psByUser($this->id);
}
return $this->_authGroups;
}
/**
* Clears the access rights cache of this user
*
* @return void
*
* @since 3.4.0
*/
public function clearAccessRights()
{
$this->_authLevels = null;
$this->_authGroups = null;
$this->isRoot = null;
Access::clearStatics();
}
/**
* Pass through method to the table for setting the last visit date
*
* @param integer $timestamp The timestamp, defaults to 'now'.
*
* @return boolean True on success.
*
* @since 1.7.0
*/
public function setLastVisit($timestamp = null)
{
// Create the user table object
/** @var \Joomla\CMS\Table\User $table */
$table = static::getTable();
$table->load($this->id);
return $table->setLastVisit($timestamp);
}
/**
* Method to get the user timezone.
*
* If the user didn't set a timezone, it will return the server timezone
*
* @return \DateTimeZone
*
* @since 3.7.0
*/
public function getTimezone()
{
$timezone = $this->getParam('timezone', Factory::getApplication()->get('offset', 'UTC'));
return new \DateTimeZone($timezone);
}
/**
* Method to get the user parameters
*
* @param object $params The user parameters object
*
* @return void
*
* @since 1.7.0
*/
public function setParameters($params)
{
$this->_params = $params;
}
/**
* Method to get the user table object
*
* This function uses a static variable to store the table name of the user table to
* instantiate. You can call this function statically to set the table name if
* needed.
*
* @param string $type The user table name to be used
* @param string $prefix The user table prefix to be used
*
* @return Table The user table object
*
* @note At 4.0 this method will no longer be static
* @since 1.7.0
*/
public static function getTable($type = null, $prefix = '\\Joomla\\CMS\\Table\\')
{
static $tabletype;
// Set the default tabletype;
if (!isset($tabletype)) {
$tabletype = \Joomla\CMS\Table\User::class;
}
// Set a custom table type is defined
if (isset($type)) {
$tabletype = rtrim($prefix, '\\') . '\\' . $type;
}
// Create the user table object
return new $tabletype(Factory::getDbo());
}
/**
* Method to bind an associative array of data to a user object
*
* @param array &$array The associative array to bind to the object
*
* @return boolean True on success
*
* @since 1.7.0
*/
public function bind(&$array)
{
// Let's check to see if the user is new or not
if (empty($this->id)) {
// Check the password and create the crypted password
if (empty($array['password'])) {
$array['password'] = UserHelper::genRandomPassword(32);
$array['password2'] = $array['password'];
}
// Not all controllers check the password, although they should.
// Hence this code is required:
if (isset($array['password2']) && $array['password'] != $array['password2']) {
Factory::getApplication()->enqueueMessage(Text::_('JLIB_USER_ERROR_PASSWORD_NOT_MATCH'), 'error');
return false;
}
$this->password_clear = ArrayHelper::getValue($array, 'password', '', 'string');
$array['password'] = UserHelper::hashPassword($array['password']);
// Set the registration timestamp
$this->registerDate = Factory::getDate()->toSql();
} else {
// Updating an existing user
if (!empty($array['password'])) {
if ($array['password'] != $array['password2']) {
$this->setError(Text::_('JLIB_USER_ERROR_PASSWORD_NOT_MATCH'));
return false;
}
$this->password_clear = ArrayHelper::getValue($array, 'password', '', 'string');
// Check if the user is reusing the current password if required to reset their password
if ($this->requireReset == 1 && UserHelper::verifyPassword($this->password_clear, $this->password)) {
$this->setError(Text::_('JLIB_USER_ERROR_CANNOT_REUSE_PASSWORD'));
return false;
}
$array['password'] = UserHelper::hashPassword($array['password']);
// Reset the change password flag if it was set previously
if ($this->requireReset) {
$array['requireReset'] = 0;
}
} else {
$array['password'] = $this->password;
}
// Prevent updating internal fields
unset(
$array['registerDate'],
$array['lastvisitDate'],
$array['lastResetTime'],
$array['resetCount']
);
}
if (\array_key_exists('params', $array)) {
$this->_params->loadArray($array['params']);
if (\is_array($array['params'])) {
$params = (string) $this->_params;
} else {
$params = $array['params'];
}
$this->params = $params;
}
// Bind the array
foreach ($array as $key => $value) {
$this->$key = $value;
}
// Make sure its an integer
$this->id = (int) $this->id;
return true;
}
/**
* Method to save the User object to the database
*
* @param boolean $updateOnly Save the object only if not a new user
* Currently only used in the user reset password method.
*
* @return boolean True on success
*
* @since 1.7.0
* @throws \RuntimeException
*/
public function save($updateOnly = false)
{
// Create the user table object
$table = static::getTable();
$this->params = (string) $this->_params;
$table->bind(ArrayHelper::fromObject($this, false));
// Allow an exception to be thrown.
try {
// Check and store the object.
if (!$table->check()) {
$this->setError($table->getError());
return false;
}
// If user is made a Super Admin group and user is NOT a Super Admin
// @todo ACL - this needs to be acl checked
$my = Factory::getUser();
// Are we creating a new user
$isNew = empty($this->id);
// If we aren't allowed to create new users return
if ($isNew && $updateOnly) {
return true;
}
// Get the old user
$oldUser = new User($this->id);
// Access Checks
// The only mandatory check is that only Super Admins can operate on other Super Admin accounts.
// To add additional business rules, use a user plugin and throw an Exception with onUserBeforeSave.
// Check if I am a Super Admin
$iAmSuperAdmin = $my->authorise('core.admin');
$iAmRehashingSuperadmin = false;
if (($my->id == 0 && !$isNew) && $this->id == $oldUser->id && $oldUser->authorise('core.admin') && $oldUser->password != $this->password) {
$iAmRehashingSuperadmin = true;
}
// We are only worried about edits to this account if I am not a Super Admin.
if (!$iAmSuperAdmin && !$iAmRehashingSuperadmin && !Factory::getApplication() instanceof ConsoleApplication) {
// I am not a Super Admin, and this one is, so fail.
if (!$isNew && Access::check($this->id, 'core.admin')) {
throw new \RuntimeException('User not Super Administrator');
}
if ($this->groups != null) {
// I am not a Super Admin and I'm trying to make one.
foreach ($this->groups as $groupId) {
if (Access::checkGroup($groupId, 'core.admin')) {
throw new \RuntimeException('User not Super Administrator');
}
}
}
}
// Unset the activation token, if the mail address changes - that affects both, activation and PW resets
if ($this->email !== $oldUser->email && $this->id !== 0 && !empty($this->activation) && !$this->block) {
$table->activation = '';
}
// Fire the onUserBeforeSave event.
$dispatcher = Factory::getApplication()->getDispatcher();
PluginHelper::importPlugin('user', null, true, $dispatcher);
$saveEvent = new BeforeSaveEvent('onUserBeforeSave', [
'subject' => ArrayHelper::fromObject($oldUser, false),
'isNew' => $isNew,
'data' => ArrayHelper::fromObject($this, false),
]);
$dispatcher->dispatch('onUserBeforeSave', $saveEvent);
$result = $saveEvent['result'] ?? [];
if (\in_array(false, $result, true)) {
// Plugin will have to raise its own error or throw an exception.
return false;
}
// Store the user data in the database
$result = $table->store();
// Set the id for the User object in case we created a new user.
if (empty($this->id)) {
$this->id = $table->id;
}
if ($my->id == $table->id) {
$registry = new Registry($table->params);
$my->setParameters($registry);
}
// Fire the onUserAfterSave event
$dispatcher->dispatch('onUserAfterSave', new AfterSaveEvent('onUserAfterSave', [
'subject' => ArrayHelper::fromObject($this),
'isNew' => $isNew,
'savingResult' => $result,
'errorMessage' => $this->getError() ?? '',
]));
} catch (\Exception $e) {
$this->setError($e->getMessage());
return false;
}
return $result;
}
/**
* Method to delete the User object from the database
*
* @return boolean True on success
*
* @since 1.7.0
*/
public function delete()
{
$dispatcher = Factory::getApplication()->getDispatcher();
PluginHelper::importPlugin('user', null, true, $dispatcher);
// Trigger the onUserBeforeDelete event
$dispatcher->dispatch('onUserBeforeDelete', new BeforeDeleteEvent('onUserBeforeDelete', [
'subject' => ArrayHelper::fromObject($this, false),
]));
// Create the user table object
$table = static::getTable();
if (!$result = $table->delete($this->id)) {
$this->setError($table->getError());
}
// Trigger the onUserAfterDelete event
$dispatcher->dispatch('onUserAfterDelete', new AfterDeleteEvent('onUserAfterDelete', [
'subject' => ArrayHelper::fromObject($this, false),
'deletingResult' => $result,
'errorMessage' => $this->getError() ?? '',
]));
return $result;
}
/**
* Method to load a User object by user id number
*
* @param mixed $id The user id of the user to load
*
* @return boolean True on success
*
* @since 1.7.0
*/
public function load($id)
{
// Create the user table object
$table = static::getTable();
// Load the UserModel object based on the user id or throw a warning.
if (!$table->load($id)) {
// Reset to guest user
$this->guest = 1;
return false;
}
/*
* Set the user parameters using the default XML file. We might want to
* extend this in the future to allow for the ability to have custom
* user parameters, but for right now we'll leave it how it is.
*/
if ($table->params) {
$this->_params->loadString($table->params);
}
// Assuming all is well at this point let's bind the data
foreach ($table->getProperties() as $key => $value) {
$this->$key = $value;
}
// The user is no longer a guest
if ($this->id != 0) {
$this->guest = 0;
} else {
$this->guest = 1;
}
return true;
}
/**
* Method to allow serialize the object with minimal properties.
*
* @return array The names of the properties to include in serialization.
*
* @since 3.6.0
*/
public function __sleep()
{
return ['id'];
}
/**
* Method to recover the full object on unserialize.
*
* @return void
*
* @since 3.6.0
*/
public function __wakeup()
{
// Initialise some variables
$this->_params = new Registry();
// Load the user if it exists
if (!empty($this->id) && $this->load($this->id)) {
// Push user into cached instances.
self::$instances[$this->id] = $this;
} else {
// Initialise
$this->id = 0;
$this->sendEmail = 0;
$this->guest = 1;
}
}
}
An Error Occurred: Whoops, looks like something went wrong.
Sorry, there was a problem we could not recover from.
The server returned a "500 - Whoops, looks like something went wrong."