passwordfield.class.php

Go to the documentation of this file.

<?php
/* Copyright (C) 2025     Open-Dsi         <support@open-dsi.fr>
 * Copyright (C) 2026       Frédéric France         <frederic.france@free.fr>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */
 
require_once DOL_DOCUMENT_ROOT . '/core/class/fields/commonfield.class.php';
 
 
class PasswordField extends CommonField
{
  public $emptyValues = array('');
 
 
  public function printInputSearchField($fieldInfos, $key, $value, $keyPrefix = '', $keySuffix = '', $moreCss = '', $moreAttrib = '')
  {
    $moreCss = $this->getInputCss($fieldInfos, $moreCss);
    $htmlName = $keyPrefix . $key . $keySuffix;
 
    return self::$form->inputType('text', $htmlName, (string) $value, $htmlName, $moreCss, $moreAttrib);
  }
 
  public function printInputField($fieldInfos, $key, $value, $keyPrefix = '', $keySuffix = '', $moreCss = '', $moreAttrib = '')
  {
    $moreCss = $this->getInputCss($fieldInfos, $moreCss);
    $moreAttrib = trim((string) $moreAttrib);
    if (empty($moreAttrib)) $moreAttrib = ' ' . $moreAttrib;
    $autoFocus = $fieldInfos->inputAutofocus ? ' autofocus' : '';
    $htmlName = $keyPrefix . $key . $keySuffix;
 
    $out = '<input style="display:none" type="text" name="fakeusernameremembered">'; // Hidden field to reduce impact of evil Google Chrome autopopulate bug.
    if ($htmlName == 'pass_crypted') {
      $out .= self::$form->inputType('password', 'pass', '', 'pass', $moreCss, ' autocomplete="new-password"' . $moreAttrib . $autoFocus);
      $out .= self::$form->inputType('hidden', 'pass_crypted', (string) $value, 'pass_crypted', $moreCss, $moreAttrib);
    } else {
      $out .= self::$form->inputType('password', $htmlName, (string) $value, $htmlName, $moreCss, ' autocomplete="new-password"' . $moreAttrib . $autoFocus);
    }
 
    return $out;
  }
 
  public function printOutputField($fieldInfos, $key, $value, $keyPrefix = '', $keySuffix = '', $moreCss = '', $moreAttrib = '')
  {
    global $langs;
 
    return !$this->isEmptyValue($fieldInfos, $value) ? '<span class="opacitymedium">' . $langs->trans("Encrypted") . '</span>' : '';
  }
 
  public function getInputCss($fieldInfos, $moreCss = '', $defaultCss = '')
  {
    return parent::getInputCss($fieldInfos, $moreCss, $defaultCss ? $defaultCss : 'maxwidth100');
  }
 
  public function verifyFieldValue($fieldInfos, $key, $value)
  {
    global $conf, $langs, $user;
 
    $result = parent::verifyFieldValue($fieldInfos, $key, $value);
    if ($result && !$this->isEmptyValue($fieldInfos, $value)) {
      // Todo do we use other method ?
      if (getDolGlobalString('USER_PASSWORD_GENERATED')) {
        // Add a check on rules for password syntax using the setup of the password generator
        require_once DOL_DOCUMENT_ROOT . '/core/modules/security/generate/modules_genpassword.php';
        $modGeneratePass = ModeleGenPassword::loadAndInstantiate(getDolGlobalString('USER_PASSWORD_GENERATED'), $this->db, $conf, $langs, $user);
        if ($modGeneratePass) {
          '@phan-var-force ModeleGenPassword $modGeneratePass';
 
          // To check an input user password, we disable the cleaning on ambiguous characters (this is used only for auto-generated password)
          $modGeneratePass->WithoutAmbi = 0;
 
          // Call to validatePassword($password) to check pass match rules
          $testpassword = $modGeneratePass->validatePassword($value);
          if (!$testpassword) {
            self::$validator->error = $langs->trans('RequireValidValue');
            return false;
          }
        }
      }
 
      $result = true;
    }
 
    return $result;
  }
 
  public function verifyPostFieldValue($fieldInfos, $key, $keyPrefix = '', $keySuffix = '')
  {
    return parent::verifyPostFieldValue($fieldInfos, $key, $keyPrefix, $keySuffix);
  }
 
  public function getPostFieldValue($fieldInfos, $key, $defaultValue = null, $keyPrefix = '', $keySuffix = '')
  {
    $htmlName = $keyPrefix . $key . $keySuffix;
 
    if (GETPOSTISSET($htmlName)) {
      $value = GETPOST($htmlName, 'password');
    } else {
      $value = $defaultValue;
    }
 
    return $value;
  }
 
 
  public function getPostSearchFieldValue($fieldInfos, $key, $defaultValue = null, $keyPrefix = '', $keySuffix = '')
  {
    $htmlName = $keyPrefix . $key . $keySuffix;
 
    if (GETPOSTISSET($htmlName)) {
      $value = GETPOST($htmlName, 'alpha');
    } else {
      $value = $defaultValue;
    }
 
    return $value;
  }
 
  public function sqlFilterSearchField($fieldInfos, $key, $value)
  {
    if (!$this->isEmptyValue($fieldInfos, $value)) {
      $alias = $fieldInfos->sqlAlias ?? 't.';
 
      // TODO rework search on crypt password
      return natural_search($alias . ($fieldInfos->nameInTable ?? $key), $value, 0);
    }
 
    return '';
  }
}