Gecko [ 167.86.127.34 ]

Name	Size	Permission
cli	[ DIR ]	drwxr-xr-x
client	[ DIR ]	drwxr-xr-x
config	[ DIR ]	drwxr-xr-x
fpdf	[ DIR ]	drwxr-xr-x
i18n	[ DIR ]	drwxr-xr-x
mpdf	[ DIR ]	drwxr-xr-x
pear	[ DIR ]	drwxr-xr-x
plugins	[ DIR ]	drwxr-xr-x
staff	[ DIR ]	drwxr-xr-x
upgrader	[ DIR ]	drwxr-xr-x
.MANIFEST	163.74 KB	-rw-r--r--
.htaccess	14 B	-rw-r--r--
JSON.php	33.13 KB	-rw-r--r--
PasswordHash.php	6.92 KB	-rw-r--r--
Spyc.php	31.73 KB	-rw-r--r--
UniversalClassLoader.php	8.61 KB	-rw-r--r--
ajax.admin.php	7.21 KB	-rw-r--r--
ajax.config.php	4.55 KB	-rw-r--r--
ajax.content.php	9.47 KB	-rw-r--r--
ajax.draft.php	12.72 KB	-rw-r--r--
ajax.export.php	1006 B	-rw-r--r--
ajax.filter.php	874 B	-rw-r--r--
ajax.forms.php	13.3 KB	-rw-r--r--
ajax.i18n.php	4.91 KB	-rw-r--r--
ajax.kbase.php	2.93 KB	-rw-r--r--
ajax.note.php	2.05 KB	-rw-r--r--
ajax.orgs.php	11.7 KB	-rw-r--r--
ajax.schedule.php	4.29 KB	-rw-r--r--
ajax.search.php	12.35 KB	-rw-r--r--
ajax.sequence.php	3.2 KB	-rw-r--r--
ajax.staff.php	7.84 KB	-rw-r--r--
ajax.tasks.php	30.25 KB	-rw-r--r--
ajax.thread.php	8.89 KB	-rw-r--r--
ajax.tickets.php	74 KB	-rw-r--r--
ajax.tips.php	1.66 KB	-rw-r--r--
ajax.upgrader.php	2.24 KB	-rw-r--r--
ajax.users.php	17.8 KB	-rw-r--r--
api.cron.php	909 B	-rw-r--r--
api.tickets.php	8.26 KB	-rw-r--r--
class.ajax.php	1.42 KB	-rw-r--r--
class.api.php	13.14 KB	-rw-r--r--
class.app.php	1.47 KB	-rw-r--r--
class.attachment.php	6.87 KB	-rw-r--r--
class.auth.php	43.91 KB	-rw-r--r--
class.avatar.php	6.43 KB	-rw-r--r--
class.banlist.php	2.54 KB	-rw-r--r--
class.base32.php	4.06 KB	-rw-r--r--
class.businesshours.php	6.72 KB	-rw-r--r--
class.canned.php	8.58 KB	-rw-r--r--
class.captcha.php	1.73 KB	-rw-r--r--
class.category.php	11.04 KB	-rw-r--r--
class.charset.php	3.4 KB	-rw-r--r--
class.cli.php	9.48 KB	-rw-r--r--
class.client.php	15.02 KB	-rw-r--r--
class.collaborator.php	5.44 KB	-rw-r--r--
class.company.php	2.65 KB	-rw-r--r--
class.config.php	58.51 KB	-rw-r--r--
class.cron.php	3.54 KB	-rw-r--r--
class.crypto.php	18.96 KB	-rw-r--r--
class.csrf.php	2.36 KB	-rw-r--r--
class.dept.php	32.39 KB	-rw-r--r--
class.dispatcher.php	6.72 KB	-rw-r--r--
class.draft.php	6.25 KB	-rw-r--r--
class.dynamic_forms.php	62.12 KB	-rw-r--r--
class.email.php	18.09 KB	-rw-r--r--
class.error.php	1.69 KB	-rw-r--r--
class.export.php	31.8 KB	-rw-r--r--
class.faq.php	15.05 KB	-rw-r--r--
class.file.php	32.41 KB	-rw-r--r--
class.filter.php	27.75 KB	-rw-r--r--
class.filter_action.php	20.27 KB	-rw-r--r--
class.format.php	40.68 KB	-rw-r--r--
class.forms.php	183.13 KB	-rw-r--r--
class.http.php	5.52 KB	-rw-r--r--
class.i18n.php	24.2 KB	-rw-r--r--
class.import.php	6.44 KB	-rw-r--r--
class.json.php	2.69 KB	-rw-r--r--
class.knowledgebase.php	5.8 KB	-rw-r--r--
class.list.php	41.85 KB	-rw-r--r--
class.lock.php	4.05 KB	-rw-r--r--
class.log.php	1.54 KB	-rw-r--r--
class.mailer.php	24.05 KB	-rw-r--r--
class.mailfetch.php	37.24 KB	-rw-r--r--
class.mailparse.php	26.7 KB	-rw-r--r--
class.message.php	6.4 KB	-rw-r--r--
class.migrater.php	5.2 KB	-rw-r--r--
class.misc.php	8.15 KB	-rw-r--r--
class.model.php	2.3 KB	-rw-r--r--
class.nav.php	14.14 KB	-rw-r--r--
class.note.php	2.39 KB	-rw-r--r--
class.organization.php	22.44 KB	-rw-r--r--
class.orm.php	119.54 KB	-rw-r--r--
class.osticket.php	18.8 KB	-rw-r--r--
class.ostsession.php	9.82 KB	-rw-r--r--
class.page.php	10.65 KB	-rw-r--r--
class.pagenate.php	5.13 KB	-rw-r--r--
class.passwd.php	1.19 KB	-rw-r--r--
class.pdf.php	3.62 KB	-rw-r--r--
class.plugin.php	23.89 KB	-rw-r--r--
class.priority.php	1.81 KB	-rw-r--r--
class.queue.php	102.01 KB	-rw-r--r--
class.report.php	11.47 KB	-rw-r--r--
class.role.php	11.12 KB	-rw-r--r--
class.schedule.php	46.03 KB	-rw-r--r--
class.search.php	56.26 KB	-rw-r--r--
class.sequence.php	7.27 KB	-rw-r--r--
class.setup.php	3.55 KB	-rw-r--r--
class.signal.php	4.16 KB	-rw-r--r--
class.sla.php	8.64 KB	-rw-r--r--
class.staff.php	52.41 KB	-rw-r--r--
class.task.php	49.97 KB	-rw-r--r--
class.team.php	12.01 KB	-rw-r--r--
class.template.php	23.33 KB	-rw-r--r--
class.thread.php	107.11 KB	-rw-r--r--
class.thread_actions.php	17.08 KB	-rw-r--r--
class.ticket.php	162.72 KB	-rw-r--r--
class.timezone.php	21.94 KB	-rw-r--r--
class.topic.php	19.07 KB	-rw-r--r--
class.translation.php	34.38 KB	-rw-r--r--
class.upgrader.php	13.54 KB	-rw-r--r--
class.user.php	42.45 KB	-rw-r--r--
class.usersession.php	4.99 KB	-rw-r--r--
class.util.php	8.01 KB	-rw-r--r--
class.validator.php	12.05 KB	-rw-r--r--
class.variable.php	11.93 KB	-rw-r--r--
class.xml.php	3.23 KB	-rw-r--r--
class.yaml.php	1.16 KB	-rw-r--r--
htmLawed.php	53.53 KB	-rw-r--r--
html2text.php	33.63 KB	-rw-r--r--
index.php	37 B	-rw-r--r--
mysqli.php	8.55 KB	-rw-r--r--
ost-config.php	5.61 KB	-rw-r--r--
ost-sampleconfig.php	5.62 KB	-rw-r--r--
tnef_decoder.php	19.82 KB	-rw-r--r--

Code Editor : class.client.php

<?php
/*********************************************************************
    class.client.php

Handles everything about EndUser

Peter Rotich <peter@osticket.com>
    Copyright (c)  2006-2013 osTicket
    http://www.osticket.com

Released under the GNU General Public License WITHOUT ANY WARRANTY.
    See LICENSE.TXT for details.

vim: expandtab sw=4 ts=4 sts=4:
**********************************************************************/
require_once INCLUDE_DIR.'class.user.php';

abstract class TicketUser
implements EmailContact, ITicketUser, TemplateVariable {

static private $token_regex = '/^(?P<type>\w{1})(?P<algo>\d+)x(?P<hash>.*)$/i';

protected  $user;
    protected $_guest = false;

function __construct($user) {
        $this->user = $user;
    }

function __call($name, $args) {
        global $cfg;

$rv = null;
        if($this->user && is_callable(array($this->user, $name)))
            $rv = $args
                ? call_user_func_array(array($this->user, $name), $args)
                : call_user_func(array($this->user, $name));

return $rv ?: false;
    }

// Required for Internationalization::getCurrentLanguage() in templates
    function getLanguage() {
        return $this->user->getLanguage();
    }

static function getVarScope() {
        return array(
            'email' => __('Email Address'),
            'name' => array('class' => 'PersonsName', 'desc' => __('Full Name')),
            'ticket_link' => __('Link to view the ticket'),
        );
    }

function getVar($tag) {
        global $cfg;

switch (strtolower($tag)) {
        case 'ticket_link':
            $qstr = array();
            $ticket = $this->getTicket();
            if ($cfg && $cfg->isAuthTokenEnabled()
                    && $ticket
                    && !$ticket->getNumCollaborators()) {
                $qstr['auth'] = $ticket->getAuthToken($this);
                return sprintf('%s/view.php?%s',
                        $cfg->getBaseUrl(),
                        Http::build_query($qstr, false)
                        );
            } else {
                return sprintf('%s/tickets.php?id=%s',
                        $cfg->getBaseUrl(),
                        $ticket ? $ticket->getId() : 0
                        );
            }
            break;
        }
    }

static function lookupByToken($token) {

//Expecting well formatted token see getAuthToken routine for details.
        $matches = array();
        if (!preg_match(static::$token_regex, $token, $matches))
            return null;

//Unpack the user and ticket ids
        $matches +=unpack('Vuid/Vtid',
                Base32::decode(strtolower(substr($matches['hash'], 0, 13))));

$user = null;
        if (!($ticket = Ticket::lookup($matches['tid'])))
            // Require a ticket for now
            return null;

switch ($matches['type']) {
            case 'c': //Collaborator c
                if (($user = Collaborator::lookup($matches['uid']))
                        && $user->getTicketId() != $matches['tid'])
                    $user = null;
                break;
            case 'o': //Ticket owner
                if (($user = $ticket->getOwner())
                        && $user->getId() != $matches['uid']) {
                    $user = null;
                }
                break;
        }

if (!$user
                || !$user instanceof ITicketUser
                || strcasecmp($ticket->getAuthToken($user, $matches['algo']), $token))
            return false;

return $user;
    }

static function lookupByEmail($email) {

if (!($user=User::lookup(array('emails__address' => $email))))
            return null;

return new EndUser($user);
    }

function isOwner() {
        return $this instanceof TicketOwner;
    }

function flagGuest() {
        $this->_guest = true;
    }

function isGuest() {
        return $this->_guest;
    }

function getUserId() {
        return $this->user->getId();
    }

abstract function getTicketId();
    abstract function getTicket();
}

class TicketOwner extends  TicketUser {

protected $ticket;

function __construct($user, $ticket) {
        parent::__construct($user);
        $this->ticket = $ticket;
    }

function __toString() {
        return (string) $this->getName();
    }

function getTicket() {
        return $this->ticket;
    }

function getTicketId() {
        return $this->ticket->getId();
    }
}

/*
 * Decorator class for authenticated user
 *
 */

class EndUser extends BaseAuthenticatedUser {

protected $user;
    protected $_account = false;
    protected $_stats;
    protected $topic_stats;

function __construct($user) {
        $this->user = $user;
    }

/*
     * Delegate calls to the user
     */
    function __call($name, $args) {

if(!$this->user
                || !is_callable(array($this->user, $name)))
            return $this->getVar(substr($name, 3));

return  $args
            ? call_user_func_array(array($this->user, $name), $args)
            : call_user_func(array($this->user, $name));
    }

function getId() {
        //We ONLY care about user ID at the ticket level
        if ($this->user instanceof Collaborator)
            return $this->user->getUserId();

elseif ($this->user)
            return $this->user->getId();

return false;
    }

function getUserName() {
        //XXX: Revisit when real usernames are introduced  or when email
        // requirement is removed.
        return $this->user->getEmail();
    }

function getUserType() {
        return $this->isOwner() ? 'owner' : 'collaborator';
    }

function getAuthBackend() {
        list($authkey,) = explode(':', $this->getAuthKey());
        return UserAuthenticationBackend::getBackend($authkey);
    }

function getTicketStats() {
        if (!isset($this->_stats))
            $this->_stats = $this->getStats();

return $this->_stats;
    }

function getNumTickets($forMyOrg=false, $state=false) {
        $stats = $this->getTicketStats();
        $count = 0;
        $section = $forMyOrg ? 'myorg' : 'mine';
        foreach ($stats[$section] as $row) {
            if ($state && $row['status__state'] != $state)
                continue;
            $count += $row['count'];
        }
        return $count;
    }

function getNumOpenTickets($forMyOrg=false) {
        return $this->getNumTickets($forMyOrg, 'open') ?: 0;
    }

function getNumClosedTickets($forMyOrg=false) {
        return $this->getNumTickets($forMyOrg, 'closed') ?: 0;
    }

function getNumTopicTicketsInState($topic_id, $state=false, $forMyOrg=false) {
        $stats = $this->getTicketStats();
        $count = 0;
        $section = $forMyOrg ? 'myorg' : 'mine';
        foreach ($stats[$section] as $row) {
            if ($topic_id != $row['topic_id'])
                continue;
            if ($state && $state != $row['status__state'])
                continue;
            $count += $row['count'];
        }
        return $count;
    }

function getAccount() {
        if ($this->_account === false)
            $this->_account =
                ClientAccount::lookup(array('user_id'=>$this->getId()));

return $this->_account;
    }

function getUser() {
        if ($this->user === false)
            $this->user = User::lookup($this->getId());

return $this->user;
    }

function getLanguage($flags=false) {
        if ($acct = $this->getAccount())
            return $acct->getLanguage($flags);
    }

private function getStats() {
        global $cfg;
        $basic = Ticket::objects()
            ->annotate(array('count' => SqlAggregate::COUNT('ticket_id')))
            ->values('status__state', 'topic_id')
            ->distinct('status_id', 'topic_id');

// Share tickets among the organization for owners only
        $mine = clone $basic;
        $collab = clone $basic;
        $mine->filter(array(
            'user_id' => $this->getId(),
        ));

// Also add collaborator tickets to the list. This may seem ugly;
        // but the general rule for SQL is that a single query can only use
        // one index. Therefore, to scan two indexes (by user_id and
        // thread.collaborators.user_id), we need two queries. A union will
        // help out with that.
        if ($cfg->collaboratorTicketsVisibility())
            $mine->union($collab->filter(array(
                'thread__collaborators__user_id' => $this->getId(),
                Q::not(array('user_id' => $this->getId()))
            )));

if ($orgid = $this->getOrgId()) {
            // Also generate a separate query for all the tickets owned by
            // either my organization or ones that I'm collaborating on
            // which are not part of the organization.
            $myorg = clone $basic;
            $myorg->values('user__org_id');
            $collab = clone $myorg;

$myorg->filter(array('user__org_id' => $orgid));
            $myorg->union($collab->filter(array(
                'thread__collaborators__user_id' => $this->getId(),
                Q::not(array('user__org_id' => $orgid))
            )));
        }

return array('mine' => $mine, 'myorg' => $myorg);
    }

function onLogin($bk) {
        if ($account = $this->getAccount())
            $account->onLogin($bk);
    }
}

class ClientAccount extends UserAccount {

function checkPassword($password, $autoupdate=true) {

/*bcrypt based password match*/
        if(Passwd::cmp($password, $this->get('passwd')))
            return true;

//Fall back to MD5
        if(!$password || strcmp($this->get('passwd'), MD5($password)))
            return false;

//Password is a MD5 hash: rehash it (if enabled) otherwise force passwd change.
        if ($autoupdate)
            $this->set('passwd', Passwd::hash($password));

if (!$autoupdate || !$this->save())
            $this->forcePasswdReset();

return true;
    }

function hasCurrentPassword($password) {
        return $this->checkPassword($password, false);
    }

function cancelResetTokens() {
        // TODO: Drop password-reset tokens from the config table for
        //       this user id
        $sql = 'DELETE FROM '.CONFIG_TABLE.' WHERE `namespace`="pwreset"
            AND `value`='.db_input('c'.$this->getUserId());
        if (!db_query($sql, false))
            return false;

unset($_SESSION['_client']['reset-token']);
    }

function onLogin($bk) {
        $this->setExtraAttr('browser_lang',
            Internationalization::getCurrentLanguage());
        $this->save();
    }

function update($vars, &$errors) {
        global $cfg;

// FIXME: Updates by agents should go through UserAccount::update()
        global $thisstaff, $thisclient;
        if ($thisstaff)
            return parent::update($vars, $errors);

$rtoken = $_SESSION['_client']['reset-token'];
        if ($vars['passwd1'] || $vars['passwd2'] || $vars['cpasswd'] || $rtoken) {

if (!$vars['passwd1'])
                $errors['passwd1']=__('New password is required');
            elseif ($vars['passwd1'] && strlen($vars['passwd1'])<6)
                $errors['passwd1']=__('Password must be at least 6 characters');
            elseif ($vars['passwd1'] && strcmp($vars['passwd1'], $vars['passwd2']))
                $errors['passwd2']=__('Passwords do not match');

if ($rtoken) {
                $_config = new Config('pwreset');
                if ($_config->get($rtoken) != 'c'.$this->getUserId())
                    $errors['err'] =
                        __('Invalid reset token. Logout and try again');
                elseif (!($ts = $_config->lastModified($rtoken))
                        && ($cfg->getPwResetWindow() < (time() - strtotime($ts))))
                    $errors['err'] =
                        __('Invalid reset token. Logout and try again');
            }
            elseif ($this->get('passwd')) {
                if (!$vars['cpasswd'])
                    $errors['cpasswd']=__('Current password is required');
                elseif (!$this->hasCurrentPassword($vars['cpasswd']))
                    $errors['cpasswd']=__('Invalid current password!');
                elseif (!strcasecmp($vars['passwd1'], $vars['cpasswd']))
                    $errors['passwd1']=__('New password MUST be different from the current password!');
            }
        }

// Timezone selection is not required. System default is a valid
        // fallback

if ($errors) return false;

$this->set('timezone', $vars['timezone']);
        // Change language
        $this->set('lang', $vars['lang'] ?: null);
        Internationalization::setCurrentLanguage(null);
        TextDomain::configureForUser($this);

if ($vars['backend']) {
            $this->set('backend', $vars['backend']);
            if ($vars['username'])
                $this->set('username', $vars['username']);
        }

if ($vars['passwd1']) {
            $this->set('passwd', Passwd::hash($vars['passwd1']));
            $info = array('password' => $vars['passwd1']);
            Signal::send('auth.pwchange', $this->getUser(), $info);
            $this->cancelResetTokens();
            $this->clearStatus(UserAccountStatus::REQUIRE_PASSWD_RESET);
            // Clean sessions
            Signal::send('auth.clean', $this->getUser(), $thisclient);
        }

return $this->save();
    }
}

interface ITicketUser {
/* PHP 5.3 < 5.3.8 will crash with some abstract inheritance issue
 * ------------------------------------------------------------
    function isOwner();
    function flagGuest();
    function isGuest();
    function getUserId();
    function getTicketId();
    function getTicket();
 */
}
?>

${this.title}

Code Editor : class.client.php