summaryrefslogtreecommitdiffstats
path: root/app/class/user.class.php (follow)
AgeCommit message (Collapse)AuthorFilesLines
2019-01-12Define stricter username policyMalf Furious1-5/+8
Previously, you could log into an account named "MyAccount" by entering either "myaccount" or "MYACCOUNT" (or any other case conbination). This patch requires logins to succeed with case-sensitive usernames. I have also decided, that I wish to disallow duplicate usernames if the only difference between them is case. There can only be _ONE_ "myaccount" (of any case combination), even if he's known canonically as "MyAccount". This particular functionality is not changed by this patch. I'm just noting it as a deliberate decision not to change, by policy. Note that _passwords_ always have been, and still are, case-sensitive. They are salted and hashed before they even hit the database. Signed-off-by: Malf Furious <m@lfurio.us>
2018-11-10Add function agent::getContainedUsers()Malf Furious1-0/+9
This function helps further abstract agents. We want to get all users belonging to a pad that is owned by a group, or more specifically - an agent. If this agent is a user, that user is our only user to collect. If this agent is a group, we want to capture _it's_ owner along with all of it's members. Signed-off-by: Malf Furious <m@lfurio.us>
2018-09-07Fix typoMalf Furious1-1/+1
2018-02-11Address issue with user functions getCurrent() and setCurrent()Malf Furious1-2/+2
Previously, these functions would always call session_start() before doing most of their work. However, I've found that calling that function two or more times within the lifetime of a program results in NOTICE messages output from the PHP interpreter. Therefore, I am now only calling session_start() if the session is not already active.
2018-02-09Fix bug in function user::getCurrent()Malf Furious1-1/+11
If the session is set to an invalid (eg: deleted) user GUID, an exception is (correctly) thrown. This commit catches that and enables getCurrent() to close the bad session and return NULL.
2017-06-19Update function user::sendEmail()Malf Furious1-1/+1
Now setting the name for email FROM field using system config 'smtpFrom'.
2017-06-19Implement function sendEmail() for user classMalf Furious1-0/+39
2017-04-09Fix bugs in user classMalf Furious1-0/+4
Added calls to function saveObj() where $this is mutated.
2017-03-26Add function user::getGroups_ordByOwnByName()Malf Furious1-0/+28
Lookup all groups a user owns or is a member of.
2017-03-26Add various helper functions for user classMalf Furious1-0/+45
Added the function to verify and update the user's password. Added the function to confirm and update the user's email address.
2017-03-25Add function user::initNew()Malf Furious1-0/+25
2017-02-07Add function expectType() to table classMalf Furious1-0/+1
protected function exceptType added for use by subclasses to assert that the database object loaded is the correct type and to protect against cases like EG: passing the GUID for a group to new user(...); If a problem is detected, throw an exception.
2017-02-06Update table class tree to use static database referencesMalf Furious1-5/+5
2017-02-05Add redirect to forceful logoutMalf Furious1-0/+1
While forcing a logout, we need to also redirect to the app root.
2017-02-05Add user classMalf Furious1-0/+183
2016-10-22Deprecate application codeMalf Furious1-241/+0
Setup to perform an iteration of development focused on a simpler implementation and eliminating redundancy in design.
2016-09-18Move function User::rmHeadImage() to Object classMalf Furious1-11/+0
2016-09-13Move function User::getHeadImage() to Object classMalf Furious1-8/+0
Increase the scope of this function so it may be used by groups.
2016-06-11Add function User::getGroups()Malf Furious1-0/+25
This function returns all groups the user either owns or is a member of. This is not necessarily the same as all groups the user has access permission to. The *not-yet-implemented* object explorer feature should be used to browse those.
2016-05-26Add copyright notice to Scrott class filesMalf Furious1-0/+14
2016-05-22Add function User::getNumAdmins()Malf Furious1-0/+10
Function to count the number of admin accounts that exist. This is used to make sure that while deleteing accounts, the number of administrators never drops to zero.
2016-05-01Add function User::rmHeadImage()Malf Furious1-0/+11
Function to delete the user image file for the given user object.
2016-05-01Add function getHeadImage() to User classMalf Furious1-0/+8
This function will return the path to the head image (user image) for the user object. This path should be something like: <APP_ROOT>/file.php?d=img/heads&f=<GUID>
2016-03-27Add function User::getAddUsers_orderByAdminByName()Malf Furious1-0/+16
Added function to retrive all users in system presorted first by admin status (Admins first), then by username in alpha order
2016-03-27Move getUserGlyphicon function from common model into user classMalf Furious1-0/+11
2016-03-27Add function User::confirmEmailKey()Malf Furious1-0/+12
Validates the users supposed email key. If correct, sets the users emailConf flag.
2016-03-27Add function User::setEmail()Malf Furious1-2/+11
This function handles internal vars while updating a user's email address.
2016-03-27Add function User::setPassword()Malf Furious1-2/+10
This user function will update the salt and key for a user object to change its password.
2016-03-27Add function getDisplayName() to User classMalf Furious1-0/+11
If a user has an alias set, it should be displayed throughout the app instead of the username.
2016-02-01Implement authentication helper functions in User classMalf Furious1-0/+24
Added function to initialize a User object by username wrather than GUID. Added function to validate a user-supplied plain-text password for a given user
2016-01-30Add functionality to create new User objectsMalf Furious1-0/+54
User class now has a new function which will take a $username and a $password and use it to initialize itself as well as write new object data to the database. This commit introduces a helper function getKey() (from class User) for creating user object keys by hashing the contatenation of its password and salt. This commit introduces a helper function usernameInUse() (from class User) for ensuring the uniqueness of names amongst user-type objects
2016-01-28Add admin field to user tableMalf Furious1-0/+1
User accounts now have a field to denote whether they are site administrators. The first account created during app initial configuration is an admin automatically.
2016-01-26+ Added function to User class to fetch all users from DBMalf Furious1-0/+16
* Altered Auth MVC deflt action to return false if no users are found. This way, the Auth controller can automatically present user a page to create an admin account
2015-12-30+ Created db table child class for User tableMalf Furious1-0/+30
cgit-1.2.3-r5 | srcnode v0.4.0