ItemModel::encryptPassword() - Code Metrics - Inspection of "Merge branch 'release/3.1.5.26'" - nilsteampassnet/TeamPass - Measure and Improve Code Quality continuously with Scrutinizer

Passed
Push — master ( 87b47c...561fa9 )

by Nils
created 2026-01-18 19:14 UTC
ItemModel::encryptPassword() A

↳ Parent: ItemModel
Complexity

Conditions	1
Paths	1
Size

Total Lines	6
Code Lines	4
Duplication

Lines	0
Ratio	0 %
Importance

Changes
Metric	Value
cc	1
eloc	4
nc	1
nop	1
dl	0
loc	6
rs	10
c	0
b	0
f	0
<?php
/**
 * Teampass - a collaborative passwords manager.
 * ---
 * This file is part of the TeamPass project.
 * 
 * TeamPass is free software: you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by
 * the Free Software Foundation, version 3 of the License.
 * 
 * TeamPass is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 * 
 * Certain components of this file may be under different licenses. For
 * details, see the `licenses` directory or individual file headers.
 * ---
 * @version    API
 *
 * @file      ItemModel.php
 * @author    Nils Laumaillé ([email protected])
 * @copyright 2009-2026 Teampass.net
 * @license   GPL-3.0
 * @see       https://www.teampass.net
 */

use TeampassClasses\NestedTree\NestedTree;
use TeampassClasses\ConfigManager\ConfigManager;
use ZxcvbnPhp\Zxcvbn;

class ItemModel
{

    /**
     * Get the list of items to return
     *
     * @param string $sqlExtra
     * @param integer $limit
     * @param string $userPrivateKey
     * @param integer $userId
     * @param bool $showItem
     * 
     * @return array
     */
    public function getItems(string $sqlExtra, int $limit, string $userPrivateKey, int $userId, bool $showItem = false): array
    {
        // Get items
        $rows = DB::query(
            "SELECT i.id, i.label, i.description, i.pw, i.url, i.id_tree, i.login, i.email, 
                i.viewed_no, i.fa_icon, i.inactif, i.perso, i.favicon_url, i.anyone_can_modify,
                t.title as folder_label, 
                io.secret as otp_secret,
                (SELECT GROUP_CONCAT(tg.tag SEPARATOR ', ') 
                 FROM " . prefixTable('tags') . " AS tg 
                 WHERE tg.item_id = i.id) as tags
            FROM " . prefixTable('items') . " AS i
            LEFT JOIN " . prefixTable('nested_tree') . " AS t ON (t.id = i.id_tree)
            LEFT JOIN " . prefixTable('items_otp') . " AS io ON (io.item_id = i.id)".
            $sqlExtra . 
            " ORDER BY i.id ASC" .
            ($limit > 0 ? " LIMIT ". $limit : '')
        ); 
        
        $ret = [];
        foreach ($rows as $row) {
            $userKey = DB::queryfirstrow(
                'SELECT share_key
                FROM ' . prefixTable('sharekeys_items') . '
                WHERE user_id = %i AND object_id = %i',
                $userId,
                $row['id']
            );
            if (DB::count() === 0 || empty($row['pw']) === true) {
                // No share key found
                // Exit this item
                continue;
            }

            // Get password
            try {
                $pwd = base64_decode(
                    (string) doDataDecryption(
                        $row['pw'],
                        decryptUserObjectKey(
                            $userKey['share_key'],
                            $userPrivateKey
                        )
                    )
                );
            } catch (Exception $e) {
                // Password is not encrypted
                // deepcode ignore ServerLeak: No important data
                echo "ERROR";
            }
            

            // get path to item
            $tree = new NestedTree(prefixTable('nested_tree'), 'id', 'parent_id', 'title');
            $arbo = $tree->getPath($row['id_tree'], false);
            $path = '';
            foreach ($arbo as $elem) {
                if (empty($path) === true) {
                    $path = htmlspecialchars(stripslashes(htmlspecialchars_decode($elem->title, ENT_QUOTES)), ENT_QUOTES);
                } else {
                    $path .= '/' . htmlspecialchars(stripslashes(htmlspecialchars_decode($elem->title, ENT_QUOTES)), ENT_QUOTES);
                }
            }

            // Get TOTP
            if (empty($row['otp_secret']) === false) {
                $decryptedTotp = cryption(
                    $row['otp_secret'],
                    '',
                    'decrypt'
                );
                $row['otp_secret'] = $decryptedTotp['string'];
            }

            array_push(
                $ret,
                [
                    'id' => (int) $row['id'],
                    'label' => $row['label'],
                    'description' => $row['description'],
                    'pwd' => $pwd,
                    'url' => $row['url'],
                    'login' => $row['login'],
                    'email' => $row['email'],
                    'viewed_no' => (int) $row['viewed_no'],
                    'fa_icon' => $row['fa_icon'],
                    'inactif' => (int) $row['inactif'],
                    'perso' => (int) $row['perso'],
                    'id_tree' => (int) $row['id_tree'],
                    'folder_label' => $row['folder_label'],
                    'path' => empty($path) === true ? '' : $path,
                    'totp' => $row['otp_secret'],
                    'favicon_url' => $row['favicon_url'],
                    'tags' => $row['tags'],
                    'anyone_can_modify' => $row['anyone_can_modify'],
                ]
            );

            // Increase viewed number
            if ($showItem === true) {
                logItems(
                    [],
                    (int) $row['id'],
                    $row['label'] ?? '',
                    (int) $userId,
                    'at_shown',
                    ''
                );
            }
        }

        return $ret;
    }
    //end getItems() 

    /**
     * Main function to add a new item to the database.
     * It handles data preparation, validation, password checks, folder settings,
     * item creation, and post-insertion tasks (like logging, sharing, and tagging).
     */
    public function addItem(
        array $arrItemParams
    ) : array
    {
        try {
            include_once API_ROOT_PATH . '/../sources/main.functions.php';

            // Extract parameters
            $folderId = (int) $arrItemParams['folder_id'];
            $label = (string) $arrItemParams['label'];
            $password = (string) $arrItemParams['password'];
            $tags = (string) $arrItemParams['tags'] ?? '';
            $userId = (int) $arrItemParams['id'];
            $username = (string) $arrItemParams['username'];

            // Load config
            $configManager = new ConfigManager();
            $SETTINGS = $configManager->getAllSettings();

            // Step 1: Prepare data and sanitize inputs
            $data = $this->prepareData($arrItemParams);
            $this->validateData($data); // Step 2: Validate the data

            // Step 3: Validate password rules (length, emptiness)
            $this->validatePassword($password, $SETTINGS);

            // Step 4: Check folder settings for permission checks
            $itemInfos = $this->getFolderSettings($folderId);

            // Step 5: Ensure the password meets folder complexity requirements
            $this->checkPasswordComplexity($password, array_merge($itemInfos, ['folderId' => $folderId]));

            // Step 6: Check for duplicates in the system
            $this->checkForDuplicates($label, $SETTINGS, $itemInfos);

            // Step 7: Encrypt password if provided
            $cryptedData = $this->encryptPassword($password);
            $passwordKey = $cryptedData['passwordKey'];
            $password = $cryptedData['encrypted'];

            // Generate favicon URL if URL is provided and favicon_url is empty
            if (empty($data['url']) === false) {
                $data['favicon_url'] = $this->getFaviconUrl($data['url']);
            }

            // Step 8: Insert the new item into the database
            $newID = $this->insertNewItem($data, $password, $itemInfos);

            // Step 9: Handle post-insert tasks (logging, sharing, tagging)
            $this->handlePostInsertTasks($newID, $itemInfos, $folderId, $passwordKey, $userId, $username, $tags, $data, $SETTINGS);

            // Success response
            return [
                'error' => false,
                'message' => 'Item added successfully',
                'newId' => $newID,
            ];

        } catch (Exception $e) {
            // Error response
            return [
                'error' => true,
                'error_header' => 'HTTP/1.1 422 Unprocessable Entity',
                'error_message' => $e->getMessage(),
            ];
        }
    }

    /**
     * Generate favicon URL using Google service
     * 
     * @param string $url Website URL
     * @return string|null Favicon URL
     */
    private function getFaviconUrl(string $url): ?string
    {
        try {
            $parsedUrl = parse_url($url);
            if (!isset($parsedUrl['host'])) {
                return null;
            }
            
            $domain = $parsedUrl['host'];
            
            // Quick DNS validation (very fast, ~50-100ms)
            if (!$this->isValidDomain($domain)) {
                return null;
            }
            
            // Google's service handles the rest gracefully
            return 'https://www.google.com/s2/favicons?domain=' . $domain . '&sz=32';
            
        } catch (Exception $e) {
            // Silent fail
            error_log('Favicon URL generation failed: ' . $e->getMessage());
            return null;
        }
    }

    /**
     * Validate domain using DNS lookup only
     * Very fast check (~50ms) without HTTP overhead
     * 
     * @param string $domain Domain to validate
     * @return bool True if domain has valid DNS records
     */
    private function isValidDomain(string $domain): bool
    {
        // Check for A or AAAA DNS records
        return checkdnsrr($domain, 'A') || checkdnsrr($domain, 'AAAA');
    }

    /**
     * Prepares the data array for processing by combining all inputs.
     * @param array $arrItemParams - Array of item parameters
     * @return array - Returns the prepared data
     */
    private function prepareData(
        array $arrItemParams
    ) : array {
        return [
            'folderId' => (int) $arrItemParams['folder_id'],
            'label' => (string) $arrItemParams['label'],
            'password' => (string) $arrItemParams['password'],
            'description' => (string) $arrItemParams['description'] ?? '',
            'login' => (string) $arrItemParams['login'] ?? '',
            'email' => (string) $arrItemParams['email'] ?? '',
            'tags' => (string) $arrItemParams['tags'] ?? '',
            'anyoneCanModify' => (int) $arrItemParams['anyone_can_modify'] ?? '0',
            'url' => (string) $arrItemParams['url'] ?? '',
            'icon' => (string) $arrItemParams['icon'] ?? '',
            'totp' => (string) $arrItemParams['totp'] ?? '',
            'favicon_url' => '',
        ];
    }

    /**
     * Sanitizes and validates the input data according to specified filters.
     * If validation fails, throws an exception.
     * @param array $data - Data to be validated and sanitized
     * @throws Exception - If the data is invalid
     */
    private function validateData(array $data) : void
    {
        $filters = [
            'folderId' => 'cast:integer',
            'label' => 'trim|escape',
            'password' => 'trim|escape',
            'description' => 'trim|escape',
            'login' => 'trim|escape',
            'email' => 'trim|escape',
            'tags' => 'trim|escape',
            'anyoneCanModify' => 'trim|escape',
            'url' => 'trim|escape',
            'icon' => 'trim|escape',
            'totp' => 'trim|escape',
        ];

        $inputData = dataSanitizer($data, $filters);
        if (is_string($inputData)) {
            throw new Exception('Data is not valid');
        }
    }

    /**
     * Validates the password against length and empty password rules.
     * Throws an exception if validation fails.
     * @param string $password - The password to validate
     * @param array $SETTINGS - Global settings from configuration
     * @throws Exception - If the password is invalid
     */
    private function validatePassword(string $password, array $SETTINGS) : void
    {
        if ($this->isPasswordEmptyAllowed($password, $SETTINGS['create_item_without_password'])) {
            throw new Exception('Empty password is not allowed');
        }

        if (strlen($password) > $SETTINGS['pwd_maximum_length']) {
            throw new Exception('Password is too long (max allowed is ' . $SETTINGS['pwd_maximum_length'] . ' characters)');
        }
    }

    /**
     * Retrieves folder-specific settings, including permission to modify and create items.
     * @param int $folderId - The folder ID to fetch settings for
     * @return array - Returns an array with folder-specific permissions
     */
    private function getFolderSettings(int $folderId) : array
    {
        $dataFolderSettings = DB::queryFirstRow(
            'SELECT bloquer_creation, bloquer_modification, personal_folder
            FROM ' . prefixTable('nested_tree') . ' 
            WHERE id = %i',
            $folderId
        );

        return [
            'personal_folder' => $dataFolderSettings['personal_folder'],
            'no_complex_check_on_modification' => (int) $dataFolderSettings['personal_folder'] === 1 ? 1 : (int) $dataFolderSettings['bloquer_modification'],
            'no_complex_check_on_creation' => (int) $dataFolderSettings['personal_folder'] === 1 ? 1 : (int) $dataFolderSettings['bloquer_creation'],
        ];
    }

    /**
     * Validates that the password meets the complexity requirements of the folder.
     * Throws an exception if the password is too weak.
     * @param string $password - The password to check
     * @param array $itemInfos - Folder settings including password complexity requirements
     * @throws Exception - If the password complexity is insufficient
     */
    private function checkPasswordComplexity(string $password, array $itemInfos) : void
    {
        // Check existence first
        if (isset($itemInfos['folderId']) === false) {
            throw new Exception('Folder ID is missing');
        }

        // Cast to integer for strict validation
        $folderId = (int) $itemInfos['folderId'];

        // Validate value
        if ($folderId <= 0) {
            throw new Exception('Invalid folder ID for complexity check');
        }
        
        $folderComplexity = DB::queryFirstRow(
            'SELECT valeur
            FROM ' . prefixTable('misc') . '
            WHERE type = %s AND intitule = %i',
            'complex',
            $itemInfos['folderId']
        );

        $requested_folder_complexity = $folderComplexity !== null ? (int) $folderComplexity['valeur'] : 0;

        $zxcvbn = new Zxcvbn();
        $passwordStrength = $zxcvbn->passwordStrength($password);
        $passwordStrengthScore = convertPasswordStrength($passwordStrength['score']);
error_log('Password strength score: ' . $passwordStrengthScore . ' | Required: ' . $requested_folder_complexity);
        if ($passwordStrengthScore < $requested_folder_complexity && (int) $itemInfos['no_complex_check_on_creation'] === 0) {
            throw new Exception('Password strength is too low');
        }
    }

    /**
     * Checks if an item with the same label already exists in the folder.
     * Throws an exception if duplicates are not allowed.
     * @param string $label - The label of the item to check for duplicates
     * @param array $SETTINGS - Global settings for duplicate items
     * @param array $itemInfos - Folder-specific settings
     * @throws Exception - If a duplicate item is found and not allowed
     */
    private function checkForDuplicates(string $label, array $SETTINGS, array $itemInfos) : void
    {
        DB::queryFirstRow(
            'SELECT * FROM ' . prefixTable('items') . '
            WHERE label = %s AND inactif = %i',
            $label,
            0
        );

        if (DB::count() > 0 && (
	     (isset($SETTINGS['duplicate_item']) && (int) $SETTINGS['duplicate_item'] === 0)
	     && (int) $itemInfos['personal_folder'] === 0)
        ) {
            throw new Exception('Similar item already exists. Duplicates are not allowed.');
        }
    }

    /**
     * Encrypts the password using the system's encryption function.
     * Returns an array containing both the encrypted password and the encryption key.
     * @param string $password - The password to encrypt
     * @return array - Returns the encrypted password and the encryption key
     */
    private function encryptPassword(string $password) : array
    {
        $cryptedStuff = doDataEncryption($password);
        return [
            'encrypted' => $cryptedStuff['encrypted'],
            'passwordKey' => $cryptedStuff['objectKey'],
        ];
    }

    /**
     * Inserts the new item into the database with all its associated data.
     * @param array $data - The item data to insert
     * @param string $password - The encrypted password
     * @param array $itemInfos - Folder-specific settings
     * @return int - Returns the ID of the newly created item
     */
    private function insertNewItem(array $data, string $password, array $itemInfos) : int
    {
        include_once API_ROOT_PATH . '/../sources/main.functions.php';

        DB::insert(
            prefixTable('items'),
            [
                'label' => $data['label'],
                'description' => $data['description'],
                'pw' => $password,
                'pw_iv' => '',
                'pw_len' => strlen($data['password']),
                'email' => $data['email'],
                'url' => $data['url'],
                'id_tree' => $data['folderId'],
                'login' => $data['login'],
                'inactif' => 0,
                'restricted_to' => '',
                'perso' => $itemInfos['personal_folder'],
                'anyone_can_modify' => $data['anyoneCanModify'],
                'complexity_level' => $this->getPasswordComplexityLevel($password),
                'encryption_type' => 'teampass_aes',
                'fa_icon' => $data['icon'],
                'item_key' => uniqidReal(50),
                'created_at' => time(),
                'favicon_url' => $data['favicon_url'],
            ]
        );

        $newItemId = DB::insertId();

        // Handle TOTP if provided
        if (empty($data['totp']) === true) {
            $encryptedSecret = cryption(
                $data['totp'],
                '',
                'encrypt'
            );

            DB::insert(
                prefixTable('items_otp'),
                array(
                    'item_id' => $newItemId,
                    'secret' => $encryptedSecret['string'],
                    'phone_number' => '',
                    'timestamp' => time(),
                    'enabled' => 1,
                )
            );
        }

        return $newItemId;
    }

    /**
     * Determines the complexity level of a password based on its strength score.
     * @param string $password - The encrypted password for which complexity is being evaluated
     * @return int - Returns the complexity level (0 for weak, higher numbers for stronger passwords)
     */
    private function getPasswordComplexityLevel(string $password) : int
    {
        $zxcvbn = new Zxcvbn();
        $passwordStrength = $zxcvbn->passwordStrength($password);
        return convertPasswordStrength($passwordStrength['score']);
    }

    /**
     * Handles tasks that need to be performed after the item is inserted:
     * 1. Stores sharing keys
     * 2. Logs the item creation
     * 3. Adds a task if the folder is not personal
     * 4. Adds tags to the item
     * @param int $newID - The ID of the newly created item
     * @param array $itemInfos - Folder-specific settings
     * @param int $folderId - Folder ID of the item
     * @param string $passwordKey - The encryption key for the item
     * @param int $userId - ID of the user creating the item
     * @param string $username - Username of the creator
     * @param string $tags - Tags to be associated with the item
     * @param array $data - The original data used to create the item (including the label)
     * @param array $SETTINGS - System settings for logging and task creation
     */
    private function handlePostInsertTasks(
        int $newID,
        array $itemInfos,
        int $folderId,
        string $passwordKey,
        int $userId,
        string $username,
        string $tags,
        array $data,
        array $SETTINGS
    ) : void {
        // Create share keys for the creator
        storeUsersShareKey(
            'sharekeys_items',
            (int) $itemInfos['personal_folder'],
            (int) $newID,
            $passwordKey,
            true,
            false,
            [],
            -1,
            $userId
        );

        // Log the item creation
        logItems($SETTINGS, $newID, $data['label'], $userId, 'at_creation', $username);

        // Create a task if the folder is not personal
        if ((int) $itemInfos['personal_folder'] === 0) {
            storeTask('new_item', $userId, 0, $folderId, $newID, $passwordKey, [], []);
        }

        // Add tags to the item
        $this->addTags($newID, $tags);
    }


    /**
     * Splits the tags string into individual tags and inserts them into the database.
     * @param int $newID - The ID of the item to associate tags with
     * @param string $tags - A comma-separated string of tags
     */
    private function addTags(int $newID, string $tags) : void
    {
        $tagsArray = explode(',', $tags);
        foreach ($tagsArray as $tag) {
            if (!empty($tag)) {
                DB::insert(
                    prefixTable('tags'),
                    ['item_id' => $newID, 'tag' => strtolower($tag)]
                );
            }
        }
    }


    private function isPasswordEmptyAllowed($password, $create_item_without_password)
    {
        if (
            empty($password) === true
            && null !== $create_item_without_password
            && (int) $create_item_without_password !== 1
        ) {
            return true;
        }
        return false;
    }

    /**
     * Main function to update an existing item in the database.
     * It handles data validation, password encryption, folder permission checks,
     * and updates the item with the provided fields.
     *
     * @param int $itemId The ID of the item to update
     * @param array $params Array of parameters to update
     * @param array $userData User data from JWT token
     * @param string $userPrivateKey User's private key for encryption
     * @return array Returns success or error response
     */
    public function updateItem(
        int $itemId,
        array $params,
        array $userData,
        string $userPrivateKey
        /** @scrutinizer ignore-unused */ string $userPrivateKey
    ): array
    {
        try {
            include_once API_ROOT_PATH . '/../sources/main.functions.php';

            // Load config
            $configManager = new ConfigManager();
            $SETTINGS = $configManager->getAllSettings();

            // Load current item data
            $currentItem = DB::queryFirstRow(
                'SELECT * FROM ' . prefixTable('items') . ' WHERE id = %i',
                $itemId
            );

            if (DB::count() === 0) {
                return [
                    'error' => true,
                    'error_message' => 'Item not found',
                    'error_header' => 'HTTP/1.1 404 Not Found',
                ];
            }

            // Prepare update data
            $updateData = [];
            $passwordKey = null;
            $newPassword = null;


            // Handle folder_id change
            if (isset($params['folder_id'])) {
                $newFolderId = (int) $params['folder_id'];

                // Check if user has access to the new folder
                if (!in_array((string) $newFolderId, $userData['folders_list'], true)) {
                    return [
                        'error' => true,
                        'error_message' => 'Access denied to the target folder',
                        'error_header' => 'HTTP/1.1 403 Forbidden',
                    ];
                }

                $updateData['id_tree'] = $newFolderId;
            }

            // Generate favicon URL if URL is provided and favicon_url is empty
            if (empty($currentItem['url']) === false) {
                $updateData['favicon_url'] = $this->getFaviconUrl($currentItem['url']);
            }

            $fieldsDefinitions = [
                'label'             => ['db_key' => 'label', 'type' => 'string'],
                'description'       => ['db_key' => 'description', 'type' => 'string'],
                'login'             => ['db_key' => 'login', 'type' => 'string'],
                'email'             => ['db_key' => 'email', 'type' => 'string'],
                'url'               => ['db_key' => 'url', 'type' => 'string'],
                'icon'              => ['db_key' => 'fa_icon', 'type' => 'string'],
                'anyone_can_modify' => ['db_key' => 'anyone_can_modify', 'type' => 'int'],
                'favicon_url' => ['db_key' => 'favicon_url', 'type' => 'string']
            ];
            foreach ($fieldsDefinitions as $paramKey => $def) {
                if (isset($params[$paramKey])) {
                    $updateData[$def['db_key']] = match($def['type']) {
                        'int'   => (int) $params[$paramKey],
                        default => $params[$paramKey],
                    };
                }
            }

            // Handle password update
            if (isset($params['password']) && !empty($params['password'])) {
                $newPassword = $params['password'];

                // Validate password length
                if (strlen($newPassword) > $SETTINGS['pwd_maximum_length']) {
                    return [
                        'error' => true,
                        'error_message' => 'Password is too long (max allowed is ' . $SETTINGS['pwd_maximum_length'] . ' characters)',
                        'error_header' => 'HTTP/1.1 400 Bad Request',
                    ];
                }

                // Get folder ID for complexity check
                $folderId = isset($updateData['id_tree']) ? $updateData['id_tree'] : $currentItem['id_tree'];

                // Get folder settings
                $itemInfos = $this->getFolderSettings((int) $folderId);

                // Check password complexity
                $this->checkPasswordComplexity($newPassword, array_merge($itemInfos, ['folderId' => $folderId]));

                // Encrypt password
                $cryptedData = $this->encryptPassword($newPassword);
                $passwordKey = $cryptedData['passwordKey'];
                $updateData['pw'] = $cryptedData['encrypted'];
                $updateData['pw_len'] = strlen($newPassword);
                $updateData['complexity_level'] = $this->getPasswordComplexityLevel($newPassword);
            }
            
            // Update the item
            if (!empty($updateData) || (isset($params['totp']) === true && empty($params['totp']) === false)) {
                $updateData['updated_at'] = time();

                DB::update(
                    prefixTable('items'),
                    $updateData,
                    'id = %i',
                    $itemId
                );

                // Handle TOTP update
                if (isset($params['totp']) === true && empty($params['totp']) === false) {
                    $encryptedSecret = cryption(
                        $params['totp'],
                        '',
                        'encrypt'
                    );
                    
                    DB::insertUpdate(
                        prefixTable('items_otp'),
                        [
                            'item_id' => $itemId,
                            'secret' => $encryptedSecret['string'],
                            'phone_number' => '',
                            'timestamp' => time(),
                            'enabled' => 1,
                        ]
                    );
                }
            } else if (empty($updateData)) {
                // Check if an entry exists for TOTP in items_otp table
                // IF yes delete it
                if (isset($params['totp']) === true && empty($params['totp']) === true) {
                    DB::delete(
                        prefixTable('items_otp'),
                        'item_id = %i',
                        $itemId
                    );
                }
            }
            
            // Handle tags update
            if (isset($params['tags'])) {
                // Delete existing tags
                DB::delete(
                    prefixTable('tags'),
                    'item_id = %i',
                    $itemId
                );

                // Add new tags
                $this->addTags($itemId, $params['tags']);
            }

            // If password was updated, update share keys
            if ($passwordKey !== null) {
                // Get folder ID (either new or current)
                $folderId = isset($updateData['id_tree']) ? $updateData['id_tree'] : $currentItem['id_tree'];

                // Get folder settings
                $itemInfos = $this->getFolderSettings((int) $folderId);

                // Update share keys for all users with access
                storeUsersShareKey(
                    'sharekeys_items',
                    (int) $itemInfos['personal_folder'],
                    $itemId,
                    $passwordKey,
                    false,
                    true,
                    [],
                    -1,
                    $userData['id']
                );
            }

            // Log the update
            $label = isset($updateData['label']) ? $updateData['label'] : $currentItem['label'];
            logItems($SETTINGS, $itemId, $label, $userData['id'], 'at_modification', $userData['username']);

            // Success response
            return [
                'error' => false,
                'message' => 'Item updated successfully',
                'item_id' => $itemId,
            ];

        } catch (Exception $e) {
            // Error response
            return [
                'error' => true,
                'error_header' => 'HTTP/1.1 500 Internal Server Error',
                'error_message' => $e->getMessage(),
            ];
        }
    }

    /**
     * Main function to delete an existing item in the database.
     *
     * @param int $itemId The ID of the item to delete
     * @param array $userData User data from JWT token
     * @return array Returns success or error response
     */
    public function deleteItem(
        int $itemId,
        array $userData
    ): array
    {
        try {
            include_once API_ROOT_PATH . '/../sources/main.functions.php';

            // Load config
            $configManager = new ConfigManager();
            $SETTINGS = $configManager->getAllSettings();

            // Load current item data
            $currentItem = DB::queryFirstRow(
                'SELECT * FROM ' . prefixTable('items') . ' WHERE id = %i',
                $itemId
            );

            if (DB::count() === 0) {
                return [
                    'error' => true,
                    'error_message' => 'Item not found',
                    'error_header' => 'HTTP/1.1 404 Not Found',
                ];
            }

            // delete item consists in disabling it
            DB::update(
                prefixTable('items'),
                array(
                    'inactif' => '1',
                    'deleted_at' => time(),
                ),
                'id = %i',
                $itemId
            );

            logItems($SETTINGS, $itemId, $currentItem['label'], $userData['id'], 'at_delete', $userData['username']);

            // Success response
            return [
                'error' => false,
                'message' => 'Item deleted successfully',
                'item_id' => $itemId,
            ];

        } catch (Exception $e) {
            // Error response
            return [
                'error' => true,
                'error_header' => 'HTTP/1.1 500 Internal Server Error',
                'error_message' => $e->getMessage(),
            ];
        }
    }

}

nilsteampassnet / TeamPass

Push — master ( 87b47c...561fa9 )

ItemModel::encryptPassword() A

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like
