]> git.mxchange.org Git - friendica.git/blobdiff - src/Model/User.php
Refactor ExAuth for DICE
[friendica.git] / src / Model / User.php
index b0db51a11b0584a87fb8f949a73a38a58de6c436..c12ac31cdc694325327e0f0beecb91e514fd2fee 100644 (file)
@@ -21,7 +21,9 @@
 
 namespace Friendica\Model;
 
+use DivineOmega\DOFileCachePSR6\CacheItemPool;
 use DivineOmega\PasswordExposed;
+use ErrorException;
 use Exception;
 use Friendica\Content\Pager;
 use Friendica\Core\Hook;
@@ -33,7 +35,7 @@ use Friendica\Core\Worker;
 use Friendica\Database\DBA;
 use Friendica\DI;
 use Friendica\Model\TwoFactor\AppSpecificPassword;
-use Friendica\Network\HTTPException\InternalServerErrorException;
+use Friendica\Network\HTTPException;
 use Friendica\Object\Image;
 use Friendica\Util\Crypto;
 use Friendica\Util\DateTimeFormat;
@@ -41,6 +43,7 @@ use Friendica\Util\Images;
 use Friendica\Util\Network;
 use Friendica\Util\Strings;
 use Friendica\Worker\Delivery;
+use ImagickException;
 use LightOpenID;
 
 /**
@@ -195,66 +198,50 @@ class User
         */
        public static function getOwnerDataById($uid, $check_valid = true)
        {
-               $r = DBA::fetchFirst(
-                       "SELECT
-                       `contact`.*,
-                       `user`.`prvkey` AS `uprvkey`,
-                       `user`.`timezone`,
-                       `user`.`nickname`,
-                       `user`.`sprvkey`,
-                       `user`.`spubkey`,
-                       `user`.`page-flags`,
-                       `user`.`account-type`,
-                       `user`.`prvnets`,
-                       `user`.`account_removed`,
-                       `user`.`hidewall`
-                       FROM `contact`
-                       INNER JOIN `user`
-                               ON `user`.`uid` = `contact`.`uid`
-                       WHERE `contact`.`uid` = ?
-                       AND `contact`.`self`
-                       LIMIT 1",
-                       $uid
-               );
-               if (!DBA::isResult($r)) {
-                       return false;
+               $owner = DBA::selectFirst('owner-view', [], ['uid' => $uid]);
+               if (!DBA::isResult($owner)) {
+                       if (!DBA::exists('user', ['uid' => $uid]) || !$check_valid) {
+                               return false;
+                       }
+                       Contact::createSelfFromUserId($uid);
+                       $owner = self::getOwnerDataById($uid, false);
                }
 
-               if (empty($r['nickname'])) {
+               if (empty($owner['nickname'])) {
                        return false;
                }
 
                if (!$check_valid) {
-                       return $r;
+                       return $owner;
                }
 
                // Check if the returned data is valid, otherwise fix it. See issue #6122
 
                // Check for correct url and normalised nurl
-               $url = DI::baseUrl() . '/profile/' . $r['nickname'];
-               $repair = ($r['url'] != $url) || ($r['nurl'] != Strings::normaliseLink($r['url']));
+               $url = DI::baseUrl() . '/profile/' . $owner['nickname'];
+               $repair = ($owner['url'] != $url) || ($owner['nurl'] != Strings::normaliseLink($owner['url']));
 
                if (!$repair) {
                        // Check if "addr" is present and correct
-                       $addr = $r['nickname'] . '@' . substr(DI::baseUrl(), strpos(DI::baseUrl(), '://') + 3);
-                       $repair = ($addr != $r['addr']);
+                       $addr = $owner['nickname'] . '@' . substr(DI::baseUrl(), strpos(DI::baseUrl(), '://') + 3);
+                       $repair = ($addr != $owner['addr']);
                }
 
                if (!$repair) {
                        // Check if the avatar field is filled and the photo directs to the correct path
                        $avatar = Photo::selectFirst(['resource-id'], ['uid' => $uid, 'profile' => true]);
                        if (DBA::isResult($avatar)) {
-                               $repair = empty($r['avatar']) || !strpos($r['photo'], $avatar['resource-id']);
+                               $repair = empty($owner['avatar']) || !strpos($owner['photo'], $avatar['resource-id']);
                        }
                }
 
                if ($repair) {
                        Contact::updateSelfFromUserID($uid);
                        // Return the corrected data and avoid a loop
-                       $r = self::getOwnerDataById($uid, false);
+                       $owner = self::getOwnerDataById($uid, false);
                }
 
-               return $r;
+               return $owner;
        }
 
        /**
@@ -278,11 +265,11 @@ class User
        /**
         * Returns the default group for a given user and network
         *
-        * @param int $uid User id
+        * @param int    $uid     User id
         * @param string $network network name
         *
         * @return int group id
-        * @throws InternalServerErrorException
+        * @throws Exception
         */
        public static function getDefaultGroup($uid, $network = '')
        {
@@ -334,7 +321,8 @@ class User
         * @param string $password
         * @param bool   $third_party
         * @return int User Id if authentication is successful
-        * @throws Exception
+        * @throws HTTPException\ForbiddenException
+        * @throws HTTPException\NotFoundException
         */
        public static function getIdFromPasswordAuthentication($user_info, $password, $third_party = false)
        {
@@ -369,7 +357,7 @@ class User
                        return $user['uid'];
                }
 
-               throw new Exception(DI::l10n()->t('Login failed'));
+               throw new HTTPException\ForbiddenException(DI::l10n()->t('Login failed'));
        }
 
        /**
@@ -383,7 +371,7 @@ class User
         *
         * @param mixed $user_info
         * @return array
-        * @throws Exception
+        * @throws HTTPException\NotFoundException
         */
        private static function getAuthenticationInfo($user_info)
        {
@@ -427,7 +415,7 @@ class User
                        }
 
                        if (!DBA::isResult($user)) {
-                               throw new Exception(DI::l10n()->t('User not found'));
+                               throw new HTTPException\NotFoundException(DI::l10n()->t('User not found'));
                        }
                }
 
@@ -438,6 +426,7 @@ class User
         * Generates a human-readable random password
         *
         * @return string
+        * @throws Exception
         */
        public static function generateNewPassword()
        {
@@ -453,7 +442,7 @@ class User
         */
        public static function isPasswordExposed($password)
        {
-               $cache = new \DivineOmega\DOFileCachePSR6\CacheItemPool();
+               $cache = new CacheItemPool();
                $cache->changeConfig([
                        'cacheDirectory' => get_temppath() . '/password-exposed-cache/',
                ]);
@@ -462,7 +451,7 @@ class User
                        $passwordExposedChecker = new PasswordExposed\PasswordExposedChecker(null, $cache);
 
                        return $passwordExposedChecker->passwordExposed($password) === PasswordExposed\PasswordStatus::EXPOSED;
-               } catch (\Exception $e) {
+               } catch (Exception $e) {
                        Logger::error('Password Exposed Exception: ' . $e->getMessage(), [
                                'code' => $e->getCode(),
                                'file' => $e->getFile(),
@@ -559,7 +548,6 @@ class User
         *
         * @param string $nickname The nickname that should be checked
         * @return boolean True is the nickname is blocked on the node
-        * @throws InternalServerErrorException
         */
        public static function isNicknameBlocked($nickname)
        {
@@ -595,9 +583,9 @@ class User
         *
         * @param  array $data
         * @return array
-        * @throws \ErrorException
-        * @throws InternalServerErrorException
-        * @throws \ImagickException
+        * @throws ErrorException
+        * @throws HTTPException\InternalServerErrorException
+        * @throws ImagickException
         * @throws Exception
         */
        public static function create(array $data)
@@ -723,7 +711,7 @@ class User
 
                $nickname = $data['nickname'] = strtolower($nickname);
 
-               if (!preg_match('/^[a-z0-9][a-z0-9\_]*$/', $nickname)) {
+               if (!preg_match('/^[a-z0-9][a-z0-9_]*$/', $nickname)) {
                        throw new Exception(DI::l10n()->t('Your nickname can only contain a-z, 0-9 and _.'));
                }
 
@@ -839,9 +827,16 @@ class User
                        $photo_failure = false;
 
                        $filename = basename($photo);
-                       $img_str = Network::fetchUrl($photo, true);
-                       // guess mimetype from headers or filename
-                       $type = Images::guessType($photo, true);
+                       $curlResult = Network::curl($photo, true);
+                       if ($curlResult->isSuccess()) {
+                               $img_str = $curlResult->getBody();
+                               $type = $curlResult->getContentType();
+                       } else {
+                               $img_str = '';
+                               $type = '';
+                       }
+
+                       $type = Images::getMimeTypeByData($img_str, $photo, $type);
 
                        $Image = new Image($img_str, $type);
                        if ($Image->isValid()) {
@@ -905,7 +900,7 @@ class User
         *
         * @return bool True, if the allow was successful
         *
-        * @throws InternalServerErrorException
+        * @throws HTTPException\InternalServerErrorException
         * @throws Exception
         */
        public static function allow(string $hash)
@@ -979,16 +974,16 @@ class User
         * @param string $lang  The user's language (default is english)
         *
         * @return bool True, if the user was created successfully
-        * @throws InternalServerErrorException
-        * @throws \ErrorException
-        * @throws \ImagickException
+        * @throws HTTPException\InternalServerErrorException
+        * @throws ErrorException
+        * @throws ImagickException
         */
        public static function createMinimal(string $name, string $email, string $nick, string $lang = L10n::DEFAULT)
        {
                if (empty($name) ||
                    empty($email) ||
                    empty($nick)) {
-                       throw new InternalServerErrorException('Invalid arguments.');
+                       throw new HTTPException\InternalServerErrorException('Invalid arguments.');
                }
 
                $result = self::create([
@@ -1051,7 +1046,7 @@ class User
         * @param string $siteurl
         * @param string $password Plaintext password
         * @return NULL|boolean from notification() and email() inherited
-        * @throws InternalServerErrorException
+        * @throws HTTPException\InternalServerErrorException
         */
        public static function sendRegisterPendingEmail($user, $sitename, $siteurl, $password)
        {
@@ -1087,16 +1082,16 @@ class User
         *
         * It's here as a function because the mail is sent from different parts
         *
-        * @param \Friendica\Core\L10n $l10n     The used language
-        * @param array                $user     User record array
-        * @param string               $sitename
-        * @param string               $siteurl
-        * @param string               $password Plaintext password
+        * @param L10n   $l10n     The used language
+        * @param array  $user     User record array
+        * @param string $sitename
+        * @param string $siteurl
+        * @param string $password Plaintext password
         *
         * @return NULL|boolean from notification() and email() inherited
-        * @throws InternalServerErrorException
+        * @throws HTTPException\InternalServerErrorException
         */
-       public static function sendRegisterOpenEmail(\Friendica\Core\L10n $l10n, $user, $sitename, $siteurl, $password)
+       public static function sendRegisterOpenEmail(L10n $l10n, $user, $sitename, $siteurl, $password)
        {
                $preamble = Strings::deindent($l10n->t(
                        '
@@ -1153,7 +1148,7 @@ class User
        /**
         * @param int $uid user to remove
         * @return bool
-        * @throws InternalServerErrorException
+        * @throws HTTPException\InternalServerErrorException
         */
        public static function remove(int $uid)
        {
@@ -1171,7 +1166,7 @@ class User
                // unique), so it cannot be re-registered in the future.
                DBA::insert('userd', ['username' => $user['nickname']]);
 
-               // The user and related data will be deleted in "cron_expire_and_remove_users" (cronjobs.php)
+               // The user and related data will be deleted in Friendica\Worker\CronJobs::expireAndRemoveUsers()
                DBA::update('user', ['account_removed' => true, 'account_expires_on' => DateTimeFormat::utc('now + 7 day')], ['uid' => $uid]);
                Worker::add(PRIORITY_HIGH, 'Notifier', Delivery::REMOVAL, $uid);
 
@@ -1281,25 +1276,20 @@ class User
                        'total_users'           => 0,
                        'active_users_halfyear' => 0,
                        'active_users_monthly'  => 0,
+                       'active_users_weekly'   => 0,
                ];
 
-               $userStmt = DBA::p("SELECT `user`.`uid`, `user`.`login_date`, `contact`.`last-item`
-                       FROM `user`
-                       INNER JOIN `contact` ON `contact`.`uid` = `user`.`uid` AND `contact`.`self`
-                       WHERE `user`.`verified`
-                               AND `user`.`login_date` > ?
-                               AND NOT `user`.`blocked`
-                               AND NOT `user`.`account_removed`
-                               AND NOT `user`.`account_expired`",
-                               DBA::NULL_DATETIME
-               );
-
+               $userStmt = DBA::select('owner-view', ['uid', 'login_date', 'last-item'],
+                       ["`verified` AND `login_date` > ? AND NOT `blocked`
+                       AND NOT `account_removed` AND NOT `account_expired`",
+                       DBA::NULL_DATETIME]);
                if (!DBA::isResult($userStmt)) {
                        return $statistics;
                }
 
                $halfyear = time() - (180 * 24 * 60 * 60);
                $month = time() - (30 * 24 * 60 * 60);
+               $week = time() - (7 * 24 * 60 * 60);
 
                while ($user = DBA::fetch($userStmt)) {
                        $statistics['total_users']++;
@@ -1313,7 +1303,13 @@ class User
                        ) {
                                $statistics['active_users_monthly']++;
                        }
+
+                       if ((strtotime($user['login_date']) > $week) || (strtotime($user['last-item']) > $week)
+                       ) {
+                               $statistics['active_users_weekly']++;
+                       }
                }
+               DBA::close($userStmt);
 
                return $statistics;
        }
@@ -1323,24 +1319,30 @@ class User
         *
         * @param int    $start Start count (Default is 0)
         * @param int    $count Count of the items per page (Default is @see Pager::ITEMS_PER_PAGE)
+        * @param string $type  The type of users, which should get (all, bocked, removed)
         * @param string $order Order of the user list (Default is 'contact.name')
-        * @param string $order_direction Order direction (Default is ASC)
+        * @param bool   $descending Order direction (Default is ascending)
         *
         * @return array The list of the users
         * @throws Exception
         */
-       public static function getUsers($start = 0, $count = Pager::ITEMS_PER_PAGE, $order = 'contact.name', $order_direction = '+')
+       public static function getList($start = 0, $count = Pager::ITEMS_PER_PAGE, $type = 'all', $order = 'name', bool $descending = false)
        {
-               $sql_order = '`' . str_replace('.', '`.`', $order) . '`';
-               $sql_order_direction = ($order_direction === '+') ? 'ASC' : 'DESC';
-
-               $usersStmt = DBA::p("SELECT `user`.*, `contact`.`name`, `contact`.`url`, `contact`.`micro`, `user`.`account_expired`, `contact`.`last-item` AS `lastitem_date`, `contact`.`nick`, `contact`.`created`
-                               FROM `user`
-                               INNER JOIN `contact` ON `contact`.`uid` = `user`.`uid` AND `contact`.`self`
-                               WHERE `user`.`verified`
-                               ORDER BY $sql_order $sql_order_direction LIMIT ?, ?", $start, $count
-               );
+               $param = ['limit' => [$start, $count], 'order' => [$order => $descending]];
+               $condition = [];
+               switch ($type) {
+                       case 'active':
+                               $condition['account_removed'] = false;
+                               $condition['blocked'] = false;
+                               break;
+                       case 'blocked':
+                               $condition['blocked'] = true;
+                               break;
+                       case 'removed':
+                               $condition['account_removed'] = true;
+                               break;
+               }
 
-               return DBA::toArray($usersStmt);
+               return DBA::selectToArray('owner-view', [], $condition, $param);
        }
 }