core\ProfileSilverbullet::deactivateUser()

Complexity

Conditions	5
Paths	9

Size

Total Lines	32
Code Lines	20

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function deactivateUser($userId) {
        // does the user exist and is active, anyway?
        $queryExisting = "SELECT id FROM silverbullet_user WHERE profile_id = $this->identifier AND id = ? AND expiry >= NOW()";
        $execExisting = $this->databaseHandle->exec($queryExisting, "i", $userId);
        // this is a SELECT, and won't return TRUE
        if (mysqli_num_rows(/** @scrutinizer ignore-type */ $execExisting) < 1) {
            return FALSE;
        }
        // set the expiry date of any still valid invitations to NOW()
        $query = "SELECT token FROM silverbullet_invitation WHERE profile_id = $this->identifier AND silverbullet_user_id = ? AND expiry >= NOW()";
        $exec = $this->databaseHandle->exec($query, "i", $userId);
        // SELECT -> resource, not boolean
        while ($result = mysqli_fetch_object(/** @scrutinizer ignore-type */ $exec)) {
            $invitation = new SilverbulletInvitation($result->token);
            $invitation->revokeInvitation();
        }
        // and revoke all certificates
        $query2 = "SELECT serial_number, ca_type FROM silverbullet_certificate WHERE profile_id = $this->identifier AND silverbullet_user_id = ? AND expiry >= NOW() AND revocation_status = 'NOT_REVOKED'";
        $exec2 = $this->databaseHandle->exec($query2, "i", $userId);
        // SELECT -> resource, not boolean
        while ($result = mysqli_fetch_object(/** @scrutinizer ignore-type */ $exec2)) {
            $certObject = new SilverbulletCertificate($result->serial_number, $result->ca_type);
            $certObject->revokeCertificate();
        }
        // and finally set the user expiry date to NOW(), too
        $query3 = "UPDATE silverbullet_user SET expiry = NOW() WHERE profile_id = $this->identifier AND id = ?";
        $ret = $this->databaseHandle->exec($query3, "i", $userId);
        // this is an UPDATE, and always returns TRUE. Need to tell Scrutinizer all about it.
        if ($ret === TRUE) {
            return TRUE;
        } else {
            throw new Exception("The UPDATE statement could not be executed successfully.");
        }