Password assistance facility for users who have forgotten their password or for users for whom no password has been assigned yet. More...

Collaboration diagram for ilPasswordAssistanceGUI:

Public Member Functions
	executeCommand ()

	showAssistanceForm (ilPropertyFormGUI $form=null)

	submitAssistanceForm ()
	Reads the submitted data from the password assistance form. More...

	sendPasswordAssistanceMail (ilObjUser $userObj)
	Creates (or reuses) a password assistance session, and sends a password assistance mail to the specified user. More...

	showAssignPasswordForm (ilPropertyFormGUI $form=null, $pwassist_id='')
	Assign password form. More...

	submitAssignPasswordForm ()
	Reads the submitted data from the password assistance form. More...

	showUsernameAssistanceForm (ilPropertyFormGUI $form=null)
	Shows the password assistance form. More...

	submitUsernameAssistanceForm ()
	Reads the submitted data from the password assistance form. More...

	sendUsernameAssistanceMail ($email, array $logins)
	Creates (or reuses) a password assistance session, and sends a password assistance mail to the specified user. More...

	showMessageForm ($text)
	This form is used to show a message to the user. More...

Protected Member Functions
	getAssistanceForm ()

	getAssignPasswordForm ($pwassist_id)

	getUsernameAssistanceForm ()

Protected Attributes
	$ctrl

	$lng

	$rbacreview

	$tpl

	$settings

	$ilias

	$https

Detailed Description

Password assistance facility for users who have forgotten their password or for users for whom no password has been assigned yet.

Author: Werner Randelshofer wrand.nosp@m.els@.nosp@m.hsw.f.nosp@m.hz.c.nosp@m.h; Michael Jansen mjans.nosp@m.en@d.nosp@m.ataba.nosp@m.y.de

Version: $Id$

Definition at line 12 of file class.ilPasswordAssistanceGUI.php.

Member Function Documentation

◆ executeCommand()

ilPasswordAssistanceGUI::executeCommand ( )

Returns: mixed

Definition at line 77 of file class.ilPasswordAssistanceGUI.php.

        {
                // check hack attempts
                if(!$this->settings->get('password_assistance')) // || AUTH_DEFAULT != AUTH_LOCAL)
                {
                        // 
                        #if(empty($_SESSION['AccountId']) && $_SESSION['AccountId'] !== false)
                        {
                                #$this->ilias->error_obj->raiseError($this->lng->txt('permission_denied'), $this->ilias->error_obj->WARNING);
                        }
                }
 
                // check correct setup
                if(!$this->settings->get('setup_ok'))
                {
                        die('Setup is not completed. Please run setup routine again.');
                }
 
                // Change the language, if necessary. 
                // And load the 'pwassist' language module
                $lang = $_GET['lang'];
                if($lang != null && $lang != '' && $this->lng->getLangKey() != $lang)
                {
                        $lng = new ilLanguage($lang);
                }
                $this->lng->loadLanguageModule('pwassist');
 
                $cmd        = $this->ctrl->getCmd();
                $next_class = $this->ctrl->getNextClass($this);
 
                switch($next_class)
                {
                        default:
                                if($cmd != '')
                                {
                                        return $this->$cmd();
                                }
                                else
                                {
                                        if(!empty($_GET['key']))
                                        {
                                                $this->showAssignPasswordForm();
                                        }
                                        else
                                        {
                                                $this->showAssistanceForm();
                                        }
                                }
                                break;
                }
        }

References $_GET, $cmd, $lang, $lng, settings(), showAssignPasswordForm(), and showAssistanceForm().

Here is the call graph for this function:

◆ getAssignPasswordForm()

ilPasswordAssistanceGUI::getAssignPasswordForm ( $pwassist_id )

protected

Parameters

string $pwassist_id

Returns: ilPropertyFormGUI

Definition at line 356 of file class.ilPasswordAssistanceGUI.php.

        {
                require_once 'Services/Form/classes/class.ilPropertyFormGUI.php';
                $form = new ilPropertyFormGUI();
 
                $form->setFormAction($this->ctrl->getFormAction($this, 'submitAssignPasswordForm'));
                $form->setTarget('_parent');
 
                $username = new ilTextInputGUI($this->lng->txt('username'), 'username');
                $username->setRequired(true);
                $form->addItem($username);
 
                $password = new ilPasswordInputGUI($this->lng->txt('password'), 'password');
                $password->setRequired(true);
                $form->addItem($password);
 
                $key = new ilHiddenInputGUI('key');
                $key->setValue($pwassist_id);
                $form->addItem($key);
 
                $form->addCommandButton('submitAssignPasswordForm', $this->lng->txt('submit'));
 
                return $form;
        }

Referenced by showAssignPasswordForm(), and submitAssignPasswordForm().

Here is the caller graph for this function:

◆ getAssistanceForm()

ilPasswordAssistanceGUI::getAssistanceForm ( )

protected

Returns: ilPropertyFormGUI

Definition at line 132 of file class.ilPasswordAssistanceGUI.php.

        {
                require_once 'Services/Form/classes/class.ilPropertyFormGUI.php';
                $form = new ilPropertyFormGUI();
 
                $form->setFormAction($this->ctrl->getFormAction($this, 'submitAssistanceForm'));
                $form->setTarget('_parent');
 
                $username = new ilTextInputGUI($this->lng->txt('username'), 'username');
                $username->setRequired(true);
                $form->addItem($username);
 
                $email = new ilTextInputGUI($this->lng->txt('email'), 'email');
                $email->setRequired(true);
                $form->addItem($email);
 
                $form->addCommandButton('submitAssistanceForm', $this->lng->txt('submit'));
 
                return $form;
        }

Referenced by showAssistanceForm(), and submitAssistanceForm().

Here is the caller graph for this function:

◆ getUsernameAssistanceForm()

ilPasswordAssistanceGUI::getUsernameAssistanceForm ( )

protected

Returns: ilPropertyFormGUI

Definition at line 548 of file class.ilPasswordAssistanceGUI.php.

        {
                require_once 'Services/Form/classes/class.ilPropertyFormGUI.php';
                $form = new ilPropertyFormGUI();
 
                $form->setFormAction($this->ctrl->getFormAction($this, 'submitUsernameAssistanceForm'));
                $form->setTarget('_parent');
 
                $email = new ilTextInputGUI($this->lng->txt('email'), 'email');
                $email->setRequired(true);
                $form->addItem($email);
 
                $form->addCommandButton('submitUsernameAssistanceForm', $this->lng->txt('submit'));
 
                return $form;
        }

Referenced by showUsernameAssistanceForm(), and submitUsernameAssistanceForm().

Here is the caller graph for this function:

◆ sendPasswordAssistanceMail()

ilPasswordAssistanceGUI::sendPasswordAssistanceMail ( ilObjUser $userObj )

Creates (or reuses) a password assistance session, and sends a password assistance mail to the specified user.

Note: To prevent DOS attacks, a new session is created only, if no session exists, or if the existing session has been expired. The password assistance mail contains an URL, which points to this script and contains the following URL parameters: client_id key

Parameters

$userObj ilObjUser

Definition at line 278 of file class.ilPasswordAssistanceGUI.php.

        {
                global $DIC;
 
                require_once 'Services/Mail/classes/class.ilMailbox.php';
                require_once 'Services/Mail/classes/class.ilMail.php';
                require_once 'Services/Mail/classes/class.ilMimeMail.php';
                require_once 'include/inc.pwassist_session_handler.php';
 
                // Check if we need to create a new session
                $pwassist_session = db_pwassist_session_find($userObj->getId());
                if(
                        count($pwassist_session) == 0 ||
                        $pwassist_session['expires'] < time() ||
                        true // comment by mjansen: wtf? :-)
                )
                {
                        // Create a new session id
                        // #9700 - this didn't do anything before?!
                        // db_set_save_handler();
                        session_start();
                        $pwassist_session['pwassist_id'] = db_pwassist_create_id();
                        session_destroy();
                        db_pwassist_session_write(
                                $pwassist_session['pwassist_id'],
                                3600,
                                $userObj->getId()
                        );
                }
                $protocol = $this->https->isDetected() ? 'https://' : 'http://';
                // Compose the mail
                $server_url = $protocol . $_SERVER['HTTP_HOST'] . substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['PHP_SELF'], '/')) . '/';
                // XXX - Werner Randelshofer - Insert code here to dynamically get the
                //      the delimiter. For URL's that are sent by e-mail to a user,
                //      it is best to use semicolons as parameter delimiter
                $delimiter                = '&';
                $pwassist_url             = $protocol . $_SERVER['HTTP_HOST']
                        . str_replace('ilias.php', 'pwassist.php', $_SERVER['PHP_SELF'])
                        . '?client_id=' . $this->ilias->getClientId()
                        . $delimiter . 'lang=' . $this->lng->getLangKey()
                        . $delimiter . 'key=' . $pwassist_session['pwassist_id'];
                $alternative_pwassist_url = $protocol . $_SERVER['HTTP_HOST']
                        . str_replace('ilias.php', 'pwassist.php', $_SERVER['PHP_SELF'])
                        . '?client_id=' . $this->ilias->getClientId()
                        . $delimiter . 'lang=' . $this->lng->getLangKey()
                        . $delimiter . 'key=' . $pwassist_session['pwassist_id'];
 
                $contact_address = ilMail::getIliasMailerAddress();
 
                $mm = new ilMimeMail();
                $mm->Subject($this->lng->txt('pwassist_mail_subject'));
                $mm->From($contact_address);
                $mm->To($userObj->getEmail());
                $mm->Body
                (
                        str_replace
                        (
                                array("\\n", "\\t"),
                                array("\n", "\t"),
                                sprintf
                                (
                                        $this->lng->txt('pwassist_mail_body'),
                                        $pwassist_url,
                                        $server_url,
                                        $_SERVER['REMOTE_ADDR'],
                                        $userObj->getLogin(),
                                        'mailto:' . $DIC['ilSetting']->get("admin_email"),
                                        $alternative_pwassist_url
                                )
                        )
                );
                $mm->Send();
        }

References $_SERVER, $DIC, db_pwassist_create_id(), db_pwassist_session_find(), db_pwassist_session_write(), ilObjUser\getEmail(), ilObject\getId(), ilObjUser\getLogin(), https, and sprintf.

Referenced by submitAssistanceForm().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ sendUsernameAssistanceMail()

ilPasswordAssistanceGUI::sendUsernameAssistanceMail	(		$email,
		array	$logins
	)

Creates (or reuses) a password assistance session, and sends a password assistance mail to the specified user.

Note: To prevent DOS attacks, a new session is created only, if no session exists, or if the existing session has been expired. The password assistance mail contains an URL, which points to this script and contains the following URL parameters: client_id key

Parameters

$email
$logins

Definition at line 682 of file class.ilPasswordAssistanceGUI.php.

        {
                global $DIC;
 
                require_once 'Services/Mail/classes/class.ilMailbox.php';
                require_once 'Services/Mail/classes/class.ilMail.php';
                require_once 'Services/Mail/classes/class.ilMimeMail.php';
                require_once 'include/inc.pwassist_session_handler.php';
 
                $protocol = $this->https->isDetected() ? 'https://' : 'http://';
 
                $server_url      = $protocol . $_SERVER['HTTP_HOST'] . substr($_SERVER['PHP_SELF'], 0, strrpos($_SERVER['PHP_SELF'], '/')) . '/';
                $login_url       = $server_url . 'pwassist.php' . '?client_id=' . $this->ilias->getClientId() . '&lang=' . $this->lng->getLangKey();
                $contact_address = ilMail::getIliasMailerAddress();
 
                $mm = new ilMimeMail();
                $mm->Subject($this->lng->txt('pwassist_mail_subject'));
                $mm->From($contact_address);
                $mm->To($email);
                $mm->Body
                (
                        str_replace
                        (
                                array("\\n", "\\t"),
                                array("\n", "\t"),
                                sprintf
                                (
                                        $this->lng->txt('pwassist_username_mail_body'),
                                        join($logins, ",\n"),
                                        $server_url,
                                        $_SERVER['REMOTE_ADDR'],
                                        $email,
                                        'mailto:' . $DIC['ilSetting']->get("admin_email"),
                                        $login_url
                                )
                        )
                );
                $mm->Send();
        }

References $_SERVER, $DIC, https, and sprintf.

Referenced by submitUsernameAssistanceForm().

Here is the caller graph for this function:

◆ showAssignPasswordForm()

ilPasswordAssistanceGUI::showAssignPasswordForm	(	ilPropertyFormGUI	$form = `null`,
			$pwassist_id = `''`
	)

Assign password form.

This form is used to assign a password to a username. To use this form, the following data must be provided as HTTP GET parameter, or in argument pwassist_id: key The key is used to retrieve the password assistance session. If the key is missing, or if the password assistance session has expired, the password assistance form will be shown instead of this form.

Parameters

ilPropertyFormGUI	$form
string	$pwassist_id

Definition at line 393 of file class.ilPasswordAssistanceGUI.php.

        {
                require_once 'include/inc.pwassist_session_handler.php';
                require_once 'Services/Language/classes/class.ilLanguage.php';
 
                // Retrieve form data
                if(!$pwassist_id)
                {
                        $pwassist_id = $_GET['key'];
                }
 
                // Retrieve the session, and check if it is valid
                $pwassist_session = db_pwassist_session_read($pwassist_id);
                if(
                        count($pwassist_session) == 0 ||
                        $pwassist_session['expires'] < time()
                )
                {
                        ilUtil::sendFailure($this->lng->txt('pwassist_session_expired'));
                        $this->showAssistanceForm(null);
                }
                else
                {
                        ilStartUpGUI::initStartUpTemplate('tpl.pwassist_assignpassword.html', true);
                        $this->tpl->setVariable('IMG_PAGEHEADLINE', ilUtil::getImagePath('icon_auth.svg'));
                        $this->tpl->setVariable('TXT_PAGEHEADLINE', $this->lng->txt('password_assistance'));
 
                        $this->tpl->setVariable('TXT_ENTER_USERNAME_AND_NEW_PASSWORD', $this->lng->txt('pwassist_enter_username_and_new_password'));
 
                        if(!$form)
                        {
                                $form = $this->getAssignPasswordForm($pwassist_id);
                        }
                        $this->tpl->setVariable('FORM', $form->getHTML());
                        $this->tpl->show();
                }
        }

References $_GET, db_pwassist_session_read(), getAssignPasswordForm(), ilUtil\getImagePath(), ilUtil\sendFailure(), and showAssistanceForm().

Referenced by executeCommand(), and submitAssignPasswordForm().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ showAssistanceForm()

ilPasswordAssistanceGUI::showAssistanceForm ( ilPropertyFormGUI $form = null )

Parameters

ilPropertyFormGUI $form

Definition at line 156 of file class.ilPasswordAssistanceGUI.php.

        {
                ilStartUpGUI::initStartUpTemplate('tpl.pwassist_assistance.html', true);
                $this->tpl->setVariable('IMG_PAGEHEADLINE', ilUtil::getImagePath('icon_auth.svg'));
                $this->tpl->setVariable('TXT_PAGEHEADLINE', $this->lng->txt('password_assistance'));
 
                $this->tpl->setVariable
                (
                        'TXT_ENTER_USERNAME_AND_EMAIL',
                        str_replace
                        (
                                "\\n", '<br />',
                                sprintf
                                (
                                        $this->lng->txt('pwassist_enter_username_and_email'),
                                        '<a href="mailto:' . ilUtil::prepareFormOutput($this->settings->get('admin_email')) . '">' . ilUtil::prepareFormOutput($this->settings->get('admin_email')) . '</a>'
                                )
                        )
                );
 
                if(!$form)
                {
                        $form = $this->getAssistanceForm();
                }
                $this->tpl->setVariable('FORM', $form->getHTML());
                $this->tpl->show();
        }

References getAssistanceForm(), ilUtil\getImagePath(), ilUtil\prepareFormOutput(), and sprintf.

Referenced by executeCommand(), showAssignPasswordForm(), submitAssignPasswordForm(), and submitAssistanceForm().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ showMessageForm()

ilPasswordAssistanceGUI::showMessageForm ( $text )

This form is used to show a message to the user.

Parameters

string $text

Definition at line 726 of file class.ilPasswordAssistanceGUI.php.

        {
                ilStartUpGUI::initStartUpTemplate('tpl.pwassist_message.html', true);
                $this->tpl->setVariable('TXT_PAGEHEADLINE', $this->lng->txt('password_assistance'));
                $this->tpl->setVariable('IMG_PAGEHEADLINE', ilUtil::getImagePath('icon_auth.svg'));
 
                $this->tpl->setVariable('TXT_TEXT', str_replace("\\n", '<br />', $text));
                $this->tpl->show();
        }

References $text, and ilUtil\getImagePath().

Referenced by submitAssignPasswordForm(), submitAssistanceForm(), and submitUsernameAssistanceForm().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ showUsernameAssistanceForm()

ilPasswordAssistanceGUI::showUsernameAssistanceForm ( ilPropertyFormGUI $form = null )

Shows the password assistance form.

This form is used to request a password assistance mail from ILIAS. This form contains the following fields: username email When the user submits the form, then this script is invoked with the cmd 'submitAssistanceForm'.

Parameters

ilPropertyFormGUI $form

Definition at line 575 of file class.ilPasswordAssistanceGUI.php.

        {
                ilStartUpGUI::initStartUpTemplate('tpl.pwassist_username_assistance.html', true);
                $this->tpl->setVariable('IMG_PAGEHEADLINE', ilUtil::getImagePath('icon_auth.svg'));
                $this->tpl->setVariable('TXT_PAGEHEADLINE', $this->lng->txt('password_assistance'));
 
                $this->tpl->setVariable
                (
                        'TXT_ENTER_USERNAME_AND_EMAIL',
                        str_replace
                        (
                                "\\n", '<br />',
                                sprintf
                                (
                                        $this->lng->txt('pwassist_enter_email'),
                                        '<a href="mailto:' . ilUtil::prepareFormOutput($this->settings->get('admin_email')) . '">' . ilUtil::prepareFormOutput($this->settings->get('admin_email')) . '</a>'
                                )
                        )
                );
 
                if(!$form)
                {
                        $form = $this->getUsernameAssistanceForm();
                }
                $this->tpl->setVariable('FORM', $form->getHTML());
                $this->tpl->show();
        }

References ilUtil\getImagePath(), getUsernameAssistanceForm(), ilUtil\prepareFormOutput(), and sprintf.

Referenced by submitUsernameAssistanceForm().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ submitAssignPasswordForm()

ilPasswordAssistanceGUI::submitAssignPasswordForm ( )

Reads the submitted data from the password assistance form.

The following form fields are read as HTTP POST parameters: key username password1 password2 The key is used to retrieve the password assistance session. If the key is missing, or if the password assistance session has expired, the password assistance form will be shown instead of this form. If the password assistance session is valid, and if the username matches the username, for which the password assistance has been requested, and if the new password is valid, ILIAS assigns the password to the user. Note: To prevent replay attacks, the session is deleted when the password has been assigned successfully.

Definition at line 447 of file class.ilPasswordAssistanceGUI.php.

        {
 
                require_once 'include/inc.pwassist_session_handler.php';
 
                // We need to fetch this before form instantiation
                $pwassist_id = ilUtil::stripSlashes($_POST['key']);
 
                $form = $this->getAssignPasswordForm($pwassist_id);
                if(!$form->checkInput())
                {
                        $form->setValuesByPost();
                        $this->showAssistanceForm($form);
                        return;
                }
 
                $username    = $form->getInput('username');
                $password    = $form->getInput('password');
                $pwassist_id = $form->getInput('key');
 
                // Retrieve the session
                $pwassist_session = db_pwassist_session_read($pwassist_id);
 
                if(
                        count($pwassist_session) == 0 ||
                        $pwassist_session['expires'] < time()
                )
                {
                        ilUtil::sendFailure(str_replace("\\n", '', $this->lng->txt('pwassist_session_expired')));
                        $form->setValuesByPost();
                        $this->showAssistanceForm($form);
                        return;
                }
                else
                {
                        $is_successful = true;
                        $message       = '';
 
                        $userObj = new ilObjUser($pwassist_session['user_id']);
                        if($userObj == null)
                        {
                                $message       = $this->lng->txt('user_does_not_exist');
                                $is_successful = false;
                        }
 
                        // check if the username entered by the user matches the
                        // one of the user object.
                        if($is_successful && strcasecmp($userObj->getLogin(), $username) != 0)
                        {
                                $message       = $this->lng->txt('pwassist_login_not_match');
                                $is_successful = false;
                        }
 
                        $error_lng_var = '';
                        if(!ilUtil::isPasswordValidForUserContext($password, $userObj, $error_lng_var))
                        {
                                $message       = $this->lng->txt($error_lng_var);
                                $is_successful = false;
                        }
 
                        // End of validation
                        // If the validation was successful, we change the password of the
                        // user.
                        // ------------------
                        if($is_successful)
                        {
                                $is_successful = $userObj->resetPassword($password, $password);
                                if(!$is_successful)
                                {
                                        $message = $this->lng->txt('passwd_invalid');
                                }
                        }
 
                        // If we are successful so far, we update the user object.
                        // ------------------
                        if($is_successful)
                        {
                                $userObj->update();
                        }
 
                        // If we are successful, we destroy the password assistance
                        // session and redirect to the login page.
                        // Else we display the form again along with an error message.
                        // ------------------
                        if($is_successful)
                        {
                                db_pwassist_session_destroy($pwassist_id);
                                $this->showMessageForm(sprintf($this->lng->txt('pwassist_password_assigned'), $username));
                        }
                        else
                        {
                                ilUtil::sendFailure(str_replace("\\n", '', $message));
                                $form->setValuesByPost();
                                $this->showAssignPasswordForm($form, $pwassist_id);
                        }
                }
        }

References $_POST, db_pwassist_session_destroy(), db_pwassist_session_read(), getAssignPasswordForm(), ilUtil\isPasswordValidForUserContext(), ilUtil\sendFailure(), showAssignPasswordForm(), showAssistanceForm(), showMessageForm(), sprintf, and ilUtil\stripSlashes().

Here is the call graph for this function:

◆ submitAssistanceForm()

ilPasswordAssistanceGUI::submitAssistanceForm ( )

Reads the submitted data from the password assistance form.

The following form fields are read as HTTP POST parameters: username email If the submitted username and email address matches an entry in the user data table, then ILIAS creates a password assistance session for the user, and sends a password assistance mail to the email address. For details about the creation of the session and the e-mail see function sendPasswordAssistanceMail().

Definition at line 195 of file class.ilPasswordAssistanceGUI.php.

        {
                $form = $this->getAssistanceForm();
                if(!$form->checkInput())
                {
                        $form->setValuesByPost();
                        $this->showAssistanceForm($form);
                        return;
                }
 
                $username = $form->getInput('username');
                $email    = $form->getInput('email');
 
                $userObj = null;
                $userid  = ilObjUser::getUserIdByLogin($username);
                $txt_key = 'pwassist_invalid_username_or_email';
                if($userid != 0)
                {
                        $userObj = new ilObjUser($userid);
                        if(strcasecmp($userObj->getEmail(), $email) != 0)
                        {
                                $userObj = null;
                        }
                        elseif(!strlen($email))
                        {
                                $userObj = null;
                                $txt_key = 'pwassist_no_email_found';
                        }
                        else if(
                                $userObj->getAuthMode(true) != AUTH_LOCAL ||
                                ($userObj->getAuthMode(true) == AUTH_DEFAULT && AUTH_DEFAULT != AUTH_LOCAL)
                        )
                        {
                                $userObj = null;
                                $txt_key = 'pwassist_invalid_auth_mode';
                        }
                }
 
                // No matching user object found?
                // Show the password assistance form again, and display an error message.
                if($userObj == null)
                {
                        ilUtil::sendFailure(str_replace("\\n", '', $this->lng->txt($txt_key)));
                        $form->setValuesByPost();
                        $this->showAssistanceForm($form);
                }
                else
                {
                        // Matching user object found?
                        // Check if the user is permitted to use the password assistance function,
                        // and then send a password assistance mail to the email address.
                        // FIXME: Extend this if-statement to check whether the user
                        // has the permission to use the password assistance function.
                        // The anonymous user and users who are system administrators are
                        // not allowed to use this feature
                        if(
                                $this->rbacreview->isAssigned($userObj->getId(), ANONYMOUS_ROLE_ID) ||
                                $this->rbacreview->isAssigned($userObj->getId(), SYSTEM_ROLE_ID)
                        )
                        {
                                ilUtil::sendFailure(str_replace("\\n", '', $this->lng->txt('pwassist_not_permitted')));
                                $form->setValuesByPost();
                                $this->showAssistanceForm($form);
                        }
                        else
                        {
                                $this->sendPasswordAssistanceMail($userObj);
                                $this->showMessageForm(sprintf($this->lng->txt('pwassist_mail_sent'), $email));
                        }
                }
        }

References AUTH_LOCAL, getAssistanceForm(), ilObjUser\getUserIdByLogin(), ilUtil\sendFailure(), sendPasswordAssistanceMail(), showAssistanceForm(), showMessageForm(), and sprintf.

Here is the call graph for this function:

◆ submitUsernameAssistanceForm()

ilPasswordAssistanceGUI::submitUsernameAssistanceForm ( )

Reads the submitted data from the password assistance form.

The following form fields are read as HTTP POST parameters: username email If the submitted username and email address matches an entry in the user data table, then ILIAS creates a password assistance session for the user, and sends a password assistance mail to the email address. For details about the creation of the session and the e-mail see function sendPasswordAssistanceMail().

Definition at line 614 of file class.ilPasswordAssistanceGUI.php.

        {
                require_once 'Services/User/classes/class.ilObjUser.php';
                require_once 'Services/Utilities/classes/class.ilUtil.php';
 
                $form = $this->getUsernameAssistanceForm();
                if(!$form->checkInput())
                {
                        $form->setValuesByPost();
                        $this->showUsernameAssistanceForm($form);
                        return;
                }
 
                // Retrieve form data
                $email = $form->getInput('email');
 
                // Retrieve a user object with matching user name and email address.
                $logins = ilObjUser::_getUserIdsByEmail($email);
 
                // No matching user object found?
                // Show the password assistance form again, and display an error message.
                if(!is_array($logins) || count($logins) < 1)
                {
                        ilUtil::sendFailure(str_replace("\\n", '', $this->lng->txt('pwassist_invalid_email')));
                        $form->setValuesByPost();
                        $this->showUsernameAssistanceForm($form);
                }
                else
                {
                        // Matching user object found?
                        // Check if the user is permitted to use the password assistance function,
                        // and then send a password assistance mail to the email address.
 
                        // FIXME: Extend this if-statement to check whether the user
                        // has the permission to use the password assistance function.
                        // The anonymous user and users who are system administrators are
                        // not allowed to use this feature
                        /*              if ($rbacreview->isAssigned($userObj->getID, ANONYMOUS_ROLE_ID)
                                        || $rbacreview->isAssigned($userObj->getID, SYSTEM_ROLE_ID)
                                        ) 
                                        {
                                                $this->showAssistanceForm
                                                (
                                                        $lng->txt("pwassist_not_permitted"),
                                                        $username,
                                                        $email
                                                );
                                        } 
                                        else */
                        {
                                $this->sendUsernameAssistanceMail($email, $logins);
                                $this->showMessageForm(sprintf($this->lng->txt('pwassist_mail_sent'), $email));
                        }
                }
        }