mirror of
https://github.com/nuxsmin/sysPass.git
synced 2026-03-03 07:04:07 +01:00
4d6104b839
* [ADD] Upgrade service. Work in progress. * [MOD] Context based session data. Added collection class to manage session properties. * [MOD] Code refactoring. * [MOD] Improved theme icons load by caching objects.
465 lines
13 KiB
PHP
465 lines
13 KiB
PHP
<?php
|
|
/**
|
|
* sysPass
|
|
*
|
|
* @author nuxsmin
|
|
* @link https://syspass.org
|
|
* @copyright 2012-2018, Rubén Domínguez nuxsmin@$syspass.org
|
|
*
|
|
* This file is part of sysPass.
|
|
*
|
|
* sysPass is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* sysPass is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with sysPass. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
namespace SP\Repositories\Account;
|
|
|
|
use SP\Account\AccountUtil;
|
|
use SP\Core\Exceptions\QueryException;
|
|
use SP\Core\Exceptions\SPException;
|
|
use SP\DataModel\AccountHistoryData;
|
|
use SP\DataModel\AccountPassData;
|
|
use SP\DataModel\ItemSearchData;
|
|
use SP\Repositories\Repository;
|
|
use SP\Repositories\RepositoryItemInterface;
|
|
use SP\Repositories\RepositoryItemTrait;
|
|
use SP\Services\Account\AccountPasswordRequest;
|
|
use SP\Storage\DbWrapper;
|
|
use SP\Storage\QueryData;
|
|
|
|
/**
|
|
* Class AccountHistoryRepository
|
|
*
|
|
* @package Services
|
|
*/
|
|
class AccountHistoryRepository extends Repository implements RepositoryItemInterface
|
|
{
|
|
use RepositoryItemTrait;
|
|
|
|
/**
|
|
* Obtiene el listado del histórico de una cuenta.
|
|
*
|
|
* @param $id
|
|
* @return array|false Con los registros con id como clave y fecha - usuario como valor
|
|
*/
|
|
public function getHistoryForAccount($id)
|
|
{
|
|
$query = /** @lang SQL */
|
|
'SELECT AH.id,
|
|
AH.dateEdit,
|
|
U1.login AS userAdd,
|
|
U2.login AS userEdit,
|
|
AH.dateAdd
|
|
FROM AccountHistory AH
|
|
INNER JOIN User U1 ON AH.userId = U1.id
|
|
LEFT JOIN User U2 ON AH.userEditId = U2.id
|
|
WHERE AH.accountId = ?
|
|
ORDER BY AH.id DESC';
|
|
|
|
$queryData = new QueryData();
|
|
$queryData->setQuery($query);
|
|
$queryData->addParam($id);
|
|
|
|
$items = [];
|
|
|
|
foreach (DbWrapper::getResultsArray($queryData, $this->db) as $history) {
|
|
// Comprobamos si la entrada en el historial es la primera (no tiene editor ni fecha de edición)
|
|
if (empty($history->dateEdit) || $history->dateEdit === '0000-00-00 00:00:00') {
|
|
$date = $history->dateAdd . ' - ' . $history->userAdd;
|
|
} else {
|
|
$date = $history->dateEdit . ' - ' . $history->userEdit;
|
|
}
|
|
|
|
$items[$history->id] = $date;
|
|
}
|
|
|
|
return $items;
|
|
}
|
|
|
|
/**
|
|
* @param $id
|
|
* @return AccountPassData
|
|
*/
|
|
public function getPasswordForHistoryId($id)
|
|
{
|
|
$queryData = new QueryData();
|
|
$queryData->setMapClassName(AccountPassData::class);
|
|
$queryData->setLimit(1);
|
|
|
|
$queryData->setSelect('AH.id, AH.name, AH.login, AH.pass, AH.key, AH.parentId');
|
|
$queryData->setFrom('AccountHistory AH');
|
|
|
|
$queryWhere = AccountUtil::getAccountHistoryFilterUser($this->context);
|
|
$queryWhere[] = 'AH.id = ?';
|
|
$queryData->addParam($id);
|
|
|
|
$queryData->setWhere($queryWhere);
|
|
|
|
return DbWrapper::getResults($queryData, $this->db);
|
|
}
|
|
|
|
/**
|
|
* @param array $items array of ['id' => <int>, 'isDelete' => <bool>]
|
|
* @throws QueryException
|
|
* @throws \SP\Core\Exceptions\ConstraintException
|
|
*/
|
|
public function createBatch(array $items)
|
|
{
|
|
foreach ($items as $item) {
|
|
$this->create($item);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Crea una nueva cuenta en la BBDD
|
|
*
|
|
* @param array $itemData ['id' => <int>, 'isModify' => <bool>,'isDelete' => <bool>, 'masterPassHash' => <string>]
|
|
* @return bool
|
|
* @throws QueryException
|
|
* @throws \SP\Core\Exceptions\ConstraintException
|
|
*/
|
|
public function create($itemData)
|
|
{
|
|
$queryData = new QueryData();
|
|
$query = /** @lang SQL */
|
|
'INSERT INTO AccountHistory
|
|
(accountId,
|
|
categoryId,
|
|
clientId,
|
|
name,
|
|
login,
|
|
url,
|
|
pass,
|
|
`key`,
|
|
notes,
|
|
countView,
|
|
countDecrypt,
|
|
dateAdd,
|
|
dateEdit,
|
|
userId,
|
|
userGroupId,
|
|
userEditId,
|
|
otherUserEdit,
|
|
otherUserGroupEdit,
|
|
isPrivate,
|
|
isPrivateGroup,
|
|
isModify,
|
|
isDeleted,
|
|
mPassHash)
|
|
SELECT id,
|
|
categoryId,
|
|
clientId,
|
|
name,
|
|
login,
|
|
url,
|
|
pass,
|
|
`key`,
|
|
notes,
|
|
countView,
|
|
countDecrypt,
|
|
dateAdd,
|
|
dateEdit,
|
|
userId,
|
|
userGroupId,
|
|
userEditId,
|
|
otherUserEdit,
|
|
otherUserGroupEdit,
|
|
isPrivate,
|
|
isPrivateGroup,
|
|
?,?,? FROM Account WHERE id = ?';
|
|
|
|
$queryData->setQuery($query);
|
|
$queryData->addParam($itemData['isModify']);
|
|
$queryData->addParam($itemData['isDelete']);
|
|
$queryData->addParam($itemData['masterPassHash']);
|
|
$queryData->addParam($itemData['id']);
|
|
$queryData->setOnErrorMessage(__u('Error al actualizar el historial'));
|
|
|
|
return DbWrapper::getQuery($queryData, $this->db);
|
|
}
|
|
|
|
/**
|
|
* @param array $ids
|
|
* @throws SPException
|
|
*/
|
|
public function deleteBatch(array $ids)
|
|
{
|
|
foreach ($ids as $id) {
|
|
$this->delete($id);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Elimina los datos de una cuenta en la BBDD.
|
|
*
|
|
* @param array|int $id
|
|
* @return bool Los ids de las cuentas eliminadas
|
|
* @throws SPException
|
|
*/
|
|
public function delete($id)
|
|
{
|
|
$query = /** @lang SQL */
|
|
'DELETE FROM AccountHistory WHERE id = ? LIMIT 1';
|
|
|
|
$queryData = new QueryData();
|
|
$queryData->setQuery($query);
|
|
$queryData->addParam($id);
|
|
$queryData->setOnErrorMessage(__u('Error al eliminar la cuenta'));
|
|
|
|
DbWrapper::getQuery($queryData, $this->db);
|
|
|
|
return $queryData->getQueryNumRows() === 1;
|
|
}
|
|
|
|
/**
|
|
* Updates an item
|
|
*
|
|
* @param mixed $itemData
|
|
* @return mixed
|
|
*/
|
|
public function update($itemData)
|
|
{
|
|
throw new \RuntimeException('Not implemented');
|
|
}
|
|
|
|
/**
|
|
* Returns the item for given id
|
|
*
|
|
* @param int $id
|
|
* @return AccountHistoryData
|
|
* @throws SPException
|
|
*/
|
|
public function getById($id)
|
|
{
|
|
$query = /** @lang SQL */
|
|
'SELECT AH.id,
|
|
AH.accountId,
|
|
AH.clientId,
|
|
AH.categoryId,
|
|
AH.name,
|
|
AH.login,
|
|
AH.url,
|
|
AH.pass,
|
|
AH.key,
|
|
AH.notes,
|
|
AH.countView,
|
|
AH.countDecrypt,
|
|
AH.dateAdd,
|
|
AH.dateEdit,
|
|
AH.userId,
|
|
AH.userGroupId,
|
|
AH.userEditId,
|
|
AH.isModify,
|
|
AH.isDeleted,
|
|
AH.otherUserEdit,
|
|
AH.otherUserGroupEdit,
|
|
AH.isPrivate,
|
|
AH.isPrivateGroup,
|
|
U1.name AS userName,
|
|
U1.login AS userLogin,
|
|
UG.name AS userGroupName,
|
|
U2.name AS userEditName,
|
|
U2.login AS userEditLogin
|
|
FROM AccountHistory AH
|
|
INNER JOIN Category C ON AH.categoryId = C.id
|
|
INNER JOIN Client C2 ON AH.clientId = C2.id
|
|
INNER JOIN UserGroup UG ON AH.userGroupId = UG.id
|
|
INNER JOIN User U1 ON AH.userId = U1.id
|
|
LEFT JOIN User U2 ON AH.userEditId = U2.id
|
|
WHERE AH.id = ? LIMIT 1';
|
|
|
|
$queryData = new QueryData();
|
|
$queryData->setQuery($query);
|
|
$queryData->setMapClassName(AccountHistoryData::class);
|
|
$queryData->addParam($id);
|
|
|
|
$queryRes = DbWrapper::getResults($queryData, $this->db);
|
|
|
|
if ($queryRes === false) {
|
|
throw new SPException(__u('No se pudieron obtener los datos de la cuenta'), SPException::CRITICAL);
|
|
}
|
|
|
|
return $queryRes;
|
|
}
|
|
|
|
/**
|
|
* Returns all the items
|
|
*
|
|
* @return array
|
|
*/
|
|
public function getAll()
|
|
{
|
|
$query = /** @lang SQL */
|
|
'SELECT AH.id,
|
|
AH.dateEdit,
|
|
AH.dateAdd,
|
|
U1.login AS userAdd,
|
|
U2.login AS userEdit
|
|
FROM AccountHistory AH
|
|
INNER JOIN User U1 ON AH.userId = U1.id
|
|
LEFT JOIN User U2 ON AH.userEditId = U2.id
|
|
ORDER BY AH.id DESC';
|
|
|
|
$queryData = new QueryData();
|
|
$queryData->setQuery($query);
|
|
|
|
$items = [];
|
|
|
|
foreach (DbWrapper::getResultsArray($queryData, $this->db) as $history) {
|
|
// Comprobamos si la entrada en el historial es la primera (no tiene editor ni fecha de edición)
|
|
if (empty($history->dateEdit) || $history->dateEdit === '0000-00-00 00:00:00') {
|
|
$date = $history->dateAdd . ' - ' . $history->userAdd;
|
|
} else {
|
|
$date = $history->dateEdit . ' - ' . $history->userEdit;
|
|
}
|
|
|
|
$items[$history->id] = $date;
|
|
}
|
|
|
|
return $items;
|
|
}
|
|
|
|
/**
|
|
* Returns all the items for given ids
|
|
*
|
|
* @param array $ids
|
|
* @return void
|
|
*/
|
|
public function getByIdBatch(array $ids)
|
|
{
|
|
throw new \RuntimeException('Not implemented');
|
|
}
|
|
|
|
/**
|
|
* Deletes all the items for given ids
|
|
*
|
|
* @param array $ids
|
|
* @return void
|
|
*/
|
|
public function deleteByIdBatch(array $ids)
|
|
{
|
|
throw new \RuntimeException('Not implemented');
|
|
}
|
|
|
|
/**
|
|
* Checks whether the item is in use or not
|
|
*
|
|
* @param $id int
|
|
* @return void
|
|
*/
|
|
public function checkInUse($id)
|
|
{
|
|
throw new \RuntimeException('Not implemented');
|
|
}
|
|
|
|
/**
|
|
* Checks whether the item is duplicated on updating
|
|
*
|
|
* @param mixed $itemData
|
|
* @return void
|
|
*/
|
|
public function checkDuplicatedOnUpdate($itemData)
|
|
{
|
|
throw new \RuntimeException('Not implemented');
|
|
}
|
|
|
|
/**
|
|
* Checks whether the item is duplicated on adding
|
|
*
|
|
* @param mixed $itemData
|
|
* @return void
|
|
*/
|
|
public function checkDuplicatedOnAdd($itemData)
|
|
{
|
|
throw new \RuntimeException('Not implemented');
|
|
}
|
|
|
|
/**
|
|
* Searches for items by a given filter
|
|
*
|
|
* @param ItemSearchData $SearchData
|
|
* @return mixed
|
|
*/
|
|
public function search(ItemSearchData $SearchData)
|
|
{
|
|
$Data = new QueryData();
|
|
$Data->setSelect('AH.id, AH.name, C.name as clientName, IFNULL(dateEdit,dateAdd) as date, isModify, isDeleted');
|
|
$Data->setFrom('AccountHistory AH INNER JOIN Client C ON clientId = C.id');
|
|
$Data->setOrder('name, C.name, id DESC');
|
|
|
|
if ($SearchData->getSeachString() !== '') {
|
|
$Data->setWhere('name LIKE ? OR C.name LIKE ?');
|
|
|
|
$search = '%' . $SearchData->getSeachString() . '%';
|
|
$Data->addParam($search);
|
|
$Data->addParam($search);
|
|
}
|
|
|
|
$Data->setLimit('?,?');
|
|
$Data->addParam($SearchData->getLimitStart());
|
|
$Data->addParam($SearchData->getLimitCount());
|
|
|
|
DbWrapper::setFullRowCount();
|
|
|
|
$queryRes = DbWrapper::getResultsArray($Data, $this->db);
|
|
|
|
$queryRes['count'] = $Data->getQueryNumRows();
|
|
|
|
return $queryRes;
|
|
}
|
|
|
|
/**
|
|
* Obtener los datos relativos a la clave de todas las cuentas.
|
|
*
|
|
* @return array Con los datos de la clave
|
|
*/
|
|
public function getAccountsPassData()
|
|
{
|
|
$query = /** @lang SQL */
|
|
'SELECT id, name, pass, `key`, mPassHash
|
|
FROM AccountHistory WHERE BIT_LENGTH(pass) > 0';
|
|
|
|
$queryData = new QueryData();
|
|
$queryData->setQuery($query);
|
|
|
|
return DbWrapper::getResultsArray($queryData, $this->db);
|
|
}
|
|
|
|
/**
|
|
* Actualiza la clave de una cuenta en la BBDD.
|
|
*
|
|
* @param AccountPasswordRequest $request
|
|
* @return bool
|
|
* @throws QueryException
|
|
* @throws \SP\Core\Exceptions\ConstraintException
|
|
*/
|
|
public function updatePassword(AccountPasswordRequest $request)
|
|
{
|
|
$query = /** @lang SQL */
|
|
'UPDATE AccountHistory SET
|
|
pass = ?,
|
|
`key` = ?,
|
|
mPassHash = ?
|
|
WHERE id = ?';
|
|
|
|
$Data = new QueryData();
|
|
$Data->setQuery($query);
|
|
$Data->addParam($request->pass);
|
|
$Data->addParam($request->key);
|
|
$Data->addParam($request->hash);
|
|
$Data->addParam($request->id);
|
|
$Data->setOnErrorMessage(__u('Error al actualizar la clave'));
|
|
|
|
return DbWrapper::getQuery($Data, $this->db);
|
|
}
|
|
} |