1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
<?php
namespace Studip\Cli\Commands\User;
use email_validation_class;
use StudipLog;
use Symfony\Component\Console\Command\Command;
use Symfony\Component\Console\Input\InputArgument;
use Symfony\Component\Console\Input\InputOption;
use Symfony\Component\Console\Input\InputInterface;
use Symfony\Component\Console\Output\OutputInterface;
use Symfony\Component\Console\Helper\Table;
use Symfony\Component\Console\Question\Question;
use UserManagement;
/**
* @SuppressWarnings(PHPMD.StaticAccess)
*/
class ChangePassword extends Command
{
protected static $defaultName = 'user:password';
protected function configure(): void
{
$this->setDescription('Change the password of a Stud.IP user.');
$this->setHelp('This command will change the password of a user.');
$this->addArgument(
'username',
InputArgument::REQUIRED,
'The username of the user whose password will be changed.'
);
}
protected function execute(InputInterface $input, OutputInterface $output)
{
$username = $input->getArgument('username');
$user = \User::findOneBySQL('username = ?', [$username]);
if (!$user) {
$output->writeln('<error>Could not find this user.</error>');
return Command::FAILURE;
}
$helper = $this->getHelper('question');
$question = new Question('New password: ', '');
$question->setHidden(true);
$password = $helper->ask($input, $output, $question);
$question2 = new Question('Re-type password: ', '');
$question2->setHidden(true);
$password2 = $helper->ask($input, $output, $question2);
$status = $this->changePassword($user, $password, $password2);
if (isset($status)) {
$output->writeln('<error>' . $status . '</error>');
return Command::FAILURE;
}
return Command::SUCCESS;
}
private function changePassword(\User $user, string $password, string $password2): ?string
{
if ($password !== $password2) {
return 'Password and re-type password don\'t match.';
}
$validator = new email_validation_class();
$validator->timeout = 10;
if (!$validator->ValidatePassword($password)) {
return 'The password is too short. It should have at least 8 characters.';
}
if ($password === $user->username) {
return 'Password may not match the username.';
}
if (str_replace(['.', ' '], '', mb_strtolower($password)) == 'studip') {
return 'For security reasons the password may not be "Stud.IP" or any modification of "Stud.IP".';
}
$userManagement = new UserManagement($user->id);
$changed = $userManagement->changePassword($password);
if (!$changed) {
return 'The password could not be set.';
}
StudipLog::USER_NEWPWD($user->id, null, 'Passwort neu gesetzt', null, $user->id);
return null;
}
}
|
