mod/gc_api/lib/profile.php ➔ profileCreate()

Complexity

Conditions	93
Paths	1693

Size

Total Lines	387
Code Lines	237

Duplication

Lines	180
Ratio	46.51 %

Importance

Changes

0

<?php
function profileCreate($data){
	global $CONFIG;
	// check email for duplicate
	// get email and create username
	// create account
	// send password reset email
	// fill in profile data
	if ($data == ''){
		$response['error'] = 2;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

		$response['message'] = 'data must be a string representing a JSON object.';
		return $response;
	}
	$userDataObj = json_decode($data, true);
	if (json_last_error() !== 0){
		$response['error'] = 2;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

		$response['message'] = 'invalid JSON - data was unable to be parsed';
		return $response;
		//return "invalid JSON format of data";
	}

	///////////////////////////////////////////////////////////////////
	//error check data field
	///////////////////////////////////////////////////////////////////
	foreach ($userDataObj as $field => $value){
		//error_log('in loop');
		switch($field){
			case 'name':
			
			
				//error_log(json_encode($value));
				$nameData = json_decode(json_encode($value), true);
				if (!isset($nameData["firstName"])&&!isset($nameData["lastName"])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing first and last name';
						return $response;

				}
				if (!isset($nameData["firstName"])||!isset($nameData["lastName"])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing first or last name';
						return $response;

				}
				

				$name = $nameData["firstName"].' '.$nameData["lastName"];
				
				break;
			case 'title':
				
				$titleData = json_decode(json_encode($value), true);
				if (!isset($titleData['fr'])&&!isset($titleData['en'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing french and english title';
						return $response;

				}
				if (!isset($titleData['fr'])||!isset($titleData['en'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing french or english title';
						return $response;

				}
				
				
				
				break;
			case 'classification':
				//error_log(json_encode($value));
				$classificationData = json_decode(json_encode($value), true);
				if (!isset($classificationData['group'])&&!isset($classificationData['level'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing classification group and level';
						return $response;

				}
				if (!isset($classificationData['group'])||!isset($classificationData['level'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing classification group or level';
						return $response;

				}
				
				break;
			case 'department':
				$deptData = json_decode(json_encode($value), true);
				if (!isset($deptData['fr'])&&!isset($deptData['en'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - department format';
						return $response;

				}
				if (!isset($deptData['fr'])||!isset($deptData['en'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing french or english department';
						return $response;

				}
				

				$obj = elgg_get_entities(array(
   					'type' => 'object',
   					'subtype' => 'dept_list',
   					'owner_guid' => 0
				));
				$deptListEn = json_decode($obj[0]->deptsEn, true);
				$provinces = array();
				$provinces['pov-alb'] = 'Government of Alberta';
				$provinces['pov-bc'] = 'Government of British Columbia';
				$provinces['pov-man'] = 'Government of Manitoba';
				$provinces['pov-nb'] = 'Government of New Brunswick';
				$provinces['pov-nfl'] = 'Government of Newfoundland and Labrador';
				$provinces['pov-ns'] = 'Government of Nova Scotia';
				$provinces['pov-nwt'] = 'Government of Northwest Territories';
				$provinces['pov-nun'] = 'Government of Nunavut';
				$provinces['pov-ont'] = 'Government of Ontario';
				$provinces['pov-pei'] = 'Government of Prince Edward Island';
				$provinces['pov-que'] = 'Government of Quebec';
				$provinces['pov-sask'] = 'Government of Saskatchewan';
				$provinces['pov-yuk'] = 'Government of Yukon';
				$deptAndProvincesEn = array_merge($deptListEn,$provinces);


				$deptListFr = json_decode($obj[0]->deptsFr, true);
				$provinces = array();
				$provinces['pov-alb'] = "Gouvernement de l'Alberta";
				$provinces['pov-bc'] = 'Gouvernement de la Colombie-Britannique';
				$provinces['pov-man'] = 'Gouvernement du Manitoba';
				$provinces['pov-nb'] = 'Gouvernement du Nouveau-Brunswick';
				$provinces['pov-nfl'] = 'Gouvernement de Terre-Neuve-et-Labrador';
				$provinces['pov-ns'] = 'Gouvernement de la Nouvelle-Écosse';
				$provinces['pov-nwt'] = 'Gouvernement du Territoires du Nord-Ouest';
				$provinces['pov-nun'] = 'Gouvernement du Nunavut';
				$provinces['pov-ont'] = "Gouvernement de l'Ontario";
				$provinces['pov-pei'] = "Gouvernement de l'Île-du-Prince-Édouard";
				$provinces['pov-que'] = 'Gouvernement du Québec';
				$provinces['pov-sask'] = 'Gouvernement de Saskatchewan';
				$provinces['pov-yuk'] = 'Gouvernement du Yukon';
				$deptAndProvincesFr = array_merge($deptListFr,$provinces);

				if(!in_array($deptData['en'], $deptAndProvincesEn)){
						$response['error'] = 5;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid english department name. valid names: '.json_encode($deptAndProvincesEn);
						return $response;
				}

				if(!in_array($deptData['fr'], $deptAndProvincesFr)){
						$response['error'] = 5;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid french department name. valid names: '.json_encode($deptAndProvincesFr);
						return $response;
				}
				

				break;
			case 'branch':
				$branchData = json_decode(json_encode($value), true);
				if (!isset($branchData['en'])&&!isset($branchData['fr'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing english and french branch name';
						return $response;

				}
				if (!isset($branchData['en'])||!isset($branchData['fr'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing english or french branch name';
						return $response;

				}
				
				
				break;
			case 'sector':
				$sectorData = json_decode(json_encode($value), true);
				if (!isset($sectorData['en'])&&!isset($sectorData['fr'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing english and french sector name';
						return $response;

				}
				if (!isset($sectorData['en'])||!isset($sectorData['fr'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid data format - missing english or french sector name';
						return $response;

				}
				
				
				break;
			case 'location':
				if (!isset($value['en'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'missing english location data';
						return $response;

				}
				$locationData = json_decode(json_encode($value['en']), true);
				if(!isset($locationData['street'])&&!isset($locationData['city'])&&!isset($locationData['province'])&&!isset($locationData['postalCode'])&&!isset($locationData['country'])&&!isset($locationData['building'])&&!isset($locationData['floor'])&&!isset($locationData['officeNum'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid location data';
						return $response;
				}
				if(!isset($locationData['street'])||!isset($locationData['city'])||!isset($locationData['province'])||!isset($locationData['postalCode'])||!isset($locationData['country'])||!isset($locationData['building'])||!isset($locationData['floor'])||!isset($locationData['officeNum'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'missing location data';
						return $response;
				}
				
				if (!isset($value['fr'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'missing french location data';
						return $response;

				}
				$locationData = json_decode(json_encode($value['fr']), true);
				if(!isset($locationData['street'])&&!isset($locationData['city'])&&!isset($locationData['province'])&&!isset($locationData['postalCode'])&&!isset($locationData['country'])&&!isset($locationData['building'])&&!isset($locationData['floor'])&&!isset($locationData['officeNum'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid location data';
						return $response;
				}
				if(!isset($locationData['street'])||!isset($locationData['city'])||!isset($locationData['province'])||!isset($locationData['postalCode'])||!isset($locationData['country'])||!isset($locationData['building'])||!isset($locationData['floor'])||!isset($locationData['officeNum'])){
						$response['error'] = 4;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'missing location data';
						return $response;
				}
				
				
				break;
			
			case 'email':
				
				
				$connection = mysqli_connect($CONFIG->dbhost, $CONFIG->dbuser, $CONFIG->dbpass, $CONFIG->dbname)or die(mysqli_error($connection));

The function profileCreate() contains an exit expression.

				//error_log($CONFIG->dbhost.' '.$CONFIG->dbuser.' '.$CONFIG->dbpass.' '.$CONFIG->dbname);
				mysqli_select_db($connection,$CONFIG->dbname);
				$emaildomain = explode('@',filter_var($value, FILTER_SANITIZE_EMAIL));

				$query = "SELECT count(*) AS num FROM email_extensions WHERE ext ='".$emaildomain[1]."'";
			
				$result = mysqli_query($connection, $query)or die(mysqli_error($connection));

The function profileCreate() contains an exit expression.

				$result = mysqli_fetch_array($result);
		
				$emailgc = explode('.',$emaildomain[1]);
				$gcca = $emailgc[count($emailgc) - 2] .".".$emailgc[count($emailgc) - 1];
		
				mysqli_close($connection);

				$resulting_error = "";

				
				// if domain doesn't exist in database, check if it's a gc.ca domain
				if ($result['num'][0] <= 0) 
				{
					if ($gcca !== 'gc.ca')
						//throw new RegistrationException(elgg_echo('gcRegister:email_error'));
						$resulting_error .= elgg_echo('gcRegister:invalid_email');
			
				}


				if ($resulting_error !== "")
				{
					//throw new RegistrationException($resulting_error);
					///error_log($resulting_error);
						$response['error'] = 3;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

						$response['message'] = 'invalid email or email domain - must be a valid Government of Canada email address';
						return $response;
				}
				
				break;
			
		}
	}


	//check for existing email
	$email = $userDataObj['email'];
	if(get_user_by_email($email)){
		$response['error'] = 1;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

		$response['message'] = 'user with email already exists. please use profile.update call to update existing account';
		return $response;
	}
	//make usernaem based on email
	$username = strstr(strtolower($email),'@', true);

	$username = explode('.', $username);
	foreach ($username as $u=>$v){
		$username[$u] = ucfirst($v);
		//error_log($u);
	}
	$username = implode('.',$username);

	//check system for username. if is a username, append number or add number
	while(get_user_by_username($username)){
		if (is_numeric(substr($username, -1))){
			$num = substr($username, -1)+1;
			$username = substr($username, 0,strlen($username)-1).$num;
		}else{
			$username.='2';
		}
	}
	$tempPass = generateRandomString();
	
	//check for name data and prepair display name

	
	//register user using data passed
	$userGUID = register_user($username, $tempPass, $name, $userDataObj['email']);

The variable $name does not seem to be defined for all execution paths leading up to this point.

	if ($userGUID==false){

It seems like you are loosely comparing $userGUID of type false|integer|null against false; this is ambiguous if the integer can be zero. Consider using a strict comparison === instead.

		$response['error'] = 1;

$response was never initialized. Although not strictly required by PHP, it is generally a good practice to add $response = array(); before regardless.

		$response['message'] = 'Failed creating account';
		return $response;
	}
	//error_log($userGUID);

	$user_entity = get_user($userGUID);

	foreach ($userDataObj as $field => $value){
		//error_log('in loop');
		switch($field){
			
			case 'title':
				
				$titleData = json_decode(json_encode($value), true);
				
				if ($user_entity->language === 'fr'){
					$user_entity->set('job', $titleData['fr'].' / '.$titleData['en']);

The method ElggEntity::set() has been deprecated with message: 1.9

				}
				else{
					$user_entity->set('job', $titleData['en'].' / '.$titleData['fr']);

The method ElggEntity::set() has been deprecated with message: 1.9

				}
				
				break;
			case 'classification':
				//error_log(json_encode($value));
				$classificationData = json_decode(json_encode($value), true);

$classificationData is not used, you could remove the assignment.

				
				$user_entity->set('classification', json_encode($value));

The method ElggEntity::set() has been deprecated with message: 1.9

				break;
			case 'department':
				$deptData = json_decode(json_encode($value), true);
	
				
				if ($user_entity->language === 'fr'){
					$user_entity->set('department', $deptData['fr'].' / '.$deptData['en']);

The method ElggEntity::set() has been deprecated with message: 1.9

				}
				else{
					$user_entity->set('department', $deptData['en'].' / '.$deptData['fr']);

The method ElggEntity::set() has been deprecated with message: 1.9

				}


				break;
			case 'branch':
				$branchData = json_decode(json_encode($value), true);

$branchData is not used, you could remove the assignment.

				
				$user_entity->set('branch', json_encode($value));

The method ElggEntity::set() has been deprecated with message: 1.9

				break;
			case 'sector':
				$sectorData = json_decode(json_encode($value), true);

$sectorData is not used, you could remove the assignment.

				
				$user_entity->set('sector', json_encode($value));

The method ElggEntity::set() has been deprecated with message: 1.9

				break;
			case 'location':

				$user_entity->set('addressString', json_encode($value["en"]));

The method ElggEntity::set() has been deprecated with message: 1.9

				$user_entity->set('addressStringFr', json_encode($value["fr"]));

The method ElggEntity::set() has been deprecated with message: 1.9

				break;
			case 'phone':
				
				$user_entity->set('phone', $value);

The method ElggEntity::set() has been deprecated with message: 1.9

				break;
			case 'mobile':
				
				$user_entity->set('mobile', $value);

The method ElggEntity::set() has been deprecated with message: 1.9

				break;


		}
	}
	//save user
	$user_entity->save();
	//send password reset to user
	send_new_password_request($userGUID);
	return array(
		"guid"=> $userGUID,
		"message" => "user added"
		);
}
function generateRandomString($length = 10) {
}