<h2>File Contents: /home/planet5/www/4xpips.net/secure/library/Am/Protect/Table.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/www/4xpips.net/secure/library/Am/Protect/Table.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php

/**
 * Table class to maintain a third-party script users table
 * @package Am_Protect 
 */
class Am_Protect_Table extends Am_Table
{
    const BY_LOGIN = &#039;login&#039;;
    const BY_EMAIL = &#039;email&#039;;

    /** special field for password  for usage in @see getFieldsMapping() */
    const FIELD_PASS = &#039;_pass&#039;;
    /** special field for password salt for usage in @see getFieldsMapping() */
    const FIELD_SALT = &#039;_salt&#039;;
    /** special field to represent usergroup field in table - this fits only one group! */
    const FIELD_GROUP_ID = &#039;_group&#039;;
    /** special field to represent &quot;added&quot; field in table in SQL format */
    const FIELD_ADDED_SQL = &#039;_added_sql&#039;;
    /** special field to represent &quot;added&quot; field in table in int timestamp format */
    const FIELD_ADDED_STAMP = &#039;_added_stamp&#039;;

    const FIELD_ID = &#039;user_id&#039;;
    const FIELD_LOGIN = &#039;login&#039;;
    const FIELD_EMAIL = &#039;email&#039;;
    const FIELD_NAME_F = &#039;name_f&#039;;
    const FIELD_NAME_L = &#039;name_l&#039;;
    const FIELD_NAME = &#039;name&#039;;
    const FIELD_REMOTE_ADDR = &#039;remote_addr&#039;;

    const GROUP_TABLE = &#039;group-table&#039;;
    const GROUP_UID = &#039;group-uid&#039;;
    const GROUP_GID = &#039;group-gid&#039;;
    const GROUP_ADDITIONAL_FIELDS = &#039;group-additional&#039;;

    protected $_recordClass = &#039;Am_Record&#039;;
    /** @return array of fields mapping amember-user-field -&gt; plugin-field
     * mapping MUST return at least one mapping for FIELD_EMAIL, FIELD_LOGIN and FIELD_PASS&lt;br/&gt;
     * Can also accept callbacks and constants as amember-user-field
     * constants should have : as first char, functions @, object methods should be passed as array()&lt;br/&gt;
     * Pass $user object to callbacks.&lt;br/&gt;
     * examples:&lt;br/&gt;
     * &lt;b&gt;array(&#039;:value&#039;, &#039;field&#039;)&lt;/b&gt; - field will be set to value&lt;br/&gt;
     * &lt;b&gt;array(&#039;!value&#039;, &#039;field&#039;)&lt;/b&gt; - field will be set to eval(value)&lt;br/&gt;
     * &lt;b&gt;array(&#039;@func&#039;, &#039;field&#039;)&lt;/b&gt; - func($user) will be executed, value returned by function will be assigned to field&lt;br/&gt;
     * &lt;b&gt;array(array($this, &quot;func&quot;), &#039;field&#039;)&lt;/b&gt; - $this-&gt;func($user) will be executed, value returned by function will be assigned to field&lt;br/&gt;
     *
     *  */
    protected $_fieldsMapping = array();
 
    /** @var Am_Protect_Databased */
    protected $_plugin;
    protected $_groupMode = null;
    // you do not need to touch these values - it is handled automatically
    // based on @see $_fieldsMapping in constructor 
    public $_passField;
    public $_saltField;
    public $_loginField;
    public $_emailField;
    /** it will be automatically changed to e-mail if there is no login field in mapping */
    public $_idType = self::BY_LOGIN;
    /** Config of group table where groups are saved as separate records
     * a sample for drupal
     *  array(self::GROUP_TABLE =&gt; &#039;?_users_roles&#039;, self::GROUP_UID =&gt; &#039;uid&#039;, self::GROUP_GID =&gt; &#039;rid&#039;)
     */
    protected $_groupTableConfig = array();

    public function __construct(Am_Protect_Databased $plugin, $db = null, $table = null, $recordClass = null, $key = null)
    {
        $this-&gt;_plugin = $plugin;
        $this-&gt;_groupMode = $plugin-&gt;getGroupMode();
        parent::__construct($db, $table, $recordClass, $key);
        if ($this-&gt;_fieldsMapping)
            $this-&gt;setFieldsMapping($this-&gt;_fieldsMapping);
    }
    
    public function getIdType()
    {
        return $this-&gt;_idType;
    }

    function setFieldsMapping(array $mapping)
    {
        $this-&gt;_fieldsMapping = $mapping;
        foreach ($this-&gt;_fieldsMapping as $a)
        {
            list($k, $v) = $a;
            if (!$this-&gt;_loginField &amp;&amp; ($k == self::FIELD_LOGIN))
                $this-&gt;_loginField = $v;
            if (!$this-&gt;_emailField &amp;&amp; ($k == self::FIELD_EMAIL))
                $this-&gt;_emailField = $v;
            if (!$this-&gt;_passField &amp;&amp; ($k == self::FIELD_PASS))
                $this-&gt;_passField = $v;
            if (!$this-&gt;_saltField &amp;&amp; ($k == self::FIELD_SALT))
                $this-&gt;_saltField = $v;
        }
        if (!$this-&gt;_loginField &amp;&amp; $this-&gt;_emailField)
            $this-&gt;_idType = self::BY_EMAIL;
    }

    function setGroupsTableConfig(array $config)
    {
        $this-&gt;_groupTableConfig = $config;
    }

    function getFieldsMapping()
    {
        return $this-&gt;_fieldsMapping;
    }

    /** @return Am_Protect_Databased */
    public function getPlugin()
    {
        return $this-&gt;_plugin;
    }

    public function findFirstByLogin($login)
    {
        $ret = $this-&gt;findFirstBy(array($this-&gt;_loginField =&gt; $login));
        return $ret;
    }

    public function findFirstByEmail($email)
    {
        $ret = $this-&gt;findFirstBy(array($this-&gt;_emailField =&gt; $email));
        return $ret;
    }

    /** @return Am_Record|null */
    public function findByAmember(User $user)
    {
        return $this-&gt;_idType == self::BY_EMAIL ?
            $this-&gt;findFirstByEmail($user-&gt;email) :
            $this-&gt;findFirstByLogin($user-&gt;login);
    }

    /** Insert record based on aMember records
     * automatically fills fields from the @see getFieldsMapping()
     * @return Am_Record
     */
    function createFromAmember(User $user, SavedPass $pass, $groups)
    {
        $record = $this-&gt;createRecord();
        foreach ($this-&gt;_fieldsMapping as $a)
        {
            list($k, $v) = $a;
            switch ($k)
            {
                case self::FIELD_PASS:
                    $record-&gt;set($v, $pass-&gt;pass);
                    break;
                case self::FIELD_SALT:
                    $record-&gt;set($v, $pass-&gt;salt);
                    break;
                case self::FIELD_ADDED_SQL:
                    $record-&gt;set($v, $user-&gt;added);
                    break;
                case self::FIELD_ADDED_STAMP:
                    $record-&gt;set($v, strtotime($user-&gt;added));
                    break;
                case self::FIELD_NAME:
                    $record-&gt;set($v, $user-&gt;getName());
                    break;
                default:
                    if (is_callable($k))
                        $val = call_user_func($k, $user, $this);
                    elseif ($k[0] == &#039;:&#039;)
                        $val = substr($k, 1);
                    elseif ($k[0] == &#039;!&#039;)
                        $val = eval(substr($k, 1));
                    elseif ($k[0] != &#039;_&#039;)
                        $val = $user-&gt;get($k);
                    else 
                        break;
                    $record-&gt;set($v, is_null($val) ? &quot;&quot; : $val);
            }
        }
        return $record;
    }

    /** Update record based on updated aMember record
     * automatically fills fields from the @see getFieldsMapping()
     */
    function refreshFromAmember(Am_Record $record, User $user, $groups)
    {
        foreach ($this-&gt;getFieldsMapping() as $a)
        {
            list($k, $v) = $a;
            switch ($k)
            {
                case self::FIELD_LOGIN:
                case self::FIELD_EMAIL:
                    $record-&gt;set($v, $user-&gt;get($k));
                    break;
            }
        }
    }

    /**
     * Insert record to plugin based on amember record
     * @param User $user
     * @param SavedPass $pass
     * @param int|array|bool $groups - type depends on plugin groupsType
     * @return Am_Record
     */
    function insertFromAmember(User $user, SavedPass $pass, $groups)
    {
        $record = $this-&gt;createFromAmember($user, $pass, $groups);
        $record-&gt;insert();
        $this-&gt;setGroups($record, $groups);
        return $record;
    }

    public function updateFromAmember(Am_Record $record, User $user, $groups)
    {
        $this-&gt;refreshFromAmember($record, $user, $groups);
        $record-&gt;update();
        $this-&gt;setGroups($record, $groups);
    }

    public function delete($key)
    {
        parent::delete($key);
        if ($this-&gt;_groupTableConfig)
        {
            $table = $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_TABLE];
            $uidField = $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_UID];
            $this-&gt;_db-&gt;query(&quot;DELETE FROM {$table} WHERE ?#=?&quot;, $uidField, $key);
        }
    }
    
    public function updatePassword(Am_Record $record, SavedPass $saved)
    {
        if (!$this-&gt;_passField)
            throw new Am_Exception_NotImplemented (get_class($this) . &quot;-&gt;updatePassword() is not implemented&quot;);
        $arr = array(  $this-&gt;_passField =&gt; $saved-&gt;pass );
        if ($this-&gt;_saltField)
            $arr[ $this-&gt;_saltField ] = $saved-&gt;salt;
        $record-&gt;updateQuick($arr);
    }

    public function removeRecord(Am_Record $record)
    {
        $record-&gt;delete();
    }
    /** Set record to &quot;default&quot; or &quot;disabled&#039; state depending on config
     *  it is exists when no related aMember record is exist in database
     */
    public function disableRecord(Am_Record $record, $groups)
    {
        $this-&gt;setGroups($record, $groups);
    }
    /** Find related amember user based on current record login
     *  Do not check password or groups here
     * @return User
     */
    function findAmember(Am_Record $record)
    {
        return $this-&gt;_idType == Am_Protect_Table::BY_EMAIL ?
            $this-&gt;getDi()-&gt;userTable-&gt;findFirstByEmail($record-&gt;get($this-&gt;_emailField)) :
            $this-&gt;getDi()-&gt;userTable-&gt;findFirstByLogin($record-&gt;get($this-&gt;_loginField));
    }
    
    /** Create amember record based on the current plugin record
     * automatically fills fields from the @see getFieldsMapping()
     * @return User returns not-inserted user
     */
    function createAmember(User $user, Am_Record $record)
    {
        foreach ($this-&gt;getFieldsMapping() as $a)
        {
            list($k, $v) = $a;
            
            if (is_callable($k) || ($k[0] == &#039;:&#039;) || ($k[0] == &#039;!&#039;) || ($k[0] == &#039;_&#039;) || $k == self::FIELD_NAME)
                continue;
            
            if (($vv = $record-&gt;get($v)) &amp;&amp; !$user-&gt;get($k))
                $user-&gt;set($k, $vv);
        }
        $user-&gt;data()-&gt;set(&quot;created-by-plugin&quot;, $this-&gt;_plugin-&gt;getId());
    }
    /**
     * Update amember record based on the current plugin record
     */
    function updateAmember(User $user)
    {
    }
    /**
     * Check if plaintextPass or saved password of amember user matches password
     * of current record 
     * @param User $user
     * @return bool true if password matches
     */
    function checkPassword(Am_Record $record, User $user, $plaintextPass = null)
    {   
        if (!$this-&gt;_passField)
            throw new Am_Exception_NotImplemented(get_class($this) . &quot;-&gt;checkPassword() is not implemented&quot;);
        if ($plaintextPass)
        {
            $salt = $this-&gt;_saltField ? $record-&gt;get($this-&gt;_saltField) : $record-&gt;get($this-&gt;_passField);
            return $this-&gt;_plugin-&gt;cryptPassword($plaintextPass, $salt, $user) === $record-&gt;get($this-&gt;_passField);
        } else {
            $saved = $this-&gt;_plugin-&gt;findPassword($user);
            if (!$saved) return false;
            if ($record-&gt;get($this-&gt;_passField) != $saved-&gt;pass) return false;
            if ($this-&gt;_saltField &amp;&amp; ($record-&gt;get($this-&gt;_saltField) != $saved-&gt;salt)) return false;
            return true;
        }
    }
    function getGroups(Am_Record $record)
    {
        switch ($this-&gt;_groupMode)
        {
            case Am_Protect_Databased::GROUP_NONE: return null;
            case Am_Protect_Databased::GROUP_MULTI:
                if ($this-&gt;_groupTableConfig)
                {
                    $table = $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_TABLE];
                    $uidField = $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_UID];
                    $gidField = $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_GID];
                    return $this-&gt;_db-&gt;selectCol(&quot;SELECT $gidField FROM $table WHERE $uidField=?&quot;, $record-&gt;pk());
                }
                break;
            case Am_Protect_Databased::GROUP_SINGLE:
                /// may be a field set
                $field = null;
                foreach ($this-&gt;_fieldsMapping as $a)
                {
                    list($k, $v) = $a;
                    if ($k == Am_Protect_Table::FIELD_GROUP_ID)
                    {
                        $field = $v;
                        break;
                    }
                }
                if ($field)
                {
                    $v = $record-&gt;get($field);
                    return $v;
                }
                break;
        }
        throw new Am_Exception_NotImplemented(get_class($this) . &quot;-&gt;getGroups() is not implemented&quot;);
    }

    function setGroups(Am_Record $record, $groups)
    {
        switch ($this-&gt;_groupMode)
        {
            case Am_Protect_Databased::GROUP_NONE: return null;
            case Am_Protect_Databased::GROUP_MULTI:
                if ($this-&gt;_groupTableConfig)
                {
                    $this-&gt;_setTableGroups($record, $groups);
                    return $this;
                }
                break;
            case Am_Protect_Databased::GROUP_SINGLE:
                foreach ($this-&gt;getFieldsMapping() as $a)
                {
                    list($k, $v) = $a;
                    if ($k == Am_Protect_Table::FIELD_GROUP_ID)
                    {
                        $record-&gt;updateQuick($v, $groups);
                        return $this;
                    }
                }
                break;
        }
        throw new Am_Exception_NotImplemented(get_class($this) . &quot;-&gt;setGroups() is not implemented&quot;);
    }

    /**
     * For usage within $this-&gt;setGroups() when $_groupTableConfig defined
     * @param array $groups - just ids to set
     */
    protected function _setTableGroups(Am_Record $record, $groups)
    {
        $table = $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_TABLE];
        $uidField = $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_UID];
        $gidField = $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_GID];
        $fields = empty($this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_ADDITIONAL_FIELDS]) ? 
            array() :   $this-&gt;_groupTableConfig[Am_Protect_Table::GROUP_ADDITIONAL_FIELDS];
        // update groups
        $oldGroups = $this-&gt;getGroups($record);
        $added = array_unique(array_diff($groups, $oldGroups));
        $deleted = array_unique(array_diff($oldGroups, $groups));
        if ($deleted)
            $this-&gt;_db-&gt;query(&quot;DELETE FROM $table WHERE $uidField=? AND $gidField IN (?a)&quot;, $record-&gt;pk(), $deleted);
        $sql = array();
        $fk = $fv = &#039;&#039;;
        if(!empty($fields)){
            $field_keys = array_keys($fields);
            $field_values = array_values($fields); 
            array_walk($field_values, create_function(&#039;&amp;$value, $key, $db&#039;, &#039;$value = $db-&gt;escape($value);&#039;), $this-&gt;_db);
            if(!empty($field_keys)){
                $fk = &quot;, &quot;.join(&quot;, &quot;, $field_keys);
                $fv = &quot;, &quot;.join(&quot;, &quot;, $field_values);
            }
        }
        foreach ($added as $group)
            if(!is_null($group)) $sql[] = &quot;(&#039;$group&#039;, &quot; . $record-&gt;pk() . $fv.&quot;)&quot;;
        if ($sql)
            $this-&gt;_db-&gt;query(&quot;INSERT INTO $table ($gidField, $uidField$fk) VALUES &quot; . join(&quot;,&quot;, $sql));
    }
}</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fwww%2F4xpips.net%2Fsecure%2Flibrary%2FAm%2FProtect'>⬅ Back to Directory</a>