user-del.php

<?php
/*
 SPDX-FileCopyrightText: © 2008-2013 Hewlett-Packard Development Company, L.P.
 SPDX-FileCopyrightText: © 2017 Siemens AG
 
 SPDX-License-Identifier: GPL-2.0-only
*/
 
require_once "user-del-helper.php";
define("TITLE_USER_DEL", _("Delete A User"));
 
use \Fossology\Lib\Auth\Auth;
 
class user_del extends FO_Plugin
{
  function __construct()
  {
    $this->Name       = "user_del";
    $this->Title      = TITLE_USER_DEL;
    $this->MenuList   = "Admin::Users::Delete";
    $this->DBaccess   = PLUGIN_DB_ADMIN;
    $this->dbManager  = $GLOBALS['container']->get('db.manager');
 
    parent::__construct();
  }
 
  function Delete($UserId)
  {
    global $PG_CONN;
    /* See if the user already exists */
    $sql = "SELECT * FROM users WHERE user_pk = '$UserId' LIMIT 1;";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    $row = pg_fetch_assoc($result);
    pg_free_result($result);
    if (empty($row['user_name'])) {
      $text = _("User does not exist.");
      return ($text);
    }
 
    /* Delete the users group
     * First look up the users group_pk
     */
    $sql = "SELECT group_pk FROM groups WHERE group_name = '$row[user_name]' LIMIT 1;";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    $GroupRow = pg_fetch_assoc($result);
    pg_free_result($result);
 
    /* Delete all the group user members for this user_pk */
    $sql = "DELETE FROM group_user_member WHERE user_fk = '$UserId'";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    pg_free_result($result);
 
    /* Delete the user */
    $sql = "DELETE FROM users WHERE user_pk = '$UserId';";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    pg_free_result($result);
 
    /* Now delete their group */
    DeleteGroup($GroupRow['group_pk']);
 
    /* Make sure it was deleted */
    $sql = "SELECT * FROM users WHERE user_name = '$UserId' LIMIT 1;";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    $rowCount = pg_num_rows($result);
    pg_free_result($result);
    if ($rowCount != 0) {
      $text = _("Failed to delete user.");
      return ($text);
    }
 
    return(NULL);
  } // Delete()
 
  public function Output()
  {
    global $PG_CONN;
    $V="";
    /* If this is a POST, then process the request. */
    $User = GetParm('userid',PARM_TEXT);
    $Confirm = GetParm('confirm',PARM_INTEGER);
    if (! empty($User)) {
      if ($Confirm != 1) {
        $rc = "Deletion not confirmed. Not deleted.";
      } else {
        $rc = deleteUser($User, $this->dbManager);
      }
      if (empty($rc)) {
        /* Need to refresh the screen */
        $text = _("User deleted.");
        $this->vars['message'] = $text;
      } else {
        $this->vars['message'] = $rc;
      }
    }
 
    /* Get the user list */
    $currentUserId = Auth::getUserId();
    $sql = "SELECT user_pk,user_name,user_desc FROM users WHERE user_pk != '$currentUserId' AND user_pk != '1' ORDER BY user_name";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    if (pg_num_rows($result) == 0) {
      $V .= _("No users to delete.");
    } else {
      /* Build HTML form */
      $V .= _("Deleting a user removes the user entry from the FOSSology system. The user's name, account information, and password will be <font color='red'>permanently</font> removed. (There is no 'undo' to this delete.)<P />\n");
      $V .= "<form name='formy' method='POST'>\n"; // no url = this url
      $V .= _("To delete a user, enter the following information:<P />\n");
      $V .= "<ol>\n";
      $V .= _("<li>Select the user to delete.<br />");
      $V .= "<select name='userid' class='ui-render-select2'>\n";
      while ($row = pg_fetch_assoc($result)) {
        $V .= "<option value='" . $row['user_pk'] . "'>";
        $V .= $row['user_name'];
        $V .= "</option>\n";
      }
      $V .= "</select>\n";
 
      $text = _("Confirm user deletion");
      $V .= "<P /><li>$text: <input type='checkbox' name='confirm' value='1'>";
      $V .= "</ol>\n";
 
      $text = _("Delete");
      $V .= "<input type='submit' value='$text'>\n";
      $V .= "</form>\n";
    }
    pg_free_result($result);
 
    return $V;
  }
}
 
$NewPlugin = new user_del();