/**
* Delete user requests
* (default all users for any request)
*
* action = 0 delete account request
* action = 1 new user account request
* action = 2 change password request
* action = 9 delete all requests type for user
*
* @author Alberto Basso
*/
function sumo_delete_user_temp($email = '', $action = NULL)
{
global $SUMO;
if (sumo_validate_email($email)) {
if ($action < 9) {
$query = "DELETE FROM " . SUMO_TABLE_USERS_TEMP . " \r\n\t\t\t\t\t WHERE email='" . $email . "' \r\n\t\t\t\t\t AND action=" . intval($action);
} else {
$query = "DELETE FROM " . SUMO_TABLE_USERS_TEMP . " \r\n\t\t\t\t\t WHERE email='" . $email . "'";
}
} else {
// Delete after $SUMO['config']['accounts']['registration']['life']
// users cannot confirmed registration
$reg_time = $SUMO['server']['time'] - $SUMO['config']['accounts']['registration']['life'] * 3600;
if ($reg_time < $SUMO['server']['time'] - 3600) {
$reg_time = $SUMO['server']['time'] - 3600;
}
$query = "DELETE FROM " . SUMO_TABLE_USERS_TEMP . " \r\n\t\t\t\t WHERE time < " . $reg_time;
}
$SUMO['DB']->Execute($query);
}
case 'ERASEACCOUNT':
$update_req = TRUE;
if (!sumo_validate_reg_code($sumo_reg_data['reg_code'])) {
$sumo_message = sumo_get_message('W00012C');
} else {
sumo_delete_account();
$sumo_message = sumo_get_message('I00010C');
}
session_destroy();
break;
case 'PWDLOST':
$sumo_template = 'password_lost';
session_destroy();
break;
case 'PWDLOSTCONFIRMED':
if (!sumo_validate_email($sumo_reg_data['email'])) {
$sumo_message = sumo_get_message('W00007C');
} else {
$sumo_message = sumo_get_message('I00011C');
sumo_request_pwdlost();
}
session_destroy();
break;
case 'CHANGEPWD':
if ($SUMO['page']['change_pwd']) {
if (!sumo_validate_reg_code($sumo_reg_data['reg_code'])) {
$sumo_message = sumo_get_message('W00014C');
} else {
sumo_activate_new_password($sumo_reg_data['reg_code']);
$sumo_message = sumo_get_message('I00012C');
}
/**
* Validate data settings
* See also sumo_settings_data() in libs/lib.core.php
*/
function sumo_validate_data_settings($data = array(), $message = FALSE)
{
$elements = count($data);
$err = FALSE;
if ($elements > 0) {
for ($d = 0; $d < $elements; $d++) {
if ($data[$d][2] == 1 || $data[$d][2] == 0 && $data[$d][1]) {
switch ($data[$d][0]) {
case 'date_format':
if (!ereg("[BdDFjlLmMnrStTwWYyz:\\./\\-]+", $data[$d][1])) {
$err = 'W06011C';
}
break;
case 'time_format':
if (!ereg("[aABgGhHiIOrsTU.:-]+", $data[$d][1])) {
$err = 'W06010C';
}
break;
case 'admin_name':
if (!preg_match('/^[a-z0-9' . SUMO_REGEXP_ALLOWED_CHARS . '\'\\/\\\\_\\-\\ ]{0,50}$/i', $data[$d][1])) {
$err = 'W06012C';
}
break;
case 'accounts.life':
if ($data[$d][1] < 0) {
$err = 'W06001C';
}
break;
case 'accounts.registration.life':
if ($data[$d][1] < 1) {
$err = 'W06007C';
}
break;
// see also sumo_validate_data_accesspoint()
// see also sumo_validate_data_accesspoint()
case 'accesspoints.name':
$languages = sumo_get_available_languages();
for ($l = 0; $l < count($languages); $l++) {
if (!preg_match("/^[a-z0-9\\-\\_\\.\\=\\&\\/\\\\'\\ " . SUMO_REGEXP_ALLOWED_CHARS . "]{5,128}\$/i", $data[$d][1][$languages[$l]])) {
$err = 'W00031C';
}
}
break;
// see also sumo_validate_data_accesspoint()
// see also sumo_validate_data_accesspoint()
case 'accesspoints.group':
if (!sumo_validate_group($data[$d][1], FALSE)) {
$err = 'W07002C';
}
break;
// see also sumo_validate_data_accesspoint()
// see also sumo_validate_data_accesspoint()
case 'accesspoints.theme':
if (!in_array($data[$d][1], sumo_get_available_themes())) {
$err = 'W00033C';
}
break;
case 'security.banned_time':
if ($data[$d][1] < 5) {
$err = 'W06002C';
}
break;
case 'security.max_login_attempts':
if ($data[$d][1] < 3) {
$err = 'W06004C';
}
break;
case 'connections.timeout':
if ($data[$d][1] < 10) {
$err = 'W06005C';
}
break;
case 'sessions.timeout':
if ($data[$d][1] < 60) {
$err = 'W06006C';
}
break;
case 'database.optimize_hits':
if ($data[$d][1] < 100) {
$err = 'W06008C';
}
break;
case 'logs.life':
if ($data[$d][1] < 0) {
$err = 'W06003C';
}
break;
case 'logs.file.size':
if ($data[$d][1] < 32) {
$err = 'W06005C';
}
break;
case 'language':
if (!in_array($data[$d][1], sumo_get_available_languages())) {
$err = 'W00021C';
}
break;
case 'email':
if (!sumo_validate_email($data[$d][1])) {
$err = 'W00007C';
}
break;
case 'boolean':
if ($data[$d][1] != 0 && $data[$d][1] != 1) {
$err = 'W00032C';
}
break;
default:
$err = 'W00019C';
break;
}
if ($err) {
break;
}
}
}
if ($message) {
if (!$err) {
return array(TRUE, '');
} else {
return array(FALSE, sumo_get_message($err) . "<br>[expect:" . $data[$d][0] . "]");
}
} else {
if (!$err) {
return TRUE;
} else {
return FALSE;
}
}
} else {
return FALSE;
}
}
/**
* Validate data
*
* See sumo_validate_data_<module name> for specific validation
* into library module
*
* @author Alberto Basso <*****@*****.**>
*/
function sumo_validate_data($data = array(), $message = FALSE)
{
$elements = count($data);
$err = FALSE;
if ($elements > 0) {
for ($d = 0; $d < $elements; $d++) {
if ($data[$d][2] || !$data[$d][2] && $data[$d][1]) {
switch ($data[$d][0]) {
// the "user" can be also an e-mail address
case 'username':
if (!preg_match('/^[a-z0-9' . SUMO_REGEXP_ALLOWED_CHARS . ']{3,100}$/i', $data[$d][1]) && !sumo_validate_email($data[$d][1])) {
$err = 'W00006C';
}
break;
case 'name':
if (!preg_match("/^[a-z" . SUMO_REGEXP_ALLOWED_CHARS . "\\&\\;\\\\'\\ ]{1,49}\$/i", $data[$d][1])) {
$err = 'W00022C';
}
break;
case 'password':
if (!preg_match('/^[\\.a-z0-9]{40}$/i', $data[$d][1])) {
$err = 'W00011C';
}
// for sha1 string
break;
case 'email':
if (!sumo_validate_email($data[$d][1])) {
$err = 'W00007C';
}
break;
case 'active':
if (!preg_match('/^[0-1]{1}$/', $data[$d][1])) {
$err = 'W00018C';
}
break;
case 'ip':
$ip = sumo_get_iprange($data[$d][1]);
for ($i = 0; $i < count($ip); $i++) {
if (!sumo_validate_ip($ip[$i])) {
$err = 'W00016C';
}
break;
}
break;
case 'usergroup':
if (!sumo_validate_group($data[$d][1])) {
$err = 'W00017C';
}
break;
case 'datasource_id':
$ds = sumo_get_datasource_info($data[$d][1], false);
if (empty($ds)) {
$err = 'W00023C';
}
break;
case 'hostname':
if (!preg_match('/[a-z0-9\\.\\_\\-]{3,255}$/i', $data[$d][1])) {
$err = 'W00025C';
}
break;
case 'port':
if ($data[$d][1] < 1 || $data[$d][1] > 65535) {
$err = 'W00026C';
}
break;
case 'ldap_base':
if (!preg_match('/^[a-z0-9\\.\\,\\:\\;\\_\\-\\=\\\\/\\+\\*\\ ' . SUMO_REGEXP_ALLOWED_CHARS . ']{4,255}$/i', $data[$d][1])) {
$err = 'W00027C';
}
break;
case 'new_password':
if (!sumo_validate_data(array(array('password', $data[$d][1][0])))) {
$err = 'W00011C';
}
if ($data[$d][1][0] != $data[$d][1][1]) {
$err = 'W00024C';
}
break;
// Joomla
// Joomla
case 'new_password2':
if ($data[$d][1][0] != $data[$d][1][1]) {
$err = 'W00024C';
}
break;
case 'day_limit':
if (!preg_match('/^[0-9]{1,4}$/', $data[$d][1])) {
$err = 'W00020C';
}
break;
case 'language':
if (!in_array($data[$d][1], sumo_get_available_languages())) {
$err = 'W00021C';
}
break;
case 'id':
// INT = 256^4-1
if ($data[$d][1] < 1 || $data[$d][1] > 4294967296) {
$err = 'W00029C';
}
break;
default:
$err = 'W00019C';
break;
}
if ($err) {
break;
}
}
}
if ($message) {
return !$err ? array(TRUE, '') : array(FALSE, sumo_get_message($err));
} else {
return !$err ? TRUE : FALSE;
}
} else {
return FALSE;
}
}