modules/Users/password_utils.php

   1 <?php
   2 if(!defined('sugarEntry') || !sugarEntry) die('Not A Valid Entry Point');
   3 /*********************************************************************************
   4  * SugarCRM Community Edition is a customer relationship management program developed by
   5  * SugarCRM, Inc. Copyright (C) 2004-2012 SugarCRM Inc.
   6  *
   7  * This program is free software; you can redistribute it and/or modify it under
   8  * the terms of the GNU Affero General Public License version 3 as published by the
   9  * Free Software Foundation with the addition of the following permission added
  10  * to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK
  11  * IN WHICH THE COPYRIGHT IS OWNED BY SUGARCRM, SUGARCRM DISCLAIMS THE WARRANTY
  12  * OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
  13  *
  14  * This program is distributed in the hope that it will be useful, but WITHOUT
  15  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
  16  * FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
  17  * details.
  18  *
  19  * You should have received a copy of the GNU Affero General Public License along with
  20  * this program; if not, see http://www.gnu.org/licenses or write to the Free
  21  * Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
  22  * 02110-1301 USA.
  23  *
  24  * You can contact SugarCRM, Inc. headquarters at 10050 North Wolfe Road,
  25  * SW2-130, Cupertino, CA 95014, USA. or at email address contact@sugarcrm.com.
  26  *
  27  * The interactive user interfaces in modified source and object code versions
  28  * of this program must display Appropriate Legal Notices, as required under
  29  * Section 5 of the GNU Affero General Public License version 3.
  30  *
  31  * In accordance with Section 7(b) of the GNU Affero General Public License version 3,
  32  * these Appropriate Legal Notices must retain the display of the "Powered by
  33  * SugarCRM" logo. If the display of the logo is not reasonably feasible for
  34  * technical reasons, the Appropriate Legal Notices must display the words
  35  * "Powered by SugarCRM".
  36  ********************************************************************************/
  37
  38 /*********************************************************************************
  39
  40  * Description:  TODO To be written.
  41  * Portions created by SugarCRM are Copyright (C) SugarCRM, Inc.
  42  * All Rights Reserved.
  43  * Contributor(s): ______________________________________..
  44  ********************************************************************************/
  45
  46
  47  function canSendPassword() {
  48         require_once('include/SugarPHPMailer.php');
  49     global $mod_strings;
  50         global $current_user;
  51         global $app_strings;
  52         $mail = new SugarPHPMailer();
  53         $emailTemp = new EmailTemplate();
  54         $mail->setMailerForSystem();
  55     $emailTemp->disable_row_level_security = true;
  56
  57
  58     if ($current_user->is_admin){
  59         if ($emailTemp->retrieve($GLOBALS['sugar_config']['passwordsetting']['generatepasswordtmpl']) == '')
  60                 return $mod_strings['LBL_EMAIL_TEMPLATE_MISSING'];
  61         if(empty($emailTemp->body) && empty($emailTemp->body_html))
  62                 return $app_strings['LBL_EMAIL_TEMPLATE_EDIT_PLAIN_TEXT'];
  63         if($mail->Mailer == 'smtp' && $mail->Host =='')
  64                 return $mod_strings['ERR_SERVER_SMTP_EMPTY'];
  65
  66                 $email_errors=$mod_strings['ERR_EMAIL_NOT_SENT_ADMIN'];
  67                 if ($mail->Mailer == 'smtp')
  68                         $email_errors.="<br>-".$mod_strings['ERR_SMTP_URL_SMTP_PORT'];
  69                 if ($mail->SMTPAuth)
  70                         $email_errors.="<br>-".$mod_strings['ERR_SMTP_USERNAME_SMTP_PASSWORD'];
  71                 $email_errors.="<br>-".$mod_strings['ERR_RECIPIENT_EMAIL'];
  72                 $email_errors.="<br>-".$mod_strings['ERR_SERVER_STATUS'];
  73                 return $email_errors;
  74         }
  75         else
  76                 return $mod_strings['LBL_EMAIL_NOT_SENT'];
  77 }
  78
  79 function  hasPasswordExpired($username){
  80     $current_user= new user();
  81     $usr_id=$current_user->retrieve_user_id($username);
  82         $current_user->retrieve($usr_id);
  83         $type = '';
  84         if ($current_user->system_generated_password == '1'){
  85         $type='syst';
  86     }
  87
  88     if ($current_user->portal_only=='0'){
  89             global $mod_strings, $timedate;
  90             $res=$GLOBALS['sugar_config']['passwordsetting'];
  91                 if ($type != '') {
  92                     switch($res[$type.'expiration']){
  93
  94                 case '1':
  95                         global $timedate;
  96                         if ($current_user->pwd_last_changed == ''){
  97                                 $current_user->pwd_last_changed= $timedate->nowDb();
  98                                 $current_user->save();
  99                                 }
 100
 101                         $expireday = $res[$type.'expirationtype']*$res[$type.'expirationtime'];
 102                         $expiretime = $timedate->fromUser($current_user->pwd_last_changed)->get("+{$expireday} days")->ts;
 103
 104                             if ($timedate->getNow()->ts < $expiretime)
 105                                 return false;
 106                             else{
 107                                 $_SESSION['expiration_type']= $mod_strings['LBL_PASSWORD_EXPIRATION_TIME'];
 108                                 return true;
 109                                 }
 110                                 break;
 111
 112
 113                     case '2':
 114                         $login=$current_user->getPreference('loginexpiration');
 115                         $current_user->setPreference('loginexpiration',$login+1);
 116                         $current_user->save();
 117                         if ($login+1 >= $res[$type.'expirationlogin']){
 118                                 $_SESSION['expiration_type']= $mod_strings['LBL_PASSWORD_EXPIRATION_LOGIN'];
 119                                 return true;
 120                         }
 121                         else
 122                             {
 123                                 return false;
 124                                 }
 125                         break;
 126
 127                     case '0':
 128                         return false;
 129                                 break;
 130                     }
 131                 }
 132     }
 133 }