/** * Enter description here... * * @param DevblocksSearchCriteria[] $params * @param integer $limit * @param integer $page * @param string $sortBy * @param boolean $sortAsc * @param boolean $withCounts * @return array */ static function search($columns, $params, $limit = 10, $page = 0, $sortBy = null, $sortAsc = null, $withCounts = true) { $db = DevblocksPlatform::getDatabaseService(); $fields = SearchFields_Worker::getFields(); // Sanitize if (!isset($fields[$sortBy])) { $sortBy = null; } list($tables, $wheres) = parent::_parseSearchParams($params, $columns, $fields, $sortBy); $start = $page * $limit; // [JAS]: 1-based [TODO] clean up + document $total = -1; $select_sql = sprintf("SELECT " . "w.id as %s, " . "w.first_name as %s, " . "w.last_name as %s, " . "w.title as %s, " . "w.email as %s, " . "w.is_superuser as %s, " . "w.last_activity_date as %s, " . "w.is_disabled as %s ", SearchFields_Worker::ID, SearchFields_Worker::FIRST_NAME, SearchFields_Worker::LAST_NAME, SearchFields_Worker::TITLE, SearchFields_Worker::EMAIL, SearchFields_Worker::IS_SUPERUSER, SearchFields_Worker::LAST_ACTIVITY_DATE, SearchFields_Worker::IS_DISABLED); $join_sql = "FROM worker w "; // Custom field joins list($select_sql, $join_sql, $has_multiple_values) = self::_appendSelectJoinSqlForCustomFieldTables($tables, $params, 'w.id', $select_sql, $join_sql); $where_sql = "" . (!empty($wheres) ? sprintf("WHERE %s ", implode(' AND ', $wheres)) : ""); $sort_sql = !empty($sortBy) ? sprintf("ORDER BY %s %s ", $sortBy, $sortAsc || is_null($sortAsc) ? "ASC" : "DESC") : " "; $sql = $select_sql . $join_sql . $where_sql . ($has_multiple_values ? 'GROUP BY w.id ' : '') . $sort_sql; // [TODO] Could push the select logic down a level too if ($limit > 0) { $rs = $db->SelectLimit($sql, $limit, $start) or die(__CLASS__ . '(' . __LINE__ . ')' . ':' . $db->ErrorMsg()); } else { $rs = $db->Execute($sql) or die(__CLASS__ . '(' . __LINE__ . ')' . ':' . $db->ErrorMsg()); $total = mysql_num_rows($rs); } $results = array(); while ($row = mysql_fetch_assoc($rs)) { $result = array(); foreach ($row as $f => $v) { $result[$f] = $v; } $object_id = intval($row[SearchFields_Worker::ID]); $results[$object_id] = $result; } // [JAS]: Count all if ($withCounts) { $count_sql = ($has_multiple_values ? "SELECT COUNT(DISTINCT w.id) " : "SELECT COUNT(w.id) ") . $join_sql . $where_sql; $total = $db->GetOne($count_sql); } mysql_free_result($rs); return array($results, $total); }
function doRecoverStep3Action() { @($password = DevblocksPlatform::importGPC($_REQUEST['password'], 'string')); $email = $_SESSION[self::KEY_FORGOT_EMAIL]; $sentcode = $_SESSION[self::KEY_FORGOT_SENTCODE]; $code = $_SESSION[self::KEY_FORGOT_CODE]; $worker = null; $results = DAO_Worker::getWhere(sprintf("%s = %s", DAO_Worker::EMAIL, Um_ORMHelper::qstr($email))); if (!empty($results)) { $worker = array_shift($results); } if (empty($email) || empty($code) || empty($worker)) { return; } if (0 == strcmp($sentcode, $code)) { // passed DAO_Worker::update($worker->id, array(DAO_Worker::PASS => md5($password))); unset($_SESSION[self::KEY_FORGOT_EMAIL]); unset($_SESSION[self::KEY_FORGOT_CODE]); unset($_SESSION[self::KEY_FORGOT_SENTCODE]); DevblocksPlatform::redirect(new DevblocksHttpResponse(array('login'))); } else { DevblocksPlatform::redirect(new DevblocksHttpResponse(array('login', 'forgot', 'step2'))); } }
function saveWorkerPeekAction() { $translate = DevblocksPlatform::getTranslationService(); $active_worker = UsermeetApplication::getActiveWorker(); if (!$active_worker || !$active_worker->is_superuser) { return; } @($id = DevblocksPlatform::importGPC($_POST['id'], 'integer')); @($view_id = DevblocksPlatform::importGPC($_POST['view_id'], 'string')); @($first_name = DevblocksPlatform::importGPC($_POST['first_name'], 'string')); @($last_name = DevblocksPlatform::importGPC($_POST['last_name'], 'string')); @($title = DevblocksPlatform::importGPC($_POST['title'], 'string')); @($email = DevblocksPlatform::importGPC($_POST['email'], 'string')); @($password = DevblocksPlatform::importGPC($_POST['password'], 'string')); @($is_superuser = DevblocksPlatform::importGPC($_POST['is_superuser'], 'integer', 0)); @($disabled = DevblocksPlatform::importGPC($_POST['is_disabled'], 'integer', 0)); // @$group_ids = DevblocksPlatform::importGPC($_POST['group_ids'],'array'); // @$group_roles = DevblocksPlatform::importGPC($_POST['group_roles'],'array'); @($delete = DevblocksPlatform::importGPC($_POST['do_delete'], 'integer', 0)); // [TODO] The superuser set bit here needs to be protected by ACL if (empty($first_name)) { $first_name = "Anonymous"; } if (!empty($id) && !empty($delete)) { // Can't delete or disable self if ($active_worker->id != $id) { DAO_Worker::delete($id); } } else { if (empty($id) && null == DAO_Worker::getWhere(sprintf("%s=%s", DAO_Worker::EMAIL, Um_ORMHelper::qstr($email)))) { $workers = DAO_Worker::getAll(); $license = UsermeetLicense::getInstance(); if (!empty($license) && !empty($license['serial']) || count($workers) < 3) { // Creating new worker. If password is empty, email it to them if (empty($password)) { $settings = DevblocksPlatform::getPluginSettingsService(); $replyFrom = $settings->get('usermeet.core', UsermeetSettings::DEFAULT_REPLY_FROM); $replyPersonal = $settings->get('usermeet.core', UsermeetSettings::DEFAULT_REPLY_PERSONAL, ''); $url = DevblocksPlatform::getUrlService(); $password = UsermeetApplication::generatePassword(8); // try { // $mail_service = DevblocksPlatform::getMailService(); // $mailer = $mail_service->getMailer(CerberusMail::getMailerDefaults()); // $mail = $mail_service->createMessage(); // // $mail->setTo(array($email => $first_name . ' ' . $last_name)); // $mail->setFrom(array($replyFrom => $replyPersonal)); // $mail->setSubject('Your new helpdesk login information!'); // $mail->generateId(); // // $headers = $mail->getHeaders(); // // $headers->addTextHeader('X-Mailer','Cerberus Helpdesk (Build '.APP_BUILD.')'); // // $body = sprintf("Your new helpdesk login information is below:\r\n". // "\r\n". // "URL: %s\r\n". // "Login: %s\r\n". // "Password: %s\r\n". // "\r\n". // "You should change your password from Preferences after logging in for the first time.\r\n". // "\r\n", // $url->write('',true), // $email, // $password // ); // // $mail->setBody($body); // // if(!$mailer->send($mail)) { // throw new Exception('Password notification email failed to send.'); // } // } catch (Exception $e) { // // [TODO] need to report to the admin when the password email doesn't send. The try->catch // // will keep it from killing php, but the password will be empty and the user will never get an email. // } } $fields = array(DAO_Worker::EMAIL => $email, DAO_Worker::PASS => $password); $id = DAO_Worker::create($fields); } } // end create worker // Update $fields = array(DAO_Worker::FIRST_NAME => $first_name, DAO_Worker::LAST_NAME => $last_name, DAO_Worker::TITLE => $title, DAO_Worker::EMAIL => $email, DAO_Worker::IS_SUPERUSER => $is_superuser, DAO_Worker::IS_DISABLED => $disabled); // if we're resetting the password if (!empty($password)) { $fields[DAO_Worker::PASS] = md5($password); } // Update worker DAO_Worker::update($id, $fields); // Update group memberships // if(is_array($group_ids) && is_array($group_roles)) // foreach($group_ids as $idx => $group_id) { // if(empty($group_roles[$idx])) { // DAO_Group::unsetTeamMember($group_id, $id); // } else { // DAO_Group::setTeamMember($group_id, $id, (2==$group_roles[$idx])); // } // } // Add the worker e-mail to the addresses table // if(!empty($email)) // DAO_Address::lookupAddress($email, true); // Addresses // if(null == DAO_AddressToWorker::getByAddress($email)) { // DAO_AddressToWorker::assign($email, $id); // DAO_AddressToWorker::update($email, array( // DAO_AddressToWorker::IS_CONFIRMED => 1 // )); // } // Custom field saves @($field_ids = DevblocksPlatform::importGPC($_POST['field_ids'], 'array', array())); DAO_CustomFieldValue::handleFormPost(UmCustomFieldSource_Worker::ID, $id, $field_ids); } if (!empty($view_id)) { $view = Um_AbstractViewLoader::getView($view_id); $view->render(); } //DevblocksPlatform::setHttpResponse(new DevblocksHttpResponse(array('setup','workers'))); }