BulkUpdateTask.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Saltedpasswords\Task;

class BulkUpdateTask extends \TYPO3\CMS\Scheduler\Task\AbstractTask {

    protected $canDeactivateSelf = TRUE;

    protected $numberOfRecords = 250;

    protected $userRecordPointer = array();

    public function __construct() {
        parent::__construct();
        $this->userRecordPointer = array(
            'FE' => 0,
            'BE' => 0
        );
    }

    public function execute() {
        $processedAllRecords = TRUE;
        // For frontend and backend
        foreach ($this->userRecordPointer as $mode => $pointer) {
            // If saltedpasswords is active for frontend / backend
            if (\TYPO3\CMS\Saltedpasswords\Utility\SaltedPasswordsUtility::isUsageEnabled($mode)) {
                $usersToUpdate = $this->findUsersToUpdate($mode);
                $numberOfRows = count($usersToUpdate);
                if ($numberOfRows > 0) {
                    $processedAllRecords = FALSE;
                    $this->activateSelf();
                    $this->incrementUserRecordPointer($mode, $numberOfRows);
                    $this->convertPasswords($mode, $usersToUpdate);
                }
            }
        }
        if ($processedAllRecords) {
            // Reset the user record pointer
            $this->userRecordPointer = array(
                'FE' => 0,
                'BE' => 0
            );
            // Determine if task should disable itself
            if ($this->canDeactivateSelf) {
                $this->deactivateSelf();
            }
        }
        // Use save() of parent class \TYPO3\CMS\Scheduler\Task\AbstractTask to persist changed task variables
        $this->save();
        return TRUE;
    }

    public function getAdditionalInformation() {
        $information = $GLOBALS['LANG']->sL('LLL:EXT:saltedpasswords/locallang.xlf:ext.saltedpasswords.tasks.bulkupdate.label.additionalinformation.deactivateself') . $this->getCanDeactivateSelf() . '; ' . $GLOBALS['LANG']->sL('LLL:EXT:saltedpasswords/locallang.xlf:ext.saltedpasswords.tasks.bulkupdate.label.additionalinformation.numberofrecords') . $this->getNumberOfRecords();
        return $information;
    }

    protected function findUsersToUpdate($mode) {
        $usersToUpdate = $GLOBALS['TYPO3_DB']->exec_SELECTgetRows('uid, password', strtolower($mode) . '_users', '1 = 1', '', 'uid ASC', $this->userRecordPointer[$mode] . ', ' . $this->numberOfRecords);
        return $usersToUpdate;
    }

    protected function convertPasswords($mode, array $users) {
        $updateUsers = array();
        foreach ($users as $user) {
            // If a password is already a salted hash it must not be updated
            if ($this->isSaltedHash($user['password'])) {
                continue;
            }
            $updateUsers[] = $user;
        }
        if (count($updateUsers) > 0) {
            $this->updatePasswords($mode, $updateUsers);
        }
    }

    protected function updatePasswords($mode, array $users) {
        $saltedpasswordsInstance = \TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::getSaltingInstance(NULL, $mode);
        foreach ($users as $user) {
            $newPassword = $saltedpasswordsInstance->getHashedPassword($user['password']);
            // If a given password is a md5 hash (usually default be_users without saltedpasswords activated),
            // result of getHashedPassword() is a salted hashed md5 hash.
            // We prefix those with 'M', saltedpasswords will then update this password
            // to a usual salted hash upon first login of the user.
            if ($this->isMd5Password($user['password'])) {
                $newPassword = 'M' . $newPassword;
            }
            // Persist updated password
            $GLOBALS['TYPO3_DB']->exec_UPDATEquery(strtolower($mode) . '_users', 'uid = ' . $user['uid'], array(
                'password' => $newPassword
            ));
        }
    }

    protected function isSaltedHash($password) {
        $isSaltedHash = FALSE;
        if (strlen($password) > 2 && (\TYPO3\CMS\Core\Utility\GeneralUtility::isFirstPartOfStr($password, 'C$') || \TYPO3\CMS\Core\Utility\GeneralUtility::isFirstPartOfStr($password, 'M$'))) {
            // Cut off M or C and test if we have a salted hash
            $isSaltedHash = \TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::determineSaltingHashingMethod(substr($password, 1));
        }
        // Test if given password is a already a usual salted hash
        if (!$isSaltedHash) {
            $isSaltedHash = \TYPO3\CMS\Saltedpasswords\Salt\SaltFactory::determineSaltingHashingMethod($password);
        }
        return $isSaltedHash;
    }

    protected function isMd5Password($password) {
        return (bool) preg_match('/[0-9abcdef]{32,32}/i', $password);
    }

    protected function incrementUserRecordPointer($mode, $number) {
        $this->userRecordPointer[$mode] += $number;
    }

    protected function activateSelf() {
        $this->setDisabled(FALSE);
    }

    protected function deactivateSelf() {
        $this->setDisabled(TRUE);
    }

    public function setCanDeactivateSelf($canDeactivateSelf) {
        $this->canDeactivateSelf = $canDeactivateSelf;
    }

    public function getCanDeactivateSelf() {
        return $this->canDeactivateSelf;
    }

    public function setNumberOfRecords($numberOfRecords) {
        $this->numberOfRecords = $numberOfRecords;
    }

    public function getNumberOfRecords() {
        return $this->numberOfRecords;
    }

}