Merge pull request #4716 from annando/password-console

New functionality to set a password for a given user

diff --git a/src/Core/Console.php b/src/Core/Console.php
index eb6e08057aa24ac94374dcccea321d55b1f17fd1..a1143ae1d975a0ef004725d0c409d6d0dfcdd95f 100644 (file)
--- a/src/Core/Console.php
+++ b/src/Core/Console.php
@@ -22,6 +22,7 @@ class Console extends \Asika\SimpleConsole\Console
                'globalcommunityblock'   => __NAMESPACE__ . '\Console\GlobalCommunityBlock',
                'globalcommunitysilence' => __NAMESPACE__ . '\Console\GlobalCommunitySilence',
                'maintenance'            => __NAMESPACE__ . '\Console\Maintenance',
+               'newpassword'            => __NAMESPACE__ . '\Console\NewPassword',
                'php2po'                 => __NAMESPACE__ . '\Console\PhpToPo',
                'po2php'                 => __NAMESPACE__ . '\Console\PoToPhp',
                'typo'                   => __NAMESPACE__ . '\Console\Typo',
@@ -42,6 +43,7 @@ Commands:
        globalcommunitysilence Silence remote profile from global community page
        help                   Show help about a command, e.g (bin/console help config)
        maintenance            Set maintenance mode for this node
+       newpassword            Set a new password for a given user
        php2po                 Generate a messages.po file from a strings.php file
        po2php                 Generate a strings.php file from a messages.po file
        typo                   Checks for parse errors in Friendica files

diff --git a/src/Core/Console/NewPassword.php b/src/Core/Console/NewPassword.php
new file mode 100644 (file)
index 0000000..d44286d
--- /dev/null
+++ b/src/Core/Console/NewPassword.php
@@ -0,0 +1,89 @@
+<?php
+
+namespace Friendica\Core\Console;
+
+use Friendica\Core\L10n;
+use Friendica\Model\Contact;
+use Friendica\Model\User;
+use Friendica\Core\Config;
+use Friendica\Database\DBM;
+use dba;
+
+/**
+ * @brief tool to set a new password for a user
+ *
+ * With this tool, you can set a new password for a user
+ *
+ * License: AGPLv3 or later, same as Friendica
+ *
+ * @author Michael Vogel <heluecht@pirati.ca>
+ */
+class NewPassword extends \Asika\SimpleConsole\Console
+{
+       protected $helpOptions = ['h', 'help', '?'];
+
+       protected function getHelp()
+       {
+               $help = <<<HELP
+console newpassword - Creates a new password for a given user
+Usage
+       bin/console newpassword <nickname> <password> [-h|--help|-?] [-v]
+
+Description
+       Creates a new password for a user without using the "forgot password" functionality.
+
+Options
+    -h|--help|-? Show help information
+    -v           Show more debug information.
+HELP;
+               return $help;
+       }
+
+       protected function doExecute()
+       {
+               $a = get_app();
+
+               if ($this->getOption('v')) {
+                       $this->out('Class: ' . __CLASS__);
+                       $this->out('Arguments: ' . var_export($this->args, true));
+                       $this->out('Options: ' . var_export($this->options, true));
+               }
+
+               if (count($this->args) == 0) {
+                       $this->out($this->getHelp());
+                       return 0;
+               }
+
+               if (count($this->args) > 2) {
+                       throw new \Asika\SimpleConsole\CommandArgsException('Too many arguments');
+               }
+
+               require_once '.htconfig.php';
+               $result = \dba::connect($db_host, $db_user, $db_pass, $db_data);
+               unset($db_host, $db_user, $db_pass, $db_data);
+
+               if (!$result) {
+                       throw new \RuntimeException('Unable to connect to database');
+               }
+
+               $nick = $this->getArgument(0);
+               $password = $this->getArgument(1);
+
+               $user = dba::selectFirst('user', ['uid'], ['nickname' => $nick]);
+               if (!DBM::is_result($user)) {
+                       throw new \RuntimeException(L10n::t('User not found'));
+               }
+
+               if (!Config::get('system', 'disable_password_exposed', false) && User::isPasswordExposed($password)) {
+                       throw new \RuntimeException(L10n::t('The new password has been exposed in a public data dump, please choose another.'));
+               }
+
+               if (!User::updatePassword($user['uid'], $password)) {
+                       throw new \RuntimeException(L10n::t('Password update failed. Please try again.'));
+               }
+
+               $this->out(L10n::t('Password changed.'));
+
+               return 0;
+       }
+}