wMind/mind3rd/API/classes/MindUser.php

<?php
/**
 * This file is part of TheWebMind 3rd generation.
 * 
 * @author Felipe Nascimento de Moura <felipenmoura@gmail.com>
 * @license licenses/mind3rd.license
 */
/**
 * Class to deal with User's structure.
 *
 * @author Felipe Nascimento de Moura <felipenmoura@gmail.com>
 */
class MindUser
{
    static protected $dbConn          = false;
    static protected $validAttrs      = Array('name', 'email', 'pwd', 'status', 'type');
    static protected $adminValidAttrs = Array('status', 'type');
    
    protected static function hash($pwd)
    {
        return sha1($pwd);
    }
    
    /**
     * Sets a property of the currend user.
     * 
     * If admin, you can pass the user to be changed.
     * This method actually changes AND PERSISTS the change to the
     * user's base.
     * 
     * @param String $attr
     * @param Mixed $value
     * @param Integer $user
     * @return boolean
     */
    public static function set($attr, $value, $user=false)
    {
        if(\in_array($attr, self::$adminValidAttrs) || $user)
        {
            if(!\MindUser::isAdmin())
            {
                \Mind::write('mustBeAdmin');
                return false;
            }
        }
        if(!\in_array($attr, self::$validAttrs)){
            \Mind::write('invalidCreateParams');
            return false;
        }
        
        if($attr == 'pwd')
            $value= self::hash($value);
        
        $value= (is_string($value))? "'".$value."'": $value;
        
        $db= self::getDBConn();
        if($user && !is_numeric($user)){
            $user= \MindUser::getUserByLogin($user);
            if(!$user){
                \MindSpeaker::write('auth_fail');
                return false;
            }
            $user= $user['pk_user'];
        }
        $user= $user? $user: $_SESSION['pk_user'];
        $qr= "UPDATE user set ".$attr."= ".$value.
             "WHERE pk_user=".$user;
        
        $db->execute($qr);
        if($attr == 'pwd')
            echo "\n";
    }
    
    /**
     * Verifies if there is a user autenticated.
     * @return boolean
     */
    public static function isIn()
    {
        return isset($_SESSION['pk_user']);
    }
    
    /**
     * Retrieves if the currently logged user is an administrator.
     * @return boolean
     */
    public static function isAdmin()
    {
        return isset($_SESSION['pk_user']) && $_SESSION['type'] == 'A';
    }
    
    protected static function getDBConn()
    {
        if(!self::$dbConn)
            self::$dbConn= new \MindDB();
        return self::$dbConn;
    }
    
    /**
     * Retrieves the user details based on the login.
     * 
     * This method DEMANDS the current user to be admin.
     * 
     * @param String $login
     * @return UserObject Or false if not admin
     */
    public static function getUserByLogin($login){
        if(!\MindUser::isAdmin()){
            \Mind::write('mustBeAdmin');
            return false;
        }
            
        $db= self::getDBConn();
        $user= false;
        $usrs= $db->query("SELECT * from user where login = '".addslashes($login)."'");
        foreach($usrs as $k=>$usr)
        {
            $user= $usr;
            break;
        }
        return $user;
    }
    
    /**
     * Retrieves the list of users.
     * @param boolean $detailed
     * @return mixed
     */
    public static function listUsers($detailed=false, $proj= false)
    {
        $db= self::getDBConn();
        $det= $detailed? ' * ': 'login';
        $qr= 'SELECT '.$det.' FROM user';
        if($proj)
            $qr.= ", project_user WHERE pk_user = fk_user and fk_project= ".((int)$proj);
        
        $usrs= $db->query($qr);
        
        return $usrs;
    }
}