UserIdentity.php

<?php
/*
* LimeSurvey
* Copyright (C) 2007-2011 The LimeSurvey Project Team / Carsten Schmitz
* All rights reserved.
* License: GNU/GPL License v2 or later, see LICENSE.php
* LimeSurvey is free software. This version may have been modified pursuant
* to the GNU General Public License, and as distributed it includes or
* is derivative of works licensed under the GNU General Public License or
* other free or open source software licenses.
* See COPYRIGHT.php for copyright notices and details.
*
*/

class UserIdentity extends CUserIdentity
{
    protected $id;
    protected $user;
    protected $sOneTimePassword;

    /**
     * Checks whether this user has correctly entered password or not
     *
     * @access public
     * @param string $sOneTimePassword
     * @return bool
     */
    public function authenticate($sOneTimePassword = '')
    {
        if (Yii::app()->getConfig("auth_webserver") == false || $this->username != "") {
            $user = User::model()->findByAttributes(array('users_name' => $this->username));
            if ($user === null) {
                $this->errorCode = self::ERROR_USERNAME_INVALID;
                return !$this->errorCode;
            }
            
            if ($sOneTimePassword != '' && Yii::app()->getConfig("use_one_time_passwords") && md5($sOneTimePassword) == $user->one_time_pw) {
                $user->one_time_pw = '';
                $user->save();
                $this->id = $user->uid;
                $this->user = $user;
                $this->errorCode = self::ERROR_NONE;
            } elseif ($user->checkPassword($this->password)) {
                $this->errorCode = self::ERROR_PASSWORD_INVALID;
            } else {
                $this->id = $user->uid;
                $this->user = $user;
                $this->errorCode = self::ERROR_NONE;
            }
        } elseif (Yii::app()->getConfig("auth_webserver") === true && (isset($_SERVER['PHP_AUTH_USER']) || isset($_SERVER['LOGON_USER']) || isset($_SERVER['REMOTE_USER']))) { // normal login through webserver authentication        
            if (isset($_SERVER['PHP_AUTH_USER'])) {
                $sUser = $_SERVER['PHP_AUTH_USER'];
            } elseif (isset($_SERVER['REMOTE_USER'])) {
                $sUser = $_SERVER['REMOTE_USER'];
            } else {
                $sUser = $_SERVER['LOGON_USER'];
            }            
            if (strpos($sUser, "\\") !== false) {
                $sUser = substr($sUser, strrpos($sUser, "\\") + 1);
            }
            
            $aUserMappings = Yii::app()->getConfig("auth_webserver_user_map");
            if (isset($aUserMappings[$sUser])) 
            {
                $sUser = $aUserMappings[$sUser];
            }
            $this->username = $sUser;

            $oUser = User::model()->findByAttributes(array('users_name'=>$sUser));
            if (is_null($oUser))
            {
                if (function_exists("hook_get_auth_webserver_profile")) {
                    // If defined this function returns an array
                    // describing the defaukt profile for this user
                    $aUserProfile = hook_get_auth_webserver_profile($sUser);
                } elseif (Yii::app()->getConfig("auth_webserver_autocreate_user")) {
                    $aUserProfile = Yii::app()->getConfig("auth_webserver_autocreate_profile"); 
                }
            } else {
                $this->id = $oUser->uid;
                $this->user = $oUser;
                $this->errorCode = self::ERROR_NONE;
            }
            
            
            
            if (Yii::app()->getConfig("auth_webserver_autocreate_user") && isset($aUserProfile) && is_null($oUser))
            { // user doesn't exist but auto-create user is set
                $oUser = new User;
                $oUser->users_name = $sUser;
                $oUser->setPassword(createPassword());
                $oUser->full_name = $aUserProfile['full_name'];
                $oUser->parent_id = 1;
                $oUser->lang = $aUserProfile['lang'];
                $oUser->email = $aUserProfile['email'];
                if ($oUser->save())
                {
                    $aTemplates = explode(",", $aUserProfile['templatelist']);
                    foreach ($aTemplates as $sTemplateName)
                    {
                        $oPermission = new Permission;
                        $oPermission->uid = $oUser->uid;
                        $oPermission->entity = 'template';
                        $oPermission->permission = trim($sTemplateName);
                        $oPermission->read_p = 1;
                        $oPermission->save();
                    }

                    // read again user from newly created entry
                    $this->id = $oUser->uid;
                    $this->user = $oUser;                    
                    $this->errorCode = self::ERROR_NONE;                    
                } else
                {
                    $this->errorCode = self::ERROR_USERNAME_INVALID;
                }

            }
        } else
        {
            $this->errorCode = self::ERROR_USERNAME_INVALID;
        }
        return !$this->errorCode;
    }

    /**
     * Returns the current user's ID
     *
     * @access public
     * @return int
     */
    public function getId()
    {
        return $this->id;
    }

    /**
     * Returns the active user's record
     *
     * @access public
     * @return CActiveRecord
     */
    public function getUser()
    {
        return $this->user;
    }
}