mirror of
https://gitlab.easter-eggs.com/ee/ldapsaisie.git
synced 2024-05-09 15:35:26 +02:00
109 lines
4.2 KiB
PHP
109 lines
4.2 KiB
PHP
<?php
|
|
/*******************************************************************************
|
|
* Copyright (C) 2019 Easter-eggs
|
|
* http://ldapsaisie.org
|
|
*
|
|
* Author: See AUTHORS file in top-level directory.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License version 2
|
|
* as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
******************************************************************************/
|
|
|
|
/**
|
|
* Check that password is different of another attribute of this user
|
|
*
|
|
* @author Benjamin Renard <brenard@easter-eggs.com>
|
|
*/
|
|
class LSformRule_differentPassword extends LSformRule {
|
|
|
|
// CLI parameters autocompleters
|
|
protected static $cli_params_autocompleters = array(
|
|
'otherPasswordAttributes' => null,
|
|
);
|
|
|
|
/**
|
|
* Validate form element value
|
|
*
|
|
* @param mixed $value The value to validate
|
|
* @param array $options Validation options:
|
|
* - Other attribute : $options['params']['otherPasswordAttributes']
|
|
* @param LSformElement &$formElement The related LSformElement object
|
|
*
|
|
* @return boolean True if value is valid, False otherwise
|
|
*/
|
|
public static function validate($value, $options, &$formElement) {
|
|
$otherPasswordAttributes = LSconfig :: get('params.otherPasswordAttributes', null, null, $options);
|
|
if (!is_null($otherPasswordAttributes)) {
|
|
// Load LSattr_ldap_password
|
|
if (!LSsession :: loadLSclass("LSattr_ldap_password")) {
|
|
LSerror :: addErrorCode('LSformRule_differentPassword_02');
|
|
return false;
|
|
}
|
|
|
|
// Iter on otherPasswordAttributes to check password does not match
|
|
foreach(ensureIsArray($otherPasswordAttributes) as $attr) {
|
|
// Check attribute exist
|
|
if (!isset($formElement -> attr_html -> attribute -> ldapObject -> attrs[$attr])) {
|
|
LSerror :: addErrorCode('LSformRule_differentPassword_03', $attr);
|
|
return false;
|
|
}
|
|
|
|
// Check is not the same attribute of the current one
|
|
if ($formElement -> attr_html -> attribute -> name == $attr) {
|
|
LSerror :: addErrorCode('LSformRule_differentPassword_04');
|
|
return false;
|
|
}
|
|
|
|
// Check attribute use LSldap_attr :: password type
|
|
if (!$formElement -> attr_html -> attribute -> ldapObject -> attrs[$attr] -> ldap instanceof LSattr_ldap_password) {
|
|
LSerror :: addErrorCode('LSformRule_differentPassword_05', $attr);
|
|
return false;
|
|
}
|
|
|
|
if ($formElement -> attr_html -> attribute -> ldapObject -> attrs[$attr] -> ldap -> verify($value, $formElement -> form -> getValue($attr))) {
|
|
LSdebug($formElement -> name . " : Password matched with attribute $attr");
|
|
return false;
|
|
}
|
|
else
|
|
LSdebug($formElement -> name . " : Password does not match with $attr");
|
|
}
|
|
}
|
|
else {
|
|
LSerror :: addErrorCode('LSformRule_differentPassword_01');
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
}
|
|
|
|
/*
|
|
* Error Codes
|
|
*/
|
|
LSerror :: defineError('LSformRule_differentPassword_01',
|
|
___("LSformRule_differentPassword : Other password attribute is not configured.")
|
|
);
|
|
LSerror :: defineError('LSformRule_differentPassword_02',
|
|
___("LSformRule_differentPassword : Fail to load LSattr_ldap :: password class.")
|
|
);
|
|
LSerror :: defineError('LSformRule_differentPassword_03',
|
|
___("LSformRule_differentPassword : The other password attribute %{attr} does not exist.")
|
|
);
|
|
LSerror :: defineError('LSformRule_differentPassword_04',
|
|
___("LSformRule_differentPassword : The other password attribute could not be the same of the current one.")
|
|
);
|
|
LSerror :: defineError('LSformRule_differentPassword_05',
|
|
___("LSformRule_differentPassword : The other password attributes must use LSattr_ldap :: password. It's not the case of the attribure %{attr}.")
|
|
);
|