PHP Xml::setXml方法代码示例

function searchUsers($get)
{
    /***
     *
     ***/
    global $udb, $login_status;
    $q = $udb->sanitize($get['q']);
    $response = array('search' => $q);
    $search = array('username' => $q, 'name' => $q, 'dblink' => $q);
    $cols = array('username', 'name', 'dblink', "email_verified", "alternate_email_verified", "admin_flag", "alternate_email");
    if (!empty($get['cols'])) {
        if (checkUserColumnExists($get['cols'], false)) {
            # Replace the defaults
            $colList = explode(',', $get['cols']);
            $search = array();
            foreach ($colList as $col) {
                $col = trim($col);
                # If the column exists, we don't have to sanitize it
                # $col = $db->sanitize($col);
                $search[$col] = $q;
                $cols[] = $col;
            }
        } else {
            $response['notice'] = 'Invalid columns; defaults used';
            $response["detail"] = checkUserColumnExists($get["cols"], false, true);
        }
    }
    $response['status'] = true;
    $result = $udb->getQueryResults($search, $cols, 'OR', true, true);
    $suFlag = $login_status['detail']['userdata']['su_flag'];
    $isSu = boolstr($suFlag);
    $adminFlag = $login_status['detail']['userdata']['admin_flag'];
    $isAdmin = boolstr($adminFlag);
    foreach ($result as $k => $entry) {
        $clean = array('email' => $entry['username'], 'uid' => $entry['dblink'], "has_verified_email" => boolstr($entry["email_verified"]) || boolstr($entry["alternate_email_verified"]));
        if ($isAdmin) {
            $clean["is_admin"] = boolstr($entry["admin_flag"]);
            $clean["alternate_email"] = $entry["alternate_email"];
            $tmpUser = new UserFunctions($clean["email"]);
            $clean["unrestricted"] = $tmpUser->meetsRestrictionCriteria();
        }
        $nameXml = $entry['name'];
        $xml = new Xml();
        $xml->setXml($nameXml);
        $clean['first_name'] = htmlspecialchars_decode($xml->getTagContents('fname'));
        $clean['last_name'] = htmlspecialchars_decode($xml->getTagContents('lname'));
        $clean['full_name'] = htmlspecialchars_decode($xml->getTagContents('name'));
        $clean['handle'] = $xml->getTagContents('dname');
        $result[$k] = $clean;
    }
    $response['result'] = $result;
    $response['count'] = sizeof($result);
    returnAjax($response);
}

        $deferredJS .= "console.log('Needs phone? '," . strbool($needPhone) . "," . DBHelper::staticSanitize($user->getPhone()) . ");\n";
        $altPhone = "<p>Congratulations! Your phone number is verified.</p>";
    } catch (Exception $e) {
        $needPhone = false;
        $deferredJS .= "console.warn('An exception was thrown checking for SMS-ability:','" . $e->getMessage() . "');\n";
        $altPhone = "<p>You don't have a phone number registered with us. Please go to account settings and add a phone number.</p>";
    }
    $verifyphone_link = $needPhone ? "<li><a href='?q=verify'>Verify Phone</a></li>" : null;
    $phone_verify_form = $needPhone ? $phone_verify_template : $altPhone;
} catch (Exception $e) {
    # There have been no cookies set.
    $logged_in = false;
    $twofactor = "Please log in.";
}
if ($logged_in) {
    $xml->setXml($_COOKIE[$cookieperson]);
    $full_name = $xml->getTagContents("<name>");
    $first_name = $xml->getTagContents("<fname>");
    $display_name = $xml->getTagContents("<dname>");
    if (empty($first_name)) {
        $first_name = $_COOKIE[$cookieperson];
    }
} else {
    if ($captive_login) {
        header("Refresh: 0; url={$baseurl}");
        $deferredJS .= "\nwindow.location.href=\"{$baseurl}\";";
    }
}
// $random = "<li><a href='#' id='totp_help'>Help with Two-Factor Authentication</a></li>";
try {
    $has2fa = strbool($user->has2FA());

 private function changeUserPassword($oldPassword, $newPassword = null, $isResetPassword = false)
 {
     /***
      * Replace the password stored.
      * If there are any encrypted fields, decrypt them and re-encrypt them in the process.
      * Trash the encrypted fields if we're resetting.
      * Update the cookies.
      *
      * @param string|array $oldPassword If the password is being
      *                                  reset, then $oldPassword
      *                                  should be an array with the
      *                                  keys "key" and
      *                                  "verify". Otherwise, it should
      *                                  be the plain-text string of
      *                                  the old password.
      * @param string $newPassword If $isResetPassword is true,
      *                            this field can be "true" to
      *                            email the new password.
      *
      * @param bool $isResetPassword Is the password being reset?
      ***/
     try {
         if ($isResetPassword === true) {
             $userdata = $this->getUser();
             if (empty($userdata)) {
                 throw new Exception('Base user not set');
             }
             $doEmailPassword = $newPassword === true;
             # We can't verify the old password, so we have to verify the
             # reset token provided under $oldPassword instead
             if (!is_array($oldPassword)) {
                 throw new Exception('Bad credential format');
             }
             $key = $oldPassword['key'];
             $verify = $oldPassword['verify'];
             if (empty($key) or empty($verify)) {
                 throw new Exception('Not all required credentials were provided');
             }
             # Now, we verify the supplied credentials
             $pw_data = json_decode($userdata[$this->pwColumn], true);
             $salt = $pw_data['salt'];
             # Pull the secret from the temp column
             $secret = $this->getSecret(true);
             $string = self::decryptThis($key, $secret, $this->getIV());
             $test_string = $salt . $string;
             $match_token = substr(hash('md5', $test_string), 0, 8);
             if ($match_token != $verify) {
                 # The computed token doesn't match the provided one
                 // $testPass = "123abc";
                 // $method = self::getPreferredCipherMethod();
                 // $iv = self::getIV();
                 // $testPass = md5($testPass);
                 // $foo = openssl_encrypt("FooBar", $method, $testPass, 0, $iv);
                 // $foo64 = base64_encode($foo);
                 // $bar64 = openssl_decrypt(base64_decode($foo64), $method, $testPass, 0, $iv);
                 // $bar = openssl_decrypt($foo, $method, $testPass, 0, $iv);
                 // $barTrim = rtrim($bar, "\0");
                 // $barTrim64 = rtrim($bar64, "\0");
                 // $testPass = substr($testPass, 0, 8);
                 // $faz = self::encryptThis("FooBar", $testPass, $this->getIV());
                 // $baz = self::decryptThis($faz, $testPass);
                 #throw( new Exception('Invalid reset tokens (got '.$string.' and match '.$match_token.' from '.$salt.' and '.$secret.' [input->'.$key.':'.$verify.' with iv '.$this->getIV().']). Tested '.$foo.' decoding to '.$bar.' with '.$method. " (64: $foo64 to $bar64 to $barTrim64 vs ".$barTrim.") Also $faz -> $baz and " . openssl_error_string() ) );
                 throw new Exception('Invalid reset tokens');
             }
             # The token matches -- let's make them a new password and
             # provide it.
             if (!class_exists('Stronghash')) {
                 require_once dirname(__FILE__) . '/../core/stronghash/php-stronghash.php';
             }
             $newPassword = self::createRandomUserPassword();
             $hash = new Stronghash();
             $pw1 = $hash->hasher($newPassword);
             $pwStore = json_encode($pw1);
             # We don't need or want to recalculate a hardlink. The old
             # salt isn't used anywhere where the old value is relevant.
             $algo = $pw1['algo'];
             $rounds = $pw1['rounds'];
             # We need to update the "data" column with the $algo and
             # $rounds data
             $data = $userdata['data'];
             $xml = new Xml();
             $xml->setXml($data);
             $data = $xml->updateTag('<rounds>', $this->sanitize($rounds));
             $data = $xml->updateTag('<algo>', $this->sanitize($algo));
             /*
              * We can't use writeToUser() since it requires user
              * validation, which we don't have by definition, so we're
              * going to manually construct the query here.
              */
             $query = 'UPDATE `' . $this->getTable() . '` SET `' . $this->pwColumn . '`="' . $this->sanitize($pwStore, true) . '", `data`="' . $data . '" WHERE `' . $this->userColumn . "`='" . $this->getUsername() . "'";
             $l = $this->openDB();
             mysqli_query($l, 'BEGIN');
             $r = mysqli_query($l, $query);
             $finish_query = $r ? 'COMMIT' : 'ROLLBACK';
             $callback = array('status' => $r, 'action' => $finish_query, 'new_password' => $newPassword, 'new_password_length' => strlen($newPassword), 'minimum_length' => $this->getMinPasswordLength(), 'maximum_length' => 8192);
             if ($finish_query == 'ROLLBACK') {
                 $callback['error'] = mysqli_error($l);
                 $callback['new_password'] = null;
             }
             $r2 = mysqli_query($l, $finish_query);
//.........这里部分代码省略.........