function testDeletedUserGetSession() { $cm = new MockCookieManager($this); $dar_valid_hash = new MockDataAccessResult($this); $user123 = new MockUser($this); $userAnonymous = new MockUser($this); $dao = new MockUserDao($this); $um = new UserManagerTestVersion($this); $user123->setReturnValue('getId', 123); $user123->setReturnValue('getUserName', 'user_123'); $user123->setReturnValue('isAnonymous', false); $user123->setReturnValue('isDeleted', true); $userAnonymous->setReturnValue('isAnonymous', true); $cm->setReturnValue('getCookie', 'valid_hash'); $um->setReturnValue('_getServerIp', '212.212.123.12'); $dar_valid_hash->setReturnValue('getRow', array('user_name' => 'user_123', 'user_id' => 123)); $dao->setReturnReference('searchBySessionHashAndIp', $dar_valid_hash, array('valid_hash', '212.212.123.12')); $um->setReturnReference('getUserInstanceFromRow', $user123, array(array('user_name' => 'user_123', 'user_id' => 123))); $um->setReturnReference('getUserInstanceFromRow', $userAnonymous, array(array('user_id' => 0))); $dao->expectNever('storeLastAccessDate'); $dao->expectOnce('deleteAllUserSessions', array(123)); $um->setReturnReference('getDao', $dao); $um->setReturnReference('_getCookieManager', $cm); $user = $um->getCurrentUser(); $this->assertTrue($user->isAnonymous(), 'A deleted user should not be able to use a valid session'); }