Secure PHP Development- P42 ppsx

Listing 6-2 (Continued)
if ($status)
{
$this->show_status($this->getMessage(‘USER_MODIFY_SUCCESSFUL’),
$USERMNGR_MNGR);
} else {
$this->show_status($this->getMessage(‘USER_MODIFY_FAILED’),
$USERMNGR_MNGR);
}
}
function deleteUser()
{
global $USERMNGR_MNGR,
$ROOT_USER;
$user_id = $this->getRequestField(‘user_id’);
$this->emptyError($user_id, ‘USER_ID_MISSING’);
$userObj = new User($this->dbi, $user_id);
$userObj->getUserInfo();
$email = $userObj->getEMAIL();
if (! strcmp($email, $ROOT_USER))
{
$this->alert(‘USER_DELETE_NOT_ALLOWED’);
} else {
$status = $userObj->deleteUser();
}
if ($status)
{
$this->show_status($this->getMessage(‘USER_DELETE_SUCCESSFUL’),
$USERMNGR_MNGR);
} else {
$this->show_status($this->getMessage(‘USER_DELETE_FAILED’),

$USERMNGR_MNGR);
}
}
176 Part II: Developing Intranet Solutions
09 549669 ch06.qxd 4/4/03 9:24 AM Page 176
function menu(&$t)
{
$userObj = new User($this->dbi);
$users = $userObj->getUserList();
$t->set_block(‘mainBlock’,’userBlock’, ‘ublock’);
while(list($uid, $email) = each($users))
{
$t->set_var( array(
‘USER_ID’ => $uid,
‘USER_NAME’ => $email,
)
);
$t->parse(‘ublock’, ‘userBlock’, true);
}
return TRUE;
}
function modify_screen(&$t)
{
global $DUMMY_PASSWD;
$user_id = $this->getRequestField(‘user_id’);
$userObj = new User($this->dbi, $user_id);
$status = $userObj->getUserInfo();
if (! $status)
{
$this->alert(‘USER_INFO_MISSING’);

} else {
$userType = $userObj->getTYPE();
}
Continued
Chapter 6: Central User Management System 177
09 549669 ch06.qxd 4/4/03 9:24 AM Page 177
Listing 6-2 (Continued)
$userTypes = $userObj->getUserTypeList();
$t->set_block(‘mainBlock’,’typeBlock’, ‘tblock’);
$chosen = ‘’;
while(list($tid, $typeName) = each($userTypes))
{
$chosen = ($tid == $userType) ? ‘selected’ : ‘’;
$t->set_var(
array(
‘TYPE_ID’ => $tid,
‘USER_TYPE’ => $typeName,
‘CHOSEN’ => $chosen
)
);
$t->parse(‘tblock’, ‘typeBlock’, true);
}
$fields = $userObj->getUserFieldList();
foreach ($fields as $f)
{
$t->set_var($f, null);
}
$activeON = ( $userObj->getACTIVE()) ? ‘checked’ : null;
$activeOFF = (!$userObj->getACTIVE()) ? ‘checked’ : null;
$t->set_var(array(

‘EMAIL’ => $userObj->getEMAIL(),
‘PASSWORD’ => $DUMMY_PASSWD,
‘ACTIVE_ON’ => $activeON,
‘ACTIVE_OFF’ => $activeOFF,
‘ACTION’ => ‘modify’,
‘USER_ID’ => $user_id
)
);
return TRUE;
}
178 Part II: Developing Intranet Solutions
09 549669 ch06.qxd 4/4/03 9:24 AM Page 178
function add_screen(&$t)
{
$userObj = new User($this->dbi);
$userTypes = $userObj->getUserTypeList();
$t->set_block(‘mainBlock’,’typeBlock’, ‘tblock’);
$chosen = ‘’;
while(list($tid, $typeName) = each($userTypes))
{
$t->set_var( array(
‘TYPE_ID’ => $tid,
‘USER_TYPE’ => $typeName,
‘CHOSEN’ => $chosen
)
);
$t->parse(‘tblock’, ‘typeBlock’, true);
}
$fields = $userObj->getUserFieldList();
foreach ($fields as $f)

{
$t->set_var($f, null);
}
$t->set_var(‘ACTIVE_ON’, ‘selected’);
$t->set_var(‘ACTIVE_OFF’, null);
$t->set_var(‘ACTION’, ‘add’);
return TRUE;
}
function checkPassword($pwd1, $pwd2)
{
global $MIN_PASSWORD_SIZE, $DUMMY_PASSWD;
$this->emptyError($pwd1, ‘PASSWORD1_MISSING’);
$this->emptyError($pwd2, ‘PASSWORD2_MISSING’);
Continued
Chapter 6: Central User Management System 179
09 549669 ch06.qxd 4/4/03 9:24 AM Page 179
Listing 6-2 (Continued)
if (strcmp($pwd1, $pwd2))
{
$this->alert(‘PASSWORD_MISMATCH’);
} else if (strlen($pwd1) < $MIN_PASSWORD_SIZE) {
$this->alert(‘INVALID_PASSWORD’);
}
}
function checkInput()
{
$username = $this->getRequestField(‘username’);
$password1 = $this->getRequestField(‘password1’);
$password2 = $this->getRequestField(‘password2’);
$user_type = $this->getRequestField(‘user_type’);

$this->emptyError($username, ‘USERNAME_MISSING’);
$this->emptyError($user_type, ‘USER_TYPE_MISSING’);
$this->checkPassword($password1, $password2);
}
function authorize()
{
global $ADMINISTRATIVE_USER;
$userObj = new User($this->dbi, $this->getUID());
$type = $userObj->getTYPE();
return ($type == $ADMINISTRATIVE_USER) ? TRUE : FALSE;
}
}//class
$SESSION_USERNAME = null;
$SESSION_USER_ID = null;
global $APP_DB_URL;
180 Part II: Developing Intranet Solutions
09 549669 ch06.qxd 4/4/03 9:24 AM Page 180