
|
userProfile_pViewPass = " . $profileProp["pAccViewPass"] . ",
|
|
userProfile_pViewHistory = " . $profileProp["pAccViewHistory"] . ",
|
|
userProfile_pEdit = " . $profileProp["pAccEdit"] . ",
|
|
userProfile_pEditPass = " . $profileProp["pAccEditPass"] . ",
|
|
userProfile_pAdd = " . $profileProp["pAccAdd"] . ",
|
|
userProfile_pDelete = " . $profileProp["pAccDel"] . ",
|
|
userProfile_pFiles = " . $profileProp["pAccFiles"] . ",
|
|
userProfile_pConfigMenu = " . $enableConfig . ",
|
|
userProfile_pConfig = " . $profileProp["pConfig"] . ",
|
|
userProfile_pConfigCategories = " . $profileProp["pConfigCat"] . ",
|
|
userProfile_pConfigMasterPass = " . $profileProp["pConfigMpw"] . ",
|
|
userProfile_pConfigBackup = " . $profileProp["pConfigBack"] . ",
|
|
userProfile_pUsersMenu = " . $enableusers . ",
|
|
userProfile_pUsers = " . $profileProp["pUsers"] . ",
|
|
userProfile_pGroups = " . $profileProp["pGroups"] . ",
|
|
userProfile_pProfiles = " . $profileProp["pProfiles"] . ",
|
|
userProfile_pEventlog = " . $profileProp["pEventlog"];
|
|
break;
|
|
case "update":
|
|
$query = "UPDATE usrProfiles SET
|
|
userprofile_name = '" . DB::escape($this->profileName) . "',
|
|
userProfile_pView = " . $profileProp["pAccView"] . ",
|
|
userProfile_pViewPass = " . $profileProp["pAccViewPass"] . ",
|
|
userProfile_pViewHistory = " . $profileProp["pAccViewHistory"] . ",
|
|
userProfile_pEdit = " . $profileProp["pAccEdit"] . ",
|
|
userProfile_pEditPass = " . $profileProp["pAccEditPass"] . ",
|
|
userProfile_pAdd = " . $profileProp["pAccAdd"] . ",
|
|
userProfile_pDelete = " . $profileProp["pAccDel"] . ",
|
|
userProfile_pFiles = " . $profileProp["pAccFiles"] . ",
|
|
userProfile_pConfigMenu = " . $enableConfig . ",
|
|
userProfile_pConfig = " . $profileProp["pConfig"] . ",
|
|
userProfile_pConfigCategories = " . $profileProp["pConfigCat"] . ",
|
|
userProfile_pConfigMasterPass = " . $profileProp["pConfigMpw"] . ",
|
|
userProfile_pConfigBackup = " . $profileProp["pConfigBack"] . ",
|
|
userProfile_pUsersMenu = " . $enableusers . ",
|
|
userProfile_pUsers = " . $profileProp["pUsers"] . ",
|
|
userProfile_pGroups = " . $profileProp["pGroups"] . ",
|
|
userProfile_pProfiles = " . $profileProp["pProfiles"] . ",
|
|
userProfile_pEventlog = " . $profileProp["pEventlog"] . "
|
|
WHERE userprofile_id = " . (int) $this->profileId . " LIMIT 1";
|
|
break;
|
|
case "delete":
|
|
$query = "DELETE FROM usrProfiles WHERE userprofile_id = " . (int) $this->profileId . " LIMIT 1";
|
|
break;
|
|
default :
|
|
return FALSE;
|
|
}
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$this->queryLastId = DB::$lastId;
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Actualiza los datos de los usuarios de LDAP en la BBDD
|
|
* @return bool
|
|
*/
|
|
public function updateUserLDAP() {
|
|
$passdata = $this->makeUserPass();
|
|
|
|
$query = "UPDATE usrData SET
|
|
user_pass = '" . $passdata['pass'] . "',
|
|
user_hashSalt = '" . $passdata['salt'] . "',
|
|
user_lastUpdate = NOW()
|
|
WHERE user_id = " . (int) $this->userId . " LIMIT 1";
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Establece las variables de sesión del usuario
|
|
* @return none
|
|
*/
|
|
public function setUserSession() {
|
|
$_SESSION['ulogin'] = $this->userLogin;
|
|
$_SESSION['uprofile'] = $this->userProfileId;
|
|
$_SESSION['uname'] = $this->userName;
|
|
$_SESSION['ugroup'] = $this->userGroupId;
|
|
$_SESSION['ugroupn'] = $this->userGroupName;
|
|
$_SESSION['uid'] = $this->userId;
|
|
$_SESSION['uemail'] = $this->userEmail;
|
|
$_SESSION['uisadminapp'] = $this->userIsAdminApp;
|
|
$_SESSION['uisadminacc'] = $this->userIsAdminAcc;
|
|
$_SESSION['uisldap'] = $this->userIsLdap;
|
|
$_SESSION['usrprofile'] = self::getUserProfile();
|
|
|
|
$this->setUserLastLogin();
|
|
}
|
|
|
|
/**
|
|
* @brief Actualiza el último inici de sesión del usuario en la BBDD
|
|
* @return bool
|
|
*/
|
|
private function setUserLastLogin() {
|
|
$query = "UPDATE usrData SET "
|
|
. "user_lastLogin = NOW() "
|
|
. "WHERE user_id = " . (int) $this->userId . " LIMIT 1";
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener el Id de usuario a partir del login
|
|
* @return int con el Id del usuario
|
|
*/
|
|
public static function getUserIdByLogin($login) {
|
|
$query = "SELECT user_id FROM usrData
|
|
WHERE user_login = '" . DB::escape($login) . "' LIMIT 1";
|
|
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
return (int) $queryRes[0]->user_id;
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener el login de usuario a partir del Id
|
|
* @return string con el login del usuario
|
|
*/
|
|
public static function getUserLoginById($id) {
|
|
$query = "SELECT user_login FROM usrData
|
|
WHERE user_id = " . (int)$id . " LIMIT 1";
|
|
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
return $queryRes[0]->user_login;
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener el nombre de un grupo por a partir del Id
|
|
* @return string con el nombre del grupo
|
|
*/
|
|
public static function getGroupNameById($id) {
|
|
$query = "SELECT usergroup_name FROM usrGroups
|
|
WHERE usergroup_id = " . (int)$id . " LIMIT 1";
|
|
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
return $queryRes[0]->usergroup_name;
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener el nombre de un perfil por a partir del Id
|
|
* @return string con el nombre del perfil
|
|
*/
|
|
public static function getProfileNameById($id) {
|
|
$query = "SELECT userprofile_name FROM usrProfiles
|
|
WHERE userprofile_id = " . (int)$id . " LIMIT 1";
|
|
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
return $queryRes[0]->userprofile_name;
|
|
}
|
|
|
|
/**
|
|
* @brief Autentifica al usuario con LDAP
|
|
* @return bool
|
|
*/
|
|
public function authUserLDAP() {
|
|
if (SP_Config::getValue('ldapenabled', 0) === 0 || !SP_Util::ldapIsAvailable()) {
|
|
return FALSE;
|
|
}
|
|
|
|
$searchBase = SP_Config::getValue('ldapbase');
|
|
$ldapserver = SP_Config::getValue('ldapserver');
|
|
$ldapgroup = SP_Config::getValue('ldapgroup');
|
|
$bindDN = SP_Config::getValue('ldapbinduser');
|
|
$bindPass = SP_Config::getValue('ldapbindpass');
|
|
|
|
if (!$searchBase || !$ldapserver || !$ldapgroup || !$bindDN || !$bindPass) {
|
|
return FALSE;
|
|
}
|
|
|
|
$ldapAccess = FALSE;
|
|
$message['action'] = __FUNCTION__;
|
|
|
|
// Conexión al servidor LDAP
|
|
if (!$ldapConn = @ldap_connect($ldapserver)) {
|
|
$message['text'][] = _('No es posible conectar con el servidor de LDAP') . " '" . $ldapserver . "'";
|
|
$message['text'][] = 'LDAP ERROR: ' . ldap_error($ldapConn) . '(' . ldap_errno($ldapConn) . ')';
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
return FALSE;
|
|
}
|
|
|
|
@ldap_set_option($ldapConn, LDAP_OPT_NETWORK_TIMEOUT, 10); // Set timeout
|
|
@ldap_set_option($ldapConn, LDAP_OPT_PROTOCOL_VERSION, 3); // Set LDAP version
|
|
|
|
if (!@ldap_bind($ldapConn, $bindDN, $bindPass)) {
|
|
$message['text'][] = _('Error al conectar (bind)');
|
|
$message['text'][] = 'LDAP ERROR: ' . ldap_error($ldapConn) . '(' . ldap_errno($ldapConn) . ')';
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
return FALSE;
|
|
}
|
|
|
|
$filter = "(&(|(samaccountname=$this->userLogin)(cn=$this->userLogin))(|(objectClass=inetOrgPerson)(objectClass=person)))";
|
|
$filterAttr = array("dn", "displayname", "samaccountname", "mail", "memberof", "lockouttime", "fullname", "groupmembership", "mail");
|
|
|
|
$searchRes = @ldap_search($ldapConn, $searchBase, $filter, $filterAttr);
|
|
|
|
if (!$searchRes) {
|
|
$message['text'][] = _('Error al buscar el DN del usuario');
|
|
$message['text'][] = 'LDAP ERROR: ' . ldap_error($ldapConn) . '(' . ldap_errno($ldapConn) . ')';
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
return FALSE;
|
|
}
|
|
|
|
if (@ldap_count_entries($ldapConn, $searchRes) === 1) {
|
|
$searchUser = @ldap_get_entries($ldapConn, $searchRes);
|
|
|
|
if (!$searchUser) {
|
|
$message['text'][] = _('Error al localizar el usuario en LDAP');
|
|
$message['text'][] = 'LDAP ERROR: ' . ldap_error($ldapConn) . '(' . ldap_errno($ldapConn) . ')';
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
return FALSE;
|
|
}
|
|
|
|
$userDN = $searchUser[0]["dn"];
|
|
}
|
|
|
|
if (@ldap_bind($ldapConn, $userDN, $this->userPass)) {
|
|
@ldap_unbind($ldapConn);
|
|
|
|
foreach ($searchUser as $entryValue) {
|
|
if (is_array($entryValue)) {
|
|
foreach ($entryValue as $entryAttr => $attrValue) {
|
|
if (is_array($attrValue)) {
|
|
if ($entryAttr == "groupmembership" || $entryAttr == "memberof") {
|
|
foreach ($attrValue as $group) {
|
|
if (is_int($group)) {
|
|
continue;
|
|
}
|
|
|
|
preg_match('/^cn=([\w\s-]+),.*/i', $group, $groupName);
|
|
|
|
// Comprobamos que el usuario está en el grupo indicado
|
|
if ($groupName[1] == $ldapgroup || $group == $ldapgroup) {
|
|
$ldapAccess = TRUE;
|
|
break;
|
|
}
|
|
}
|
|
} elseif ($entryAttr == "displayname" | $entryAttr == "fullname") {
|
|
$this->userName = $attrValue[0];
|
|
} elseif ($entryAttr == "mail") {
|
|
$this->userEmail = $attrValue[0];
|
|
} elseif ($entryAttr == "lockouttime") {
|
|
if ($attrValue[0] > 0)
|
|
return FALSE;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} else {
|
|
$message['text'][] = _('Error al conectar con el usuario');
|
|
$message['text'][] = 'LDAP ERROR: ' . ldap_error($ldapConn) . '(' . ldap_errno($ldapConn) . ')';
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
return ldap_errno($ldapConn);
|
|
}
|
|
|
|
return $ldapAccess;
|
|
}
|
|
|
|
/**
|
|
* @brief Comprueba la clave maestra del usuario
|
|
* @return bool
|
|
*/
|
|
public function checkUserMPass() {
|
|
$userMPass = $this->getUserMPass(TRUE);
|
|
|
|
if ($userMPass === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$configMPass = SP_Config::getConfigValue('masterPwd');
|
|
|
|
if ($configMPass === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
// Comprobamos el hash de la clave del usuario con la guardada
|
|
return SP_Crypt::checkHashPass($userMPass, $configMPass);
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar si el usuario tiene actualizada la clave maestra actual
|
|
* @return bool
|
|
*/
|
|
public static function checkUserUpdateMPass($login = '') {
|
|
if (isset($login)) {
|
|
$userId = self::getUserIdByLogin($login);
|
|
}
|
|
|
|
if (isset($_SESSION["uid"])) {
|
|
$userId = $_SESSION["uid"];
|
|
}
|
|
|
|
if (!isset($userId)) {
|
|
return FALSE;
|
|
}
|
|
|
|
$configMPassTime = SP_Config::getConfigValue('lastupdatempass');
|
|
|
|
if ($configMPassTime === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
$query = 'SELECT user_lastUpdateMPass FROM usrData WHERE user_id = ' . $userId;
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
foreach ($queryRes as $userData) {
|
|
$userLastUpdateMPass = $userData->user_lastUpdateMPass;
|
|
}
|
|
|
|
if ($configMPassTime > $userLastUpdateMPass) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Actualizar la clave maestra del usuario en la BBDD
|
|
* @return bool
|
|
*/
|
|
public function updateUserMPass($masterPwd) {
|
|
$configMPass = SP_Config::getConfigValue('masterPwd');
|
|
|
|
if (!$configMPass) {
|
|
return FALSE;
|
|
}
|
|
|
|
if (SP_Crypt::checkHashPass($masterPwd, $configMPass)) {
|
|
$crypt = new SP_Crypt;
|
|
$strUserMPwd = $crypt->mkCustomMPassEncrypt($this->getCypherPass(), $masterPwd);
|
|
|
|
if (!$strUserMPwd) {
|
|
return FALSE;
|
|
}
|
|
} else {
|
|
return FALSE;
|
|
}
|
|
|
|
$query = "UPDATE usrData SET
|
|
user_mPass = '".DB::escape($strUserMPwd[0])."',
|
|
user_mIV = '".DB::escape($strUserMPwd[1])."',
|
|
user_lastUpdateMPass = UNIX_TIMESTAMP()
|
|
WHERE user_id = " . (int) $this->userId . " LIMIT 1";
|
|
|
|
if (DB::doQuery($query, __FUNCTION__) === FALSE) {
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener una clave de cifrado basada en la clave del usuario y un salt
|
|
* @return string con la clave de cifrado
|
|
*/
|
|
private function getCypherPass(){
|
|
$configSalt = SP_Config::getConfigValue('passwordsalt');
|
|
$cypherPass = substr(sha1($configSalt.$this->userPass), 0, 32);
|
|
|
|
return $cypherPass;
|
|
}
|
|
|
|
/**
|
|
* @brief Desencriptar la clave maestra del usuario para la sesión
|
|
* @param bool $showPass opcional, para devolver la clave desencriptada
|
|
* @return bool|string Devuelve bool se hay error o string si se devuelve la clave
|
|
*/
|
|
public function getUserMPass($showPass = FALSE) {
|
|
$query = "SELECT user_mPass, user_mIV "
|
|
. "FROM usrData "
|
|
. "WHERE user_id = " . (int) $this->userId ." LIMIT 1";
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
$userData = $queryRes[0];
|
|
|
|
if ($userData->user_mPass && $userData->user_mIV) {
|
|
$crypt = new SP_Crypt;
|
|
$clearMasterPass = $crypt->decrypt($userData->user_mPass, $this->getCypherPass(), $userData->user_mIV);
|
|
|
|
if (!$clearMasterPass) {
|
|
return FALSE;
|
|
}
|
|
|
|
if ($showPass == TRUE) {
|
|
return $clearMasterPass;
|
|
} else {
|
|
$_SESSION['mPassPwd'] = substr(sha1(uniqid()),0,32);
|
|
|
|
$sessionMasterPass = $crypt->mkCustomMPassEncrypt($_SESSION["mPassPwd"], $clearMasterPass);
|
|
|
|
$_SESSION['mPass'] = $sessionMasterPass[0];
|
|
$_SESSION['mPassIV'] = $sessionMasterPass[1];
|
|
return TRUE;
|
|
}
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
/**
|
|
* @brief Obtener el perfil de un usuario
|
|
* @return object con los permisos del perfil del usuario
|
|
*/
|
|
public static function getUserProfile() {
|
|
$userId = SP_Common::parseParams('s', 'uid', 0);
|
|
|
|
if ( ! $userId ){
|
|
return FALSE;
|
|
}
|
|
|
|
$query = "SELECT user_profileId,
|
|
userProfile_pView,
|
|
userProfile_pViewPass,
|
|
userProfile_pViewHistory,
|
|
userProfile_pEdit,
|
|
userProfile_pEditPass,
|
|
userProfile_pAdd,
|
|
userProfile_pDelete,
|
|
userProfile_pFiles,
|
|
userProfile_pConfigMenu,
|
|
userProfile_pConfig,
|
|
userProfile_pConfigCategories,
|
|
userProfile_pConfigMasterPass,
|
|
userProfile_pConfigBackup,
|
|
userProfile_pUsersMenu,
|
|
userProfile_pUsers,
|
|
userProfile_pGroups,
|
|
userProfile_pProfiles,
|
|
userProfile_pEventlog
|
|
FROM usrData
|
|
JOIN usrProfiles ON userProfile_Id = user_profileId
|
|
WHERE user_id = " . $userId . " LIMIT 1";
|
|
|
|
$queryRes = DB::getResults($query, __FUNCTION__);
|
|
|
|
if ($queryRes === FALSE || !is_array($queryRes)) {
|
|
return FALSE;
|
|
}
|
|
|
|
return $queryRes[0];
|
|
}
|
|
|
|
/**
|
|
* @brief Comprobar los permisos de acceso del usuario a los módulos de la aplicación
|
|
* @param string $strAction con el nombre de la acción
|
|
* @param int $userId opcional, con el Id del usuario
|
|
* @return bool
|
|
*
|
|
* Esta función comprueba los permisos del usuario para realizar una acción.
|
|
* Si los permisos ya han sido obtenidos desde la BBDD, se utiliza el objeto creado
|
|
* en la variable de sesión.
|
|
*/
|
|
public static function checkUserAccess($strAction, $userId = 0) {
|
|
// Comprobamos si la cache de permisos está inicializada
|
|
if (!isset($_SESSION["usrprofile"]) || !is_object($_SESSION["usrprofile"])) {
|
|
return FALSE;
|
|
}
|
|
|
|
$blnUIsAdminApp = $_SESSION["uisadminapp"];
|
|
$blnUIsAdminAcc = $_SESSION["uisadminacc"];
|
|
$profile = $_SESSION["usrprofile"];
|
|
|
|
switch ($strAction) {
|
|
case "accview":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || $profile->userProfile_pView );
|
|
break;
|
|
case "accviewpass":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || $profile->userProfile_pViewPass );
|
|
break;
|
|
case "accviewhistory":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || $profile->userProfile_pViewHistory );
|
|
break;
|
|
case "accedit":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || $profile->userProfile_pEdit );
|
|
break;
|
|
case "acceditpass":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || $profile->userProfile_pEditPass || $userId == $_SESSION["uid"] );
|
|
break;
|
|
case "accnew":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || $profile->userProfile_pAdd );
|
|
break;
|
|
case "acccopy":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || ($profile->userProfile_pAdd && $profile->userProfile_pView) );
|
|
break;
|
|
case "accdelete":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || $profile->userProfile_pDelete );
|
|
break;
|
|
case "accfiles":
|
|
return ( $blnUIsAdminApp || $blnUIsAdminAcc || $profile->userProfile_pFiles );
|
|
break;
|
|
case "configmenu":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pConfigMenu );
|
|
break;
|
|
case "config":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pConfig );
|
|
break;
|
|
case "categories":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pConfigCategories );
|
|
break;
|
|
case "masterpass":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pConfigMasterPass );
|
|
break;
|
|
case "backup":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pConfigBackup );
|
|
break;
|
|
case "usersmenu":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pUsersMenu );
|
|
break;
|
|
case "users":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pUsers );
|
|
break;
|
|
case "groups":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pGroups );
|
|
break;
|
|
case "profiles":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pProfiles );
|
|
break;
|
|
case "eventlog":
|
|
return ( $blnUIsAdminApp || $profile->userProfile_pEventlog );
|
|
break;
|
|
}
|
|
|
|
$message['action'][] = __FUNCTION__;
|
|
$message['text'][] = _('Denegado acceso a') . " '" . $strAction . "'";
|
|
|
|
SP_Common::wrLogInfo($message);
|
|
|
|
return FALSE;
|
|
}
|
|
} |