nephthys_profile.php

<?php

/***************************************************************************
 *
 * Nephthys - file sharing management
 * Copyright (c) by Andreas Unterkircher, unki@netshadow.at
 *
 *  This file is part of Nephthys.
 *
 *  Nephthys is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation, either version 3 of the License, or
 *  (at your option) any later version.
 *
 *  Nephthys is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with Nephthys. If not, see <http://www.gnu.org/licenses/>.
 *
 ***************************************************************************/

class NEPHTHYS_PROFILE {

   private $db;
   private $parent;
   private $tmpl;

   /**
    * NEPHTHYS_PROFILE constructor
    *
    * Initialize the NEPHTHYS_PROFILE class
    */
   public function __construct()
   {
      global $nephthys;
      $this->parent =& $nephthys;
      $this->db =& $nephthys->db;
      $this->tmpl =& $nephthys->tmpl;

   } // __construct()
  
   /* interface output */
   public function show()
   {
      if(!$this->parent->is_logged_in()) {
         $this->parent->_error($this->parent->_("##MANAGE_USERS##") ." - ". $this->parent->_("##NOT_ALLOWED##"));
         return 0;
      }

      if(!isset($_GET['mode'])) 
         $_GET['mode'] = "show";

      switch($_GET['mode']) {
         default:
         case 'edit':
            return $this->showEdit();
            break;
      }

   } // show()

   /**
    * display interface to edit profile settings
    */
   private function showEdit()
   {
      /* If authentication is enabled, check permissions */
      if(!$this->parent->is_logged_in()) {
         $this->parent->_error($this->parent->_("##MANAGE_USERS##") ." - ". $this->parent->_("##NOT_ALLOWED##"));
         return 0;
      }

      $user = $this->db->db_fetchSingleRow("
         SELECT *
         FROM nephthys_users
         WHERE
            user_idx='". $_SESSION['login_idx'] ."'
      ");

      $this->tmpl->assign('user_idx', $_SESSION['login_idx']);
      $this->tmpl->assign('user_name', $this->parent->unescape($user->user_name));
      $this->tmpl->assign('user_full_name', $this->parent->unescape($user->user_full_name));
      $this->tmpl->assign('user_email', $this->parent->unescape($user->user_email));
      $this->tmpl->assign('user_default_expire', $user->user_default_expire);
      $this->tmpl->assign('user_auto_created', $user->user_auto_created);
      $this->tmpl->assign('user_deny_chpwd', $user->user_deny_chpwd);
      $this->tmpl->assign('user_language', $user->user_language);

      return $this->tmpl->fetch("profile.tpl");

   } // showEdit()
     
   /** 
    * store user values
    */
   public function store()
   {
      if($this->parent->check_privileges('user') && isset($_POST['user_name'])) {
         return $this->parent->_("##FAILURE_CHANGE_LOGIN##");
      }
      if($this->parent->check_privileges('user') &&
         !$this->parent->is_auto_created($_SESSION['login_idx'])
         && isset($_POST['user_email'])) {
         return $this->parent->_("##FAILURE_CHANGE_EMAIL##");
      }

      if(!$this->parent->check_privileges('user') && (!isset($_POST['user_name']) ||
         empty($_POST['user_name']))) {
         return $this->parent->_("##FAILURE_ENTER_USERNAME##");
      }
      if(!$this->parent->is_deny_chpwd($_SESSION['login_idx']) && empty($_POST['user_pass1'])) {
         return $this->parent->_("##FAILURE_EMPTY_PASSWORD##");
      }
      /* it's not a must that the password needs to be available, as
         the user may not have the right to change its Nephthys password.
      */
      if(isset($_POST['user_pass1']) && isset($_POST['user_pass2']) &&
         $_POST['user_pass1'] != $_POST['user_pass2']) {
         return $this->parent->_("##FAILURE_PASSWORD_NOT_MATCH##");
      }

      /* user-privileged are not allowed to change their user-names */
      if(!$this->parent->check_privileges('user')) {

         $sth = $this->db->db_prepare("
            UPDATE nephthys_users
            SET
               user_name=?
            WHERE
               user_idx=?
         ");

         $this->db->db_execute($sth, array(
            $_POST['user_name'],
            $_POST['user_idx'],
         ));
      }

      /* handling email-address update. only privileged- or auto-created users
         are allowed to change their email address. Manually created users are
         not permitted to change their email address.
      */
      if(!$this->parent->check_privileges('user') ||
         $this->parent->is_auto_created($_SESSION['login_idx'])) {

         if(!isset($_POST['user_email']) || empty($_POST['user_email'])) {
            return $this->parent->_("##FAILURE_ENTER_EMAIL##");
         }
         if(!$this->parent->validate_email($_POST['user_email'])) {
            return $this->parent->_("##FAILURE_ENTER_VALID_EMAIL##");
         }

         $sth = $this->db->db_prepare("
            UPDATE nephthys_users
            SET
               user_email=?
            WHERE
               user_idx=?
         ");

         $this->db->db_execute($sth, array(
            $_POST['user_email'],
            $_POST['user_idx'],
         ));
      }

      /* update user's full name, default-expiry and langugage time */
      $sth = $this->db->db_prepare("
         UPDATE nephthys_users
         SET
            user_full_name=?,
            user_default_expire=?,
            user_language=?
         WHERE
            user_idx=?
      ");

      $this->db->db_execute($sth, array(
         $_POST['user_full_name'],
         $_POST['user_default_expire'],
         $_POST['user_language'],
         $_POST['user_idx'],
      ));

      if(isset($_POST['user_pass1'])) {

         /* if a password change was requested, change it here. */
         if($_POST['user_pass1'] != " nochangeMS " &&
            !$this->parent->is_deny_chpwd($_SESSION['login_idx'])) {

            $sth = $this->db->db_prepare("
               UPDATE nephthys_users
               SET
                  user_pass=?
               WHERE
                  user_idx=?
            ");

            $this->db->db_execute($sth, array(
               sha1($_POST['user_pass1']),
               $_POST['user_idx'],
            ));
         }
      }
		  
      return "ok";

   } // store()

} // class NEPHTHYS_PROFILE

// vim: set filetype=php expandtab softtabstop=3 tabstop=3 shiftwidth=3 autoindent smartindent:
?>