tasks/includes/t-basics/dao_users.inc.php

118 lines
2.7 KiB
PHP
Raw Normal View History

<?php
class Dao_Users
extends DAO
{
private function hashPassword( $password , $salt , $iterations )
{
$hash = $password;
$salt = trim( $salt );
do {
$hash = sha1( "$salt$hash$salt" );
$iterations --;
} while ( $iterations > 0 );
return $hash;
}
private function hashNewPassword( $password )
{
$iterations = rand( 130 , 160 );
$randSource = array( );
for ( $i = 0 ; $i < 26 ; $i ++ ) {
array_push( $randSource , chr( $i + ord( 'a' ) ) );
array_push( $randSource , chr( $i + ord( 'A' ) ) );
if ( $i < 10 ) {
array_push( $randSource , chr( $i + 48 ) );
}
}
shuffle( $randSource );
$salt = join( '' , array_splice( $randSource , 0 , 4 ) );
$hash = $this->hashPassword( $password , $salt , $iterations );
return array( $iterations , $salt , $hash );
}
public function getUsers( )
{
return $this->query(
'SELECT user_id , user_display_name , user_email '
. 'FROM users '
. 'ORDER BY LOWER( user_email )' )->execute( );
}
public function getUserById( $uid )
{
$query = $this->query( 'SELECT * FROM users_view WHERE user_id = $1' );
$results = $query->execute( $uid );
if ( empty( $results ) ) {
return null;
}
return array_shift( $results );
}
public function getUser( $email )
{
$query = $this->query( 'SELECT * FROM users_view WHERE user_email = LOWER( $1 )' );
$results = $query->execute( $email );
if ( empty( $results ) ) {
return null;
}
return array_shift( $results );
}
public function checkLogin( $email , $password )
{
$userData = $this->getUser( $email );
if ( $userData != null ) {
$hashed = $this->hashPassword( $password ,
$userData->user_salt ,
$userData->user_iterations );
if ( $hashed === $userData->user_hash ) {
return $userData;
}
}
return null;
}
public function addUser( $email , $password , $name )
{
list( $iterations , $salt , $hash ) = $this->hashNewPassword( $password );
$result = $this->query( 'SELECT users_add( $1 , $2 , $3 , $4 , $5 ) AS error' )
->execute( $email , $salt , $iterations , $hash , $name );
return $result[ 0 ]->error;
}
public function hasUsers( )
{
$result = $this->query( 'SELECT COUNT(*) AS n_users FROM users' )->execute( );
return $result[0]->n_users > 0;
}
public function modify( $id , $email , $name )
{
$result = $this->query( 'SELECT users_edit( $1 , $2 , $3 ) AS error'
)->execute( $id , $email , $name );
return $result[0]->error;
}
public function setPassword( $id , $password )
{
list( $iterations , $salt , $hash ) = $this->hashNewPassword( $password );
$this->query(
'UPDATE users '
. 'SET user_iterations = $1 , user_salt = $2 , user_hash = $3 '
. 'WHERE user_id = $4'
)->execute( $iterations , $salt , $hash , $id );
}
}