add_user.php

<?php
// This file is part of the Huygens Remote Manager
// Copyright and license notice: see license.txt

use hrm\Mail;
use hrm\Nav;
use hrm\user\proxy\ProxyFactory;
use hrm\user\UserConstants;
use hrm\user\UserManager;
use hrm\Util;
use hrm\Validator;

require_once dirname(__FILE__) . '/inc/bootstrap.php';


// Settings
global $hrm_url, $image_folder, $image_host, $email_sender, $userManagerScript;

session_start();

if (!isset($_SESSION['user']) || !$_SESSION['user']->isLoggedIn()) {
    header("Location: " . "login.php");
    exit();
}

$message = "";

$added = False;

// Here we store the cleaned variables
$clean = array(
    "username" => "",
    "email" => '',
    "group" => "",
    "authMode" => "",
    "informUserOnCreation" => false);

// Username
if (isset($_POST["username"])) {
    if (Validator::isUserNameValid($_POST["username"])) {
        $clean["username"] = $_POST["username"];
    }
}

// Email
if (isset($_POST["email"])) {
    if (Validator::isEmailValid($_POST["email"])) {
        $clean["email"] = $_POST["email"];
    }
}

// Group name
if (isset($_POST["group"])) {
    if (Validator::isGroupNameValid($_POST["group"])) {
        $clean["group"] = $_POST["group"];
    }
}

// Authentication mode
$clean["authMode"] = ProxyFactory::getDefaultAuthenticationMode();
if (isset($_POST["authMode"])) {
    $clean["authMode"] = $_POST["authMode"];
}

// Inform the user on creation?
$clean["informUserOnCreation"] = false;
if (isset($_POST["inform"]) && $_POST["inform"] == "Yes") {
    $clean["informUserOnCreation"] = true;
}

/*
 *
 * END OF SANITIZE INPUT
 *
 */

if (isset($_GET['home'])) {
    header("Location: " . "home.php");
    exit();
}

// Add the user
if (isset($_POST['add'])) {

    if ($clean["username"] == "") {
        $message = "Please provide a user name!";
    } else if ($clean["email"] == "") {
        $message = "Please provide a valid email address!";
    } else if ($clean['group'] == "") {
        $message = "Please provide a group!";
    } else {

        // Make sure that there is no user with same name
        if (UserManager::existsUserWithName($clean['username'])) {
            $name = $clean['username'];
            $message = "Sorry, a user with name $name exists already!";
        } else {

            // Add the user
            // TODO: add institution and authentication mode!
            $institution_id = 1;
            $password = UserManager::generateRandomPlainPassword();
            $result = UserManager::createUser($clean["username"],
                $password, $clean["email"], $clean["group"], $institution_id,
                $clean["authMode"], UserConstants::ROLE_USER, UserConstants::STATUS_ACTIVE);

            // TODO refactor
            if ($result) {
                if ($clean["informUserOnCreation"]) {
                    $text = "Your account has been activated:\n\n";
                    $text .= "\t      Username: " . $clean["username"] . "\n";
                    if ($clean["authMode"] == "integrated") {
                        $text .= "\t      Password: " . $password . "\n\n";
                    } else {
                        $text .= "\t      Password: Use your " . ProxyFactory::getDefaultProxy()->friendlyName() .
                            " password to login.\n\n";
                    }
                    $text .= "Login here\n";
                    $text .= $hrm_url . "\n\n";
                    $folder = $image_folder . "/" . $clean["username"];
                    $text .= "Source and destination folders for your images are " .
                        "located on server " . $image_host . " under " . $folder . ".";
                    $mail = new Mail($email_sender);
                    $mail->setReceiver($clean['email']);
                    $mail->setSubject('Account activated');
                    $mail->setMessage($text);
                    $mail->send();
                }
                $message = "New user successfully added to the system.";
                shell_exec("$userManagerScript create \"" . $clean["username"] . "\"");
                $added = True;
            } else {
                $message = "Sorry, the user could not be registered. Please contact your administrator.";
            }
        }
    }
}

include("header.inc.php");

?>

<!--
  Tooltips
-->
<span class="toolTip" id="ttSpanCancel">Cancel and return to user management.</span>
<span class="toolTip" id="ttSpanSave">Add the user.</span>

<div id="nav">
    <div id="navleft">
        <ul>
            <?php
            echo(Nav::linkWikiPage('HuygensRemoteManagerHelpUserManagement'));
            ?>
        </ul>
    </div>
    <div id="navright">
        <ul>
            <?php
            echo(Nav::textUser($_SESSION['user']->name()));
            echo(Nav::linkHome(Util::getThisPageName()));
            ?>
        </ul>
    </div>
    <div class="clear"></div>
</div>


<div id="content">

    <h3>Add user</h3>

    <form method="post" action="">

        <fieldset>

            <legend>New account details</legend>

            <div id="adduser">

                <p>Default authentication mechanism
                    is <?php echo(ProxyFactory::getDefaultProxy()->friendlyName()); ?>.</p>

                <label for="username">Username: </label>
                <input type="text"
                       name="username"
                       id="username"
                       value=""
                       class=""/>

                <br/>

                <label for="email">E-mail address: </label>
                <input type="text"
                       name="email"
                       id="email"
                       value=""
                       class=""/>

                <br/>

                <label for="group">Research group: </label>
                <input type="text"
                       name="group"
                       id="group"
                       value=""
                       class=""/>

                <br/>


                <br/>

                <select name="authMode"
                        id="authMode"
                        title="Authentication mode"
                        class="selection">

                    <?php

                    // Retrieve all configured authentication modes
                    $allAuthMap = ProxyFactory::getAllConfiguredAuthenticationModes();

                    // Get default authentication mode
                    $defaultAuthMode = ProxyFactory::getDefaultAuthenticationMode();

                    $auth_keys = array_keys($allAuthMap);
                    for ($i = 0; $i < count($allAuthMap); $i++) {
                        $value = $auth_keys[$i];
                        $text = $allAuthMap[$value];
                        if ($defaultAuthMode == $value) {
                            $selected = "selected";
                        } else {
                            $selected = "";
                        }
                        echo("<option value='$value' $selected>$text</option>");
                    }

                    ?>
                </select>

            </div>

            <p>

                <input title="Send an e-mail to the user"
                       type="checkbox"
                       name="inform"
                       id="inform"
                       value='Yes'/>Send an e-mail to the user on creation?
            </p>

      <div id="controls">
            <input type="submit" name="add" value="add"
                   class="icon save"
                   onmouseover="TagToTip('ttSpanSave')"
                   onmouseout="UnTip()" />
            <input type="button" name="cancel" value="cancel"
                   class="icon cancel"
                   onmouseover="TagToTip('ttSpanCancel')"
                   onmouseout="UnTip()"
                   onclick="document.location.href='user_management.php'"/>
        </div>

        </fieldset>

    </form>

</div> <!-- content -->

<div id="rightpanel">

    <div id="info">

        <h3>Quick help</h3>

        <p>Add a new user to HRM. Please make sure to choose
            the proper authentication mechanism.</p>

    </div>

    <div id="message">
        <?php

        echo "<p>$message</p>";

        ?>
    </div>

</div>  <!-- rightpanel -->

<?php

include("footer.inc.php");

?>