EBloodBank\Controllers\EditUser::doSubmitAction()

Complexity

Conditions	13
Paths	32

Size

Total Lines	59
Code Lines	30

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    protected function doSubmitAction()
    {
        try {
            $sessionToken = $this->getSession()->getCsrfToken();
            $actionToken = filter_input(INPUT_POST, 'token');

            if (! $actionToken || ! $sessionToken->isValid($actionToken)) {
                return;
            }

            $user = $this->user;

            if (! $this->hasAuthenticatedUser() || ! $this->getAcl()->canEditEntity($this->getAuthenticatedUser(), $user)) {

It seems like $user can also be of type null; however, parameter $resource of EBloodBank\AclInterface::canEditEntity() does only seem to accept EBloodBank\Models\Entity, maybe add an additional type check?

                return;
            }

            // Set the user name.
            $user->set('name', filter_input(INPUT_POST, 'user_name'), true);

The method set() does not exist on null.

            // Set the user email.
            $user->set('email', filter_input(INPUT_POST, 'user_email'), true);

            $duplicateUser = $this->getUserRepository()->findOneBy(['email' => $user->get('email'), 'status' => 'any']);

            if (! empty($duplicateUser) && $duplicateUser->get('id') != $user->get('id')) {
                throw new InvalidArgumentException(__('Please enter a unique user e-mail.'));
            }

            $userPass1 = filter_input(INPUT_POST, 'user_pass_1', FILTER_UNSAFE_RAW);
            $userPass2 = filter_input(INPUT_POST, 'user_pass_2', FILTER_UNSAFE_RAW);

            if (! empty($userPass1) xor ! empty($userPass2)) {
                throw new InvalidArgumentException(__('Please enter the password twice.'));
            }

            if (! empty($userPass1) && ! empty($userPass2)) {
                if ($userPass1 !== $userPass2) {
                    throw new InvalidArgumentException(__('Please enter the same password.'));
                }

                // Set the user password.
                $user->set('pass', password_hash($userPass1, PASSWORD_BCRYPT), false);
            }

            // Set the user role.
            if ($user->get('id') != $this->getAuthenticatedUser()->get('id')) {
                $user->set('role', filter_input(INPUT_POST, 'user_role'), true);
            }

            $this->getEntityManager()->flush($user);

            EBB\redirect(

The function redirect was not found. Maybe you did not declare it correctly or list all dependencies?

                EBB\addQueryArgs(

The function addQueryArgs was not found. Maybe you did not declare it correctly or list all dependencies?

                    EBB\getEditUserURL($user->get('id')),

The function getEditUserURL was not found. Maybe you did not declare it correctly or list all dependencies?

                    ['flag-edited' => true]
                )
            );
        } catch (InvalidArgumentException $ex) {
            Notices::addNotice('invalid_user_argument', $ex->getMessage());
        }