File manager

File manager - Edit - /home/ferretapmx/public_html/com_users.zip

Back
PK��8�\/a�s��src/View/Groups/JsonapiView.phpnu��[��<?php /** * @package Joomla.API * @subpackage com_users * * @copyright Copyright (C) 2005 - 2020 Open Source Matters, Inc. All rights reserved. * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Api\View\Groups; use Joomla\CMS\MVC\View\JsonApiView as BaseApiView; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The groups view * * @since 4.0.0 / class JsonapiView extends BaseApiView { /* * The fields to render item in the documents * * @var array * @since 4.0.0 / protected $fieldsToRenderItem = [ 'id', 'parent_id', 'lft', 'rgt', 'title', ]; /* * The fields to render items in the documents * * @var array * @since 4.0.0 / protected $fieldsToRenderList = [ 'id', 'parent_id', 'lft', 'rgt', 'title', ]; } PK��8�\�Sʉ��src/View/Groups/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��8�\A��src/View/Levels/JsonapiView.phpnu��[��<?php /* * @package Joomla.API * @subpackage com_users * * @copyright Copyright (C) 2005 - 2020 Open Source Matters, Inc. All rights reserved. * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Api\View\Levels; use Joomla\CMS\MVC\View\JsonApiView as BaseApiView; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The levels view * * @since 4.0.0 / class JsonapiView extends BaseApiView { /* * The fields to render item in the documents * * @var array * @since 4.0.0 / protected $fieldsToRenderItem = [ 'id', 'title', 'rules', ]; /* * The fields to render items in the documents * * @var array * @since 4.0.0 / protected $fieldsToRenderList = [ 'id', 'title', 'rules', ]; } PK��8�\�Sʉ��src/View/Levels/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��8�\��Ɖ� �� src/View/Users/JsonapiView.phpnu��[��<?php /* * @package Joomla.API * @subpackage com_users * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Api\View\Users; use Joomla\CMS\MVC\View\JsonApiView as BaseApiView; use Joomla\CMS\Router\Exception\RouteNotFoundException; use Joomla\Component\Fields\Administrator\Helper\FieldsHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The users view * * @since 4.0.0 / class JsonapiView extends BaseApiView { /* * The fields to render item in the documents * * @var array * @since 4.0.0 / protected $fieldsToRenderItem = [ 'id', 'groups', 'name', 'username', 'email', 'registerDate', 'lastvisitDate', 'lastResetTime', 'resetCount', 'sendEmail', 'block', ]; /* * The fields to render items in the documents * * @var array * @since 4.0.0 / protected $fieldsToRenderList = [ 'id', 'name', 'username', 'email', 'group_count', 'group_names', 'registerDate', 'lastvisitDate', 'lastResetTime', 'resetCount', 'sendEmail', 'block', ]; /* * Execute and display a template script. * * @param ?array $items Array of items * * @return string * * @since 4.0.0 / public function displayList(?array $items = null) { foreach (FieldsHelper::getFields('com_users.user') as $field) { $this->fieldsToRenderList[] = $field->name; } return parent::displayList(); } /* * Execute and display a template script. * * @param object $item Item * * @return string * * @since 4.0.0 / public function displayItem($item = null) { foreach (FieldsHelper::getFields('com_users.user') as $field) { $this->fieldsToRenderItem[] = $field->name; } return parent::displayItem(); } /* * Prepare item before render. * * @param object $item The model item * * @return object * * @since 4.0.0 / protected function prepareItem($item) { if (empty($item->username)) { throw new RouteNotFoundException('Item does not exist'); } foreach (FieldsHelper::getFields('com_users.user', $item, true) as $field) { $item->{$field->name} = $field->apivalue ?? $field->rawvalue; } return parent::prepareItem($item); } } PK��8�\�Sʉ��src/View/Users/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��8�\�Sʉ��src/View/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��8�\�N�;��#��src/Controller/LevelsController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\MVC\Controller\AdminController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User view levels list controller class. * * @since 1.6 / class LevelsController extends AdminController { /* * @var string The prefix to use with controller messages. * @since 1.6 / protected $text_prefix = 'COM_USERS_LEVELS'; /* * Proxy for getModel. * * @param string $name The model name. Optional. * @param string $prefix The class prefix. Optional. * @param array $config Configuration array for model. Optional. * * @return \Joomla\CMS\MVC\Model\BaseDatabaseModel The model. * * @since 1.6 / public function getModel($name = 'Level', $prefix = 'Administrator', $config = ['ignore_request' => true]) { return parent::getModel($name, $prefix, $config); } } PK��8�\�7dd`��`��#��src/Controller/GroupsController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\AdminController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User groups list controller class. * * @since 1.6 / class GroupsController extends AdminController { /* * @var string The prefix to use with controller messages. * @since 1.6 / protected $text_prefix = 'COM_USERS_GROUPS'; /* * Proxy for getModel. * * @param string $name The model name. Optional. * @param string $prefix The class prefix. Optional. * @param array $config Configuration array for model. Optional. * * @return object The model. * * @since 1.6 / public function getModel($name = 'Group', $prefix = 'Administrator', $config = ['ignore_request' => true]) { return parent::getModel($name, $prefix, $config); } /* * Removes an item. * * Overrides Joomla\CMS\MVC\Controller\AdminController::delete to check the core.admin permission. * * @return void * * @since 1.6 / public function delete() { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } parent::delete(); } /* * Method to publish a list of records. * * Overrides Joomla\CMS\MVC\Controller\AdminController::publish to check the core.admin permission. * * @return void * * @since 1.6 / public function publish() { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } parent::publish(); } /* * Changes the order of one or more records. * * Overrides Joomla\CMS\MVC\Controller\AdminController::reorder to check the core.admin permission. * * @return boolean True on success * * @since 1.6 / public function reorder() { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } return parent::reorder(); } /* * Method to save the submitted ordering values for records. * * Overrides Joomla\CMS\MVC\Controller\AdminController::saveorder to check the core.admin permission. * * @return boolean True on success * * @since 1.6 / public function saveorder() { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } return parent::saveorder(); } /* * Check in of one or more records. * * Overrides Joomla\CMS\MVC\Controller\AdminController::checkin to check the core.admin permission. * * @return boolean True on success * * @since 1.6 / public function checkin() { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } return parent::checkin(); } } PK��8�\��!��"��src/Controller/UsersController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Input\Input; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\AdminController; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Response\JsonResponse; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users list controller class. * * @since 1.6 / class UsersController extends AdminController { /* * @var string The prefix to use with controller messages. * @since 1.6 / protected $text_prefix = 'COM_USERS_USERS'; /* * Constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * @param ?CMSApplication $app The CMSApplication for the dispatcher * @param ?Input $input Input * * @since 1.6 * @see BaseController * @throws \Exception / public function __construct($config = [], ?MVCFactoryInterface $factory = null, $app = null, $input = null) { parent::__construct($config, $factory, $app, $input); $this->registerTask('block', 'changeBlock'); $this->registerTask('unblock', 'changeBlock'); } /* * Proxy for getModel. * * @param string $name The model name. Optional. * @param string $prefix The class prefix. Optional. * @param array $config Configuration array for model. Optional. * * @return object The model. * * @since 1.6 / public function getModel($name = 'User', $prefix = 'Administrator', $config = ['ignore_request' => true]) { return parent::getModel($name, $prefix, $config); } /* * Method to change the block status on a record. * * @return void * * @since 1.6 / public function changeBlock() { // Check for request forgeries. $this->checkToken(); $ids = (array) $this->input->get('cid', [], 'int'); $values = ['block' => 1, 'unblock' => 0]; $task = $this->getTask(); $value = ArrayHelper::getValue($values, $task, 0, 'int'); // Remove zero values resulting from input filter $ids = array_filter($ids); if (empty($ids)) { $this->setMessage(Text::_('COM_USERS_USERS_NO_ITEM_SELECTED'), 'warning'); } else { // Get the model. $model = $this->getModel(); // Change the state of the records. if (!$model->block($ids, $value)) { $this->setMessage($model->getError(), 'error'); } else { if ($value == 1) { $this->setMessage(Text::plural('COM_USERS_N_USERS_BLOCKED', \count($ids))); } elseif ($value == 0) { $this->setMessage(Text::plural('COM_USERS_N_USERS_UNBLOCKED', \count($ids))); } } } $this->setRedirect('index.php?option=com_users&view=users'); } /* * Method to activate a record. * * @return void * * @since 1.6 / public function activate() { // Check for request forgeries. $this->checkToken(); $ids = (array) $this->input->get('cid', [], 'int'); // Remove zero values resulting from input filter $ids = array_filter($ids); if (empty($ids)) { $this->setMessage(Text::_('COM_USERS_USERS_NO_ITEM_SELECTED'), 'error'); } else { // Get the model. $model = $this->getModel(); // Change the state of the records. if (!$model->activate($ids)) { $this->setMessage($model->getError(), 'error'); } else { $this->setMessage(Text::plural('COM_USERS_N_USERS_ACTIVATED', \count($ids))); } } $this->setRedirect('index.php?option=com_users&view=users'); } /* * Method to get the number of active users * * @return void * * @since 4.0.0 / public function getQuickiconContent() { $model = $this->getModel('Users'); $model->setState('filter.state', 0); $amount = (int) $model->getTotal(); $result = []; $result['amount'] = $amount; $result['sronly'] = Text::plural('COM_USERS_N_QUICKICON_SRONLY', $amount); $result['name'] = Text::plural('COM_USERS_N_QUICKICON', $amount); echo new JsonResponse($result); } } PK��8�\�Sʉ��src/Controller/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��8�\�Sʉ�� src/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��8�\�Sʉ�� .htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\$A��l ��l ��src/Service/Router.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Service; use Joomla\CMS\Application\SiteApplication; use Joomla\CMS\Component\Router\RouterView; use Joomla\CMS\Component\Router\RouterViewConfiguration; use Joomla\CMS\Component\Router\Rules\MenuRules; use Joomla\CMS\Component\Router\Rules\NomenuRules; use Joomla\CMS\Component\Router\Rules\StandardRules; use Joomla\CMS\Menu\AbstractMenu; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Routing class from com_users * * @since 3.2 / class Router extends RouterView { /* * Users Component router constructor * * @param SiteApplication $app The application object * @param AbstractMenu $menu The menu object to work with / public function __construct(SiteApplication $app, AbstractMenu $menu) { $this->registerView(new RouterViewConfiguration('login')); $profile = new RouterViewConfiguration('profile'); $profile->addLayout('edit'); $this->registerView($profile); $this->registerView(new RouterViewConfiguration('registration')); $this->registerView(new RouterViewConfiguration('remind')); $this->registerView(new RouterViewConfiguration('reset')); $this->registerView(new RouterViewConfiguration('callback')); $this->registerView(new RouterViewConfiguration('captive')); $this->registerView(new RouterViewConfiguration('methods')); $method = new RouterViewConfiguration('method'); $method->setKey('id'); $this->registerView($method); parent::__construct($app, $menu); $this->attachRule(new MenuRules($this)); $this->attachRule(new StandardRules($this)); $this->attachRule(new NomenuRules($this)); } /* * Get the method ID from a URL segment * * @param string $segment The URL segment * @param array $query The URL query parameters * * @return integer * @since 4.2.0 / public function getMethodId($segment, $query) { return (int) $segment; } /* * Get a segment from a method ID * * @param integer $id The method ID * @param array $query The URL query parameters * * @return int[] * @since 4.2.0 / public function getMethodSegment($id, $query) { return [$id => (int) $id]; } } PK��="�\�Sʉ��src/Service/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\�V�[� �� src/Dispatcher/Dispatcher.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2021 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Dispatcher; use Joomla\CMS\Dispatcher\ComponentDispatcher; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * ComponentDispatcher class for com_users * * @since 4.0.0 / class Dispatcher extends ComponentDispatcher { /* * Override checkAccess to allow users edit profile without having to have core.manager permission * * @return void * * @since 4.0.0 / protected function checkAccess() { $task = $this->input->getCmd('task'); $view = $this->input->getCmd('view'); $layout = $this->input->getCmd('layout'); $allowedTasks = ['user.edit', 'user.apply', 'user.save', 'user.cancel']; // If the user editing layout is called, we assume its the user.edit task if (!$task && $view === 'user' && $layout === 'edit') { $task = 'user.edit'; } // Allow users to edit their own account if (\in_array($task, $allowedTasks, true) \|\| ($view === 'user' && $layout === 'edit')) { $user = $this->app->getIdentity(); $id = $this->input->getInt('id'); if ((int) $user->id === $id) { return; } } /* * Special case: Multi-factor Authentication * * We allow access to all MFA views and tasks. Access control for MFA tasks is performed in * the Controllers since what is allowed depends on who is logged in and whose account you * are trying to modify. Implementing these checks in the Dispatcher would violate the * separation of concerns. / $allowedViews = ['callback', 'captive', 'method', 'methods']; $isAllowedTask = array_reduce( $allowedViews, function ($carry, $taskPrefix) use ($task) { return $carry \|\| str_starts_with($task ?? '', $taskPrefix . '.'); }, false ); if (\in_array(strtolower($view ?? ''), $allowedViews) \|\| $isAllowedTask) { return; } parent::checkAccess(); } } PK��="�\�Sʉ��src/Dispatcher/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\}\��src/Model/RemindModel.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Model; use Joomla\CMS\Event\User\AfterRemindEvent; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Text; use Joomla\CMS\Log\Log; use Joomla\CMS\Mail\MailTemplate; use Joomla\CMS\MVC\Model\FormModel; use Joomla\CMS\Router\Route; use Joomla\CMS\String\PunycodeHelper; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Remind model class for Users. * * @since 1.5 / class RemindModel extends FormModel { /* * Method to get the username remind request form. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form\|bool A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.remind', 'remind', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } return $form; } /* * Override preprocessForm to load the user plugin group instead of content. * * @param Form $form A Form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @throws \Exception if there is an error in the form event. * * @since 1.6 / protected function preprocessForm(Form $form, $data, $group = 'user') { parent::preprocessForm($form, $data, 'user'); } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @return void * * @since 1.6 * * @throws \Exception / protected function populateState() { // Get the application object. $app = Factory::getApplication(); $params = $app->getParams('com_users'); // Load the parameters. $this->setState('params', $params); } /* * Send the remind username email * * @param array $data Array with the data received from the form * * @return boolean * * @since 1.6 / public function processRemindRequest($data) { // Get the form. $form = $this->getForm(); $data['email'] = PunycodeHelper::emailToPunycode($data['email']); // Check for an error. if (empty($form)) { return false; } // Validate the data. $data = $this->validate($form, $data); // Check for an error. if ($data instanceof \Exception) { return false; } // Check the validation results. if ($data === false) { // Get the validation messages from the form. foreach ($form->getErrors() as $formError) { $this->setError($formError->getMessage()); } return false; } // Find the user id for the given email address. $db = $this->getDatabase(); $query = $db->getQuery(true) ->select('') ->from($db->quoteName('#__users')) ->where('LOWER(' . $db->quoteName('email') . ') = LOWER(:email)') ->bind(':email', $data['email']); // Get the user id. $db->setQuery($query); try { $user = $db->loadObject(); } catch (\RuntimeException $e) { $this->setError(Text::sprintf('COM_USERS_DATABASE_ERROR', $e->getMessage())); return false; } // Check for a user. if (empty($user)) { $this->setError(Text::_('COM_USERS_USER_NOT_FOUND')); return false; } // Make sure the user isn't blocked. if ($user->block) { $this->setError(Text::_('COM_USERS_USER_BLOCKED')); return false; } $app = Factory::getApplication(); // Assemble the login link. $link = 'index.php?option=com_users&view=login'; $mode = $app->get('force_ssl', 0) == 2 ? Route::TLS_FORCE : Route::TLS_IGNORE; // Put together the email template data. $data = ArrayHelper::fromObject($user); $data['sitename'] = $app->get('sitename'); $data['link_text'] = Route::link('site', $link, false, $mode, true); $data['link_html'] = Route::link('site', $link, true, $mode, true); $mailer = new MailTemplate('com_users.reminder', $app->getLanguage()->getTag()); $mailer->addTemplateData($data); $mailer->addRecipient($user->email, $user->name); // Try to send the password reset request email. try { $return = $mailer->send(); } catch (\Exception $exception) { try { Log::add(Text::_($exception->getMessage()), Log::WARNING, 'jerror'); $return = false; } catch (\RuntimeException $exception) { Factory::getApplication()->enqueueMessage(Text::_($exception->getMessage()), 'warning'); $return = false; } } // Check for an error. if ($return !== true) { $this->setError(Text::_('COM_USERS_MAIL_FAILED')); return false; } $this->getDispatcher()->dispatch('onUserAfterRemind', new AfterRemindEvent('onUserAfterRemind', [ 'subject' => $user, ])); return true; } } PK��="�\z� 4z��z��src/Model/LoginModel.phpnu��[��<?php /** * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Model; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Multilanguage; use Joomla\CMS\MVC\Model\FormModel; use Joomla\CMS\Uri\Uri; use Joomla\Database\ParameterType; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Login model class for Users. * * @since 1.6 / class LoginModel extends FormModel { /* * Method to get the login form. * * The base form is loaded from XML and then an event is fired * for users plugins to extend the form with extra fields. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.login', 'login', ['load_data' => $loadData]); if (empty($form)) { return false; } return $form; } /* * Method to get the data that should be injected in the form. * * @return array The default data is an empty array. * * @since 1.6 * @throws \Exception / protected function loadFormData() { // Check the session for previously entered login form data. $app = Factory::getApplication(); $data = $app->getUserState('users.login.form.data', []); $input = $app->getInput()->getInputForRequestMethod(); // Check for return URL from the request first if ($return = $input->get('return', '', 'BASE64')) { $data['return'] = base64_decode($return); if (!Uri::isInternal($data['return'])) { $data['return'] = ''; } } $app->setUserState('users.login.form.data', $data); $this->preprocessData('com_users.login', $data); return $data; } /* * Method to auto-populate the model state. * * Calling getState in this method will result in recursion. * * @return void * * @since 1.6 * @throws \Exception / protected function populateState() { // Get the application object. $params = Factory::getApplication()->getParams('com_users'); // Load the parameters. $this->setState('params', $params); } /* * Override Joomla\CMS\MVC\Model\AdminModel::preprocessForm to ensure the correct plugin group is loaded. * * @param Form $form A Form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @since 1.6 * @throws \Exception if there is an error in the form event. / protected function preprocessForm(Form $form, $data, $group = 'user') { parent::preprocessForm($form, $data, $group); } /* * Returns the language for the given menu id. * * @param int $id The menu id * * @return string * * @since 4.2.0 / public function getMenuLanguage(int $id): string { if (!Multilanguage::isEnabled()) { return ''; } $db = $this->getDatabase(); $query = $db->getQuery(true) ->select($db->quoteName('language')) ->from($db->quoteName('#__menu')) ->where($db->quoteName('client_id') . ' = 0') ->where($db->quoteName('id') . ' = :id') ->bind(':id', $id, ParameterType::INTEGER); $db->setQuery($query); try { return $db->loadResult(); } catch (\RuntimeException) { return ''; } } } PK��="�\�V��l5��l5��src/Model/CaptiveModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Date\Date; use Joomla\CMS\Event\Module; use Joomla\CMS\Event\MultiFactor\Captive; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Model\BaseDatabaseModel; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\DataShape\CaptiveRenderOptions; use Joomla\Component\Users\Administrator\Helper\Mfa as MfaHelper; use Joomla\Component\Users\Administrator\Table\MfaTable; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Captive Multi-factor Authentication page's model * * @since 4.2.0 / class CaptiveModel extends BaseDatabaseModel { /* * Cache of the names of the currently active MFA Methods * * @var array\|null * @since 4.2.0 / protected $activeMFAMethodNames = null; /* * Prevents Joomla from displaying any modules. * * This is implemented with a trick. If you use jdoc tags to load modules the JDocumentRendererHtmlModules * uses JModuleHelper::getModules() to load the list of modules to render. This goes through JModuleHelper::load() * which triggers the onAfterModuleList event after cleaning up the module list from duplicates. By resetting * the list to an empty array we force Joomla to not display any modules. * * Similar code paths are followed by any canonical code which tries to load modules. So even if your template does * not use jdoc tags this code will still work as expected. * * @param ?CMSApplication $app The CMS application to manipulate * * @return void * @throws \Exception * * @since 4.2.0 / public function suppressAllModules(?CMSApplication $app = null): void { if (\is_null($app)) { $app = Factory::getApplication(); } $app->registerEvent('onAfterModuleList', [$this, 'onAfterModuleList']); } /* * Get the MFA records for the user which correspond to active plugins * * @param ?User $user The user for which to fetch records. Skip to use the current user. * @param bool $includeBackupCodes Should I include the backup codes record? * * @return array * @throws \Exception * * @since 4.2.0 / public function getRecords(?User $user = null, bool $includeBackupCodes = false): array { if (\is_null($user)) { $user = $this->getCurrentUser(); } // Get the user's MFA records $records = MfaHelper::getUserMfaRecords($user->id); // No MFA Methods? Then we obviously don't need to display a Captive login page. if (empty($records)) { return []; } // Get the enabled MFA Methods' names $methodNames = $this->getActiveMethodNames(); // Filter the records based on currently active MFA Methods $ret = []; $methodNames[] = 'backupcodes'; $methodNames = array_unique($methodNames); if (!$includeBackupCodes) { $methodNames = array_filter( $methodNames, function ($method) { return $method != 'backupcodes'; } ); } foreach ($records as $record) { // Backup codes must not be included in the list. We add them in the View, at the end of the list. if (\in_array($record->method, $methodNames)) { $ret[$record->id] = $record; } } return $ret; } /* * Return all the active MFA Methods' names * * @return array * @since 4.2.0 / private function getActiveMethodNames(): ?array { if (!\is_null($this->activeMFAMethodNames)) { return $this->activeMFAMethodNames; } // Let's get a list of all currently active MFA Methods $mfaMethods = MfaHelper::getMfaMethods(); // If no MFA Method is active we can't really display a Captive login page. if (empty($mfaMethods)) { $this->activeMFAMethodNames = []; return $this->activeMFAMethodNames; } // Get a list of just the Method names $this->activeMFAMethodNames = []; foreach ($mfaMethods as $mfaMethod) { $this->activeMFAMethodNames[] = $mfaMethod['name']; } return $this->activeMFAMethodNames; } /* * Get the currently selected MFA record for the current user. If the record ID is empty, it does not correspond to * the currently logged in user or does not correspond to an active plugin null is returned instead. * * @param User\|null $user The user for which to fetch records. Skip to use the current user. * * @return MfaTable\|null * @throws \Exception * * @since 4.2.0 / public function getRecord(?User $user = null): ?MfaTable { $id = (int) $this->getState('record_id', null); if ($id <= 0) { return null; } if (\is_null($user)) { $user = $this->getCurrentUser(); } /* @var MfaTable $record / $record = $this->getTable('Mfa', 'Administrator'); $loaded = $record->load( [ 'user_id' => $user->id, 'id' => $id, ] ); if (!$loaded) { return null; } $methodNames = $this->getActiveMethodNames(); if (!\in_array($record->method, $methodNames) && ($record->method != 'backupcodes')) { return null; } return $record; } /* * Load the Captive login page render options for a specific MFA record * * @param ?MfaTable $record The MFA record to process * * @return CaptiveRenderOptions The rendering options * @since 4.2.0 / public function loadCaptiveRenderOptions(?MfaTable $record): CaptiveRenderOptions { $renderOptions = new CaptiveRenderOptions(); if (empty($record)) { return $renderOptions; } $event = new Captive($record); $results = Factory::getApplication() ->getDispatcher() ->dispatch($event->getName(), $event) ->getArgument('result', []); if (empty($results)) { if ($record->method === 'backupcodes') { return $renderOptions->merge( [ 'pre_message' => Text::_('COM_USERS_USER_BACKUPCODES_CAPTIVE_PROMPT'), 'input_type' => 'number', 'label' => Text::_('COM_USERS_USER_BACKUPCODE'), ] ); } return $renderOptions; } foreach ($results as $result) { if (empty($result)) { continue; } return $renderOptions->merge($result); } return $renderOptions; } /* * Returns the title to display in the Captive login page, or an empty string if no title is to be displayed. * * @return string * @since 4.2.0 / public function getPageTitle(): string { // In the frontend we can choose if we will display a title $showTitle = (bool) ComponentHelper::getParams('com_users') ->get('frontend_show_title', 1); if (!$showTitle) { return ''; } return Text::_('COM_USERS_USER_MULTIFACTOR_AUTH'); } /* * Translate a MFA Method's name into its human-readable, display name * * @param string $name The internal MFA Method name * * @return string * @since 4.2.0 / public function translateMethodName(string $name): string { static $map = null; if (!\is_array($map)) { $map = []; $mfaMethods = MfaHelper::getMfaMethods(); if (!empty($mfaMethods)) { foreach ($mfaMethods as $mfaMethod) { $map[$mfaMethod['name']] = $mfaMethod['display']; } } } if ($name == 'backupcodes') { return Text::_('COM_USERS_USER_BACKUPCODES'); } return $map[$name] ?? $name; } /* * Translate a MFA Method's name into the relative URL if its logo image * * @param string $name The internal MFA Method name * * @return string * @since 4.2.0 / public function getMethodImage(string $name): string { static $map = null; if (!\is_array($map)) { $map = []; $mfaMethods = MfaHelper::getMfaMethods(); if (!empty($mfaMethods)) { foreach ($mfaMethods as $mfaMethod) { $map[$mfaMethod['name']] = $mfaMethod['image']; } } } if ($name == 'backupcodes') { return 'media/com_users/images/emergency.svg'; } return $map[$name] ?? $name; } /* * Process the modules list on Joomla! 4. * * Joomla! 4.x is passing an Event object. The first argument of the event object is the array of modules. After * filtering it we have to overwrite the event argument (NOT just return the new list of modules). If a future * version of Joomla! uses immutable events we'll have to use Reflection to do that or Joomla! would have to fix * the way this event is handled, taking its return into account. For now, we just abuse the mutable event * properties - a feature of the event objects we discussed in the Joomla! 4 Working Group back in August 2015. * * @param Module\AfterModuleListEvent $event The Joomla! event object * * @return void * @throws \Exception * * @since 4.2.0 / public function onAfterModuleList(Module\AfterModuleListEvent $event): void { $modules = $event->getModules(); if (empty($modules)) { return; } $this->filterModules($modules); $event->updateModules($modules); } /* * This is the Method which actually filters the sites modules based on the allowed module positions specified by * the user. * * @param array $modules The list of the site's modules. Passed by reference. * * @return void The by-reference value is modified instead. * @since 4.2.0 * @throws \Exception / private function filterModules(array &$modules): void { $allowedPositions = $this->getAllowedModulePositions(); if (empty($allowedPositions)) { $modules = []; return; } $filtered = []; foreach ($modules as $module) { if (\in_array($module->position, $allowedPositions)) { $filtered[] = $module; } } $modules = $filtered; } /* * Get a list of module positions we are allowed to display * * @return array * @throws \Exception * * @since 4.2.0 / private function getAllowedModulePositions(): array { $isAdmin = Factory::getApplication()->isClient('administrator'); // Load the list of allowed module positions from the component's settings. May be different for front- and back-end $configKey = 'allowed_positions_' . ($isAdmin ? 'backend' : 'frontend'); $res = ComponentHelper::getParams('com_users')->get($configKey, []); // In the backend we must always add the 'title' module position if ($isAdmin) { $res[] = 'title'; $res[] = 'toolbar'; } return $res; } /* * Method to check if the mfa method in question has reached it's usage limit * * @param MfaTable $method Mfa method record * * @return boolean true if user can use the method, false if not * * @since 4.3.2 * @throws \Exception / public function checkTryLimit(MfaTable $method) { $params = ComponentHelper::getParams('com_users'); $jNow = Date::getInstance(); $maxTries = (int) $params->get('mfatrycount', 10); $blockHours = (int) $params->get('mfatrytime', 1); $lastTryTime = $method->last_try !== null ? strtotime($method->last_try) : 0; $hoursSinceLastTry = (strtotime(Factory::getDate()->toSql()) - $lastTryTime) / 3600; if ($method->last_try !== null && $hoursSinceLastTry > $blockHours) { // If it's been long enough, start a new reset count $method->last_try = null; $method->tries = 0; } elseif ($method->tries < $maxTries) { // If we are under the max count, just increment the counter ++$method->tries; $method->last_try = $jNow->toSql(); } else { // At this point, we know we have exceeded the maximum resets for the time period return false; } // Store changes to try counter and/or the timestamp $method->store(); return true; } } PK��="�\ZN�?��?��src/Model/MethodModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Event\MultiFactor\GetSetup; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Model\BaseDatabaseModel; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\DataShape\SetupRenderOptions; use Joomla\Component\Users\Administrator\Helper\Mfa as MfaHelper; use Joomla\Component\Users\Administrator\Table\MfaTable; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Multi-factor Authentication management model * * @since 4.2.0 / class MethodModel extends BaseDatabaseModel { /* * List of MFA Methods * * @var array * @since 4.2.0 / protected $mfaMethods = null; /* * Get the specified MFA Method's record * * @param string $method The Method to retrieve. * * @return array * @since 4.2.0 / public function getMethod(string $method): array { if (!$this->methodExists($method)) { return [ 'name' => $method, 'display' => '', 'shortinfo' => '', 'image' => '', 'canDisable' => true, 'allowMultiple' => true, ]; } return $this->mfaMethods[$method]; } /* * Is the specified MFA Method available? * * @param string $method The Method to check. * * @return boolean * @since 4.2.0 / public function methodExists(string $method): bool { if (!\is_array($this->mfaMethods)) { $this->populateMfaMethods(); } return isset($this->mfaMethods[$method]); } /* * @param User\|null $user The user record. Null to use the currently logged in user. * * @return array * @throws \Exception * * @since 4.2.0 / public function getRenderOptions(?User $user = null): SetupRenderOptions { if (\is_null($user)) { $user = $this->getCurrentUser(); } $renderOptions = new SetupRenderOptions(); $event = new GetSetup($this->getRecord($user)); $results = Factory::getApplication() ->getDispatcher() ->dispatch($event->getName(), $event) ->getArgument('result', []); if (empty($results)) { return $renderOptions; } foreach ($results as $result) { if (empty($result)) { continue; } return $renderOptions->merge($result); } return $renderOptions; } /* * Get the specified MFA record. It will return a fake default record when no record ID is specified. * * @param ?User $user The user record. Null to use the currently logged in user. * * @return MfaTable * @throws \Exception * * @since 4.2.0 / public function getRecord(?User $user = null): MfaTable { if (\is_null($user)) { $user = $this->getCurrentUser(); } $defaultRecord = $this->getDefaultRecord($user); $id = (int) $this->getState('id', 0); if ($id <= 0) { return $defaultRecord; } /* @var MfaTable $record / $record = $this->getTable('Mfa', 'Administrator'); $loaded = $record->load( [ 'user_id' => $user->id, 'id' => $id, ] ); if (!$loaded) { return $defaultRecord; } if (!$this->methodExists($record->method)) { return $defaultRecord; } return $record; } /* * Return the title to use for the page * * @return string * * @since 4.2.0 / public function getPageTitle(): string { $task = $this->getState('task', 'edit'); switch ($task) { case 'mfa': $key = 'COM_USERS_USER_MULTIFACTOR_AUTH'; break; default: $key = \sprintf('COM_USERS_MFA_%s_PAGE_HEAD', $task); break; } return Text::_($key); } /* * @param User\|null $user The user record. Null to use the current user. * * @return MfaTable * @throws \Exception * * @since 4.2.0 / protected function getDefaultRecord(?User $user = null): MfaTable { if (\is_null($user)) { $user = $this->getCurrentUser(); } $method = $this->getState('method'); $title = ''; if (\is_null($this->mfaMethods)) { $this->populateMfaMethods(); } if ($method && isset($this->mfaMethods[$method])) { $title = $this->mfaMethods[$method]['display']; } /* @var MfaTable $record / $record = $this->getTable('Mfa', 'Administrator'); $record->bind( [ 'id' => null, 'user_id' => $user->id, 'title' => $title, 'method' => $method, 'default' => 0, 'options' => [], ] ); return $record; } /* * Populate the list of MFA Methods * * @return void * @since 4.2.0 / private function populateMfaMethods(): void { $this->mfaMethods = []; $mfaMethods = MfaHelper::getMfaMethods(); if (empty($mfaMethods)) { return; } foreach ($mfaMethods as $method) { $this->mfaMethods[$method['name']] = $method; } // We also need to add the backup codes Method $this->mfaMethods['backupcodes'] = [ 'name' => 'backupcodes', 'display' => Text::_('COM_USERS_USER_BACKUPCODES'), 'shortinfo' => Text::_('COM_USERS_USER_BACKUPCODES_DESC'), 'image' => 'media/com_users/images/emergency.svg', 'canDisable' => false, 'allowMultiple' => false, ]; } } PK��="�\�v��(��(��src/Model/ProfileModel.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Model; use Joomla\CMS\Access\Access; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\Form\FormFactoryInterface; use Joomla\CMS\Language\Multilanguage; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\FormModel; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\String\PunycodeHelper; use Joomla\CMS\User\User; use Joomla\CMS\User\UserHelper; use Joomla\Component\Users\Administrator\Model\UserModel; use Joomla\Registry\Registry; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Profile model class for Users. * * @since 1.6 / class ProfileModel extends FormModel { /* * @var object The user profile data. * @since 1.6 / protected $data; /* * Constructor. * * @param array $config An array of configuration options (name, state, dbo, table_path, ignore_request). * @param ?MVCFactoryInterface $factory The factory. * @param ?FormFactoryInterface $formFactory The form factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, ?FormFactoryInterface $formFactory = null) { $config = array_merge( [ 'events_map' => ['validate' => 'user'], ], $config ); parent::__construct($config, $factory, $formFactory); } /* * Method to get the profile form data. * * The base form data is loaded and then an event is fired * for users plugins to extend the data. * * @return User * * @since 1.6 * @throws \Exception / public function getData() { if ($this->data === null) { $userId = $this->getState('user.id'); // Initialise the table with Joomla\CMS\User\User. $this->data = new User($userId); // Set the base user data. $this->data->email1 = $this->data->email; // Override the base user data with any data in the session. $temp = (array) Factory::getApplication()->getUserState('com_users.edit.profile.data', []); foreach ($temp as $k => $v) { $this->data->$k = $v; } // Unset the passwords. unset($this->data->password1, $this->data->password2); $registry = new Registry($this->data->params); $this->data->params = $registry->toArray(); } return $this->data; } /* * Method to get the profile form. * * The base form is loaded from XML and then an event is fired * for users plugins to extend the form with extra fields. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form\|bool A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.profile', 'profile', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } // Check for username compliance and parameter set $isUsernameCompliant = true; $username = $loadData ? $form->getValue('username') : $this->loadFormData()->username; if ($username) { $isUsernameCompliant = !(preg_match('#[<>"\'%;()&\\\\]\|\\.\\./#', $username) \|\| \strlen(mb_convert_encoding($username, 'ISO-8859-1', 'UTF-8')) < 2 \|\| trim($username) !== $username); } $this->setState('user.username.compliant', $isUsernameCompliant); if ($isUsernameCompliant && !ComponentHelper::getParams('com_users')->get('change_login_name')) { $form->setFieldAttribute('username', 'class', ''); $form->setFieldAttribute('username', 'filter', ''); $form->setFieldAttribute('username', 'description', 'COM_USERS_PROFILE_NOCHANGE_USERNAME_DESC'); $form->setFieldAttribute('username', 'validate', ''); $form->setFieldAttribute('username', 'message', ''); $form->setFieldAttribute('username', 'readonly', 'true'); $form->setFieldAttribute('username', 'required', 'false'); } // When multilanguage is set, a user's default site language should also be a Content Language if (Multilanguage::isEnabled()) { $form->setFieldAttribute('language', 'type', 'frontendlanguage', 'params'); } // If the user needs to change their password, mark the password fields as required if ($this->getCurrentUser()->requireReset) { $form->setFieldAttribute('password1', 'required', 'true'); $form->setFieldAttribute('password2', 'required', 'true'); } return $form; } /* * Method to get the data that should be injected in the form. * * @return mixed The data for the form. * * @since 1.6 / protected function loadFormData() { $data = $this->getData(); $this->preprocessData('com_users.profile', $data, 'user'); return $data; } /* * Override preprocessForm to load the user plugin group instead of content. * * @param Form $form A Form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @throws \Exception if there is an error in the form event. * * @since 1.6 / protected function preprocessForm(Form $form, $data, $group = 'user') { if (ComponentHelper::getParams('com_users')->get('frontend_userparams')) { $form->loadFile('frontend', false); if ($this->getCurrentUser()->authorise('core.login.admin')) { $form->loadFile('frontend_admin', false); } } parent::preprocessForm($form, $data, $group); } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @return void * * @since 1.6 * @throws \Exception / protected function populateState() { // Get the application object. $params = Factory::getApplication()->getParams('com_users'); // Get the user id. $userId = Factory::getApplication()->getUserState('com_users.edit.profile.id'); $userId = !empty($userId) ? $userId : (int) $this->getCurrentUser()->id; // Set the user id. $this->setState('user.id', $userId); // Load the parameters. $this->setState('params', $params); } /* * Method to save the form data. * * @param array $data The form data. * * @return mixed The user id on success, false on failure. * * @since 1.6 * @throws \Exception / public function save($data) { $userId = (!empty($data['id'])) ? $data['id'] : (int) $this->getState('user.id'); $user = new User($userId); // Prepare the data for the user object. $data['email'] = PunycodeHelper::emailToPunycode($data['email1']); $data['password'] = $data['password1']; // Unset the username if it should not be overwritten $isUsernameCompliant = $this->getState('user.username.compliant'); if ($isUsernameCompliant && !ComponentHelper::getParams('com_users')->get('change_login_name')) { unset($data['username']); } // Unset block and sendEmail so they do not get overwritten unset($data['block'], $data['sendEmail']); // Bind the data. if (!$user->bind($data)) { $this->setError($user->getError()); return false; } // Load the users plugin group. PluginHelper::importPlugin('user'); // Retrieve the user groups so they don't get overwritten unset($user->groups); $user->groups = Access::getGroupsByUser($user->id, false); // Store the data. if (!$user->save()) { $this->setError($user->getError()); return false; } // Destroy all active sessions for the user after changing the password if ($data['password1']) { UserHelper::destroyUserSessions($user->id, true); } return $user->id; } /* * Gets the configuration forms for all two-factor authentication methods * in an array. * * @param integer $userId The user ID to load the forms for (optional) * * @return array * * @since 3.2 * * @deprecated 4.2 will be removed in 6.0. * Will be removed without replacement / public function getTwofactorform($userId = null) { return []; } /* * No longer used * * @param integer $userId Ignored * * @return \stdClass * * @since 3.2 * * @deprecated 4.2 will be removed in 6.0. * Will be removed without replacement / public function getOtpConfig($userId = null) { @trigger_error( \sprintf( '%s() is deprecated. Use \Joomla\Component\Users\Administrator\Helper\Mfa::getUserMfaRecords() instead.', __METHOD__ ), E_USER_DEPRECATED ); /* @var UserModel $model / $model = $this->bootComponent('com_users') ->getMVCFactory()->createModel('User', 'Administrator'); return $model->getOtpConfig(); } } PK��="�\��Y��Y��src/Model/RegistrationModel.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Model; use Joomla\CMS\Application\ApplicationHelper; use Joomla\CMS\Application\CMSApplicationInterface; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Date\Date; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\Form\FormFactoryInterface; use Joomla\CMS\Language\Multilanguage; use Joomla\CMS\Language\Text; use Joomla\CMS\Log\Log; use Joomla\CMS\Mail\MailTemplate; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\FormModel; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Router\Route; use Joomla\CMS\String\PunycodeHelper; use Joomla\CMS\Uri\Uri; use Joomla\CMS\User\User; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\CMS\User\UserHelper; use Joomla\Database\ParameterType; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Registration model class for Users. * * @since 1.6 / class RegistrationModel extends FormModel implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * @var object The user registration data. * @since 1.6 / protected $data; /* * Constructor. * * @param array $config An array of configuration options (name, state, dbo, table_path, ignore_request). * @param ?MVCFactoryInterface $factory The factory. * @param ?FormFactoryInterface $formFactory The form factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, ?FormFactoryInterface $formFactory = null) { $config = array_merge( [ 'events_map' => ['validate' => 'user'], ], $config ); parent::__construct($config, $factory, $formFactory); } /* * Method to get the user ID from the given token * * @param string $token The activation token. * * @return mixed False on failure, id of the user on success * * @since 3.8.13 / public function getUserIdFromToken($token) { $db = $this->getDatabase(); // Get the user id based on the token. $query = $db->getQuery(true); $query->select($db->quoteName('id')) ->from($db->quoteName('#__users')) ->where($db->quoteName('activation') . ' = :activation') ->where($db->quoteName('block') . ' = 1') ->where($db->quoteName('lastvisitDate') . ' IS NULL') ->bind(':activation', $token); $db->setQuery($query); try { return (int) $db->loadResult(); } catch (\RuntimeException $e) { $this->setError(Text::sprintf('COM_USERS_DATABASE_ERROR', $e->getMessage())); return false; } } /* * Method to activate a user account. * * @param string $token The activation token. * * @return mixed False on failure, user object on success. * * @since 1.6 / public function activate($token) { $app = Factory::getApplication(); $userParams = ComponentHelper::getParams('com_users'); $userId = $this->getUserIdFromToken($token); // Check for a valid user id. if (!$userId) { $this->setError(Text::_('COM_USERS_ACTIVATION_TOKEN_NOT_FOUND')); return false; } // Load the users plugin group. PluginHelper::importPlugin('user'); // Activate the user. $user = $this->getUserFactory()->loadUserById($userId); // Admin activation is on and user is verifying their email if (($userParams->get('useractivation') == 2) && !$user->getParam('activate', 0)) { $linkMode = $app->get('force_ssl', 0) == 2 ? Route::TLS_FORCE : Route::TLS_IGNORE; // Compile the admin notification mail values. $data = ArrayHelper::fromObject($user, false); $data['activation'] = ApplicationHelper::getHash(UserHelper::genRandomPassword()); $user->activation = $data['activation']; $data['siteurl'] = Uri::base(); $data['activate'] = Route::link( 'site', 'index.php?option=com_users&task=registration.activate&token=' . $data['activation'], false, $linkMode, true ); $data['fromname'] = $app->get('fromname'); $data['mailfrom'] = $app->get('mailfrom'); $data['sitename'] = $app->get('sitename'); $user->setParam('activate', 1); // Get all admin users $db = $this->getDatabase(); $query = $db->getQuery(true) ->select($db->quoteName(['name', 'email', 'sendEmail', 'id'])) ->from($db->quoteName('#__users')) ->where($db->quoteName('sendEmail') . ' = 1') ->where($db->quoteName('block') . ' = 0'); $db->setQuery($query); try { $rows = $db->loadObjectList(); } catch (\RuntimeException $e) { $this->setError(Text::sprintf('COM_USERS_DATABASE_ERROR', $e->getMessage())); return false; } // Send mail to all users with users creating permissions and receiving system emails foreach ($rows as $row) { $usercreator = $this->getUserFactory()->loadUserById($row->id); if ($usercreator->authorise('core.create', 'com_users') && $usercreator->authorise('core.manage', 'com_users')) { try { $mailer = new MailTemplate('com_users.registration.admin.verification_request', $app->getLanguage()->getTag()); $mailer->addTemplateData($data); $mailer->addRecipient($row->email); $return = $mailer->send(); } catch (\Exception $exception) { try { Log::add(Text::_($exception->getMessage()), Log::WARNING, 'jerror'); $return = false; } catch (\RuntimeException $exception) { Factory::getApplication()->enqueueMessage(Text::_($exception->getMessage()), 'warning'); $return = false; } } // Check for an error. if ($return !== true) { $this->setError(Text::_('COM_USERS_REGISTRATION_ACTIVATION_NOTIFY_SEND_MAIL_FAILED')); return false; } } } } elseif (($userParams->get('useractivation') == 2) && $user->getParam('activate', 0)) { // Admin activation is on and admin is activating the account $user->activation = ''; $user->block = '0'; // Compile the user activated notification mail values. $data = ArrayHelper::fromObject($user, false); $user->setParam('activate', 0); $data['fromname'] = $app->get('fromname'); $data['mailfrom'] = $app->get('mailfrom'); $data['sitename'] = $app->get('sitename'); $data['siteurl'] = Uri::base(); $mailer = new MailTemplate('com_users.registration.user.admin_activated', $app->getLanguage()->getTag()); $mailer->addTemplateData($data); $mailer->addRecipient($data['email']); try { $return = $mailer->send(); } catch (\Exception $exception) { try { Log::add(Text::_($exception->getMessage()), Log::WARNING, 'jerror'); $return = false; } catch (\RuntimeException $exception) { Factory::getApplication()->enqueueMessage(Text::_($exception->getMessage()), 'warning'); $return = false; } } // Check for an error. if ($return !== true) { $this->setError(Text::_('COM_USERS_REGISTRATION_ACTIVATION_NOTIFY_SEND_MAIL_FAILED')); return false; } } else { $user->activation = ''; $user->block = '0'; } // Store the user object. if (!$user->save()) { $this->setError(Text::sprintf('COM_USERS_REGISTRATION_ACTIVATION_SAVE_FAILED', $user->getError())); return false; } return $user; } /* * Method to get the registration form data. * * The base form data is loaded and then an event is fired * for users plugins to extend the data. * * @return mixed Data object on success, false on failure. * * @since 1.6 * @throws \Exception / public function getData() { if ($this->data === null) { $this->data = new \stdClass(); $app = Factory::getApplication(); $params = ComponentHelper::getParams('com_users'); // Override the base user data with any data in the session. $temp = (array) $app->getUserState('com_users.registration.data', []); // Don't load the data in this getForm call, or we'll call ourself $form = $this->getForm([], false); foreach ($temp as $k => $v) { // Here we could have a grouped field, let's check it if (\is_array($v)) { $this->data->$k = new \stdClass(); foreach ($v as $key => $val) { if ($form->getField($key, $k) !== false) { $this->data->$k->$key = $val; } } } elseif ($form->getField($k) !== false) { // Only merge the field if it exists in the form. $this->data->$k = $v; } } // Get the groups the user should be added to after registration. $this->data->groups = []; // Get the default new user group, guest or public group if not specified. $system = $params->get('new_usertype', $params->get('guest_usergroup', 1)); $this->data->groups[] = $system; // Unset the passwords. unset($this->data->password1, $this->data->password2); // Get the dispatcher and load the users plugins. PluginHelper::importPlugin('user'); // Trigger the data preparation event. Factory::getApplication()->triggerEvent('onContentPrepareData', ['com_users.registration', $this->data]); } return $this->data; } /* * Method to get the registration form. * * The base form is loaded from XML and then an event is fired * for users plugins to extend the form with extra fields. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.registration', 'registration', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } // When multilanguage is set, a user's default site language should also be a Content Language if (Multilanguage::isEnabled()) { $form->setFieldAttribute('language', 'type', 'frontendlanguage', 'params'); } return $form; } /* * Method to get the data that should be injected in the form. * * @return mixed The data for the form. * * @since 1.6 / protected function loadFormData() { $data = $this->getData(); if (Multilanguage::isEnabled() && empty($data->language)) { $data->language = Factory::getLanguage()->getTag(); } $this->preprocessData('com_users.registration', $data); return $data; } /* * Override preprocessForm to load the user plugin group instead of content. * * @param Form $form A Form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @since 1.6 * @throws \Exception if there is an error in the form event. / protected function preprocessForm(Form $form, $data, $group = 'user') { $userParams = ComponentHelper::getParams('com_users'); // Add the choice for site language at registration time if ($userParams->get('site_language') == 1 && $userParams->get('frontend_userparams') == 1) { $form->loadFile('sitelang', false); } parent::preprocessForm($form, $data, $group); } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @return void * * @since 1.6 * @throws \Exception / protected function populateState() { // Get the application object. $app = Factory::getApplication(); $params = $app->getParams('com_users'); // Load the parameters. $this->setState('params', $params); } /* * Method to save the form data. * * @param array $temp The form data. * * @return mixed The user id on success, false on failure. * * @since 1.6 * @throws \Exception / public function register($temp) { $params = ComponentHelper::getParams('com_users'); // Initialise the table with Joomla\CMS\User\User. $user = new User(); $data = (array) $this->getData(); // Merge in the registration data. foreach ($temp as $k => $v) { $data[$k] = $v; } // Prepare the data for the user object. $data['email'] = PunycodeHelper::emailToPunycode($data['email1']); $data['password'] = $data['password1']; $useractivation = $params->get('useractivation'); $sendpassword = $params->get('sendpassword', 1); // Check if the user needs to activate their account. if (($useractivation == 1) \|\| ($useractivation == 2)) { $data['activation'] = ApplicationHelper::getHash(UserHelper::genRandomPassword()); $data['block'] = 1; } // Bind the data. if (!$user->bind($data)) { $this->setError($user->getError()); return false; } // Load the users plugin group. PluginHelper::importPlugin('user'); // Store the data. if (!$user->save()) { $this->setError(Text::sprintf('COM_USERS_REGISTRATION_SAVE_FAILED', $user->getError())); return false; } // From this moment the user is registered, so we don't return false anymore $app = Factory::getApplication(); $db = $this->getDatabase(); $query = $db->getQuery(true); // Compile the notification mail values. $data = ArrayHelper::fromObject($user, false); $data['fromname'] = $app->get('fromname'); $data['mailfrom'] = $app->get('mailfrom'); $data['sitename'] = $app->get('sitename'); $data['siteurl'] = Uri::root(); // Handle account activation/confirmation emails. if ($useractivation == 2) { // Set the link to confirm the user email. $linkMode = $app->get('force_ssl', 0) == 2 ? Route::TLS_FORCE : Route::TLS_IGNORE; $data['activate'] = Route::link( 'site', 'index.php?option=com_users&task=registration.activate&token=' . $data['activation'], false, $linkMode, true ); $mailtemplate = 'com_users.registration.user.admin_activation'; } elseif ($useractivation == 1) { // Set the link to activate the user account. $linkMode = $app->get('force_ssl', 0) == 2 ? Route::TLS_FORCE : Route::TLS_IGNORE; $data['activate'] = Route::link( 'site', 'index.php?option=com_users&task=registration.activate&token=' . $data['activation'], false, $linkMode, true ); $mailtemplate = 'com_users.registration.user.self_activation'; } else { $mailtemplate = 'com_users.registration.user.registration_mail'; } if ($sendpassword) { $mailtemplate .= '_w_pw'; } // Try to send the registration email. try { $mailer = new MailTemplate($mailtemplate, $app->getLanguage()->getTag()); $mailer->addTemplateData($data); $mailer->addRecipient($data['email']); $mailer->addUnsafeTags(['username', 'password_clear', 'name']); $return = $mailer->send(); } catch (\Exception $exception) { $return = false; try { Log::add(Text::_($exception->getMessage()), Log::WARNING, 'joomla_registration'); } catch (\RuntimeException $exception) { // We set the error message below but we don't need to notify the user that we can't add logs } } // Send mail to all users with user creating permissions and receiving system emails if (($params->get('useractivation') < 2) && ($params->get('mail_to_admin') == 1)) { // Get all admin users $query->clear() ->select($db->quoteName(['name', 'email', 'sendEmail', 'id'])) ->from($db->quoteName('#__users')) ->where($db->quoteName('sendEmail') . ' = 1') ->where($db->quoteName('block') . ' = 0'); $db->setQuery($query); try { $rows = $db->loadObjectList(); } catch (\RuntimeException $e) { $rows = []; } // Send mail to all superadministrators id foreach ($rows as $row) { $usercreator = $this->getUserFactory()->loadUserById($row->id); if (!$usercreator->authorise('core.create', 'com_users') \|\| !$usercreator->authorise('core.manage', 'com_users')) { continue; } try { $mailer = new MailTemplate('com_users.registration.admin.new_notification', $app->getLanguage()->getTag()); $mailer->addTemplateData($data); $mailer->addRecipient($row->email); $mailer->addUnsafeTags(['username', 'name']); $mailer->send(); } catch (\Exception $exception) { try { Log::add(Text::_($exception->getMessage()), Log::WARNING, 'joomla_registration'); } catch (\RuntimeException $exception) { // No message to frontend user } } } } // Check for an error. if ($return !== true) { $app->enqueueMessage(Text::_('COM_USERS_REGISTRATION_SEND_MAIL_FAILED'), CMSApplicationInterface::MSG_WARNING); // Send a system message to administrators receiving system mails $db = $this->getDatabase(); $query->clear() ->select($db->quoteName('id')) ->from($db->quoteName('#__users')) ->where($db->quoteName('block') . ' = 0') ->where($db->quoteName('sendEmail') . ' = 1'); $db->setQuery($query); try { $userids = $db->loadColumn(); } catch (\RuntimeException $e) { $userids = []; try { Log::add(Text::sprintf('COM_USERS_DATABASE_ERROR', $e->getMessage()), Log::WARNING, 'joomla_registration'); } catch (\RuntimeException $exception) { } } if (\count($userids) > 0) { $jdate = new Date(); $dateToSql = $jdate->toSql(); $subject = Text::_('COM_USERS_MAIL_SEND_FAILURE_SUBJECT'); $message = Text::sprintf('COM_USERS_MAIL_SEND_FAILURE_BODY', $data['username']); // Build the query to add the messages foreach ($userids as $userid) { $values = [ ':user_id_from', ':user_id_to', ':date_time', ':subject', ':message', ]; $query->clear() ->insert($db->quoteName('#__messages')) ->columns($db->quoteName(['user_id_from', 'user_id_to', 'date_time', 'subject', 'message'])) ->values(implode(',', $values)); $query->bind(':user_id_from', $userid, ParameterType::INTEGER) ->bind(':user_id_to', $userid, ParameterType::INTEGER) ->bind(':date_time', $dateToSql) ->bind(':subject', $subject) ->bind(':message', $message); $db->setQuery($query); try { $db->execute(); } catch (\RuntimeException $e) { try { Log::add(Text::sprintf('COM_USERS_DATABASE_ERROR', $e->getMessage()), Log::WARNING, 'joomla_registration'); } catch (\RuntimeException $exception) { } } } } } if ($useractivation == 1) { return 'useractivate'; } if ($useractivation == 2) { return 'adminactivate'; } return $user->id; } } PK��="�\��AZA��ZA��src/Model/ResetModel.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Model; use Joomla\CMS\Application\ApplicationHelper; use Joomla\CMS\Event\AbstractEvent; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Text; use Joomla\CMS\Log\Log; use Joomla\CMS\Mail\MailTemplate; use Joomla\CMS\MVC\Model\FormModel; use Joomla\CMS\Router\Route; use Joomla\CMS\String\PunycodeHelper; use Joomla\CMS\User\User; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\CMS\User\UserHelper; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Reset model class for Users. * * @since 1.5 / class ResetModel extends FormModel implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * Method to get the password reset request form. * * The base form is loaded from XML and then an event is fired * for users plugins to extend the form with extra fields. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.reset_request', 'reset_request', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } return $form; } /* * Method to get the password reset complete form. * * @param array $data Data for the form. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form A Form object on success, false on failure * * @since 1.6 / public function getResetCompleteForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.reset_complete', 'reset_complete', ['control' => 'jform']); if (empty($form)) { return false; } return $form; } /* * Method to get the password reset confirm form. * * @param array $data Data for the form. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form A Form object on success, false on failure * * @since 1.6 * @throws \Exception / public function getResetConfirmForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.reset_confirm', 'reset_confirm', ['control' => 'jform']); if (empty($form)) { return false; } $form->setValue('token', '', Factory::getApplication()->getInput()->get('token')); return $form; } /* * Override preprocessForm to load the user plugin group instead of content. * * @param Form $form A Form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @throws \Exception if there is an error in the form event. * * @since 1.6 / protected function preprocessForm(Form $form, $data, $group = 'user') { parent::preprocessForm($form, $data, $group); } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @return void * * @since 1.6 * @throws \Exception / protected function populateState() { // Get the application object. $params = Factory::getApplication()->getParams('com_users'); // Load the parameters. $this->setState('params', $params); } /* * Save the new password after reset is done * * @param array $data The data expected for the form. * * @return mixed \Exception \| boolean * * @since 1.6 * @throws \Exception / public function processResetComplete($data) { // Get the form. $form = $this->getResetCompleteForm(); // Check for an error. if ($form instanceof \Exception) { return $form; } // Filter and validate the form data. $data = $form->filter($data); $return = $form->validate($data); // Check for an error. if ($return instanceof \Exception) { return $return; } // Check the validation results. if ($return === false) { // Get the validation messages from the form. foreach ($form->getErrors() as $formError) { $this->setError($formError->getMessage()); } return false; } // Get the token and user id from the confirmation process. $app = Factory::getApplication(); $token = $app->getUserState('com_users.reset.token', null); $userId = $app->getUserState('com_users.reset.user', null); // Check the token and user id. if (empty($token) \|\| empty($userId)) { return new \Exception(Text::_('COM_USERS_RESET_COMPLETE_TOKENS_MISSING'), 403); } // Get the user object. $user = $this->getUserFactory()->loadUserById($userId); $event = AbstractEvent::create( 'onUserBeforeResetComplete', [ 'subject' => $user, ] ); $app->getDispatcher()->dispatch($event->getName(), $event); // Check for a user and that the tokens match. if (empty($user) \|\| $user->activation !== $token) { $this->setError(Text::_('COM_USERS_USER_NOT_FOUND')); return false; } // Make sure the user isn't blocked. if ($user->block) { $this->setError(Text::_('COM_USERS_USER_BLOCKED')); return false; } // Check if the user is reusing the current password if required to reset their password if ($user->requireReset == 1 && UserHelper::verifyPassword($data['password1'], $user->password)) { $this->setError(Text::_('JLIB_USER_ERROR_CANNOT_REUSE_PASSWORD')); return false; } // Prepare user data. $data['password'] = $data['password1']; $data['activation'] = ''; // Update the user object. if (!$user->bind($data)) { return new \Exception($user->getError(), 500); } // Save the user to the database. if (!$user->save(true)) { return new \Exception(Text::sprintf('COM_USERS_USER_SAVE_FAILED', $user->getError()), 500); } // Destroy all active sessions for the user UserHelper::destroyUserSessions($user->id); // Flush the user data from the session. $app->setUserState('com_users.reset.token', null); $app->setUserState('com_users.reset.user', null); $event = AbstractEvent::create( 'onUserAfterResetComplete', [ 'subject' => $user, ] ); $app->getDispatcher()->dispatch($event->getName(), $event); return true; } /* * Receive the reset password request * * @param array $data The data expected for the form. * * @return mixed \Exception \| boolean * * @since 1.6 * @throws \Exception / public function processResetConfirm($data) { // Get the form. $form = $this->getResetConfirmForm(); // Check for an error. if ($form instanceof \Exception) { return $form; } // Filter and validate the form data. $data = $form->filter($data); $return = $form->validate($data); // Check for an error. if ($return instanceof \Exception) { return $return; } // Check the validation results. if ($return === false) { // Get the validation messages from the form. foreach ($form->getErrors() as $formError) { $this->setError($formError->getMessage()); } return false; } // Find the user id for the given token. $db = $this->getDatabase(); $query = $db->getQuery(true) ->select($db->quoteName(['activation', 'id', 'block'])) ->from($db->quoteName('#__users')) ->where($db->quoteName('username') . ' = :username') ->bind(':username', $data['username']); // Get the user id. $db->setQuery($query); try { $user = $db->loadObject(); } catch (\RuntimeException $e) { return new \Exception(Text::sprintf('COM_USERS_DATABASE_ERROR', $e->getMessage()), 500); } // Check for a user. if (empty($user)) { $this->setError(Text::_('COM_USERS_USER_NOT_FOUND')); return false; } if (!$user->activation) { $this->setError(Text::_('COM_USERS_USER_NOT_FOUND')); return false; } // Verify the token if (!UserHelper::verifyPassword($data['token'], $user->activation)) { $this->setError(Text::_('COM_USERS_USER_NOT_FOUND')); return false; } // Make sure the user isn't blocked. if ($user->block) { $this->setError(Text::_('COM_USERS_USER_BLOCKED')); return false; } // Push the user data into the session. $app = Factory::getApplication(); $app->setUserState('com_users.reset.token', $user->activation); $app->setUserState('com_users.reset.user', $user->id); return true; } /* * Method to start the password reset process. * * @param array $data The data expected for the form. * * @return mixed \Exception \| boolean * * @since 1.6 * @throws \Exception / public function processResetRequest($data) { $app = Factory::getApplication(); // Get the form. $form = $this->getForm(); $data['email'] = PunycodeHelper::emailToPunycode($data['email']); // Check for an error. if ($form instanceof \Exception) { return $form; } // Filter and validate the form data. $data = $form->filter($data); $return = $form->validate($data); // Check for an error. if ($return instanceof \Exception) { return $return; } // Check the validation results. if ($return === false) { // Get the validation messages from the form. foreach ($form->getErrors() as $formError) { $this->setError($formError->getMessage()); } return false; } // Find the user id for the given email address. $db = $this->getDatabase(); $query = $db->getQuery(true) ->select($db->quoteName('id')) ->from($db->quoteName('#__users')) ->where('LOWER(' . $db->quoteName('email') . ') = LOWER(:email)') ->bind(':email', $data['email']); // Get the user object. $db->setQuery($query); try { $userId = $db->loadResult(); } catch (\RuntimeException $e) { $this->setError(Text::sprintf('COM_USERS_DATABASE_ERROR', $e->getMessage())); return false; } // Check for a user. if (empty($userId)) { $this->setError(Text::_('COM_USERS_INVALID_EMAIL')); return false; } // Get the user object. $user = $this->getUserFactory()->loadUserById($userId); // Make sure the user isn't blocked. if ($user->block) { $this->setError(Text::_('COM_USERS_USER_BLOCKED')); return false; } // Make sure the user isn't a Super Admin. if ($user->authorise('core.admin')) { $this->setError(Text::_('COM_USERS_REMIND_SUPERADMIN_ERROR')); return false; } // Make sure the user has not exceeded the reset limit if (!$this->checkResetLimit($user)) { $resetLimit = (int) Factory::getApplication()->getParams()->get('reset_time'); $this->setError(Text::plural('COM_USERS_REMIND_LIMIT_ERROR_N_HOURS', $resetLimit)); return false; } // Set the confirmation token. $token = ApplicationHelper::getHash(UserHelper::genRandomPassword()); $hashedToken = UserHelper::hashPassword($token); $user->activation = $hashedToken; $event = AbstractEvent::create( 'onUserBeforeResetRequest', [ 'subject' => $user, ] ); $app->getDispatcher()->dispatch($event->getName(), $event); // Save the user to the database. if (!$user->save(true)) { return new \Exception(Text::sprintf('COM_USERS_USER_SAVE_FAILED', $user->getError()), 500); } // Assemble the password reset confirmation link. $mode = $app->get('force_ssl', 0) == 2 ? Route::TLS_FORCE : Route::TLS_IGNORE; $link = 'index.php?option=com_users&view=reset&layout=confirm&token=' . $token; // Put together the email template data. $data = ArrayHelper::fromObject($user, false); $data['sitename'] = $app->get('sitename'); $data['link_text'] = Route::link('site', $link, false, $mode, true); $data['link_html'] = Route::link('site', $link, true, $mode, true); $data['token'] = $token; $mailer = new MailTemplate('com_users.password_reset', $app->getLanguage()->getTag()); $mailer->addTemplateData($data); $mailer->addRecipient($user->email, $user->name); // Try to send the password reset request email. try { $return = $mailer->send(); } catch (\Exception $exception) { try { Log::add(Text::_($exception->getMessage()), Log::WARNING, 'jerror'); $return = false; } catch (\RuntimeException $exception) { $app->enqueueMessage(Text::_($exception->getMessage()), 'warning'); $return = false; } } // Check for an error. if ($return !== true) { return new \Exception(Text::_('COM_USERS_MAIL_FAILED'), 500); } $event = AbstractEvent::create( 'onUserAfterResetRequest', [ 'subject' => $user, ] ); $app->getDispatcher()->dispatch($event->getName(), $event); return true; } /* * Method to check if user reset limit has been exceeded within the allowed time period. * * @param User $user User doing the password reset * * @return boolean true if user can do the reset, false if limit exceeded * * @since 2.5 * @throws \Exception / public function checkResetLimit($user) { $params = Factory::getApplication()->getParams(); $maxCount = (int) $params->get('reset_count'); $resetHours = (int) $params->get('reset_time'); $result = true; $lastResetTime = $user->lastResetTime === null ? 0 : strtotime($user->lastResetTime); $hoursSinceLastReset = (strtotime(Factory::getDate()->toSql()) - $lastResetTime) / 3600; if ($hoursSinceLastReset > $resetHours) { // If it's been long enough, start a new reset count $user->lastResetTime = Factory::getDate()->toSql(); $user->resetCount = 1; } elseif ($user->resetCount < $maxCount) { // If we are under the max count, just increment the counter ++$user->resetCount; } else { // At this point, we know we have exceeded the maximum resets for the time period $result = false; } return $result; } } PK��="�\\|��K!��K!��src/Model/BackupcodesModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Crypt\Crypt; use Joomla\CMS\Date\Date; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Model\BaseDatabaseModel; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\Table\MfaTable; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Model for managing backup codes * * @since 4.2.0 / class BackupcodesModel extends BaseDatabaseModel { /* * Caches the backup codes per user ID * * @var array * @since 4.2.0 / protected $cache = []; /* * Get the backup codes record for the specified user * * @param ?User $user The user in question. Use null for the currently logged in user. * * @return ?MfaTable Record object or null if none is found * @throws \Exception * @since 4.2.0 / public function getBackupCodesRecord(?User $user = null): ?MfaTable { // Make sure I have a user if (empty($user)) { $user = $this->getCurrentUser(); } /* @var MfaTable $record / $record = $this->getTable('Mfa', 'Administrator'); $loaded = $record->load( [ 'user_id' => $user->id, 'method' => 'backupcodes', ] ); if (!$loaded) { $record = null; } return $record; } /* * Generate a new set of backup codes for the specified user. The generated codes are immediately saved to the * database and the internal cache is updated. * * @param ?User $user Which user to generate codes for? * * @return void * @throws \Exception * @since 4.2.0 / public function regenerateBackupCodes(?User $user = null): void { // Make sure I have a user if (empty($user)) { $user = $this->getCurrentUser(); } // Generate backup codes $backupCodes = []; for ($i = 0; $i < 10; $i++) { // Each backup code is 2 groups of 4 digits $backupCodes[$i] = \sprintf('%04u%04u', random_int(0, 9999), random_int(0, 9999)); } // Save the backup codes to the database and update the cache $this->saveBackupCodes($backupCodes, $user); } /* * Saves the backup codes to the database * * @param array $codes An array of exactly 10 elements * @param ?User $user The user for which to save the backup codes * * @return boolean * @throws \Exception * @since 4.2.0 / public function saveBackupCodes(array $codes, ?User $user = null): bool { // Make sure I have a user if (empty($user)) { $user = $this->getCurrentUser(); } // Try to load existing backup codes $existingCodes = $this->getBackupCodes($user); $jNow = Date::getInstance(); /* @var MfaTable $record / $record = $this->getTable('Mfa', 'Administrator'); if (\is_null($existingCodes)) { $record->reset(); $newData = [ 'user_id' => $user->id, 'title' => Text::_('COM_USERS_USER_BACKUPCODES'), 'method' => 'backupcodes', 'default' => 0, 'created_on' => $jNow->toSql(), 'options' => $codes, ]; } else { $record->load( [ 'user_id' => $user->id, 'method' => 'backupcodes', ] ); $newData = [ 'options' => $codes, ]; } $saved = $record->save($newData); if (!$saved) { return false; } // Finally, update the cache $this->cache[$user->id] = $codes; return true; } /* * Returns the backup codes for the specified user. Cached values will be preferentially returned, therefore you * MUST go through this model's Methods ONLY when dealing with backup codes. * * @param ?User $user The user for which you want the backup codes * * @return ?array The backup codes, or null if they do not exist * @throws \Exception * @since 4.2.0 / public function getBackupCodes(?User $user = null): ?array { // Make sure I have a user if (empty($user)) { $user = $this->getCurrentUser(); } if (isset($this->cache[$user->id])) { return $this->cache[$user->id]; } // If there is no cached record try to load it from the database $this->cache[$user->id] = null; // Try to load the record /* @var MfaTable $record / $record = $this->getTable('Mfa', 'Administrator'); $loaded = $record->load( [ 'user_id' => $user->id, 'method' => 'backupcodes', ] ); if ($loaded) { $this->cache[$user->id] = $record->options; } return $this->cache[$user->id]; } /* * Check if the provided string is a backup code. If it is, it will be removed from the list (replaced with an empty * string) and the codes will be saved to the database. All comparisons are performed in a timing safe manner. * * @param string $code The code to check * @param ?User $user The user to check against * * @return boolean * @throws \Exception * @since 4.2.0 / public function isBackupCode($code, ?User $user = null): bool { // Load the backup codes $codes = $this->getBackupCodes($user) ?: array_fill(0, 10, ''); // Keep only the numbers in the provided $code $code = filter_var($code, FILTER_SANITIZE_NUMBER_INT); $code = trim($code); // Check if the code is in the array. We always check against ten codes to prevent timing attacks which // determine the amount of codes. $result = false; // The two arrays let us always add an element to an array, therefore having PHP expend the same amount of time // for the correct code, the incorrect codes and the fake codes. $newArray = []; $dummyArray = []; $realLength = \count($codes); $restLength = 10 - $realLength; foreach ($codes as $value) { if (hash_equals($value, $code)) { // This may seem redundant but makes sure both branches of the if-block are isochronous $result = $result \|\| true; $newArray[] = ''; $dummyArray[] = $value; } else { // This may seem redundant but makes sure both branches of the if-block are isochronous $result = $result \|\| false; $dummyArray[] = ''; $newArray[] = $value; } } /* * This is an intentional waste of time, symmetrical to the code above, making sure * evaluating each of the total of ten elements takes the same time. This code should never * run UNLESS someone messed up with our backup codes array and it no longer contains 10 * elements. / $otherResult = false; $temp1 = []; for ($i = 0; $i < 10; $i++) { $temp1[$i] = random_int(0, 99999999); } for ($i = 0; $i < $restLength; $i++) { if (Crypt::timingSafeCompare($temp1[$i], $code)) { $otherResult = $otherResult \|\| true; $newArray[] = ''; $dummyArray[] = $temp1[$i]; } else { $otherResult = $otherResult \|\| false; $newArray[] = ''; $dummyArray[] = $temp1[$i]; } } // This last check makes sure than an empty code does not validate $result = $result && !hash_equals('', $code); // Save the backup codes $this->saveBackupCodes($newArray, $user); // Finally return the result return $result; } } PK��="�\�Sʉ��src/Model/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\�b�JH��H��src/Model/MethodsModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Date\Date; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Model\BaseDatabaseModel; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\Helper\Mfa as MfaHelper; use Joomla\Database\ParameterType; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Multi-factor Authentication Methods list page's model * * @since 4.2.0 / class MethodsModel extends BaseDatabaseModel { /* * Returns a list of all available MFA methods and their currently active records for a given user. * * @param User\|null $user The user object. Skip to use the current user. * * @return array * @throws \Exception * * @since 4.2.0 / public function getMethods(?User $user = null): array { if (\is_null($user)) { $user = $this->getCurrentUser(); } if ($user->guest) { return []; } // Get an associative array of MFA Methods $rawMethods = MfaHelper::getMfaMethods(); $methods = []; foreach ($rawMethods as $method) { $method['active'] = []; $methods[$method['name']] = $method; } // Put the user MFA records into the Methods array $userMfaRecords = MfaHelper::getUserMfaRecords($user->id); if (!empty($userMfaRecords)) { foreach ($userMfaRecords as $record) { if (!isset($methods[$record->method])) { continue; } $methods[$record->method]->addActiveMethod($record); } } return $methods; } /* * Delete all Multi-factor Authentication Methods for the given user. * * @param User\|null $user The user object to reset MFA for. Null to use the current user. * * @return void * @throws \Exception * * @since 4.2.0 / public function deleteAll(?User $user = null): void { // Make sure we have a user object if (\is_null($user)) { $user = $this->getCurrentUser() ?: Factory::getApplication()->getIdentity(); } // If the user object is a guest (who can't have MFA) we stop with an error if ($user->guest) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } $db = $this->getDatabase(); $query = $db->getQuery(true) ->delete($db->quoteName('#__user_mfa')) ->where($db->quoteName('user_id') . ' = :user_id') ->bind(':user_id', $user->id, ParameterType::INTEGER); $db->setQuery($query)->execute(); } /* * Format a relative timestamp. It deals with timestamps today and yesterday in a special manner. Example returns: * Yesterday, 13:12 * Today, 08:33 * January 1, 2015 * * @param ?string $dateTimeText The database time string to use, e.g. "2017-01-13 13:25:36" * * @return string The formatted, human-readable date * @throws \Exception * * @since 4.2.0 / public function formatRelative(?string $dateTimeText): string { if (empty($dateTimeText)) { return Text::_('JNEVER'); } // The timestamp is given in UTC. Make sure Joomla! parses it as such. $utcTimeZone = new \DateTimeZone('UTC'); $jDate = new Date($dateTimeText, $utcTimeZone); $unixStamp = $jDate->toUnix(); $app = Factory::getApplication(); // I'm pretty sure we didn't have MFA in Joomla back in 1970 ;) if ($unixStamp < 0) { return Text::_('JNEVER'); } // I need to display the date in the user's local timezone. That's how you do it. $user = $this->getCurrentUser(); $userTZ = $user->getParam('timezone', $app->get('offset', 'UTC')); $tz = new \DateTimeZone($userTZ); $jDate->setTimezone($tz); // Default format string: way in the past, the time of the day is not important $formatString = Text::_('COM_USERS_MFA_LBL_DATE_FORMAT_PAST'); $containerString = Text::_('COM_USERS_MFA_LBL_PAST'); // If the timestamp is within the last 72 hours we may need a special format if ($unixStamp > (time() - (72 3600))) { // Is this timestamp today? $jNow = new Date(); $jNow->setTimezone($tz); $checkNow = $jNow->format('Ymd', true); $checkDate = $jDate->format('Ymd', true); if ($checkDate == $checkNow) { $formatString = Text::_('COM_USERS_MFA_LBL_DATE_FORMAT_TODAY'); $containerString = Text::_('COM_USERS_MFA_LBL_TODAY'); } else { // Is this timestamp yesterday? $jYesterday = clone $jNow; $jYesterday->setTime(0, 0, 0); $oneSecond = new \DateInterval('PT1S'); $jYesterday->sub($oneSecond); $checkYesterday = $jYesterday->format('Ymd', true); if ($checkDate == $checkYesterday) { $formatString = Text::_('COM_USERS_MFA_LBL_DATE_FORMAT_YESTERDAY'); $containerString = Text::_('COM_USERS_MFA_LBL_YESTERDAY'); } } } return \sprintf($containerString, $jDate->format($formatString, true)); } /** * Set the user's "don't show this again" flag. * * @param User $user The user to check * @param bool $flag True to set the flag, false to unset it (it will be set to 0, actually) * * @return void * * @since 4.2.0 / public function setFlag(User $user, bool $flag = true): void { $db = $this->getDatabase(); $profileKey = 'mfa.dontshow'; $query = $db->getQuery(true) ->select($db->quoteName('profile_value')) ->from($db->quoteName('#__user_profiles')) ->where($db->quoteName('user_id') . ' = :user_id') ->where($db->quoteName('profile_key') . ' = :profileKey') ->bind(':user_id', $user->id, ParameterType::INTEGER) ->bind(':profileKey', $profileKey, ParameterType::STRING); try { $result = $db->setQuery($query)->loadResult(); } catch (\Exception) { return; } $exists = !\is_null($result); $object = (object) [ 'user_id' => $user->id, 'profile_key' => 'mfa.dontshow', 'profile_value' => ($flag ? 1 : 0), 'ordering' => 1, ]; if (!$exists) { $db->insertObject('#__user_profiles', $object); } else { $db->updateObject('#__user_profiles', $object, ['user_id', 'profile_key']); } } } PK��="�\Zd�f �� !��src/Rule/LoginUniqueFieldRule.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2017 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Rule; use Joomla\CMS\Form\Form; use Joomla\CMS\Form\FormRule; use Joomla\Registry\Registry; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * FormRule for com_users to be sure only one redirect login field has a value * * @since 3.6 / class LoginUniqueFieldRule extends FormRule { /* * Method to test if two fields have a value in order to use only one field. * To use this rule, the form * XML needs a validate attribute of loginuniquefield and a field attribute * that is equal to the field to test against. * * @param \SimpleXMLElement $element The SimpleXMLElement object representing the `<field>` tag for the form field object. * @param mixed $value The form field value to validate. * @param string $group The field name group control value. This acts as an array container for the field. * For example if the field has name="foo" and the group value is set to "bar" then the * full field name would end up being "bar[foo]". * @param ?Registry $input An optional Registry object with the entire data set to validate against the entire form. * @param ?Form $form The form object for which the field is being tested. * * @return boolean True if the value is valid, false otherwise. * * @since 3.6 / public function test(\SimpleXMLElement $element, $value, $group = null, ?Registry $input = null, ?Form $form = null) { $loginRedirectUrl = $input['params']->login_redirect_url; $loginRedirectMenuitem = $input['params']->login_redirect_menuitem; if ($form === null) { throw new \InvalidArgumentException(\sprintf('The value for $form must not be null in %s', \get_class($this))); } if ($input === null) { throw new \InvalidArgumentException(\sprintf('The value for $input must not be null in %s', \get_class($this))); } // Test the input values for login. if ($loginRedirectUrl != '' && $loginRedirectMenuitem != '') { return false; } return true; } } PK��="�\��Ҙ �� "��src/Rule/LogoutUniqueFieldRule.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2017 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Rule; use Joomla\CMS\Form\Form; use Joomla\CMS\Form\FormRule; use Joomla\Registry\Registry; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * FormRule for com_users to be sure only one redirect logout field has a value * * @since 3.6 / class LogoutUniqueFieldRule extends FormRule { /* * Method to test if two fields have a value in order to use only one field. * To use this rule, the form * XML needs a validate attribute of logoutuniquefield and a field attribute * that is equal to the field to test against. * * @param \SimpleXMLElement $element The SimpleXMLElement object representing the `<field>` tag for the form field object. * @param mixed $value The form field value to validate. * @param string $group The field name group control value. This acts as an array container for the field. * For example if the field has name="foo" and the group value is set to "bar" then the * full field name would end up being "bar[foo]". * @param ?Registry $input An optional Registry object with the entire data set to validate against the entire form. * @param ?Form $form The form object for which the field is being tested. * * @return boolean True if the value is valid, false otherwise. * * @since 3.6 / public function test(\SimpleXMLElement $element, $value, $group = null, ?Registry $input = null, ?Form $form = null) { $logoutRedirectUrl = $input['params']->logout_redirect_url; $logoutRedirectMenuitem = $input['params']->logout_redirect_menuitem; if ($form === null) { throw new \InvalidArgumentException(\sprintf('The value for $form must not be null in %s', \get_class($this))); } if ($input === null) { throw new \InvalidArgumentException(\sprintf('The value for $input must not be null in %s', \get_class($this))); } // Test the input values for logout. if ($logoutRedirectUrl != '' && $logoutRedirectMenuitem != '') { return false; } return true; } } PK��="�\�Sʉ��src/Rule/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\} ��"��src/View/Registration/HtmlView.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\View\Registration; use Joomla\CMS\Document\HtmlDocument; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\GenericDataException; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Plugin\PluginHelper; use Joomla\Component\Users\Site\Model\RegistrationModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Registration view class for Users. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * Registration form data * * @var \stdClass\|false / protected $data; /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * The page parameters * * @var \Joomla\Registry\Registry\|null / protected $params; /* * The model state * * @var \Joomla\Registry\Registry / protected $state; /* * The HtmlDocument instance * * @var HtmlDocument / public $document; /* * Should we show a captcha form for the registration of a user? * * @var boolean * * @since 3.7.0 / protected $captchaEnabled = false; /* * The page class suffix * * @var string * @since 4.0.0 / protected $pageclass_sfx = ''; /* * Method to display the view. * * @param string $tpl The template file to include * * @return void * * @since 1.6 * @throws \Exception / public function display($tpl = null) { /* @var RegistrationModel $model / $model = $this->getModel(); $this->form = $model->getForm(); $this->data = $model->getData(); $this->state = $model->getState(); $this->params = $this->state->get('params'); // Check for errors. if (\count($errors = $model->getErrors())) { throw new GenericDataException(implode("\n", $errors), 500); } // Check for layout override $active = Factory::getApplication()->getMenu()->getActive(); if (isset($active->query['layout'])) { $this->setLayout($active->query['layout']); } $captchaSet = $this->params->get('captcha', Factory::getApplication()->get('captcha', '0')); foreach (PluginHelper::getPlugin('captcha') as $plugin) { if ($captchaSet === $plugin->name) { $this->captchaEnabled = true; break; } } // Escape strings for HTML output $this->pageclass_sfx = htmlspecialchars($this->params->get('pageclass_sfx', ''), ENT_COMPAT, 'UTF-8'); $this->prepareDocument(); parent::display($tpl); } /* * Prepares the document. * * @return void * * @since 1.6 * @throws \Exception / protected function prepareDocument() { // Because the application sets a default page title, // we need to get it from the menu item itself $menu = Factory::getApplication()->getMenu()->getActive(); if ($menu) { $this->params->def('page_heading', $this->params->get('page_title', $menu->title)); } else { $this->params->def('page_heading', Text::_('COM_USERS_REGISTRATION')); } $this->setDocumentTitle($this->params->get('page_title', '')); if ($this->params->get('menu-meta_description')) { $this->getDocument()->setDescription($this->params->get('menu-meta_description')); } if ($this->params->get('robots')) { $this->getDocument()->setMetaData('robots', $this->params->get('robots')); } } } PK��="�\�Sʉ��src/View/Registration/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\ dsp��src/View/Methods/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Methods; use Joomla\CMS\Event\MultiFactor\NotifyActionLog; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\DataShape\MethodDescriptor; use Joomla\Component\Users\Administrator\Model\BackupcodesModel; use Joomla\Component\Users\Administrator\Model\MethodsModel; use Joomla\Component\Users\Administrator\View\SiteTemplateTrait; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View for Multi-factor Authentication methods list page * * @since 4.2.0 / class HtmlView extends BaseHtmlView { use SiteTemplateTrait; /* * Is this an administrator page? * * @var boolean * @since 4.2.0 / public $isAdmin = false; /* * The MFA Methods available for this user * * @var array * @since 4.2.0 / public $methods = []; /* * The return URL to use for all links and forms * * @var string * @since 4.2.0 / public $returnURL = null; /* * Are there any active MFA Methods at all? * * @var boolean * @since 4.2.0 / public $mfaActive = false; /* * Which Method has the default record? * * @var string * @since 4.2.0 / public $defaultMethod = ''; /* * The user object used to display this page * * @var User * @since 4.2.0 / public $user = null; /* * Is this page part of the mandatory Multi-factor Authentication setup? * * @var boolean * @since 4.2.0 / public $isMandatoryMFASetup = false; /* * Execute and display a template script. * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void * * @throws \Exception * @see \JViewLegacy::loadTemplate() * @since 4.2.0 / public function display($tpl = null): void { $this->setSiteTemplateStyle(); $app = Factory::getApplication(); if (empty($this->user)) { $this->user = $this->getCurrentUser(); } /* @var MethodsModel $model / $model = $this->getModel(); if ($this->getLayout() !== 'firsttime') { $this->setLayout('default'); } $this->methods = $model->getMethods($this->user); $this->isAdmin = $app->isClient('administrator'); $activeRecords = 0; foreach ($this->methods as $methodName => $method) { $methodActiveRecords = \count($method['active']); if (!$methodActiveRecords) { continue; } $activeRecords += $methodActiveRecords; $this->mfaActive = true; foreach ($method['active'] as $record) { if ($record->default) { $this->defaultMethod = $methodName; break; } } } // If there are no backup codes yet we should create new ones /* @var BackupcodesModel $model / $model = $this->getModel('backupcodes'); $backupCodes = $model->getBackupCodes($this->user); if ($activeRecords && empty($backupCodes)) { $model->regenerateBackupCodes($this->user); } $backupCodesRecord = $model->getBackupCodesRecord($this->user); if (!\is_null($backupCodesRecord)) { $this->methods = array_merge( [ 'backupcodes' => new MethodDescriptor( [ 'name' => 'backupcodes', 'display' => Text::_('COM_USERS_USER_BACKUPCODES'), 'shortinfo' => Text::_('COM_USERS_USER_BACKUPCODES_DESC'), 'image' => 'media/com_users/images/emergency.svg', 'canDisable' => false, 'active' => [$backupCodesRecord], ] ), ], $this->methods ); } $this->isMandatoryMFASetup = $activeRecords === 0 && $app->getSession()->get('com_users.mandatory_mfa_setup', 0) === 1; // Back-end: always show a title in the 'title' module position, not in the page body if ($this->isAdmin) { ToolbarHelper::title(Text::_('COM_USERS_MFA_LIST_PAGE_HEAD'), 'users user-lock'); if ($this->getCurrentUser()->authorise('core.manage', 'com_users')) { $toolbar = $this->getDocument()->getToolbar(); $arrow = Factory::getApplication()->getLanguage()->isRtl() ? 'arrow-right' : 'arrow-left'; $toolbar->link('JTOOLBAR_BACK', 'index.php?option=com_users') ->icon('icon-' . $arrow); } } // Display the view parent::display($tpl); $event = new NotifyActionLog('onComUsersViewMethodsAfterDisplay', [$this]); Factory::getApplication()->getDispatcher()->dispatch($event->getName(), $event); Text::script('JGLOBAL_CONFIRM_DELETE'); } } PK��="�\�Sʉ��src/View/Methods/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\:��src/View/Login/HtmlView.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\View\Login; use Joomla\CMS\Factory; use Joomla\CMS\Helper\AuthenticationHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\GenericDataException; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\User\User; use Joomla\Component\Users\Site\Model\LoginModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Login view class for Users. * * @since 1.5 / class HtmlView extends BaseHtmlView { /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * The page parameters * * @var \Joomla\Registry\Registry\|null / protected $params; /* * The model state * * @var \Joomla\Registry\Registry / protected $state; /* * The logged in user * * @var User / protected $user; /* * The page class suffix * * @var string * @since 4.0.0 / protected $pageclass_sfx = ''; /* * No longer used * * @var boolean * @since 4.0.0 * * @deprecated 4.3 will be removed in 6.0 * Will be removed without replacement / protected $tfa = false; /* * Additional buttons to show on the login page * * @var array * @since 4.0.0 / protected $extraButtons = []; /* * Method to display the view. * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void * * @since 1.5 * @throws \Exception / public function display($tpl = null) { /* @var LoginModel $model / $model = $this->getModel(); $this->user = $this->getCurrentUser(); $this->form = $model->getForm(); $this->state = $model->getState(); $this->params = $this->state->get('params'); // Check for errors. if (\count($errors = $model->getErrors())) { throw new GenericDataException(implode("\n", $errors), 500); } // Check for layout override $active = Factory::getApplication()->getMenu()->getActive(); if (isset($active->query['layout'])) { $this->setLayout($active->query['layout']); } $this->extraButtons = AuthenticationHelper::getLoginButtons('com-users-login__form'); // Escape strings for HTML output $this->pageclass_sfx = htmlspecialchars($this->params->get('pageclass_sfx', ''), ENT_COMPAT, 'UTF-8'); $this->prepareDocument(); parent::display($tpl); } /* * Prepares the document * * @return void * * @since 1.6 * @throws \Exception / protected function prepareDocument() { $login = (bool) $this->getCurrentUser()->guest; // Because the application sets a default page title, // we need to get it from the menu item itself $menu = Factory::getApplication()->getMenu()->getActive(); if ($menu) { $this->params->def('page_heading', $this->params->get('page_title', $menu->title)); } else { $this->params->def('page_heading', $login ? Text::_('JLOGIN') : Text::_('JLOGOUT')); } $this->setDocumentTitle($this->params->get('page_title', '')); if ($this->params->get('menu-meta_description')) { $this->getDocument()->setDescription($this->params->get('menu-meta_description')); } if ($this->params->get('robots')) { $this->getDocument()->setMetaData('robots', $this->params->get('robots')); } } } PK��="�\�Sʉ��src/View/Login/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\W>��src/View/Method/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Method; use Joomla\CMS\Factory; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Router\Route; use Joomla\CMS\Toolbar\Button\BasicButton; use Joomla\CMS\Toolbar\Button\LinkButton; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\CMS\Uri\Uri; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\Model\MethodModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View for Multi-factor Authentication method add/edit page * * @since 4.2.0 / class HtmlView extends BaseHtmlView { /* * Is this an administrator page? * * @var boolean * @since 4.2.0 / public $isAdmin = false; /* * The editor page render options * * @var array * @since 4.2.0 / public $renderOptions = []; /* * The MFA Method record being edited * * @var object * @since 4.2.0 / public $record = null; /* * The title text for this page * * @var string * @since 4.2.0 / public $title = ''; /* * The return URL to use for all links and forms * * @var string * @since 4.2.0 / public $returnURL = null; /* * The user object used to display this page * * @var User * @since 4.2.0 / public $user = null; /* * The backup codes for the current user. Only applies when the backup codes record is being "edited" * * @var array * @since 4.2.0 / public $backupCodes = []; /* * Am I editing an existing Method? If it's false then I'm adding a new Method. * * @var boolean * @since 4.2.0 / public $isEditExisting = false; /* * Execute and display a template script. * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void * * @throws \Exception * @see \JViewLegacy::loadTemplate() * @since 4.2.0 / public function display($tpl = null): void { $app = Factory::getApplication(); if (empty($this->user)) { $this->user = $this->getCurrentUser(); } /* @var MethodModel $model / $model = $this->getModel(); $this->setLayout('edit'); $this->renderOptions = $model->getRenderOptions($this->user); $this->record = $model->getRecord($this->user); $this->title = $model->getPageTitle(); $this->isAdmin = $app->isClient('administrator'); $toolbar = $this->getDocument()->getToolbar(); // Backup codes are a special case, rendered with a special layout if ($this->record->method == 'backupcodes') { $this->setLayout('backupcodes'); $backupCodes = $this->record->options; if (!\is_array($backupCodes)) { $backupCodes = []; } $backupCodes = array_filter( $backupCodes, function ($x) { return !empty($x); } ); if (\count($backupCodes) % 2 != 0) { $backupCodes[] = ''; } /* * The call to array_merge resets the array indices. This is necessary since array_filter kept the indices, * meaning our elements are completely out of order. / $this->backupCodes = array_merge($backupCodes); } // Set up the isEditExisting property. $this->isEditExisting = !empty($this->record->id); // Back-end: always show a title in the 'title' module position, not in the page body if ($this->isAdmin) { ToolbarHelper::title($this->title, 'users user-lock'); $helpUrl = $this->renderOptions['help_url']; if (!empty($helpUrl)) { $toolbar->help('', false, $helpUrl); } $this->title = ''; } $returnUrl = empty($this->returnURL) ? '' : base64_decode($this->returnURL); $returnUrl = ($returnUrl && Uri::isInternal($returnUrl)) ? $returnUrl : Route::_('index.php?option=com_users&task=methods.display&user_id=' . $this->user->id); if ($this->isAdmin && $this->getLayout() === 'edit') { $button = (new BasicButton('user-mfa-edit-save')) ->text($this->renderOptions['submit_text']) ->icon($this->renderOptions['submit_icon']) ->onclick('document.getElementById(\'user-mfa-edit-save\').click()'); if ($this->renderOptions['show_submit'] \|\| $this->isEditExisting) { $toolbar->appendButton($button); } $button = (new LinkButton('user-mfa-edit-cancel')) ->url($returnUrl) ->text('JCANCEL') ->buttonClass('btn btn-danger') ->icon('icon-cancel-2'); $toolbar->appendButton($button); } elseif ($this->isAdmin && $this->getLayout() === 'backupcodes') { $arrow = Factory::getApplication()->getLanguage()->isRtl() ? 'arrow-right' : 'arrow-left'; $button = (new LinkButton('user-mfa-edit-cancel')) ->url($returnUrl) ->text('JTOOLBAR_BACK') ->icon('icon-' . $arrow); $toolbar->appendButton($button); $button = (new LinkButton('user-mfa-edit-cancel')) ->url( Route::_( \sprintf( "index.php?option=com_users&task=method.regenerateBackupCodes&user_id=%s&%s=1&returnurl=%s", $this->user->id, Factory::getApplication()->getFormToken(), base64_encode($returnUrl) ) ) ) ->text('COM_USERS_MFA_BACKUPCODES_RESET') ->buttonClass('btn btn-danger') ->icon('icon-refresh'); $toolbar->appendButton($button); } // Display the view parent::display($tpl); } } PK��="�\�Sʉ��src/View/Method/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\2��\|��\|��src/View/Remind/HtmlView.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\View\Remind; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\GenericDataException; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\Component\Users\Site\Model\RemindModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Remind view class for Users. * * @since 1.5 / class HtmlView extends BaseHtmlView { /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * The page parameters * * @var \Joomla\Registry\Registry\|null / protected $params; /* * The model state * * @var \Joomla\Registry\Registry / protected $state; /* * The page class suffix * * @var string * @since 4.0.0 / protected $pageclass_sfx = ''; /* * Method to display the view. * * @param string $tpl The template file to include * * @return void * * @since 1.5 * @throws \Exception / public function display($tpl = null) { /* @var RemindModel $model / $model = $this->getModel(); $this->form = $model->getForm(); $this->state = $model->getState(); $this->params = $this->state->get('params'); // Check for errors. if (\count($errors = $model->getErrors())) { throw new GenericDataException(implode("\n", $errors), 500); } // Check for layout override $active = Factory::getApplication()->getMenu()->getActive(); if (isset($active->query['layout'])) { $this->setLayout($active->query['layout']); } // Escape strings for HTML output $this->pageclass_sfx = htmlspecialchars($this->params->get('pageclass_sfx', ''), ENT_COMPAT, 'UTF-8'); $this->prepareDocument(); parent::display($tpl); } /* * Prepares the document. * * @return void * * @since 1.6 * @throws \Exception / protected function prepareDocument() { // Because the application sets a default page title, // we need to get it from the menu item itself $menu = Factory::getApplication()->getMenu()->getActive(); if ($menu) { $this->params->def('page_heading', $this->params->get('page_title', $menu->title)); } else { $this->params->def('page_heading', Text::_('COM_USERS_REMIND')); } $this->setDocumentTitle($this->params->get('page_title', '')); if ($this->params->get('menu-meta_description')) { $this->getDocument()->setDescription($this->params->get('menu-meta_description')); } if ($this->params->get('robots')) { $this->getDocument()->setMetaData('robots', $this->params->get('robots')); } } } PK��="�\�Sʉ��src/View/Remind/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\��6n ��n ��src/View/Reset/HtmlView.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\View\Reset; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\GenericDataException; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\Component\Users\Site\Model\ResetModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Reset view class for Users. * * @since 1.5 / class HtmlView extends BaseHtmlView { /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * The page parameters * * @var \Joomla\Registry\Registry\|null / protected $params; /* * The model state * * @var \Joomla\Registry\Registry / protected $state; /* * The page class suffix * * @var string * @since 4.0.0 / protected $pageclass_sfx = ''; /* * Method to display the view. * * @param string $tpl The template file to include * * @return void * * @since 1.5 / public function display($tpl = null) { // This name will be used to get the model $name = $this->getLayout(); /* @var ResetModel $model / $model = $this->getModel(); // Check that the name is valid - has an associated model. if (!\in_array($name, ['confirm', 'complete'])) { $name = 'default'; } if ('default' === $name) { $this->form = $model->getForm(); } elseif ($name === 'confirm') { $this->form = $model->getResetConfirmForm(); } elseif ($name === 'complete') { $this->form = $model->getResetCompleteForm(); } $this->state = $model->getState(); $this->params = $this->state->get('params'); // Check for errors. if (\count($errors = $model->getErrors())) { throw new GenericDataException(implode("\n", $errors), 500); } // Escape strings for HTML output $this->pageclass_sfx = htmlspecialchars($this->params->get('pageclass_sfx', ''), ENT_COMPAT, 'UTF-8'); $this->prepareDocument(); parent::display($tpl); } /* * Prepares the document. * * @return void * * @since 1.6 * @throws \Exception / protected function prepareDocument() { // Because the application sets a default page title, // we need to get it from the menu item itself $menu = Factory::getApplication()->getMenu()->getActive(); if ($menu) { $this->params->def('page_heading', $this->params->get('page_title', $menu->title)); } else { $this->params->def('page_heading', Text::_('COM_USERS_RESET')); } $this->setDocumentTitle($this->params->get('page_title', '')); if ($this->params->get('menu-meta_description')) { $this->getDocument()->setDescription($this->params->get('menu-meta_description')); } if ($this->params->get('robots')) { $this->getDocument()->setMetaData('robots', $this->params->get('robots')); } } } PK��="�\�Sʉ��src/View/Reset/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\��S��src/View/Profile/HtmlView.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\View\Profile; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\GenericDataException; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Router\Route; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\Helper\Mfa; use Joomla\Component\Users\Site\Model\ProfileModel; use Joomla\Database\DatabaseDriver; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Profile view class for Users. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * Profile form data for the user * * @var User / protected $data; /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * The page parameters * * @var \Joomla\Registry\Registry\|null / protected $params; /* * The model state * * @var \Joomla\Registry\Registry / protected $state; /* * An instance of DatabaseDriver. * * @var DatabaseDriver * @since 3.6.3 * * @deprecated 4.3 will be removed in 6.0 * Will be removed without replacement use database from the container instead * Example: Factory::getContainer()->get(DatabaseInterface::class); / protected $db; /* * The page class suffix * * @var string * @since 4.0.0 / protected $pageclass_sfx = ''; /* * The Multi-factor Authentication configuration interface for the user. * * @var string\|null * @since 4.2.0 / protected $mfaConfigurationUI; /* * Execute and display a template script. * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void\|boolean * * @since 1.6 * @throws \Exception / public function display($tpl = null) { $user = $this->getCurrentUser(); /* @var ProfileModel $model / $model = $this->getModel(); $this->data = $model->getData(); $this->form = $model->getForm(); $this->state = $model->getState(); $this->params = $this->state->get('params'); $this->mfaConfigurationUI = Mfa::getConfigurationInterface($user); $this->db = Factory::getDbo(); // Check for errors. if (\count($errors = $model->getErrors())) { throw new GenericDataException(implode("\n", $errors), 500); } // View also takes responsibility for checking if the user logged in with remember me. if (isset($user->cookieLogin) && !empty($user->cookieLogin)) { // If so, the user must login to edit the password and other data. // What should happen here? Should we force a logout which destroys the cookies? $app = Factory::getApplication(); $app->enqueueMessage(Text::_('JGLOBAL_REMEMBER_MUST_LOGIN'), 'message'); $app->redirect(Route::_('index.php?option=com_users&view=login', false)); return false; } // Check if a user was found. if (!$this->data->id) { throw new \Exception(Text::_('JERROR_USERS_PROFILE_NOT_FOUND'), 404); } PluginHelper::importPlugin('content'); $this->data->text = ''; Factory::getApplication()->triggerEvent('onContentPrepare', ['com_users.user', &$this->data, &$this->data->params, 0]); unset($this->data->text); // Check for layout from menu item. $active = Factory::getApplication()->getMenu()->getActive(); if ( $active && isset($active->query['layout'], $active->query['option']) && $active->query['option'] === 'com_users' && isset($active->query['view']) && $active->query['view'] === 'profile' ) { $this->setLayout($active->query['layout']); } // Escape strings for HTML output $this->pageclass_sfx = htmlspecialchars($this->params->get('pageclass_sfx', '')); $this->prepareDocument(); parent::display($tpl); } /* * Prepares the document * * @return void * * @since 1.6 * @throws \Exception / protected function prepareDocument() { // Because the application sets a default page title, // we need to get it from the menu item itself $menu = Factory::getApplication()->getMenu()->getActive(); if ($menu) { $this->params->def('page_heading', $this->params->get('page_title', $this->getCurrentUser()->name)); } else { $this->params->def('page_heading', Text::_('COM_USERS_PROFILE')); } $this->setDocumentTitle($this->params->get('page_title', '')); if ($this->params->get('menu-meta_description')) { $this->getDocument()->setDescription($this->params->get('menu-meta_description')); } if ($this->params->get('robots')) { $this->getDocument()->setMetaData('robots', $this->params->get('robots')); } } } PK��="�\�Sʉ��src/View/Profile/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\�t�pR��R��src/View/Captive/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Captive; use Joomla\CMS\Event\MultiFactor\BeforeDisplayMethods; use Joomla\CMS\Event\MultiFactor\NotifyActionLog; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Toolbar\Button\BasicButton; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Helper\Mfa as MfaHelper; use Joomla\Component\Users\Administrator\Model\BackupcodesModel; use Joomla\Component\Users\Administrator\Model\CaptiveModel; use Joomla\Component\Users\Administrator\View\SiteTemplateTrait; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View for Multi-factor Authentication captive page * * @since 4.2.0 / class HtmlView extends BaseHtmlView { use SiteTemplateTrait; /* * The MFA Method records for the current user which correspond to enabled plugins * * @var array * @since 4.2.0 / public $records = []; /* * The currently selected MFA Method record against which we'll be authenticating * * @var null\|\stdClass * @since 4.2.0 / public $record = null; /* * The Captive MFA page's rendering options * * @var array\|null * @since 4.2.0 / public $renderOptions = null; /* * The title to display at the top of the page * * @var string * @since 4.2.0 / public $title = ''; /* * Is this an administrator page? * * @var boolean * @since 4.2.0 / public $isAdmin = false; /* * Does the currently selected Method allow authenticating against all of its records? * * @var boolean * @since 4.2.0 / public $allowEntryBatching = false; /* * All enabled MFA Methods (plugins) * * @var array * @since 4.2.0 / public $mfaMethods; /* * Execute and display a template script. * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void A string if successful, otherwise an Error object. * * @throws \Exception * @since 4.2.0 / public function display($tpl = null) { $this->setSiteTemplateStyle(); $app = Factory::getApplication(); $user = $this->getCurrentUser(); PluginHelper::importPlugin('multifactorauth'); $event = new BeforeDisplayMethods($user); $app->getDispatcher()->dispatch($event->getName(), $event); /* @var CaptiveModel $model / $model = $this->getModel(); // Load data from the model $this->isAdmin = $app->isClient('administrator'); $this->records = $model->getRecords(); $this->record = $model->getRecord(); $this->mfaMethods = MfaHelper::getMfaMethods(); if (!empty($this->records)) { /* @var BackupcodesModel $codesModel / $codesModel = $this->getModel('Backupcodes'); $backupCodesRecord = $codesModel->getBackupCodesRecord(); if (!\is_null($backupCodesRecord)) { $backupCodesRecord->title = Text::_('COM_USERS_USER_BACKUPCODES'); $this->records[] = $backupCodesRecord; } } // If we only have one record there's no point asking the user to select a MFA Method if (empty($this->record) && !empty($this->records)) { // Default to the first record $this->record = reset($this->records); // If we have multiple records try to make this record the default if (\count($this->records) > 1) { foreach ($this->records as $record) { if ($record->default) { $this->record = $record; break; } } } } // Set the correct layout based on the availability of a MFA record $this->setLayout('default'); // If we have no record selected or explicitly asked to run the 'select' task use the correct layout if (\is_null($this->record) \|\| ($model->getState('task') == 'select')) { $this->setLayout('select'); } switch ($this->getLayout()) { case 'select': $this->allowEntryBatching = 1; $event = new NotifyActionLog('onComUsersCaptiveShowSelect', []); Factory::getApplication()->getDispatcher()->dispatch($event->getName(), $event); break; case 'default': default: $this->renderOptions = $model->loadCaptiveRenderOptions($this->record); $this->allowEntryBatching = $this->renderOptions['allowEntryBatching'] ?? 0; $event = new NotifyActionLog( 'onComUsersCaptiveShowCaptive', [ $this->escape($this->record->title), ] ); Factory::getApplication()->getDispatcher()->dispatch($event->getName(), $event); break; } // Which title should I use for the page? $this->title = $model->getPageTitle(); // Back-end: always show a title in the 'title' module position, not in the page body if ($this->isAdmin) { ToolbarHelper::title(Text::_('COM_USERS_USER_MULTIFACTOR_AUTH'), 'users user-lock'); $this->title = ''; } if ($this->isAdmin && $this->getLayout() === 'default') { $bar = $this->getDocument()->getToolbar(); $button = (new BasicButton('user-mfa-submit')) ->text($this->renderOptions['submit_text']) ->icon($this->renderOptions['submit_icon']); $bar->appendButton($button); $button = (new BasicButton('user-mfa-logout')) ->text('COM_USERS_MFA_LOGOUT') ->buttonClass('btn btn-danger') ->icon('icon icon-lock'); $bar->appendButton($button); if (\count($this->records) > 1) { $arrow = Factory::getApplication()->getLanguage()->isRtl() ? 'arrow-right' : 'arrow-left'; $button = (new BasicButton('user-mfa-choose-another')) ->text('COM_USERS_MFA_USE_DIFFERENT_METHOD') ->icon('icon-' . $arrow); $bar->appendButton($button); } } // Display the view parent::display($tpl); } } PK��="�\�Sʉ��src/View/Captive/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\��X ��X ��%��src/Controller/CallbackController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Event\MultiFactor\Callback; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Plugin\PluginHelper; use Joomla\Input\Input; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Multi-factor Authentication plugins' AJAX callback controller * * @since 4.2.0 / class CallbackController extends BaseController { /* * Public constructor * * @param array $config Plugin configuration * @param ?MVCFactoryInterface $factory MVC Factory for the com_users component * @param ?CMSApplication $app CMS application object * @param ?Input $input Joomla CMS input object * * @since 4.2.0 / public function __construct(array $config = [], ?MVCFactoryInterface $factory = null, ?CMSApplication $app = null, ?Input $input = null) { parent::__construct($config, $factory, $app, $input); $this->registerDefaultTask('callback'); } /* * Implement a callback feature, typically used for OAuth2 authentication * * @param bool $cachable Can this view be cached * @param array\|bool $urlparams An array of safe url parameters and their variable types. * @see \Joomla\CMS\Filter\InputFilter::clean() for valid values. * * @return void * @since 4.2.0 / public function callback($cachable = false, $urlparams = false): void { // Get the Method and make sure it's non-empty $method = $this->input->getCmd('method', ''); if (empty($method)) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } PluginHelper::importPlugin('multifactorauth'); $event = new Callback($method); $this->app->getDispatcher()->dispatch($event->getName(), $event); /* * The first plugin to handle the request should either redirect or close the application. If we are still here * no plugin handled the request successfully. Show an error. / throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } } PK��="�\\|W�/��/��!��src/Controller/UserController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2007 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Access\Access; use Joomla\CMS\MVC\Controller\FormController; use Joomla\CMS\MVC\Model\BaseDatabaseModel; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User controller class. * * @since 1.6 / class UserController extends FormController { /* * @var string The prefix to use with controller messages. * @since 1.6 / protected $text_prefix = 'COM_USERS_USER'; /* * Overrides Joomla\CMS\MVC\Controller\FormController::allowEdit * * Checks that non-Super Admins are not editing Super Admins. * * @param array $data An array of input data. * @param string $key The name of the key for the primary key. * * @return boolean True if allowed, false otherwise. * * @since 1.6 / protected function allowEdit($data = [], $key = 'id') { // Check if this person is a Super Admin if (Access::check($data[$key], 'core.admin')) { // If I'm not a Super Admin, then disallow the edit. if (!$this->app->getIdentity()->authorise('core.admin')) { return false; } } // Allow users to edit their own account if (isset($data[$key]) && (int) $this->app->getIdentity()->id === (int) $data[$key]) { return true; } return parent::allowEdit($data, $key); } /* * Override parent cancel to redirect when using status edit account. * * @param string $key The name of the primary key of the URL variable. * * @return boolean True if access level checks pass, false otherwise. * * @since 4.0.0 / public function cancel($key = null) { $result = parent::cancel(); if ($return = $this->input->get('return', '', 'BASE64')) { $return = base64_decode($return); // Don't redirect to an external URL. if (!Uri::isInternal($return)) { $return = Uri::base(); } $this->app->redirect($return); } return $result; } /* * Override parent save to redirect when using status edit account. * * @param string $key The name of the primary key of the URL variable. * @param string $urlVar The name of the URL variable if different from the primary key (sometimes required to avoid router collisions). * * @return boolean True if successful, false otherwise. * * @since 4.0.0 / public function save($key = null, $urlVar = null) { $result = parent::save($key, $urlVar); $task = $this->getTask(); if ($task === 'save' && $return = $this->input->get('return', '', 'BASE64')) { $return = base64_decode($return); // Don't redirect to an external URL. if (!Uri::isInternal($return)) { $return = Uri::base(); } $this->setRedirect($return); } // If a user has to renew a password but has no permission for users if ($task === 'save' && !$this->app->getIdentity()->authorise('core.manage', 'com_users')) { $this->setRedirect(Uri::base()); } return $result; } /* * Method to run batch operations. * * @param object $model The model. * * @return boolean True on success, false on failure * * @since 2.5 / public function batch($model = null) { $this->checkToken(); // Set the model $model = $this->getModel('User', 'Administrator', []); // Preset the redirect $this->setRedirect(Route::_('index.php?option=com_users&view=users' . $this->getRedirectToListAppend(), false)); return parent::batch($model); } /* * Function that allows child controller access to model data after the data has been saved. * * @param BaseDatabaseModel $model The data model object. * @param array $validData The validated data. * * @return void * * @since 3.1 / protected function postSaveHook(BaseDatabaseModel $model, $validData = []) { } } PK��="�\�d\|XM%��M%��)��src/Controller/RegistrationController.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Application\CMSWebApplicationInterface; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Registration controller class for Users. * * @since 1.6 / class RegistrationController extends BaseController implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * Method to activate a user. * * @return boolean True on success, false on failure. * * @since 1.6 * @throws \Exception / public function activate() { $user = $this->app->getIdentity(); $input = $this->input; $uParams = ComponentHelper::getParams('com_users'); // Check for admin activation. Don't allow non-super-admin to delete a super admin if ($uParams->get('useractivation') != 2 && $user->id) { $this->setRedirect('index.php'); return true; } // If user registration or account activation is disabled, throw a 403. if ($uParams->get('useractivation') == 0 \|\| $uParams->get('allowUserRegistration') == 0) { throw new \Exception(Text::_('JLIB_APPLICATION_ERROR_ACCESS_FORBIDDEN'), 403); } /* @var \Joomla\Component\Users\Site\Model\RegistrationModel $model / $model = $this->getModel('Registration', 'Site'); $token = $input->getAlnum('token'); // Check that the token is in a valid format. if ($token === null \|\| \strlen($token) !== 32) { throw new \Exception(Text::_('JINVALID_TOKEN'), 403); } // Get the User ID $userIdToActivate = $model->getUserIdFromToken($token); if (!$userIdToActivate) { $this->setMessage(Text::_('COM_USERS_ACTIVATION_TOKEN_NOT_FOUND')); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return false; } // Get the user we want to activate $userToActivate = $this->getUserFactory()->loadUserById($userIdToActivate); // Admin activation is on and admin is activating the account if (($uParams->get('useractivation') == 2) && $userToActivate->getParam('activate', 0)) { // If a user admin is not logged in, redirect them to the login page with an error message if (!$user->authorise('core.create', 'com_users') \|\| !$user->authorise('core.manage', 'com_users')) { $activationUrl = 'index.php?option=com_users&task=registration.activate&token=' . $token; $loginUrl = 'index.php?option=com_users&view=login&return=' . base64_encode($activationUrl); // In case we still run into this in the second step the user does not have the right permissions $message = Text::_('COM_USERS_REGISTRATION_ACL_ADMIN_ACTIVATION_PERMISSIONS'); // When we are not logged in we should login if ($user->guest) { $message = Text::_('COM_USERS_REGISTRATION_ACL_ADMIN_ACTIVATION'); } $this->setMessage($message); $this->setRedirect(Route::_($loginUrl, false)); return false; } } // Attempt to activate the user. $return = $model->activate($token); // Check for errors. if ($return === false) { // Redirect back to the home page. $this->setMessage(Text::sprintf('COM_USERS_REGISTRATION_SAVE_FAILED', $model->getError()), 'error'); $this->setRedirect('index.php'); return false; } $useractivation = $uParams->get('useractivation'); // Redirect to the login screen. if ($useractivation == 0) { $this->setMessage(Text::_('COM_USERS_REGISTRATION_SAVE_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); } elseif ($useractivation == 1) { $this->setMessage(Text::_('COM_USERS_REGISTRATION_ACTIVATE_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); } elseif ($return->getParam('activate')) { $this->setMessage(Text::_('COM_USERS_REGISTRATION_VERIFY_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false)); } else { $this->setMessage(Text::_('COM_USERS_REGISTRATION_ADMINACTIVATE_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false)); } return true; } /* * Method to register a user. * * @return boolean True on success, false on failure. * * @since 1.6 * @throws \Exception / public function register() { // Check for request forgeries. $this->checkToken(); // If registration is disabled - Redirect to login page. if (ComponentHelper::getParams('com_users')->get('allowUserRegistration') == 0) { $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return false; } $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\RegistrationModel $model / $model = $this->getModel('Registration', 'Site'); // Get the user data. $requestData = $this->input->post->get('jform', [], 'array'); // Validate the posted data. $form = $model->getForm(); if (!$form) { throw new \Exception($model->getError(), 500); } $data = $model->validate($form, $requestData); // Check for validation errors. if ($data === false) { // Get the validation messages. $errors = $model->getErrors(); // Push up to three validation messages out to the user. for ($i = 0, $n = \count($errors); $i < $n && $i < 3; $i++) { if ($errors[$i] instanceof \Exception) { $app->enqueueMessage($errors[$i]->getMessage(), CMSWebApplicationInterface::MSG_ERROR); } else { $app->enqueueMessage($errors[$i], CMSWebApplicationInterface::MSG_ERROR); } } /* * We need the filtered value of calendar fields because the UTC normalisation is * done in the filter and on output. This would apply the Timezone offset on * reload. We set the calendar values we save to the processed date. / $filteredData = $form->filter($requestData); foreach ($form->getFieldset() as $field) { if ($field->type === 'Calendar') { $fieldName = $field->fieldname; if ($field->group) { if (isset($filteredData[$field->group][$fieldName])) { $requestData[$field->group][$fieldName] = $filteredData[$field->group][$fieldName]; } } else { if (isset($filteredData[$fieldName])) { $requestData[$fieldName] = $filteredData[$fieldName]; } } } } // Save the data in the session. $app->setUserState('com_users.registration.data', $requestData); // Redirect back to the registration screen. $this->setRedirect(Route::_('index.php?option=com_users&view=registration', false)); return false; } // Attempt to save the data. $return = $model->register($data); // Check for errors. if ($return === false) { // Save the data in the session. $app->setUserState('com_users.registration.data', $data); // Redirect back to the edit screen. $this->setMessage($model->getError(), 'error'); $this->setRedirect(Route::_('index.php?option=com_users&view=registration', false)); return false; } // Flush the data from the session. $app->setUserState('com_users.registration.data', null); // Redirect to the profile screen. if ($return === 'adminactivate') { $this->setMessage(Text::_('COM_USERS_REGISTRATION_COMPLETE_VERIFY')); $this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false)); } elseif ($return === 'useractivate') { $this->setMessage(Text::_('COM_USERS_REGISTRATION_COMPLETE_ACTIVATE')); $this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false)); } else { $this->setMessage(Text::_('COM_USERS_REGISTRATION_SAVE_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); } return true; } } PK��="�\"l5�Y��Y��"��src/Controller/ResetController.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Reset controller class for Users. * * @since 1.6 / class ResetController extends BaseController { /* * Method to request a password reset. * * @return boolean * * @since 1.6 / public function request() { // Check the request token. $this->checkToken('post'); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\ResetModel $model / $model = $this->getModel('Reset', 'Site'); $data = $this->input->post->get('jform', [], 'array'); // Submit the password reset request. $return = $model->processResetRequest($data); // Check for a hard error. if ($return instanceof \Exception && JDEBUG) { // Get the error message to display. if ($app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_USERS_RESET_REQUEST_ERROR'); } // Go back to the request form. $this->setRedirect(Route::_('index.php?option=com_users&view=reset', false), $message, 'error'); return false; } if ($return === false && JDEBUG) { // The request failed. // Go back to the request form. $message = Text::sprintf('COM_USERS_RESET_REQUEST_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=reset', false), $message, 'notice'); return false; } // To not expose if the user exists or not we send a generic message. $message = Text::_('COM_USERS_RESET_REQUEST'); $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=confirm', false), $message, 'notice'); return true; } /* * Method to confirm the password request. * * @return boolean * * @access public * @since 1.6 / public function confirm() { // Check the request token. $this->checkToken('request'); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\ResetModel $model / $model = $this->getModel('Reset', 'Site'); $data = $this->input->get('jform', [], 'array'); // Confirm the password reset request. $return = $model->processResetConfirm($data); // Check for a hard error. if ($return instanceof \Exception) { // Get the error message to display. if ($app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_USERS_RESET_CONFIRM_ERROR'); } // Go back to the confirm form. $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=confirm', false), $message, 'error'); return false; } if ($return === false) { // Confirm failed. // Go back to the confirm form. $message = Text::sprintf('COM_USERS_RESET_CONFIRM_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=confirm', false), $message, 'notice'); return false; } // Confirm succeeded. // Proceed to step three. $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=complete', false)); return true; } /* * Method to complete the password reset process. * * @return boolean * * @since 1.6 / public function complete() { // Check for request forgeries $this->checkToken('post'); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\ResetModel $model / $model = $this->getModel('Reset', 'Site'); $data = $this->input->post->get('jform', [], 'array'); // Complete the password reset request. $return = $model->processResetComplete($data); // Check for a hard error. if ($return instanceof \Exception) { // Get the error message to display. if ($app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_USERS_RESET_COMPLETE_ERROR'); } // Go back to the complete form. $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=complete', false), $message, 'error'); return false; } if ($return === false) { // Complete failed. // Go back to the complete form. $message = Text::sprintf('COM_USERS_RESET_COMPLETE_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=complete', false), $message, 'notice'); return false; } // Complete succeeded. // Proceed to the login form. $message = Text::_('COM_USERS_RESET_COMPLETE_SUCCESS'); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false), $message); return true; } } PK��="�\�5-1��$��src/Controller/MethodsController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Event\MultiFactor\NotifyActionLog; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\Component\Users\Administrator\Helper\Mfa as MfaHelper; use Joomla\Component\Users\Administrator\Model\MethodsModel; use Joomla\Input\Input; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Multi-factor Authentication methods selection and management controller * * @since 4.2.0 / class MethodsController extends BaseController implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * Public constructor * * @param array $config Plugin configuration * @param ?MVCFactoryInterface $factory MVC Factory for the com_users component * @param ?CMSApplication $app CMS application object * @param ?Input $input Joomla CMS input object * * @since 4.2.0 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, ?CMSApplication $app = null, ?Input $input = null) { // We have to tell Joomla what is the name of the view, otherwise it defaults to the name of the component. $config['default_view'] = 'Methods'; parent::__construct($config, $factory, $app, $input); } /* * Disable Multi-factor Authentication for the current user * * @param bool $cachable Can this view be cached * @param array $urlparams An array of safe url parameters and their variable types. * @see \Joomla\CMS\Filter\InputFilter::clean() for valid values. * * @return void * @since 4.2.0 / public function disable($cachable = false, $urlparams = []): void { $this->assertLoggedInUser(); $this->checkToken($this->input->getMethod()); // Make sure I am allowed to edit the specified user $userId = $this->input->getInt('user_id', null); $user = ($userId === null) ? $this->app->getIdentity() : $this->getUserFactory()->loadUserById($userId); $user ??= $this->getUserFactory()->loadUserById(0); if (!MfaHelper::canDeleteMethod($user)) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } // Delete all MFA Methods for the user /* @var MethodsModel $model / $model = $this->getModel('Methods'); $type = null; $message = null; $event = new NotifyActionLog('onComUsersControllerMethodsBeforeDisable', [$user]); $this->app->getDispatcher()->dispatch($event->getName(), $event); try { $model->deleteAll($user); } catch (\Exception $e) { $message = $e->getMessage(); $type = 'error'; } // Redirect $url = Route::_('index.php?option=com_users&task=methods.display&user_id=' . $userId, false); $returnURL = $this->input->getBase64('returnurl'); if (!empty($returnURL) && Uri::isInternal(base64_decode($returnURL))) { $url = base64_decode($returnURL); } $this->setRedirect($url, $message, $type); } /* * List all available Multi-factor Authentication Methods available and guide the user to setting them up * * @param bool $cachable Can this view be cached * @param array $urlparams An array of safe url parameters and their variable types. * @see \Joomla\CMS\Filter\InputFilter::clean() for valid values. * * @return void * @since 4.2.0 / public function display($cachable = false, $urlparams = []): void { $this->assertLoggedInUser(); // Make sure I am allowed to edit the specified user $userId = $this->input->getInt('user_id', null); $user = ($userId === null) ? $this->app->getIdentity() : $this->getUserFactory()->loadUserById($userId); $user ??= $this->getUserFactory()->loadUserById(0); if (!MfaHelper::canShowConfigurationInterface($user)) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } $returnURL = $this->input->getBase64('returnurl'); $viewLayout = $this->input->get('layout', 'default', 'string'); $view = $this->getView('Methods', 'html'); $view->setLayout($viewLayout); $view->returnURL = $returnURL; $view->user = $user; $view->document = $this->app->getDocument(); $methodsModel = $this->getModel('Methods'); $view->setModel($methodsModel, true); $backupCodesModel = $this->getModel('Backupcodes'); $view->setModel($backupCodesModel, false); $view->display(); } /* * Disable Multi-factor Authentication for the current user * * @param bool $cachable Can this view be cached * @param array $urlparams An array of safe url parameters and their variable types. * @see \Joomla\CMS\Filter\InputFilter::clean() for valid values. * * @return void * @since 4.2.0 / public function doNotShowThisAgain($cachable = false, $urlparams = []): void { $this->assertLoggedInUser(); $this->checkToken($this->input->getMethod()); // Make sure I am allowed to edit the specified user $userId = $this->input->getInt('user_id', null); $user = ($userId === null) ? $this->app->getIdentity() : $this->getUserFactory()->loadUserById($userId); $user ??= $this->getUserFactory()->loadUserById(0); if (!MfaHelper::canAddEditMethod($user)) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } $event = new NotifyActionLog('onComUsersControllerMethodsBeforeDoNotShowThisAgain', [$user]); $this->app->getDispatcher()->dispatch($event->getName(), $event); /* @var MethodsModel $model / $model = $this->getModel('Methods'); $model->setFlag($user, true); // Redirect $url = Uri::base(); $returnURL = $this->input->getBase64('returnurl'); if (!empty($returnURL) && Uri::isInternal(base64_decode($returnURL))) { $url = base64_decode($returnURL); } $this->setRedirect($url); } /* * Assert that there is a user currently logged in * * @return void * @since 4.2.0 / private function assertLoggedInUser(): void { $user = $this->app->getIdentity() ?: $this->getUserFactory()->loadUserById(0); if ($user->guest) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } } } PK��="�\��#��#��$��src/Controller/CaptiveController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Date\Date; use Joomla\CMS\Event\MultiFactor\NotifyActionLog; use Joomla\CMS\Event\MultiFactor\Validate; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\Component\Users\Administrator\Model\BackupcodesModel; use Joomla\Component\Users\Administrator\Model\CaptiveModel; use Joomla\Input\Input; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Captive Multi-factor Authentication page controller * * @since 4.2.0 / class CaptiveController extends BaseController implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * Public constructor * * @param array $config Plugin configuration * @param ?MVCFactoryInterface $factory MVC Factory for the com_users component * @param ?CMSApplication $app CMS application object * @param ?Input $input Joomla CMS input object * * @since 4.2.0 / public function __construct(array $config = [], ?MVCFactoryInterface $factory = null, ?CMSApplication $app = null, ?Input $input = null) { parent::__construct($config, $factory, $app, $input); $this->registerTask('captive', 'display'); } /* * Displays the captive login page * * @param boolean $cachable Ignored. This page is never cached. * @param boolean\|array $urlparams Ignored. This page is never cached. * * @return void * @throws \Exception * @since 4.2.0 / public function display($cachable = false, $urlparams = false): void { $user = $this->app->getIdentity() ?: $this->getUserFactory()->loadUserById(0); // Only allow logged in Users if ($user->guest) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } // Get the view object $viewLayout = $this->input->get('layout', 'default', 'string'); $view = $this->getView( 'Captive', 'html', '', [ 'base_path' => $this->basePath, 'layout' => $viewLayout, ] ); $view->document = $this->app->getDocument(); // If we're already logged in go to the site's home page if ((int) $this->app->getSession()->get('com_users.mfa_checked', 0) === 1) { $url = Route::_('index.php?option=com_users&task=methods.display', false); $this->setRedirect($url); } // Pass the model to the view /* @var CaptiveModel $model / $model = $this->getModel('Captive'); $view->setModel($model, true); /* @var BackupcodesModel $codesModel / $codesModel = $this->getModel('Backupcodes'); $view->setModel($codesModel, false); try { // Suppress all modules on the page except those explicitly allowed $model->suppressAllModules(); } catch (\Exception) { // If we can't kill the modules we can still survive. } // Pass the MFA record ID to the model $recordId = $this->input->getInt('record_id', null); $model->setState('record_id', $recordId); // Do not go through $this->display() because it overrides the model. $view->display(); } /* * Validate the MFA code entered by the user * * @param bool $cachable Ignored. This page is never cached. * @param array $urlparameters Ignored. This page is never cached. * * @return void * @throws \Exception * @since 4.2.0 / public function validate($cachable = false, $urlparameters = []) { // CSRF Check $this->checkToken($this->input->getMethod()); // Get the MFA parameters from the request $recordId = $this->input->getInt('record_id', null); $code = $this->input->get('code', null, 'raw'); /* @var CaptiveModel $model / $model = $this->getModel('Captive'); // Validate the MFA record $model->setState('record_id', $recordId); $record = $model->getRecord(); if (empty($record)) { $event = new NotifyActionLog('onComUsersCaptiveValidateInvalidMethod'); $this->app->getDispatcher()->dispatch($event->getName(), $event); throw new \RuntimeException(Text::_('COM_USERS_MFA_INVALID_METHOD'), 500); } if (!$model->checkTryLimit($record)) { // The try limit is reached, show error and return $captiveURL = Route::_('index.php?option=com_users&view=captive&task=select', false); $message = Text::_('COM_USERS_MFA_TRY_LIMIT_REACHED'); $this->setRedirect($captiveURL, $message, 'error'); $event = new NotifyActionLog('onComUsersCaptiveValidateTryLimitReached'); $this->app->getDispatcher()->dispatch($event->getName(), $event); return; } // Validate the code $user = $this->app->getIdentity() ?: $this->getUserFactory()->loadUserById(0); $event = new Validate($record, $user, $code); $results = $this->app ->getDispatcher() ->dispatch($event->getName(), $event) ->getArgument('result', []); $isValidCode = false; if ($record->method === 'backupcodes') { /* @var BackupcodesModel $codesModel / $codesModel = $this->getModel('Backupcodes'); $results = [$codesModel->isBackupCode($code, $user)]; /* * This is required! Do not remove! * * There is a store() call below. It saves the in-memory MFA record to the database. That includes the * options key which contains the configuration of the Method. For backup codes, these are the actual codes * you can use. When we check for a backup code validity we also "burn" it, i.e. we remove it from the * options table and save that to the database. However, this DOES NOT update the $record here. Therefore * the call to saveRecord() would overwrite the database contents with a record that _includes_ the backup * code we had just burned. As a result the single use backup codes end up being multiple use. * * By doing a getRecord() here, right after we have "burned" any correct backup codes, we resolve this * issue. The loaded record will reflect the database contents where the options DO NOT include the code we * just used. Therefore the call to store() will result in the correct database state, i.e. the used backup * code being removed. / $record = $model->getRecord(); } $isValidCode = array_reduce( $results, function (bool $carry, $result) { return $carry \|\| \boolval($result); }, false ); if (!$isValidCode) { // The code is wrong. Display an error and go back. $captiveURL = Route::_('index.php?option=com_users&view=captive&record_id=' . $recordId, false); $message = Text::_('COM_USERS_MFA_INVALID_CODE'); $this->setRedirect($captiveURL, $message, 'error'); $event = new NotifyActionLog('onComUsersCaptiveValidateFailed', [$record->title]); $this->app->getDispatcher()->dispatch($event->getName(), $event); return; } // Update the Last Used, UA and IP columns $jNow = Date::getInstance(); $record->last_used = $jNow->toSql(); $record->tries = 0; $record->last_try = null; $record->store(); // Flag the user as fully logged in $session = $this->app->getSession(); $session->set('com_users.mfa_checked', 1); $session->set('com_users.mandatory_mfa_setup', 0); // Get the return URL stored by the plugin in the session $returnUrl = $session->get('com_users.return_url', ''); // If the return URL is not set or not internal to this site redirect to the site's front page if (empty($returnUrl) \|\| !Uri::isInternal($returnUrl)) { $returnUrl = Uri::base(); } $this->setRedirect($returnUrl); $event = new NotifyActionLog('onComUsersCaptiveValidateSuccess', [$record->title]); $this->app->getDispatcher()->dispatch($event->getName(), $event); } } PK��="�\�ry��#��src/Controller/RemindController.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Reset controller class for Users. * * @since 1.6 / class RemindController extends BaseController { /* * Method to request a username reminder. * * @return boolean * * @since 1.6 / public function remind() { // Check the request token. $this->checkToken('post'); /* @var \Joomla\Component\Users\Site\Model\RemindModel $model / $model = $this->getModel('Remind', 'Site'); $data = $this->input->post->get('jform', [], 'array'); // Submit the password reset request. $return = $model->processRemindRequest($data); // Check for a hard error. if (!$return && JDEBUG) { // The request failed. // Go back to the request form. $message = Text::sprintf('COM_USERS_REMIND_REQUEST_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=remind', false), $message, 'notice'); return false; } // To not expose if the user exists or not we send a generic message. $message = Text::_('COM_USERS_REMIND_REQUEST'); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false), $message, 'notice'); return true; } } PK��="�\�W��$��src/Controller/DisplayController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2005 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users display controller. * * @since 1.6 / class DisplayController extends BaseController { /* * The default view. * * @var string * @since 1.6 / protected $default_view = 'users'; /* * Checks whether a user can see this view. * * @param string $view The view name. * * @return boolean * * @since 1.6 / protected function canView($view) { $canDo = ContentHelper::getActions('com_users'); switch ($view) { case 'groups': case 'group': case 'levels': case 'level': // Special permissions. return $canDo->get('core.admin'); default: // Default permissions. return true; } } /* * Method to display a view. * * @param boolean $cachable If true, the view output will be cached * @param array $urlparams An array of safe URL parameters and their variable types. * @see \Joomla\CMS\Filter\InputFilter::clean() for valid values. * * @return BaseController\|boolean This object to support chaining or false on failure. * * @since 1.5 / public function display($cachable = false, $urlparams = []) { $view = $this->input->get('view', 'users'); $layout = $this->input->get('layout', 'default'); $id = $this->input->getInt('id'); if (!$this->canView($view)) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } // Check for edit form. if ($view === 'user' && $layout === 'edit' && !$this->checkEditId('com_users.edit.user', $id)) { // Somehow the person just went to the form - we don't allow that. if (!\count($this->app->getMessageQueue())) { $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_UNHELD_ID', $id), 'error'); } $this->setRedirect(Route::_('index.php?option=com_users&view=users', false)); return false; } if ($view === 'group' && $layout === 'edit' && !$this->checkEditId('com_users.edit.group', $id)) { // Somehow the person just went to the form - we don't allow that. if (!\count($this->app->getMessageQueue())) { $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_UNHELD_ID', $id), 'error'); } $this->setRedirect(Route::_('index.php?option=com_users&view=groups', false)); return false; } if ($view === 'level' && $layout === 'edit' && !$this->checkEditId('com_users.edit.level', $id)) { // Somehow the person just went to the form - we don't allow that. if (!\count($this->app->getMessageQueue())) { $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_UNHELD_ID', $id), 'error'); } $this->setRedirect(Route::_('index.php?option=com_users&view=levels', false)); return false; } if ($view === 'note' && $layout === 'edit' && !$this->checkEditId('com_users.edit.note', $id)) { // Somehow the person just went to the form - we don't allow that. if (!\count($this->app->getMessageQueue())) { $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_UNHELD_ID', $id), 'error'); } $this->setRedirect(Route::_('index.php?option=com_users&view=notes', false)); return false; } if (\in_array($view, ['captive', 'callback', 'methods', 'method'])) { $controller = $this->factory->createController($view, 'Administrator', [], $this->app, $this->input); $task = $this->input->get('task', ''); return $controller->execute($task); } return parent::display($cachable, $urlparams); } } PK��="�\�O�a��a��$��src/Controller/ProfileController.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Application\CMSWebApplicationInterface; use Joomla\CMS\Event\Model; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Profile controller class for Users. * * @since 1.6 / class ProfileController extends BaseController { /* * Method to check out a user for editing and redirect to the edit form. * * @return boolean * * @since 1.6 / public function edit() { $app = $this->app; $user = $this->app->getIdentity(); $loginUserId = (int) $user->id; // Get the current user id. $userId = $this->input->getInt('user_id'); // Check if the user is trying to edit another users profile. if ($userId != $loginUserId) { $app->enqueueMessage(Text::_('JERROR_ALERTNOAUTHOR'), 'error'); $app->setHeader('status', 403, true); return false; } // Check if the user logged in with a cookie if (isset($user->cookieLogin) && !empty($user->cookieLogin)) { // If so, the user must login to edit the password and other data. $app->enqueueMessage(Text::_('JGLOBAL_REMEMBER_MUST_LOGIN'), 'message'); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return false; } // Set the user id for the user to edit in the session. $app->setUserState('com_users.edit.profile.id', $userId); // Redirect to the edit screen. $this->setRedirect(Route::_('index.php?option=com_users&view=profile&layout=edit', false)); return true; } /* * Method to save a user's profile data. * * @return void\|boolean * * @since 1.6 * @throws \Exception / public function save() { // Check for request forgeries. $this->checkToken(); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\ProfileModel $model / $model = $this->getModel('Profile', 'Site'); $user = $this->app->getIdentity(); $userId = (int) $user->id; // Get the user data. $requestData = $app->getInput()->post->get('jform', [], 'array'); // Force the ID to this user. $requestData['id'] = $userId; // Validate the posted data. $form = $model->getForm(); if (!$form) { throw new \Exception($model->getError(), 500); } // Send an object which can be modified through the plugin event $objData = (object) $requestData; $this->getDispatcher()->dispatch( 'onContentNormaliseRequestData', new Model\NormaliseRequestDataEvent('onContentNormaliseRequestData', [ 'context' => 'com_users.user', 'data' => $objData, 'subject' => $form, ]) ); $requestData = (array) $objData; // Validate the posted data. $data = $model->validate($form, $requestData); // Check for errors. if ($data === false) { // Get the validation messages. $errors = $model->getErrors(); // Push up to three validation messages out to the user. for ($i = 0, $n = \count($errors); $i < $n && $i < 3; $i++) { if ($errors[$i] instanceof \Exception) { $app->enqueueMessage($errors[$i]->getMessage(), CMSWebApplicationInterface::MSG_ERROR); } else { $app->enqueueMessage($errors[$i], CMSWebApplicationInterface::MSG_ERROR); } } // Unset the passwords. unset($requestData['password1'], $requestData['password2']); // Save the data in the session. $app->setUserState('com_users.edit.profile.data', $requestData); // Redirect back to the edit screen. $userId = (int) $app->getUserState('com_users.edit.profile.id'); $this->setRedirect(Route::_('index.php?option=com_users&view=profile&layout=edit&user_id=' . $userId, false)); return false; } // Attempt to save the data. $return = $model->save($data); // Check for errors. if ($return === false) { // Save the data in the session. $app->setUserState('com_users.edit.profile.data', $data); // Redirect back to the edit screen. $userId = (int) $app->getUserState('com_users.edit.profile.id'); $this->setMessage(Text::sprintf('COM_USERS_PROFILE_SAVE_FAILED', $model->getError()), 'warning'); $this->setRedirect(Route::_('index.php?option=com_users&view=profile&layout=edit&user_id=' . $userId, false)); return false; } // Redirect the user and adjust session state based on the chosen task. switch ($this->getTask()) { case 'apply': // Check out the profile. $app->setUserState('com_users.edit.profile.id', $return); // Redirect back to the edit screen. $this->setMessage(Text::_('COM_USERS_PROFILE_SAVE_SUCCESS')); $redirect = $app->getUserState('com_users.edit.profile.redirect', ''); // Don't redirect to an external URL. if (!Uri::isInternal($redirect)) { $redirect = null; } if (!$redirect) { $redirect = 'index.php?option=com_users&view=profile&layout=edit&hidemainmenu=1'; } $this->setRedirect(Route::_($redirect, false)); break; default: // Clear the profile id from the session. $app->setUserState('com_users.edit.profile.id', null); $redirect = $app->getUserState('com_users.edit.profile.redirect', ''); // Don't redirect to an external URL. if (!Uri::isInternal($redirect)) { $redirect = null; } if (!$redirect) { $redirect = 'index.php?option=com_users&view=profile&user_id=' . $return; } // Redirect to the list screen. $this->setMessage(Text::_('COM_USERS_PROFILE_SAVE_SUCCESS')); $this->setRedirect(Route::_($redirect, false)); break; } // Flush the data from the session. $app->setUserState('com_users.edit.profile.data', null); } /* * Method to cancel an edit. * * @return void * * @since 4.0.0 / public function cancel() { // Check for request forgeries. $this->checkToken(); // Flush the data from the session. $this->app->setUserState('com_users.edit.profile', null); // Redirect to user profile. $this->setRedirect(Route::_('index.php?option=com_users&view=profile', false)); } } PK��="�\'鸺}@��}@��#��src/Controller/MethodController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Event\MultiFactor\NotifyActionLog; use Joomla\CMS\Event\MultiFactor\SaveSetup; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController as BaseControllerAlias; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\CMS\User\User; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\CMS\User\UserHelper; use Joomla\Component\Users\Administrator\Helper\Mfa as MfaHelper; use Joomla\Component\Users\Administrator\Model\BackupcodesModel; use Joomla\Component\Users\Administrator\Model\MethodModel; use Joomla\Component\Users\Administrator\Table\MfaTable; use Joomla\Input\Input; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Multi-factor Authentication method controller * * @since 4.2.0 / class MethodController extends BaseControllerAlias implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * Public constructor * * @param array $config Plugin configuration * @param ?MVCFactoryInterface $factory MVC Factory for the com_users component * @param ?CMSApplication $app CMS application object * @param ?Input $input Joomla CMS input object * * @since 4.2.0 / public function __construct(array $config = [], ?MVCFactoryInterface $factory = null, ?CMSApplication $app = null, ?Input $input = null) { // We have to tell Joomla what is the name of the view, otherwise it defaults to the name of the component. $config['default_view'] = 'method'; $config['default_task'] = 'add'; parent::__construct($config, $factory, $app, $input); } /* * Execute a task by triggering a Method in the derived class. * * @param string $task The task to perform. If no matching task is found, the '__default' task is executed, if * defined. * * @return mixed The value returned by the called Method. * * @throws \Exception * @since 4.2.0 / public function execute($task) { if (empty($task) \|\| $task === 'display') { $task = 'add'; } return parent::execute($task); } /* * Add a new MFA Method * * @param boolean $cachable Ignored. This page is never cached. * @param boolean\|array $urlparams Ignored. This page is never cached. * * @return void * @throws \Exception * @since 4.2.0 / public function add($cachable = false, $urlparams = []): void { $this->assertLoggedInUser(); // Make sure I am allowed to edit the specified user $userId = $this->input->getInt('user_id', null); $user = $this->getUserFactory()->loadUserById($userId); $this->assertCanEdit($user); // Also make sure the Method really does exist $method = $this->input->getCmd('method'); $this->assertMethodExists($method); /* @var MethodModel $model / $model = $this->getModel('Method'); $model->setState('method', $method); // Pass the return URL to the view $returnURL = $this->input->getBase64('returnurl'); // Validate and - if necessary - reset the return url if (empty($returnURL) \|\| !Uri::isInternal(base64_decode($returnURL))) { $returnURL = base64_encode(Uri::base()); } $viewLayout = $this->input->get('layout', 'default', 'string'); $view = $this->getView('Method', 'html'); $view->setLayout($viewLayout); $view->returnURL = $returnURL; $view->user = $user; $view->document = $this->app->getDocument(); $view->setModel($model, true); $event = new NotifyActionLog('onComUsersControllerMethodBeforeAdd', [$user, $method]); $this->app->getDispatcher()->dispatch($event->getName(), $event); $view->display(); } /* * Edit an existing MFA Method * * @param boolean $cachable Ignored. This page is never cached. * @param boolean\|array $urlparams Ignored. This page is never cached. * * @return void * @throws \Exception * @since 4.2.0 / public function edit($cachable = false, $urlparams = []): void { $this->assertLoggedInUser(); // Make sure I am allowed to edit the specified user $userId = $this->input->getInt('user_id', null); $user = $this->getUserFactory()->loadUserById($userId); $this->assertCanEdit($user); // Also make sure the Method really does exist $id = $this->input->getInt('id'); $record = $this->assertValidRecordId($id, $user); if ($id <= 0) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } /* @var MethodModel $model / $model = $this->getModel('Method'); $model->setState('id', $id); // Pass the return URL to the view $returnURL = $this->input->getBase64('returnurl'); // Validate and - if necessary - reset the return url if (empty($returnURL) \|\| !Uri::isInternal(base64_decode($returnURL))) { $returnURL = base64_encode(Uri::base()); } $viewLayout = $this->input->get('layout', 'default', 'string'); $view = $this->getView('Method', 'html'); $view->setLayout($viewLayout); $view->returnURL = $returnURL; $view->user = $user; $view->document = $this->app->getDocument(); $view->setModel($model, true); $event = new NotifyActionLog('onComUsersControllerMethodBeforeEdit', [$id, $user]); $this->app->getDispatcher()->dispatch($event->getName(), $event); $view->display(); } /* * Regenerate backup codes * * @param boolean $cachable Ignored. This page is never cached. * @param boolean\|array $urlparams Ignored. This page is never cached. * * @return void * @throws \Exception * @since 4.2.0 / public function regenerateBackupCodes($cachable = false, $urlparams = []): void { $this->assertLoggedInUser(); $this->checkToken($this->input->getMethod()); // Make sure I am allowed to edit the specified user $userId = $this->input->getInt('user_id', null); $user = $this->getUserFactory()->loadUserById($userId); $this->assertCanEdit($user); /* @var BackupcodesModel $model / $model = $this->getModel('Backupcodes'); $model->regenerateBackupCodes($user); $backupCodesRecord = $model->getBackupCodesRecord($user); // Redirect $redirectUrl = 'index.php?option=com_users&task=method.edit&user_id=' . $userId . '&id=' . $backupCodesRecord->id; $returnURL = $this->input->getBase64('returnurl'); if (!empty($returnURL) && Uri::isInternal(base64_decode($returnURL))) { $redirectUrl .= '&returnurl=' . $returnURL; } $this->setRedirect(Route::_($redirectUrl, false)); $event = new NotifyActionLog('onComUsersControllerMethodAfterRegenerateBackupCodes'); $this->app->getDispatcher()->dispatch($event->getName(), $event); } /* * Delete an existing MFA Method * * @param boolean $cachable Ignored. This page is never cached. * @param boolean\|array $urlparams Ignored. This page is never cached. * * @return void * @since 4.2.0 / public function delete($cachable = false, $urlparams = []): void { $this->assertLoggedInUser(); $this->checkToken($this->input->getMethod()); // Make sure I am allowed to edit the specified user $userId = $this->input->getInt('user_id', null); $user = $this->getUserFactory()->loadUserById($userId); $this->assertCanDelete($user); // Also make sure the Method really does exist $id = $this->input->getInt('id'); $record = $this->assertValidRecordId($id, $user); if ($id <= 0) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } $type = null; $message = null; $event = new NotifyActionLog('onComUsersControllerMethodBeforeDelete', [$id, $user]); $this->app->getDispatcher()->dispatch($event->getName(), $event); try { $record->delete(); } catch (\Exception $e) { $message = $e->getMessage(); $type = 'error'; } // Redirect $url = Route::_('index.php?option=com_users&task=methods.display&user_id=' . $userId, false); $returnURL = $this->input->getBase64('returnurl'); if (!empty($returnURL) && Uri::isInternal(base64_decode($returnURL))) { $url = base64_decode($returnURL); } $this->setRedirect($url, $message, $type); } /* * Save the MFA Method * * @param boolean $cachable Ignored. This page is never cached. * @param boolean\|array $urlparams Ignored. This page is never cached. * * @return void * @since 4.2.0 / public function save($cachable = false, $urlparams = []): void { $this->assertLoggedInUser(); $this->checkToken($this->input->getMethod()); // Make sure I am allowed to edit the specified user $userId = $this->input->getInt('user_id', null); $user = $this->getUserFactory()->loadUserById($userId); $this->assertCanEdit($user); // Redirect $url = Route::_('index.php?option=com_users&task=methods.display&user_id=' . $userId, false); $returnURL = $this->input->getBase64('returnurl'); if (!empty($returnURL) && Uri::isInternal(base64_decode($returnURL))) { $url = base64_decode($returnURL); } // The record must either be new (ID zero) or exist $id = $this->input->getInt('id', 0); $record = $this->assertValidRecordId($id, $user); // If it's a new record we need to read the Method from the request and update the (not yet created) record. if ($record->id == 0) { $methodName = $this->input->getCmd('method'); $this->assertMethodExists($methodName); $record->method = $methodName; } /* @var MethodModel $model / $model = $this->getModel('Method'); // Ask the plugin to validate the input by calling onUserMultifactorSaveSetup $result = []; $input = $this->app->getInput(); $event = new NotifyActionLog('onComUsersControllerMethodBeforeSave', [$id, $user]); $this->app->getDispatcher()->dispatch($event->getName(), $event); try { $event = new SaveSetup($record, $input); $pluginResults = $this->app ->getDispatcher() ->dispatch($event->getName(), $event) ->getArgument('result', []); foreach ($pluginResults as $pluginResult) { $result = array_merge($result, $pluginResult); } } catch (\RuntimeException $e) { // Go back to the edit page $nonSefUrl = 'index.php?option=com_users&task=method.'; if ($id) { $nonSefUrl .= 'edit&id=' . (int) $id; } else { $nonSefUrl .= 'add&method=' . $record->method; } $nonSefUrl .= '&user_id=' . $userId; if (!empty($returnURL)) { $nonSefUrl .= '&returnurl=' . urlencode($returnURL); } $url = Route::_($nonSefUrl, false); $this->setRedirect($url, $e->getMessage(), 'error'); return; } // Update the record's options with the plugin response $title = $this->input->getString('title', null); $title = trim($title); if (empty($title)) { $method = $model->getMethod($record->method); $title = $method['display']; } // Update the record's "default" flag $default = $this->input->getBool('default', false); $record->title = $title; $record->options = $result; $record->default = $default ? 1 : 0; // Ask the model to save the record $saved = $record->store(); if (!$saved) { // Go back to the edit page $nonSefUrl = 'index.php?option=com_users&task=method.'; if ($id) { $nonSefUrl .= 'edit&id=' . (int) $id; } else { $nonSefUrl .= 'add'; } $nonSefUrl .= '&user_id=' . $userId; if (!empty($returnURL)) { $nonSefUrl .= '&returnurl=' . urlencode($returnURL); } $url = Route::_($nonSefUrl, false); $this->setRedirect($url, $record->getError(), 'error'); return; } // Method updated, destroy other active sessions UserHelper::destroyUserSessions($userId, true); $this->setRedirect($url); } /* * Assert that the provided ID is a valid record identified for the given user * * @param int $id Record ID to check * @param User\|null $user User record. Null to use current user. * * @return MfaTable The loaded record * @since 4.2.0 / private function assertValidRecordId($id, ?User $user = null): MfaTable { if (\is_null($user)) { $user = $this->app->getIdentity() ?: $this->getUserFactory()->loadUserById(0); } /* @var MethodModel $model / $model = $this->getModel('Method'); $model->setState('id', $id); $record = $model->getRecord($user); if (\is_null($record) \|\| ($record->id != $id) \|\| ($record->user_id != $user->id)) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } return $record; } /* * Assert that the user can add / edit MFA methods. * * @param User\|null $user User record. Null to use current user. * * @return void * @throws \RuntimeException\|\Exception * @since 4.2.0 / private function assertCanEdit(?User $user = null): void { if (!MfaHelper::canAddEditMethod($user)) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } } /* * Assert that the user can delete MFA records / disable MFA. * * @param User\|null $user User record. Null to use current user. * * @return void * @throws \RuntimeException\|\Exception * @since 4.2.0 / private function assertCanDelete(?User $user = null): void { if (!MfaHelper::canDeleteMethod($user)) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } } /* * Assert that the specified MFA Method exists, is activated and enabled for the current user * * @param string\|null $method The Method to check * * @return void * @since 4.2.0 / private function assertMethodExists(?string $method): void { /* @var MethodModel $model / $model = $this->getModel('Method'); if (empty($method) \|\| !$model->methodExists($method)) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } } /* * Assert that there is a logged in user. * * @return void * @since 4.2.0 / private function assertLoggedInUser(): void { $user = $this->app->getIdentity() ?: $this->getUserFactory()->loadUserById(0); if ($user->guest) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } } } PK��="�\�C�\|��tmpl/login/logout.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_LOGOUT_VIEW_DEFAULT_TITLE" option="COM_USERS_LOGOUT_VIEW_DEFAULT_OPTION"> <help key = "Menu_Item:_Logout"/> <message> <![CDATA[COM_USERS_LOGOUT_VIEW_DEFAULT_DESC]]> </message> </layout> <!-- Add fields to the request variables for the layout. --> <fields name="request"> <fieldset name="request"> <field name="task" type="hidden" default="user.menulogout" /> </fieldset> </fields> <!-- Add fields to the parameters object for the layout. --> <fields name="params"> <fieldset name="basic" label="COM_MENUS_BASIC_FIELDSET_LABEL"> <field name="logout" type="modal_menu" label="JFIELD_LOGOUT_REDIRECT_PAGE_LABEL" description="JFIELD_LOGOUT_REDIRECT_PAGE_DESC" disable="separator,alias,heading,url" select="true" new="true" edit="true" clear="true" > <option value="">JOPTION_SELECT_MENU</option> </field> </fieldset> </fields> </metadata> PK��="�\^�U� �� tmpl/login/default_logout.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Site\View\Login\HtmlView $this / ?> <div class="com-users-logout logout"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> </div> <?php endif; ?> <?php if (($this->params->get('logoutdescription_show') == 1 && str_replace(' ', '', $this->params->get('logout_description', '')) != '') \|\| $this->params->get('logout_image') != '') : ?> <div class="com-users-logout__description logout-description"> <?php endif; ?> <?php if ($this->params->get('logoutdescription_show') == 1) : ?> <?php echo $this->params->get('logout_description'); ?> <?php endif; ?> <?php if ($this->params->get('logout_image') != '') : ?> <?php echo HTMLHelper::_('image', $this->params->get('logout_image'), empty($this->params->get('logout_image_alt')) && empty($this->params->get('logout_image_alt_empty')) ? false : $this->params->get('logout_image_alt'), ['class' => 'com-users-logout__image thumbnail float-end logout-image']); ?> <?php endif; ?> <?php if (($this->params->get('logoutdescription_show') == 1 && str_replace(' ', '', $this->params->get('logout_description', '')) != '') \|\| $this->params->get('logout_image') != '') : ?> </div> <?php endif; ?> <form action="<?php echo Route::_('index.php?task=user.logout'); ?>" method="post" class="com-users-logout__form form-horizontal well"> <div class="com-users-logout__submit control-group"> <div class="controls"> <button type="submit" class="btn btn-primary"> <span class="icon-backward-2 icon-white" aria-hidden="true"></span> <?php echo Text::_('JLOGOUT'); ?> </button> </div> </div> <?php if ($this->params->get('logout_redirect_url')) : ?> <input type="hidden" name="return" value="<?php echo base64_encode($this->params->get('logout_redirect_url', $this->form->getValue('return', null, ''))); ?>"> <?php else : ?> <input type="hidden" name="return" value="<?php echo base64_encode($this->params->get('logout_redirect_menuitem', $this->form->getValue('return', null, ''))); ?>"> <?php endif; ?> <?php echo HTMLHelper::_('form.token'); ?> </form> </div> PK��="�\�Y�q��tmpl/login/default_login.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Site\View\Login\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); $usersConfig = ComponentHelper::getParams('com_users'); ?> <div class="com-users-login login"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> </div> <?php endif; ?> <?php if (($this->params->get('logindescription_show') == 1 && trim($this->params->get('login_description', ''))) \|\| $this->params->get('login_image') != '') : ?> <div class="com-users-login__description login-description"> <?php endif; ?> <?php if ($this->params->get('logindescription_show') == 1) : ?> <?php echo $this->params->get('login_description'); ?> <?php endif; ?> <?php if ($this->params->get('login_image') != '') : ?> <?php echo HTMLHelper::_('image', $this->params->get('login_image'), empty($this->params->get('login_image_alt')) && empty($this->params->get('login_image_alt_empty')) ? false : $this->params->get('login_image_alt'), ['class' => 'com-users-login__image login-image']); ?> <?php endif; ?> <?php if (($this->params->get('logindescription_show') == 1 && trim($this->params->get('login_description', ''))) \|\| $this->params->get('login_image') != '') : ?> </div> <?php endif; ?> <form action="<?php echo Route::_('index.php?task=user.login'); ?>" method="post" id="com-users-login__form" class="com-users-login__form form-validate form-horizontal well"> <fieldset> <?php echo $this->form->renderFieldset('credentials', ['class' => 'com-users-login__input']); ?> <?php if (PluginHelper::isEnabled('system', 'remember')) : ?> <div class="com-users-login__remember"> <div class="form-check"> <input class="form-check-input" id="remember" type="checkbox" name="remember" value="yes"> <label class="form-check-label" for="remember"> <?php echo Text::_('COM_USERS_LOGIN_REMEMBER_ME'); ?> </label> </div> </div> <?php endif; ?> <?php foreach ($this->extraButtons as $button) : $dataAttributeKeys = array_filter(array_keys($button), function ($key) { return substr($key, 0, 5) == 'data-'; }); ?> <div class="com-users-login__submit control-group"> <div class="controls"> <button type="button" class="btn btn-secondary w-100 <?php echo $button['class'] ?? '' ?>" <?php foreach ($dataAttributeKeys as $key) : ?> <?php echo $key ?>="<?php echo $button[$key] ?>" <?php endforeach; ?> <?php if ($button['onclick']) : ?> onclick="<?php echo $button['onclick'] ?>" <?php endif; ?> title="<?php echo Text::_($button['label']) ?>" id="<?php echo $button['id'] ?>" > <?php if (!empty($button['icon'])) : ?> <span class="<?php echo $button['icon'] ?>"></span> <?php elseif (!empty($button['image'])) : ?> <?php echo HTMLHelper::_('image', $button['image'], Text::_($button['tooltip'] ?? ''), [ 'class' => 'icon', ], true) ?> <?php elseif (!empty($button['svg'])) : ?> <?php echo $button['svg']; ?> <?php endif; ?> <?php echo Text::_($button['label']) ?> </button> </div> </div> <?php endforeach; ?> <div class="com-users-login__submit control-group"> <div class="controls"> <button type="submit" class="btn btn-primary"> <?php echo Text::_('JLOGIN'); ?> </button> </div> </div> <?php $return = $this->form->getValue('return', '', $this->params->get('login_redirect_url', $this->params->get('login_redirect_menuitem', ''))); ?> <input type="hidden" name="return" value="<?php echo base64_encode($return); ?>"> <?php echo HTMLHelper::_('form.token'); ?> </fieldset> </form> <div class="com-users-login__options list-group"> <a class="com-users-login__reset list-group-item" href="<?php echo Route::_('index.php?option=com_users&view=reset'); ?>"> <?php echo Text::_('COM_USERS_LOGIN_RESET'); ?> </a> <a class="com-users-login__remind list-group-item" href="<?php echo Route::_('index.php?option=com_users&view=remind'); ?>"> <?php echo Text::_('COM_USERS_LOGIN_REMIND'); ?> </a> <?php if ($usersConfig->get('allowUserRegistration')) : $regLinkMenuId = $this->params->get('customRegLinkMenu'); $regLink = 'index.php?option=com_users&view=registration'; if ($regLinkMenuId) { $menu = Factory::getApplication()->getMenu(); $item = $menu->getItem($regLinkMenuId); if ($item) { $regLink = 'index.php?Itemid=' . $regLinkMenuId; } } ?> <a class="com-users-login__register list-group-item" href="<?php echo Route::_($regLink); ?>"> <?php echo Text::_('COM_USERS_LOGIN_REGISTER'); ?> </a> <?php endif; ?> </div> </div> PK��="�\jP�5g��g��tmpl/login/default.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; /* @var \Joomla\Component\Users\Site\View\Login\HtmlView $this / if ((isset($this->user->cookieLogin) && !empty($this->user->cookieLogin)) \|\| $this->user->guest) { // The user is not logged in or needs to provide a password. echo $this->loadTemplate('login'); } else { // The user is already logged in. echo $this->loadTemplate('logout'); } PK��="�\y�J��tmpl/login/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_LOGIN_VIEW_DEFAULT_TITLE" option="COM_USERS_LOGIN_VIEW_DEFAULT_OPTION"> <help key = "Menu_Item:_Login_Form" /> <message> <![CDATA[COM_USERS_LOGIN_VIEW_DEFAULT_DESC]]> </message> </layout> <!-- Add fields to the parameters object for the layout. --> <fields name="params"> <!-- Basic options. --> <fieldset name="basic" addruleprefix="Joomla\Component\Users\Site\Rule" label="COM_MENUS_BASIC_FIELDSET_LABEL"> <fieldset name="login" label="COM_USERS_FIELD_OPTIONS_LOGIN"> <field name="loginredirectchoice" type="radio" label="COM_USERS_FIELD_LOGIN_REDIRECT_CHOICE_LABEL" layout="joomla.form.field.radio.switcher" default="1" > <option value="0">COM_USERS_FIELD_LOGIN_URL</option> <option value="1">COM_USERS_FIELD_LOGIN_MENUITEM</option> </field> <field name="login_redirect_url" type="text" label="JFIELD_LOGIN_REDIRECT_URL_LABEL" description="JFIELD_LOGIN_REDIRECT_URL_DESC" validate="LoginUniqueField" field="login_redirect_menuitem" hint="COM_USERS_FIELD_LOGIN_REDIRECT_PLACEHOLDER" message="COM_USERS_FIELD_LOGIN_REDIRECT_ERROR" showon="loginredirectchoice:0" /> <field name="login_redirect_menuitem" type="modal_menu" label="COM_USERS_FIELD_LOGIN_REDIRECTMENU_LABEL" description="COM_USERS_FIELD_LOGIN_REDIRECTMENU_DESC" disable="separator,alias,heading,url" showon="loginredirectchoice:1" select="true" new="true" edit="true" clear="true" > <option value="">JOPTION_SELECT_MENU</option> </field> <field name="logindescription_show" type="list" label="JFIELD_BASIC_LOGIN_DESCRIPTION_SHOW_LABEL" default="1" class="form-select-color-state" validate="options" > <option value="0">JHIDE</option> <option value="1">JSHOW</option> </field> <field name="login_description" type="textarea" label="JFIELD_BASIC_LOGIN_DESCRIPTION_LABEL" rows="3" cols="40" filter="safehtml" showon="logindescription_show:1" /> <field name="login_image" type="media" schemes="http,https,ftp,ftps,data,file" validate="url" relative="true" label="JFIELD_LOGIN_IMAGE_LABEL" /> <field name="login_image_alt" type="text" label="COM_USERS_FIELD_IMAGE_ALT_LABEL" /> <field name="login_image_alt_empty" type="checkbox" label="COM_USERS_FIELD_IMAGE_ALT_EMPTY_LABEL" description="COM_USERS_FIELD_IMAGE_ALT_EMPTY_DESC" /> </fieldset> <fieldset name="logout" label="COM_USERS_FIELD_OPTIONS_LOGOUT"> <field name="logoutredirectchoice" type="radio" label="COM_USERS_FIELD_LOGOUT_REDIRECT_CHOICE_LABEL" layout="joomla.form.field.radio.switcher" default="1" > <option value="0">COM_USERS_FIELD_LOGIN_URL</option> <option value="1">COM_USERS_FIELD_LOGIN_MENUITEM</option> </field> <field name="logout_redirect_url" type="text" label="JFIELD_LOGOUT_REDIRECT_URL_LABEL" field="logout_redirect_menuitem" validate="LogoutUniqueField" hint="COM_USERS_FIELD_LOGIN_REDIRECT_PLACEHOLDER" message="COM_USERS_FIELD_LOGOUT_REDIRECT_ERROR" showon="logoutredirectchoice:0" /> <field name="logout_redirect_menuitem" type="modal_menu" label="COM_USERS_FIELD_LOGOUT_REDIRECTMENU_LABEL" description="COM_USERS_FIELD_LOGOUT_REDIRECTMENU_DESC" disable="separator,alias,heading,url" showon="logoutredirectchoice:1" select="true" new="true" edit="true" clear="true" > <option value="">JOPTION_SELECT_MENU</option> </field> <field name="logoutdescription_show" type="list" label="JFIELD_BASIC_LOGOUT_DESCRIPTION_SHOW_LABEL" default="1" class="form-select-color-state" validate="options" > <option value="0">JHIDE</option> <option value="1">JSHOW</option> </field> <field name="logout_description" type="textarea" label="JFIELD_BASIC_LOGOUT_DESCRIPTION_LABEL" rows="3" cols="40" filter="safehtml" showon="logoutdescription_show:1" /> <field name="logout_image" type="media" schemes="http,https,ftp,ftps,data,file" validate="url" relative="true" label="JFIELD_LOGOUT_IMAGE_LABEL" /> <field name="logout_image_alt" type="text" label="COM_USERS_FIELD_IMAGE_ALT_LABEL" /> <field name="logout_image_alt_empty" type="checkbox" label="COM_USERS_FIELD_IMAGE_ALT_EMPTY_LABEL" description="COM_USERS_FIELD_IMAGE_ALT_EMPTY_DESC" /> </fieldset> <fieldset name="registration" label="COM_USERS_FIELD_OPTIONS_REGISTRATION"> <field name="customRegLinkMenu" type="modal_menu" label="COM_USERS_FIELD_REGISTRATION_LABEL" description="COM_USERS_FIELD_REGISTRATION_DESC" disable="separator,alias,heading,url" select="true" new="true" edit="true" clear="true" > <option value="">JOPTION_SELECT_MENU_ITEM</option> </field> </fieldset> </fieldset> </fields> </metadata>PK��="�\�Sʉ��tmpl/login/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\U��3��tmpl/remind/default.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Site\View\Remind\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); ?> <div class="com-users-remind remind"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> </div> <?php endif; ?> <form action="<?php echo Route::_('index.php?task=remind.remind'); ?>" method="post" id="user-registration" class="com-users-remind__form form-validate form-horizontal well"> <?php foreach ($this->form->getFieldsets() as $fieldset) : ?> <fieldset> <?php if (isset($fieldset->label)) : ?> <legend><?php echo Text::_($fieldset->label); ?></legend> <?php endif; ?> <?php echo $this->form->renderFieldset($fieldset->name); ?> </fieldset> <?php endforeach; ?> <div class="com-users-remind__submit control-group"> <div class="controls"> <button type="submit" class="btn btn-primary validate"> <?php echo Text::_('JSUBMIT'); ?> </button> </div> </div> <?php echo HTMLHelper::_('form.token'); ?> </form> </div> PK��="�\ܢ5��5��tmpl/remind/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_REMIND_VIEW_DEFAULT_TITLE" option="COM_USERS_REMIND_VIEW_DEFAULT_OPTION"> <help key = "Menu_Item:_Username_Reminder_Request" /> <message> <![CDATA[COM_USERS_REMIND_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��="�\�Sʉ��tmpl/remind/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\Xz�8��tmpl/profile/default_params.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; /* @var \Joomla\Component\Users\Site\View\Profile\HtmlView $this / ?> <?php $fields = $this->form->getFieldset('params'); ?> <?php if (count($fields)) : ?> <fieldset id="users-profile-custom" class="com-users-profile__params"> <legend><?php echo Text::_('COM_USERS_SETTINGS_FIELDSET_LABEL'); ?></legend> <dl class="dl-horizontal"> <?php foreach ($fields as $field) : ?> <?php if (!$field->hidden) : ?> <dt> <?php echo $field->title; ?> </dt> <dd> <?php if (HTMLHelper::isRegistered('users.' . $field->id)) : ?> <?php echo HTMLHelper::_('users.' . $field->id, $field->value); ?> <?php elseif (HTMLHelper::isRegistered('users.' . $field->fieldname)) : ?> <?php echo HTMLHelper::_('users.' . $field->fieldname, $field->value); ?> <?php elseif (HTMLHelper::isRegistered('users.' . $field->type)) : ?> <?php echo HTMLHelper::_('users.' . $field->type, $field->value); ?> <?php else : ?> <?php echo HTMLHelper::_('users.value', $field->value); ?> <?php endif; ?> </dd> <?php endif; ?> <?php endforeach; ?> </dl> </fieldset> <?php endif; ?> PK��="�\�D50��0��tmpl/profile/edit.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_PROFILE_EDIT_DEFAULT_TITLE" option="COM_USERS_PROFILE_EDIT_DEFAULT_OPTION"> <help key = "Menu_Item:_Edit_User_Profile" /> <message> <![CDATA[COM_USERS_PROFILE_EDIT_DEFAULT_DESC]]> </message> </layout> </metadata> PK��="�\ʤ��tmpl/profile/edit.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var Joomla\Component\Users\Site\View\Profile\HtmlView $this / HTMLHelper::_('bootstrap.tooltip', '.hasTooltip'); // Load user_profile plugin language $lang = $this->getLanguage(); $lang->load('plg_user_profile', JPATH_ADMINISTRATOR); /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); ?> <div class="com-users-profile__edit profile-edit"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> </div> <?php endif; ?> <form id="member-profile" action="<?php echo Route::_('index.php'); ?>" method="post" class="com-users-profile__edit-form form-validate form-horizontal well" enctype="multipart/form-data"> <?php // Iterate through the form fieldsets and display each one. ?> <?php foreach ($this->form->getFieldsets() as $group => $fieldset) : ?> <?php $fields = $this->form->getFieldset($group); ?> <?php if (count($fields)) : ?> <fieldset> <?php // If the fieldset has a label set, display it as the legend. ?> <?php if (isset($fieldset->label)) : ?> <legend> <?php echo Text::_($fieldset->label); ?> </legend> <?php endif; ?> <?php if (isset($fieldset->description) && trim($fieldset->description)) : ?> <p> <?php echo $this->escape(Text::_($fieldset->description)); ?> </p> <?php endif; ?> <?php // Iterate through the fields in the set and display them. ?> <?php foreach ($fields as $field) : ?> <?php echo $field->renderField(); ?> <?php endforeach; ?> </fieldset> <?php endif; ?> <?php endforeach; ?> <?php if ($this->mfaConfigurationUI) : ?> <fieldset class="com-users-profile__multifactor"> <legend><?php echo Text::_('COM_USERS_PROFILE_MULTIFACTOR_AUTH'); ?></legend> <?php echo $this->mfaConfigurationUI ?> </fieldset> <?php endif; ?> <div class="com-users-profile__edit-submit control-group"> <div class="controls"> <button type="submit" class="btn btn-primary validate" name="task" value="profile.save"> <span class="icon-check" aria-hidden="true"></span> <?php echo Text::_('JSAVE'); ?> </button> <button type="submit" class="btn btn-danger" name="task" value="profile.cancel" formnovalidate> <span class="icon-times" aria-hidden="true"></span> <?php echo Text::_('JCANCEL'); ?> </button> <input type="hidden" name="option" value="com_users"> </div> </div> <?php echo HTMLHelper::_('form.token'); ?> </form> </div> PK��="�\��E��E��tmpl/profile/default.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Site\View\Profile\HtmlView $this / ?> <div class="com-users-profile profile"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> </div> <?php endif; ?> <?php if ($this->getCurrentUser()->id == $this->data->id) : ?> <ul class="com-users-profile__edit btn-toolbar float-end"> <li class="btn-group"> <a class="btn btn-primary" href="<?php echo Route::_('index.php?option=com_users&task=profile.edit&user_id=' . (int) $this->data->id); ?>"> <span class="icon-user-edit" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_EDIT_PROFILE'); ?> </a> </li> </ul> <?php endif; ?> <?php echo $this->loadTemplate('core'); ?> <?php echo $this->loadTemplate('params'); ?> <?php echo $this->loadTemplate('custom'); ?> </div> PK��="�\��42 ��2 ��tmpl/profile/default_custom.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; /* @var \Joomla\Component\Users\Site\View\Profile\HtmlView $this / $fieldsets = $this->form->getFieldsets(); if (isset($fieldsets['core'])) { unset($fieldsets['core']); } if (isset($fieldsets['params'])) { unset($fieldsets['params']); } $tmp = $this->data->jcfields ?? []; $customFields = []; foreach ($tmp as $customField) { $customFields[$customField->name] = $customField; } unset($tmp); ?> <?php foreach ($fieldsets as $group => $fieldset) : ?> <?php $fields = $this->form->getFieldset($group); ?> <?php if (count($fields)) : ?> <fieldset id="users-profile-custom-<?php echo $group; ?>" class="com-users-profile__custom users-profile-custom-<?php echo $group; ?>"> <?php if (isset($fieldset->label) && ($legend = trim(Text::_($fieldset->label))) !== '') : ?> <legend><?php echo $legend; ?></legend> <?php endif; ?> <?php if (isset($fieldset->description) && trim($fieldset->description)) : ?> <p><?php echo $this->escape(Text::_($fieldset->description)); ?></p> <?php endif; ?> <dl class="dl-horizontal"> <?php foreach ($fields as $field) : ?> <?php // Correct the field name so that subform custom fields show up. ?> <?php if ($field->type === 'Subform' && $field->fieldname === 'row') : ?> <?php preg_match("/jform\[com_fields]\[(.)]/", $field->name, $matches); ?> <?php $field->fieldname = $matches[1]; ?> <?php endif; ?> <?php if (!$field->hidden && $field->type !== 'Spacer') : ?> <dt> <?php echo $field->title; ?> </dt> <dd> <?php if (array_key_exists($field->fieldname, $customFields)) : ?> <?php echo strlen($customFields[$field->fieldname]->value) ? $customFields[$field->fieldname]->value : Text::_('COM_USERS_PROFILE_VALUE_NOT_FOUND'); ?> <?php elseif (HTMLHelper::isRegistered('users.' . $field->id)) : ?> <?php echo HTMLHelper::_('users.' . $field->id, $field->value); ?> <?php elseif (HTMLHelper::isRegistered('users.' . $field->fieldname)) : ?> <?php echo HTMLHelper::_('users.' . $field->fieldname, $field->value); ?> <?php elseif (HTMLHelper::isRegistered('users.' . $field->type)) : ?> <?php echo HTMLHelper::_('users.' . $field->type, $field->value); ?> <?php else : ?> <?php echo HTMLHelper::_('users.value', $field->value); ?> <?php endif; ?> </dd> <?php endif; ?> <?php endforeach; ?> </dl> </fieldset> <?php endif; ?> <?php endforeach; ?> PK��="�\�,� +��+��tmpl/profile/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_PROFILE_VIEW_DEFAULT_TITLE" option="COM_USERS_PROFILE_VIEW_DEFAULT_OPTION"> <help key = "Menu_Item:_User_Profile" /> <message> <![CDATA[COM_USERS_PROFILE_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��="�\�h��tmpl/profile/default_core.phpnu��[��<?php /** * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; /* @var \Joomla\Component\Users\Site\View\Profile\HtmlView $this / ?> <fieldset id="users-profile-core" class="com-users-profile__core"> <legend> <?php echo Text::_('COM_USERS_PROFILE_CORE_LEGEND'); ?> </legend> <dl class="dl-horizontal"> <dt> <?php echo Text::_('COM_USERS_PROFILE_NAME_LABEL'); ?> </dt> <dd> <?php echo $this->escape($this->data->name); ?> </dd> <dt> <?php echo Text::_('COM_USERS_PROFILE_USERNAME_LABEL'); ?> </dt> <dd> <?php echo $this->escape($this->data->username); ?> </dd> <dt> <?php echo Text::_('COM_USERS_PROFILE_REGISTERED_DATE_LABEL'); ?> </dt> <dd> <?php echo HTMLHelper::_('date', $this->data->registerDate, Text::_('DATE_FORMAT_LC1')); ?> </dd> <dt> <?php echo Text::_('COM_USERS_PROFILE_LAST_VISITED_DATE_LABEL'); ?> </dt> <?php if ($this->data->lastvisitDate !== null) : ?> <dd> <?php echo HTMLHelper::_('date', $this->data->lastvisitDate, Text::_('DATE_FORMAT_LC1')); ?> </dd> <?php else : ?> <dd> <?php echo Text::_('COM_USERS_PROFILE_NEVER_VISITED'); ?> </dd> <?php endif; ?> </dl> </fieldset> PK��="�\�Sʉ��tmpl/profile/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\��tmpl/captive/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / use Joomla\CMS\Factory; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; use Joomla\Component\Users\Administrator\Model\CaptiveModel; use Joomla\Component\Users\Administrator\View\Captive\HtmlView; use Joomla\Utilities\ArrayHelper; /* * @var HtmlView $this View object * @var CaptiveModel $model The model / $model = $this->getModel(); $this->getDocument()->getWebAssetManager() ->useScript('com_users.two-factor-focus'); ?> <div class="users-mfa-captive card card-body"> <h2 id="users-mfa-title"> <?php if (!empty($this->title)) : ?> <?php echo $this->title ?> <small> – <?php endif; ?> <?php if (!$this->allowEntryBatching) : ?> <?php echo $this->escape($this->record->title) ?> <?php else : ?> <?php echo $this->escape($this->getModel()->translateMethodName($this->record->method)) ?> <?php endif; ?> <?php if (!empty($this->title)) : ?> </small> <?php endif; ?> <?php if (!empty($this->renderOptions['help_url'])) : ?> <span class="float-end"> <a href="<?php echo $this->renderOptions['help_url'] ?>" class="btn btn-sm btn-secondary" target="_blank" > <span class="icon icon-question-sign" aria-hidden="true"></span> <span class="visually-hidden"><?php echo Text::_('JHELP') ?></span> </a> </span> <?php endif;?> </h2> <?php if ($this->renderOptions['pre_message']) : ?> <div class="users-mfa-captive-pre-message text-muted"> <?php echo $this->renderOptions['pre_message'] ?> </div> <?php endif; ?> <form action="<?php echo Route::_('index.php?option=com_users&task=captive.validate&record_id=' . ((int) $this->record->id)) ?>" id="users-mfa-captive-form" method="post" class="form-horizontal" > <?php echo HTMLHelper::_('form.token') ?> <div id="users-mfa-captive-form-method-fields" class="container"> <?php if ($this->renderOptions['field_type'] == 'custom') : ?> <?php echo $this->renderOptions['html']; ?> <?php endif; ?> <div class="row mb-3 <?php echo $this->renderOptions['input_type'] === 'hidden' ? 'd-none' : '' ?>"> <?php if ($this->renderOptions['label']) : ?> <label for="users-mfa-code" class="col-sm-3 col-form-label"> <?php echo $this->renderOptions['label'] ?> </label> <?php endif; ?> <?php $attributes = array_merge( [ 'type' => $this->renderOptions['input_type'], 'name' => 'code', 'value' => '', 'placeholder' => $this->renderOptions['placeholder'] ?? null, 'id' => 'users-mfa-code', 'class' => 'form-control', 'autocomplete' => $this->renderOptions['autocomplete'] ?? 'one-time-code' ], $this->renderOptions['input_attributes'] ); if (strpos($attributes['class'], 'form-control') === false) { $attributes['class'] .= ' form-control'; } ?> <input <?php echo ArrayHelper::toString($attributes) ?>> </div> </div> <div id="users-mfa-captive-form-standard-buttons" class="row my-3 d-sm-none"> <div class="col-sm-9 offset-sm-3"> <button class="btn btn-primary me-3 <?php echo $this->renderOptions['submit_class'] ?>" id="users-mfa-captive-button-submit" style="<?php echo $this->renderOptions['hide_submit'] ? 'display: none' : '' ?>" type="submit"> <span class="<?php echo $this->renderOptions['submit_icon'] ?>" aria-hidden="true"></span> <?php echo Text::_($this->renderOptions['submit_text']); ?> </button> <a href="<?php echo Route::_('index.php?option=com_login&task=logout&' . Factory::getApplication()->getFormToken() . '=1') ?>" class="btn btn-danger btn-sm" id="users-mfa-captive-button-logout"> <span class="icon icon-lock" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_MFA_LOGOUT'); ?> </a> <?php if (count($this->records) > 1) : ?> <a id="users-mfa-captive-form-choose-another" class="btn btn-link" href="<?php echo Route::_('index.php?option=com_users&view=captive&task=select') ?>"> <?php echo Text::_('COM_USERS_MFA_USE_DIFFERENT_METHOD'); ?> </a> <?php endif; ?> </div> </div> </form> <?php if ($this->renderOptions['post_message']) : ?> <div class="users-mfa-captive-post-message"> <?php echo $this->renderOptions['post_message'] ?> </div> <?php endif; ?> </div> PK��="�\��R��tmpl/captive/select.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / // Prevent direct access defined('_JEXEC') or die; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\Component\Users\Administrator\View\Captive\HtmlView; /* @var HtmlView $this / $shownMethods = []; ?> <div id="com-users-select"> <h2 id="com-users-select-heading"> <?php echo Text::_('COM_USERS_MFA_SELECT_PAGE_HEAD'); ?> </h2> <div id="com-users-select-information"> <p> <?php echo Text::_('COM_USERS_LBL_SELECT_INSTRUCTIONS'); ?> </p> </div> <div class="com-users-methods-list-method com-users-methods-list-method-name-backupcodes com-users-methods-list-method-active"> <?php foreach ($this->records as $record) : if (!array_key_exists($record->method, $this->mfaMethods) && ($record->method != 'backupcodes')) { continue; } $allowEntryBatching = isset($this->mfaMethods[$record->method]) ? $this->mfaMethods[$record->method]['allowEntryBatching'] : false; if ($this->allowEntryBatching) { if ($allowEntryBatching && in_array($record->method, $shownMethods)) { continue; } $shownMethods[] = $record->method; } $methodName = $this->getModel()->translateMethodName($record->method); ?> <a class="com-users-method list-group-item-action p-2 border-top border-dark d-flex flex-row flex-wrap justify-content-start align-items-center text-decoration-none gap-2" href="<?php echo Route::_('index.php?option=com_users&view=captive&record_id=' . $record->id)?>"> <div class="com-users-methods-list-method-image"> <img src="<?php echo Uri::root() . $this->getModel()->getMethodImage($record->method) ?>" alt="<?php echo $this->escape(strip_tags($record->title)) ?>" class="img-fluid" /> </div> <?php if (!$this->allowEntryBatching \|\| !$allowEntryBatching) : ?> <span class="com-users-method-title flex-grow-1 fs-5 fw-bold"> <?php if ($record->method === 'backupcodes') : ?> <?php echo $record->title ?> <?php else : ?> <?php echo $this->escape($record->title) ?> <?php endif; ?> </span> <small class="com-users-method-name text-muted"> <?php echo $methodName ?> </small> <?php else : ?> <span class="com-users-method-title flex-grow-1 fs-5 fw-bold"> <?php echo $methodName ?> </span> <small class="com-users-method-name text-muted"> <?php echo $methodName ?> </small> <?php endif; ?> </a> <?php endforeach; ?> </div> </div> PK��="�\�Sʉ��tmpl/captive/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\A�A/1 ��1 ��tmpl/registration/default.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Site\View\Registration\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); ?> <div class="com-users-registration registration"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1><?php echo $this->escape($this->params->get('page_heading')); ?></h1> </div> <?php endif; ?> <form id="member-registration" action="<?php echo Route::_('index.php?task=registration.register'); ?>" method="post" class="com-users-registration__form form-validate" enctype="multipart/form-data"> <?php // Iterate through the form fieldsets and display each one. ?> <?php foreach ($this->form->getFieldsets() as $fieldset) : ?> <?php if ($fieldset->name === 'captcha' && $this->captchaEnabled) : ?> <?php continue; ?> <?php endif; ?> <?php $fields = $this->form->getFieldset($fieldset->name); ?> <?php if (count($fields)) : ?> <fieldset> <?php // If the fieldset has a label set, display it as the legend. ?> <?php if (isset($fieldset->label)) : ?> <legend><?php echo Text::_($fieldset->label); ?></legend> <?php endif; ?> <?php echo $this->form->renderFieldset($fieldset->name); ?> </fieldset> <?php endif; ?> <?php endforeach; ?> <?php if ($this->captchaEnabled) : ?> <?php echo $this->form->renderFieldset('captcha'); ?> <?php endif; ?> <div class="com-users-registration__submit control-group"> <div class="controls"> <button type="submit" class="com-users-registration__register btn btn-primary validate"> <?php echo Text::_('JREGISTER'); ?> </button> <input type="hidden" name="option" value="com_users"> <input type="hidden" name="task" value="registration.register"> </div> </div> <?php echo HTMLHelper::_('form.token'); ?> </form> </div> PK��="�\L�O��O��tmpl/registration/complete.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; /* @var \Joomla\Component\Users\Site\View\Registration\HtmlView $this / ?> <div class="com-users-registration-complete registration-complete"> <?php if ($this->params->get('show_page_heading')) : ?> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> <?php endif; ?> </div> PK��="�\ݪ@�=��=��tmpl/registration/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_REGISTRATION_VIEW_DEFAULT_TITLE" option="COM_USERS_REGISTRATION_VIEW_DEFAULT_OPTION"> <help key="Menu_Item:_Registration_Form" /> <message> <![CDATA[COM_USERS_REGISTRATION_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��="�\�Sʉ��tmpl/registration/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\��tmpl/reset/confirm.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Site\View\Reset\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); ?> <div class="com-users-reset-confirm reset-confirm"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> </div> <?php endif; ?> <form action="<?php echo Route::_('index.php?task=reset.confirm'); ?>" method="post" class="com-users-reset-confirm__form form-validate form-horizontal well"> <?php foreach ($this->form->getFieldsets() as $fieldset) : ?> <fieldset> <?php if (isset($fieldset->label)) : ?> <legend><?php echo Text::_($fieldset->label); ?></legend> <?php endif; ?> <?php echo $this->form->renderFieldset($fieldset->name); ?> </fieldset> <?php endforeach; ?> <div class="com-users-reset-confirm__submit control-group"> <div class="controls"> <button type="submit" class="btn btn-primary validate"> <?php echo Text::_('JSUBMIT'); ?> </button> </div> </div> <?php echo HTMLHelper::_('form.token'); ?> </form> </div> PK��="�\�lZ-��tmpl/reset/default.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Site\View\Reset\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); ?> <div class="com-users-reset reset"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> </div> <?php endif; ?> <form action="<?php echo Route::_('index.php?task=reset.request'); ?>" method="post" id="user-registration" class="com-users-reset__form form-validate form-horizontal well"> <?php foreach ($this->form->getFieldsets() as $fieldset) : ?> <fieldset> <?php if (isset($fieldset->label)) : ?> <legend><?php echo Text::_($fieldset->label); ?></legend> <?php endif; ?> <?php echo $this->form->renderFieldset($fieldset->name); ?> </fieldset> <?php endforeach; ?> <div class="com-users-reset__submit control-group"> <div class="controls"> <button type="submit" class="btn btn-primary validate"> <?php echo Text::_('JSUBMIT'); ?> </button> </div> </div> <?php echo HTMLHelper::_('form.token'); ?> </form> </div> PK��="�\��tmpl/reset/complete.phpnu��[��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Site\View\Reset\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); ?> <div class="com-users-reset-complete reset-complete"> <?php if ($this->params->get('show_page_heading')) : ?> <div class="page-header"> <h1> <?php echo $this->escape($this->params->get('page_heading')); ?> </h1> </div> <?php endif; ?> <form action="<?php echo Route::_('index.php?task=reset.complete'); ?>" method="post" class="com-users-reset-complete__form form-validate form-horizontal well"> <?php foreach ($this->form->getFieldsets() as $fieldset) : ?> <fieldset> <?php if (isset($fieldset->label)) : ?> <legend><?php echo Text::_($fieldset->label); ?></legend> <?php endif; ?> <?php echo $this->form->renderFieldset($fieldset->name); ?> </fieldset> <?php endforeach; ?> <div class="com-users-reset-complete__submit control-group"> <div class="controls"> <button type="submit" class="btn btn-primary validate"> <?php echo Text::_('JSUBMIT'); ?> </button> </div> </div> <?php echo HTMLHelper::_('form.token'); ?> </form> </div> PK��="�\�?w%��%��tmpl/reset/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_RESET_VIEW_DEFAULT_TITLE" option="COM_USERS_RESET_VIEW_DEFAULT_OPTION"> <help key="Menu_Item:_Password_Reset" /> <message> <![CDATA[COM_USERS_RESET_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��="�\�Sʉ��tmpl/reset/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\AB�ס$��$��tmpl/methods/list.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / // Prevent direct access defined('_JEXEC') or die; use Joomla\CMS\Factory; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\Component\Users\Administrator\Helper\Mfa as MfaHelper; use Joomla\Component\Users\Administrator\Model\MethodsModel; use Joomla\Component\Users\Administrator\View\Methods\HtmlView; /* @var HtmlView $this / HTMLHelper::_('bootstrap.tooltip', '.hasTooltip'); /* @var MethodsModel $model / $model = $this->getModel(); $this->getDocument()->getWebAssetManager()->useScript('com_users.two-factor-list'); $canAddEdit = MfaHelper::canAddEditMethod($this->user); $canDelete = MfaHelper::canDeleteMethod($this->user); ?> <div id="com-users-methods-list-container"> <?php foreach ($this->methods as $methodName => $method) : $methodClass = 'com-users-methods-list-method-name-' . htmlentities($method['name']) . ($this->defaultMethod == $methodName ? ' com-users-methods-list-method-default' : ''); ?> <div class="com-users-methods-list-method <?php echo $methodClass?> <?php echo count($method['active']) ? 'com-users-methods-list-method-active' : '' ?>"> <div class="com-users-methods-list-method-header"> <div class="com-users-methods-list-method-image"> <img src="<?php echo Uri::root() . $method['image'] ?>" alt="<?php echo $this->escape($method['display']) ?>" class="img-fluid" > </div> <div class="com-users-methods-list-method-title"> <h3> <span class="me-1 flex-grow-1"> <?php echo $method['display'] ?> </span> <?php if ($this->defaultMethod == $methodName) : ?> <span id="com-users-methods-list-method-default-tag" class="badge bg-info p-2 fs-4 me-1"> <?php echo Text::_('COM_USERS_MFA_LIST_DEFAULTTAG') ?> </span> <?php endif; ?> </h3> </div> </div> <div class="com-users-methods-list-method-records-container"> <div class="com-users-methods-list-method-info"> <?php echo $method['shortinfo'] ?> </div> <?php if (count($method['active'])) : ?> <div class="com-users-methods-list-method-records pt-2 my-2"> <?php foreach ($method['active'] as $record) : ?> <div class="com-users-methods-list-method-record d-flex flex-row flex-wrap justify-content-start border-top py-2"> <div class="com-users-methods-list-method-record-info flex-grow-1 d-flex flex-column align-items-start gap-1"> <?php if ($methodName === 'backupcodes' && $canAddEdit) : ?> <div class="alert alert-info mt-1 w-100"> <?php echo Text::sprintf('COM_USERS_MFA_BACKUPCODES_PRINT_PROMPT_HEAD', Route::_('index.php?option=com_users&task=method.edit&id=' . (int) $record->id . ($this->returnURL ? '&returnurl=' . $this->escape(urlencode($this->returnURL)) : '') . '&user_id=' . $this->user->id), 'text-decoration-underline') ?> </div> <?php else : ?> <h4 class="com-users-methods-list-method-record-title-container mb-1 fs-3"> <?php if ($record->default) : ?> <span id="com-users-methods-list-method-default-badge-small" class="text-warning me-1 hasTooltip" title="<?php echo $this->escape(Text::_('COM_USERS_MFA_LIST_DEFAULTTAG')) ?>"> <span class="icon icon-star" aria-hidden="true"></span> <span class="visually-hidden"><?php echo $this->escape(Text::_('COM_USERS_MFA_LIST_DEFAULTTAG')) ?></span> </span> <?php endif; ?> <span class="com-users-methods-list-method-record-title fw-bold"> <?php echo $this->escape($record->title); ?> </span> </h4> <?php endif; ?> <div class="com-users-methods-list-method-record-lastused my-1 d-flex flex-row flex-wrap justify-content-start gap-5 text-muted w-100"> <span class="com-users-methods-list-method-record-createdon"> <?php echo Text::sprintf('COM_USERS_MFA_LBL_CREATEDON', $model->formatRelative($record->created_on)) ?> </span> <span class="com-users-methods-list-method-record-lastused-date"> <?php echo Text::sprintf('COM_USERS_MFA_LBL_LASTUSED', $model->formatRelative($record->last_used)) ?> </span> </div> </div> <?php if ($methodName !== 'backupcodes' && ($canAddEdit \|\| $canDelete)) : ?> <div class="com-users-methods-list-method-record-actions my-2 d-flex flex-row flex-wrap justify-content-center align-content-center align-items-start"> <?php if ($canAddEdit) : ?> <a class="com-users-methods-list-method-record-edit btn btn-secondary btn-sm mx-1 hasTooltip" href="<?php echo Route::_('index.php?option=com_users&task=method.edit&id=' . (int) $record->id . ($this->returnURL ? '&returnurl=' . $this->escape(urlencode($this->returnURL)) : '') . '&user_id=' . $this->user->id)?>" title="<?php echo Text::_('JACTION_EDIT') ?> <?php echo $this->escape($record->title); ?>"> <span class="icon icon-pencil" aria-hidden="true"></span> <span class="visually-hidden"><?php echo Text::_('JACTION_EDIT') ?> <?php echo $this->escape($record->title); ?></span> </a> <?php endif ?> <?php if ($method['canDisable'] && $canDelete) : ?> <a class="com-users-methods-list-method-record-delete btn btn-danger btn-sm mx-1 hasTooltip" href="<?php echo Route::_('index.php?option=com_users&task=method.delete&id=' . (int) $record->id . ($this->returnURL ? '&returnurl=' . $this->escape(urlencode($this->returnURL)) : '') . '&user_id=' . $this->user->id . '&' . Factory::getApplication()->getFormToken() . '=1')?>" title="<?php echo Text::_('JACTION_DELETE') ?> <?php echo $this->escape($record->title); ?>"> <span class="icon icon-trash" aria-hidden="true"></span> <span class="visually-hidden"><?php echo Text::_('JACTION_DELETE') ?> <?php echo $this->escape($record->title); ?></span> </a> <?php endif; ?> </div> <?php endif; ?> </div> <?php endforeach; ?> </div> <?php endif; ?> <?php if ($canAddEdit && (empty($method['active']) \|\| $method['allowMultiple'])) : ?> <div class="com-users-methods-list-method-addnew-container border-top pt-2"> <a href="<?php echo Route::_('index.php?option=com_users&task=method.add&method=' . $this->escape(urlencode($method['name'])) . ($this->returnURL ? '&returnurl=' . $this->escape(urlencode($this->returnURL)) : '') . '&user_id=' . $this->user->id)?>" class="com-users-methods-list-method-addnew btn btn-primary btn-sm" > <span class="icon-plus-2" aria-hidden="true"></span> <?php echo Text::sprintf('COM_USERS_MFA_ADD_AUTHENTICATOR_OF_TYPE', $method['display']) ?> </a> </div> <?php endif; ?> </div> </div> <?php endforeach; ?> </div> PK��="�\OS`��tmpl/methods/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / // Prevent direct access defined('_JEXEC') or die; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; use Joomla\Component\Users\Administrator\View\Methods\HtmlView; /* @var HtmlView $this / ?> <div id="com-users-methods-list"> <div id="com-users-methods-reset-container" class="d-flex align-items-center border border-1 rounded-3 p-2"> <div id="com-users-methods-reset-message" class="flex-grow-1"> <?php echo Text::_('COM_USERS_MFA_LIST_STATUS_' . ($this->mfaActive ? 'ON' : 'OFF')) ?> </div> <?php if ($this->mfaActive) : ?> <div> <a href="<?php echo Route::_('index.php?option=com_users&task=methods.disable&' . Factory::getApplication()->getFormToken() . '=1' . ($this->returnURL ? '&returnurl=' . $this->escape(urlencode($this->returnURL)) : '') . '&user_id=' . $this->user->id) ?>" class="btn btn-danger btn-sm"> <?php echo Text::_('COM_USERS_MFA_LIST_REMOVEALL'); ?> </a> </div> <?php endif; ?> </div> <?php if (!count($this->methods)) : ?> <div id="com-users-methods-list-instructions" class="alert alert-info mt-2"> <span class="icon icon-info-circle" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_MFA_LIST_INSTRUCTIONS'); ?> </div> <?php elseif ($this->isMandatoryMFASetup) : ?> <div class="alert alert-info my-3"> <h3 class="alert-heading"> <?php echo Text::_('COM_USERS_MFA_MANDATORY_NOTICE_HEAD') ?> </h3> <p> <?php echo Text::_('COM_USERS_MFA_MANDATORY_NOTICE_BODY') ?> </p> </div> <?php endif ?> <?php $this->setLayout('list'); echo $this->loadTemplate(); ?> </div> PK��="�\�b��tmpl/methods/firsttime.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / // Prevent direct access defined('_JEXEC') or die; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; use Joomla\Component\Users\Administrator\View\Methods\HtmlView; /* @var HtmlView $this / $headingLevel = 2; ?> <div id="com-users-methods-list"> <?php if (!$this->isAdmin) : ?> <h<?php echo $headingLevel ?> id="com-users-methods-list-head"> <?php echo Text::_('COM_USERS_MFA_FIRSTTIME_PAGE_HEAD'); ?> </h<?php echo $headingLevel++ ?>> <?php endif; ?> <div id="com-users-methods-list-instructions" class="alert alert-info"> <h<?php echo $headingLevel ?> class="alert-heading"> <span class="fa fa-shield-alt" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_MFA_FIRSTTIME_INSTRUCTIONS_HEAD'); ?> </h<?php echo $headingLevel ?>> <p> <?php echo Text::_('COM_USERS_MFA_FIRSTTIME_INSTRUCTIONS_WHATITDOES'); ?> </p> <a href="<?php echo Route::_( 'index.php?option=com_users&task=methods.doNotShowThisAgain' . ($this->returnURL ? '&returnurl=' . $this->escape(urlencode($this->returnURL)) : '') . '&user_id=' . $this->user->id . '&' . Factory::getApplication()->getFormToken() . '=1' )?>" class="btn btn-danger w-100"> <?php echo Text::_('COM_USERS_MFA_FIRSTTIME_NOTINTERESTED'); ?> </a> </div> <?php $this->setLayout('list'); echo $this->loadTemplate(); ?> </div> PK��="�\�Sʉ��tmpl/methods/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\�r�)� �� tmpl/method/backupcodes.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / // Prevent direct access defined('_JEXEC') or die; use Joomla\CMS\Factory; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; use Joomla\Component\Users\Administrator\View\Method\HtmlView; /* @var HtmlView $this / HTMLHelper::_('bootstrap.tooltip', '.hasTooltip'); $cancelURL = Route::_('index.php?option=com_users&task=methods.display&user_id=' . $this->user->id); if (!empty($this->returnURL)) { $cancelURL = $this->escape(base64_decode($this->returnURL)); } if ($this->record->method != 'backupcodes') { throw new RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } ?> <h2> <?php echo Text::_('COM_USERS_USER_BACKUPCODES') ?> </h2> <p class="text-muted"> <?php echo Text::_('COM_USERS_USER_BACKUPCODES_DESC') ?> </p> <table class="table table-striped"> <?php for ($i = 0; $i < (count($this->backupCodes) / 2); $i++) : ?> <tr> <td> <?php if (!empty($this->backupCodes[2 $i])) : ?> <?php // This is a Key emoji; we can hide it from screen readers ?> <span aria-hidden="true">🔑</span> <?php echo $this->backupCodes[2 * $i] ?> <?php endif; ?> </td> <td> <?php if (!empty($this->backupCodes[1 + 2 * $i])) : ?> <?php // This is a Key emoji; we can hide it from screen readers ?> <span aria-hidden="true">🔑</span> <?php echo $this->backupCodes[1 + 2 * $i] ?> <?php endif ;?> </td> </tr> <?php endfor; ?> </table> <div class="alert alert-info"> <span class="icon-info-circle" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_MFA_BACKUPCODES_RESET_INFO'); ?> </div> <div class="d-sm-none"> <a class="btn btn-danger" href="<?php echo Route::_(sprintf("index.php?option=com_users&task=method.regenerateBackupCodes&user_id=%s&%s=1%s", $this->user->id, Factory::getApplication()->getFormToken(), empty($this->returnURL) ? '' : '&returnurl=' . $this->returnURL)) ?>"> <span class="icon icon-refresh" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_MFA_BACKUPCODES_RESET'); ?> </a> <a href="<?php echo $cancelURL ?>" class="btn btn-secondary"> <span class="icon icon-cancel-2 icon-ban-circle"></span> <?php echo Text::_('JCANCEL'); ?> </a> </div> PK��="�\P��tmpl/method/edit.phpnu��[��<?php /** * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / // Prevent direct access defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; use Joomla\Component\Users\Administrator\View\Method\HtmlView; use Joomla\Utilities\ArrayHelper; /* @var HtmlView $this / $cancelURL = Route::_('index.php?option=com_users&task=methods.display&user_id=' . $this->user->id); if (!empty($this->returnURL)) { $cancelURL = $this->escape(base64_decode($this->returnURL)); } $recordId = (int) $this->record->id ?? 0; $method = $this->record->method ?? $this->getModel()->getState('method'); $userId = (int) $this->user->id ?? 0; $headingLevel = 2; $hideSubmit = !$this->renderOptions['show_submit'] && !$this->isEditExisting ?> <div class="card card-body"> <form action="<?php echo Route::_(sprintf("index.php?option=com_users&task=method.save&id=%d&method=%s&user_id=%d", $recordId, $method, $userId)) ?>" class="form form-horizontal" id="com-users-method-edit" method="post"> <?php echo HTMLHelper::_('form.token') ?> <?php if (!empty($this->returnURL)) : ?> <input type="hidden" name="returnurl" value="<?php echo $this->escape($this->returnURL) ?>"> <?php endif; ?> <?php if (!empty($this->renderOptions['hidden_data'])) : ?> <?php foreach ($this->renderOptions['hidden_data'] as $key => $value) : ?> <input type="hidden" name="<?php echo $this->escape($key) ?>" value="<?php echo $this->escape($value) ?>"> <?php endforeach; ?> <?php endif; ?> <?php if (!empty($this->title)) : ?> <?php if (!empty($this->renderOptions['help_url'])) : ?> <span class="float-end"> <a href="<?php echo $this->renderOptions['help_url'] ?>" class="btn btn-sm btn-dark" target="_blank" > <span class="icon icon-question-sign" aria-hidden="true"></span> <span class="visually-hidden"><?php echo Text::_('JHELP') ?></span> </a> </span> <?php endif;?> <h<?php echo $headingLevel ?> id="com-users-method-edit-head"> <?php echo Text::_($this->title) ?> </h<?php echo $headingLevel ?>> <?php $headingLevel++ ?> <?php endif; ?> <div class="row"> <label class="col-sm-3 col-form-label" for="com-users-method-edit-title"> <?php echo Text::_('COM_USERS_MFA_EDIT_FIELD_TITLE'); ?> </label> <div class="col-sm-9"> <input type="text" class="form-control" id="com-users-method-edit-title" name="title" value="<?php echo $this->escape($this->record->title) ?>" aria-describedby="com-users-method-edit-help"> <p class="form-text" id="com-users-method-edit-help"> <?php echo $this->escape(Text::_('COM_USERS_MFA_EDIT_FIELD_TITLE_DESC')) ?> </p> </div> </div> <div class="row"> <div class="col-sm-9 offset-sm-3"> <div class="form-check"> <input class="form-check-input" type="checkbox" id="com-users-is-default-method" <?php echo $this->record->default ? 'checked="checked"' : ''; ?> name="default"> <label class="form-check-label" for="com-users-is-default-method"> <?php echo Text::_('COM_USERS_MFA_EDIT_FIELD_DEFAULT'); ?> </label> </div> </div> </div> <?php if (!empty($this->renderOptions['pre_message'])) : ?> <div class="com-users-method-edit-pre-message text-muted mt-4 mb-3"> <?php echo $this->renderOptions['pre_message'] ?> </div> <?php endif; ?> <?php if (!empty($this->renderOptions['tabular_data'])) : ?> <div class="com-users-method-edit-tabular-container"> <?php if (!empty($this->renderOptions['table_heading'])) : ?> <h<?php echo $headingLevel ?> class="h3 border-bottom mb-3"> <?php echo $this->renderOptions['table_heading'] ?> </h<?php echo $headingLevel ?>> <?php endif; ?> <table class="table table-striped"> <tbody> <?php foreach ($this->renderOptions['tabular_data'] as $cell1 => $cell2) : ?> <tr> <td> <?php echo $cell1 ?> </td> <td> <?php echo $cell2 ?> </td> </tr> <?php endforeach; ?> </tbody> </table> </div> <?php endif; ?> <?php if ($this->renderOptions['field_type'] == 'custom') : ?> <?php echo $this->renderOptions['html']; ?> <?php endif; ?> <div class="row mb-3 <?php echo $this->renderOptions['input_type'] === 'hidden' ? 'd-none' : '' ?>"> <?php if ($this->renderOptions['label']) : ?> <label class="col-sm-3 col-form-label" for="com-users-method-code"> <?php echo $this->renderOptions['label']; ?> </label> <?php endif; ?> <div class="col-sm-9" <?php echo $this->renderOptions['label'] ? '' : 'offset-sm-3' ?>> <?php $attributes = array_merge( [ 'type' => $this->renderOptions['input_type'], 'name' => 'code', 'value' => $this->escape($this->renderOptions['input_value']), 'id' => 'com-users-method-code', 'class' => 'form-control', 'aria-describedby' => 'com-users-method-code-help', ], $this->renderOptions['input_attributes'] ); if (strpos($attributes['class'], 'form-control') === false) { $attributes['class'] .= ' form-control'; } ?> <input <?php echo ArrayHelper::toString($attributes) ?>> <p class="form-text" id="com-users-method-code-help"> <?php echo $this->escape($this->renderOptions['placeholder']) ?> </p> </div> </div> <div class="container d-sm-none"> <div class="row mb-3"> <div class="col-sm-9 offset-sm-3"> <button type="submit" id="user-mfa-edit-save" class="btn btn-primary me-3 <?php echo $hideSubmit ? 'd-none' : '' ?> <?php echo $this->renderOptions['submit_class'] ?>"> <span class="<?php echo $this->renderOptions['submit_icon'] ?>" aria-hidden="true"></span> <?php echo Text::_($this->renderOptions['submit_text']); ?> </button> <a href="<?php echo $cancelURL ?>" id="user-mfa-edit-cancel" class="btn btn-sm btn-danger"> <span class="icon icon-cancel-2" aria-hidden="true"></span> <?php echo Text::_('JCANCEL'); ?> </a> </div> </div> </div> <?php if (!empty($this->renderOptions['post_message'])) : ?> <div class="com-users-method-edit-post-message text-muted"> <?php echo $this->renderOptions['post_message'] ?> </div> <?php endif; ?> </form> </div> PK��="�\�Sʉ��tmpl/method/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\�Sʉ��tmpl/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��="�\Mjx��forms/frontend_admin.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fields name="params"> <!-- Backend user account settings. --> <fieldset name="params" label="COM_USERS_SETTINGS_FIELDSET_LABEL"> <field name="admin_style" type="templatestyle" label="COM_USERS_USER_FIELD_BACKEND_TEMPLATE_LABEL" client="administrator" filter="uint" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="admin_language" type="language" label="COM_USERS_USER_FIELD_BACKEND_LANGUAGE_LABEL" client="administrator" filter="cmd" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="allowTourAutoStart" type="list" label="COM_USERS_USER_ALLOWTOURAUTOSTART_LABEL" default="" validate="options" > <option value="">JOPTION_USE_DEFAULT</option> <option value="0">JNO</option> <option value="1">JYES</option> </field> </fieldset> </fields> </form> PK��="�\�?�3h��h��forms/login.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset name="credentials" label="COM_USERS_LOGIN_DEFAULT_LABEL"> <field name="username" type="text" label="COM_USERS_LOGIN_USERNAME_LABEL" class="validate-username" filter="username" size="25" required="true" validate="username" autofocus="true" autocomplete="username" /> <field name="password" type="password" label="JGLOBAL_PASSWORD" required="true" filter="raw" size="25" autocomplete="current-password" /> </fieldset> <fieldset> <field name="return" type="hidden" /> </fieldset> </form> PK��="�\��~��forms/remind.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset name="default" label="COM_USERS_REMIND_DEFAULT_LABEL"> <field name="email" type="email" label="COM_USERS_FIELD_REMIND_EMAIL_LABEL" required="true" size="30" validate="email" autocomplete="email" /> <field name="captcha" type="captcha" label="COM_USERS_CAPTCHA_LABEL" validate="captcha" /> </fieldset> </form> PK��="�\)�2=��forms/reset_confirm.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset name="default" label="COM_USERS_RESET_CONFIRM_LABEL"> <field name="username" type="text" label="COM_USERS_FIELD_RESET_CONFIRM_USERNAME_LABEL" filter="username" required="true" size="30" /> <field name="token" type="text" label="COM_USERS_FIELD_RESET_CONFIRM_TOKEN_LABEL" filter="alnum" required="true" size="32" /> </fieldset> </form> PK��="�\��ݝQ��Q��forms/profile.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset name="core" label="COM_USERS_PROFILE_DEFAULT_LABEL"> <field name="id" type="hidden" filter="integer" /> <field name="name" type="text" label="COM_USERS_PROFILE_NAME_LABEL" filter="string" required="true" size="30" /> <field name="username" type="text" label="COM_USERS_PROFILE_USERNAME_LABEL" class="validate-username" filter="username" message="COM_USERS_PROFILE_USERNAME_MESSAGE" required="true" size="30" validate="username" /> <field name="password1" type="password" label="COM_USERS_PROFILE_PASSWORD1_LABEL" autocomplete="new-password" class="validate-password" filter="raw" size="30" validate="password" strengthmeter="true" rules="true" force="on" /> <field name="password2" type="password" label="COM_USERS_PROFILE_PASSWORD2_LABEL" autocomplete="new-password" class="validate-password" field="password1" filter="raw" message="COM_USERS_PROFILE_PASSWORD1_MESSAGE" size="30" validate="equals" /> <field name="email1" type="email" label="COM_USERS_PROFILE_EMAIL1_LABEL" filter="string" required="true" size="30" unique="true" validate="email" validDomains="com_users.domains" autocomplete="email" /> </fieldset> </form> PK��="�\�~��forms/reset_request.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset name="default" label="COM_USERS_RESET_REQUEST_LABEL"> <field name="email" type="email" label="COM_USERS_FIELD_PASSWORD_RESET_LABEL" required="true" size="30" validate="email" autocomplete="email" /> <field name="captcha" type="captcha" label="COM_USERS_CAPTCHA_LABEL" validate="captcha" /> </fieldset> </form> PK��="�\��$��forms/frontend.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fields name="params"> <!-- Basic user account settings. --> <fieldset name="params" label="COM_USERS_SETTINGS_FIELDSET_LABEL"> <field name="editor" type="plugins" label="COM_USERS_USER_FIELD_EDITOR_LABEL" folder="editors" useaccess="true" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="timezone" type="timezone" label="COM_USERS_USER_FIELD_TIMEZONE_LABEL" layout="joomla.form.field.groupedlist-fancy-select" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="language" type="language" label="COM_USERS_USER_FIELD_FRONTEND_LANGUAGE_LABEL" client="site" filter="cmd" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="colorScheme" type="list" label="COM_USERS_USER_COLORSCHEME_LABEL" default="" validate="options" > <option value="">JOPTION_USE_DEFAULT</option> <option value="os">COM_USERS_USER_COLORSCHEME_OPTION_FOLLOW_OS</option> <option value="light">COM_USERS_USER_COLORSCHEME_OPTION_LIGHT</option> <option value="dark">COM_USERS_USER_COLORSCHEME_OPTION_DARK</option> </field> </fieldset> </fields> </form> PK��="�\�$��forms/reset_complete.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset name="default" label="COM_USERS_RESET_COMPLETE_LABEL"> <field name="password1" type="password" label="COM_USERS_FIELD_RESET_PASSWORD1_LABEL" required="true" autocomplete="new-password" class="validate-password" field="password2" size="30" validate="password" strengthmeter="true" rules="true" force="on" filter="raw" /> <field name="password2" type="password" label="COM_USERS_FIELD_RESET_PASSWORD2_LABEL" autocomplete="new-password" class="validate-password" field="password1" filter="raw" message="COM_USERS_FIELD_RESET_PASSWORD1_MESSAGE" size="30" validate="equals" required="true" /> </fieldset> </form> PK��="�\�<5�U��U��forms/sitelang.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fields name="params"> <fieldset name="params" label="COM_USERS_SETTINGS_FIELDSET_LABEL"> <field name="language" type="language" label="COM_USERS_USER_FIELD_FRONTEND_LANGUAGE_LABEL" client="site" filter="cmd" default="active" /> </fieldset> </fields> </form> PK��="�\��)z��z��forms/registration.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset name="default" label="COM_USERS_REGISTRATION_DEFAULT_LABEL"> <field name="spacer" type="spacer" label="COM_USERS_REGISTER_REQUIRED" class="text" /> <field name="name" type="text" label="COM_USERS_REGISTER_NAME_LABEL" filter="string" required="true" size="30" /> <field name="username" type="text" label="COM_USERS_REGISTER_USERNAME_LABEL" class="validate-username" filter="username" message="COM_USERS_REGISTER_USERNAME_MESSAGE" required="true" size="30" validate="username" autocomplete="username" /> <field name="password1" type="password" label="COM_USERS_PROFILE_PASSWORD1_LABEL" required="true" autocomplete="new-password" class="validate-password" field="password1" size="30" validate="password" strengthmeter="true" rules="true" force="on" filter="raw" /> <field name="password2" type="password" label="COM_USERS_PROFILE_PASSWORD2_LABEL" autocomplete="new-password" class="validate-password" field="password1" filter="raw" message="COM_USERS_PROFILE_PASSWORD1_MESSAGE" size="30" validate="equals" required="true" /> <field name="email1" type="email" label="COM_USERS_REGISTER_EMAIL1_LABEL" field="id" filter="string" required="true" size="30" unique="true" validate="email" validDomains="com_users.domains" autocomplete="email" /> </fieldset> <fieldset name="captcha"> <field name="captcha" type="captcha" label="COM_USERS_CAPTCHA_LABEL" validate="captcha" /> </fieldset> </form> PK��="�\�Sʉ��forms/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�L��%��%�� config.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <config> <help key="Users:_Options"/> <inlinehelp button="show"/> <fieldset name="user_options" label="COM_USERS_CONFIG_USER_OPTIONS" > <field name="allowUserRegistration" type="radio" label="COM_USERS_CONFIG_FIELD_ALLOWREGISTRATION_LABEL" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="new_usertype" type="usergrouplist" label="COM_USERS_CONFIG_FIELD_NEW_USER_TYPE_LABEL" default="2" checksuperusergroup="1" /> <field name="guest_usergroup" type="usergrouplist" label="COM_USERS_CONFIG_FIELD_GUEST_USER_GROUP_LABEL" default="1" checksuperusergroup="1" /> <field name="sendpassword" type="radio" label="COM_USERS_CONFIG_FIELD_SENDPASSWORD_LABEL" layout="joomla.form.field.radio.switcher" default="1" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="useractivation" type="list" label="COM_USERS_CONFIG_FIELD_USERACTIVATION_LABEL" default="2" validate="options" > <option value="0">JNONE</option> <option value="1">COM_USERS_CONFIG_FIELD_USERACTIVATION_OPTION_SELFACTIVATION</option> <option value="2">COM_USERS_CONFIG_FIELD_USERACTIVATION_OPTION_ADMINACTIVATION</option> </field> <field name="mail_to_admin" type="radio" label="COM_USERS_CONFIG_FIELD_MAILTOADMIN_LABEL" layout="joomla.form.field.radio.switcher" default="1" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="captcha" type="plugins" label="COM_USERS_CONFIG_FIELD_CAPTCHA_LABEL" folder="captcha" filter="cmd" useglobal="true" > <option value="0">JOPTION_DO_NOT_USE</option> </field> <field name="frontend_userparams" type="radio" label="COM_USERS_CONFIG_FIELD_FRONTEND_USERPARAMS_LABEL" layout="joomla.form.field.radio.switcher" default="1" > <option value="0">JHIDE</option> <option value="1">JSHOW</option> </field> <field name="site_language" type="radio" label="COM_USERS_CONFIG_FIELD_FRONTEND_LANG_LABEL" layout="joomla.form.field.radio.switcher" default="0" showon="frontend_userparams:1" > <option value="0">JHIDE</option> <option value="1">JSHOW</option> </field> <field name="change_login_name" type="radio" label="COM_USERS_CONFIG_FIELD_CHANGEUSERNAME_LABEL" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="1">JYES</option> </field> </fieldset> <fieldset name="domain_options" label="COM_USERS_CONFIG_DOMAIN_OPTIONS" description="COM_USERS_CONFIG_FIELD_DOMAINS_DESC" > <field name="domains" type="subform" label="COM_USERS_CONFIG_FIELD_DOMAINS_LABEL" hiddenLabel="true" multiple="true" layout="joomla.form.field.subform.repeatable-table" formsource="administrator/components/com_users/forms/config_domain.xml" /> </fieldset> <fieldset name="password_options" label="COM_USERS_CONFIG_PASSWORD_OPTIONS" > <field name="reset_count" type="number" label="COM_USERS_CONFIG_FIELD_FRONTEND_RESET_COUNT_LABEL" filter="integer" min="0" max="20" step="1" default="10" validate="number" /> <field name="reset_time" type="number" label="COM_USERS_CONFIG_FIELD_FRONTEND_RESET_TIME_LABEL" filter="integer" min="1" max="24" step="1" default="1" validate="number" /> <field name="minimum_length" type="number" label="COM_USERS_CONFIG_FIELD_MINIMUM_PASSWORD_LENGTH" filter="integer" min="8" step="1" default="12" validate="number" /> <field name="minimum_integers" type="number" label="COM_USERS_CONFIG_FIELD_MINIMUM_INTEGERS" filter="integer" min="0" step="1" default="0" validate="number" /> <field name="minimum_symbols" type="number" label="COM_USERS_CONFIG_FIELD_MINIMUM_SYMBOLS" filter="integer" min="0" step="1" default="0" validate="number" /> <field name="minimum_uppercase" type="number" label="COM_USERS_CONFIG_FIELD_MINIMUM_UPPERCASE" filter="integer" min="0" step="1" default="0" validate="number" /> <field name="minimum_lowercase" type="number" label="COM_USERS_CONFIG_FIELD_MINIMUM_LOWERCASE" filter="integer" min="0" step="1" default="0" validate="number" /> </fieldset> <fieldset name="multifactorauth" label="COM_USERS_CONFIG_MULTIFACTORAUTH_SETTINGS_LABEL" description="COM_USERS_CONFIG_MULTIFACTORAUTH_SETTINGS_DESC" addfieldprefix="Joomla\Component\Users\Administrator\Field" > <field name="allowed_positions_frontend" type="ModulesPosition" label="COM_USERS_CONFIG_ALLOWED_POSITIONS_FRONTEND_LABEL" description="COM_USERS_CONFIG_ALLOWED_POSITIONS_FRONTEND_DESC" default="" layout="joomla.form.field.list-fancy-select" client="site" multiple="1" /> <field name="frontend_show_title" type="radio" label="COM_USERS_CONFIG_FRONTEND_SHOW_TITLE_LABEL" description="COM_USERS_CONFIG_FRONTEND_SHOW_TITLE_DESC" layout="joomla.form.field.radio.switcher" default="1" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="allowed_positions_backend" type="ModulesPosition" label="COM_USERS_CONFIG_ALLOWED_POSITIONS_BACKEND_LABEL" description="COM_USERS_CONFIG_ALLOWED_POSITIONS_BACKEND_DESC" default="" layout="joomla.form.field.list-fancy-select" client="administrator" multiple="1" /> <field name="neverMFAUserGroups" type="usergrouplist" label="COM_USERS_CONFIG_NEVERMFAUSERGROUPS_LABEL" description="COM_USERS_CONFIG_NEVERMFAUSERGROUPS_DESC" layout="joomla.form.field.list-fancy-select" checksuperusergroup="1" default="" multiple="1" > <option value="0">COM_USERS_CONFIG_LBL_NOGROUP</option> </field> <field name="forceMFAUserGroups" type="usergrouplist" label="COM_USERS_CONFIG_FORCEMFAUSERGROUPS_LABEL" description="COM_USERS_CONFIG_FORCEMFAUSERGROUPS_DESC" layout="joomla.form.field.list-fancy-select" checksuperusergroup="1" default="" multiple="1" > <option value="0">COM_USERS_CONFIG_LBL_NOGROUP</option> </field> <field name="captive_template" type="templatestyle" label="COM_USERS_CONFIG_FRONTEND_CAPTIVE_TEMPLATE_LABEL" description="COM_USERS_CONFIG_FRONTEND_CAPTIVE_TEMPLATE_DESC" client="site" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="mfaonsilent" type="radio" label="COM_USERS_CONFIG_MFAONSILENT_LABEL" description="COM_USERS_CONFIG_MFAONSILENT_DESC" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="silentresponses" type="text" label="COM_USERS_CONFIG_SILENTRESPONSES_LABEL" description="COM_USERS_CONFIG_SILENTRESPONSES_DESC" default="cookie, passwordless" showon="mfaonsilent:0" /> <field name="mfaredirectonlogin" type="radio" label="COM_USERS_CONFIG_REDIRECTONLOGIN_LABEL" description="COM_USERS_CONFIG_REDIRECTONLOGIN_DESC" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="mfaredirecturl" type="text" label="COM_USERS_CONFIG_REDIRECTURL_LABEL" description="COM_USERS_CONFIG_REDIRECTURL_DESC" default="" showon="mfaredirectonlogin:1" /> <field name="mfatrycount" type="number" label="COM_USERS_CONFIG_MFATRYCOUNT_LABEL" filter="integer" min="0" max="20" step="1" default="10" validate="number" /> <field name="mfatrytime" type="number" label="COM_USERS_CONFIG_MFATRYTIME_LABEL" filter="integer" min="1" max="24" step="1" default="1" validate="number" /> </fieldset> <fieldset name="user_notes_history" label="COM_USERS_CONFIG_FIELD_NOTES_HISTORY" > <field name="save_history" type="radio" label="JGLOBAL_SAVE_HISTORY_OPTIONS_LABEL" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="history_limit" type="number" label="JGLOBAL_HISTORY_LIMIT_OPTIONS_LABEL" filter="integer" default="5" showon="save_history:1" /> </fieldset> <fieldset name="massmail" label="COM_USERS_MASS_MAIL" description="COM_USERS_MASS_MAIL_DESC"> <field name="mailSubjectPrefix" type="text" label="COM_USERS_CONFIG_FIELD_SUBJECT_PREFIX_LABEL" /> <field name="mailBodySuffix" type="textarea" label="COM_USERS_CONFIG_FIELD_MAILBODY_SUFFIX_LABEL" rows="5" cols="30" /> </fieldset> <fieldset name="integration" label="JGLOBAL_INTEGRATION_LABEL" description="COM_USERS_CONFIG_INTEGRATION_SETTINGS_DESC" > <fieldset name="integration_customfields" label="JGLOBAL_FIELDS_TITLE" > <field name="custom_fields_enable" type="radio" label="JGLOBAL_CUSTOM_FIELDS_ENABLE_LABEL" layout="joomla.form.field.radio.switcher" default="1" > <option value="0">JNO</option> <option value="1">JYES</option> </field> </fieldset> </fieldset> <fieldset name="permissions" label="JCONFIG_PERMISSIONS_LABEL" > <field name="rules" type="rules" label="JCONFIG_PERMISSIONS_LABEL" filter="rules" validate="rules" component="com_users" section="component" /> </fieldset> </config> PK��%�\��΂��presets/users.xmlnu��[��<?xml version="1.0"?> <menu xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="urn:joomla.org" xsi:schemaLocation="urn:joomla.org menu.xsd" > <menuitem title="COM_USERS_MENUS_USERS" type="heading" icon="users" class="class:users" > <menuitem title="COM_USERS_MENUS_USER_MANAGER" type="component" element="com_users" link="index.php?option=com_users&view=users" quicktask="index.php?option=com_users&task=user.add" quicktask-title="COM_USERS_MENUS_ADD_USER" /> <menuitem title="COM_USERS_MENUS_GROUPS" type="component" element="com_users" link="index.php?option=com_users&view=groups" /> <menuitem title="COM_USERS_MENUS_LEVELS" type="component" element="com_users" link="index.php?option=com_users&view=levels" /> </menuitem> <menuitem title="COM_USERS_MENUS_FIELDS" type="heading" icon="user-tag" class="class:users" > <menuitem title="MOD_MENU_FIELDS" type="component" element="com_fields" link="index.php?option=com_fields&view=fields&context=com_users.user" /> <menuitem title="MOD_MENU_FIELDS_GROUP" type="component" element="com_fields" link="index.php?option=com_fields&view=groups&context=com_users.user" /> </menuitem> <menuitem title="COM_USERS_MENUS_MISC" type="heading" icon="user-edit" class="class:users" > <menuitem title="COM_USERS_MENUS_NOTES" type="component" element="com_users" link="index.php?option=com_users&view=notes" /> <menuitem title="COM_USERS_MENUS_NOTE_CATEGORIES" type="component" element="com_categories" link="index.php?option=com_categories&view=categories&extension=com_users" /> <menuitem title="MOD_MENU_MASS_MAIL_USERS" type="component" element="com_users" link="index.php?option=com_users&view=mail" scope="massmail" /> </menuitem> </menu> PK��%�\�Sʉ��presets/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\� }W��helpers/users.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt * * @phpcs:disable PSR1.Classes.ClassDeclaration.MissingNamespace / // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users component helper. * * @since 1.6 * * @deprecated 4.3 will be removed in 6.0 * Use \Joomla\Component\Users\Administrator\Helper\UsersHelper instead / class UsersHelper extends \Joomla\Component\Users\Administrator\Helper\UsersHelper { } PK��%�\�Sʉ��helpers/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\4^��helpers/debug.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt * * @phpcs:disable PSR1.Classes.ClassDeclaration.MissingNamespace / use Joomla\Component\Users\Administrator\Helper\DebugHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users component debugging helper. * * @since 1.6 * * @deprecated 4.3 will be removed in 6.0 * Use \Joomla\Component\Users\Administrator\Helper\DebugHelper instead / class UsersHelperDebug extends DebugHelper { } PK��%�\F7��postinstall/multifactorauth.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / use Joomla\CMS\Factory; use Joomla\CMS\Plugin\PluginHelper; use Joomla\Database\DatabaseInterface; use Joomla\Database\ParameterType; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Post-installation message about the new Multi-factor Authentication: condition check. * * Returns true if neither of the two new core MFA plugins are enabled. * * @return boolean * @since 4.2.0 / function com_users_postinstall_mfa_condition(): bool { return \count(PluginHelper::getPlugin('multifactorauth')) < 1; } /* * Post-installation message about the new Multi-factor Authentication: action. * * Enables the core MFA plugins. * * @return void * @since 4.2.0 / function com_users_postinstall_mfa_action(): void { /* @var DatabaseInterface $db / $db = Factory::getContainer()->get(DatabaseInterface::class); $coreMfaPlugins = ['email', 'totp', 'webauthn', 'yubikey']; $query = $db->getQuery(true) ->update($db->quoteName('#__extensions')) ->set($db->quoteName('enabled') . ' = 1') ->where($db->quoteName('type') . ' = ' . $db->quote('plugin')) ->where($db->quoteName('folder') . ' = ' . $db->quote('multifactorauth')) ->whereIn($db->quoteName('element'), $coreMfaPlugins, ParameterType::STRING); $db->setQuery($query); $db->execute(); $url = 'index.php?option=com_plugins&filter[folder]=multifactorauth'; Factory::getApplication()->redirect($url); } PK��%�\�Sʉ��postinstall/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�3�)w ��w ��src/Table/NoteTable.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Table; use Joomla\CMS\Factory; use Joomla\CMS\Table\Table; use Joomla\CMS\User\CurrentUserInterface; use Joomla\CMS\User\CurrentUserTrait; use Joomla\CMS\Versioning\VersionableTableInterface; use Joomla\Database\DatabaseInterface; use Joomla\Event\DispatcherInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User notes table class * * @since 2.5 / class NoteTable extends Table implements VersionableTableInterface, CurrentUserInterface { use CurrentUserTrait; /* * Indicates that columns fully support the NULL value in the database * * @var boolean * @since 4.0.0 / protected $_supportNullValue = true; /* * Constructor * * @param DatabaseInterface $db Database connector object * @param ?DispatcherInterface $dispatcher Event dispatcher for this table * * @since 2.5 / public function __construct(DatabaseInterface $db, ?DispatcherInterface $dispatcher = null) { $this->typeAlias = 'com_users.note'; parent::__construct('#__user_notes', 'id', $db, $dispatcher); $this->setColumnAlias('published', 'state'); } /* * Overloaded store method for the notes table. * * @param boolean $updateNulls Toggle whether null values should be updated. * * @return boolean True on success, false on failure. * * @since 2.5 / public function store($updateNulls = true) { $date = Factory::getDate()->toSql(); $userId = $this->getCurrentUser()->id; if (!((int) $this->review_time)) { $this->review_time = null; } if ($this->id) { // Existing item $this->modified_time = $date; $this->modified_user_id = $userId; } else { // New record. $this->created_time = $date; $this->created_user_id = $userId; $this->modified_time = $date; $this->modified_user_id = $userId; } // Attempt to store the data. return parent::store($updateNulls); } /* * Method to perform sanity checks on the Table instance properties to ensure they are safe to store in the database. * * @return boolean True if the instance is sane and able to be stored in the database. * * @since 4.0.0 / public function check() { try { parent::check(); } catch (\Exception $e) { $this->setError($e->getMessage()); return false; } if (empty($this->modified_time)) { $this->modified_time = $this->created_time; } if (empty($this->modified_user_id)) { $this->modified_user_id = $this->created_user_id; } return true; } /* * Get the type alias for the history table * * @return string The alias as described above * * @since 4.0.0 / public function getTypeAlias() { return $this->typeAlias; } } PK��%�\yVӾP6��P6��src/Table/MfaTable.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Table; use Joomla\CMS\Date\Date; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Table\Table; use Joomla\CMS\User\CurrentUserInterface; use Joomla\CMS\User\CurrentUserTrait; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\Component\Users\Administrator\Helper\Mfa as MfaHelper; use Joomla\Component\Users\Administrator\Model\BackupcodesModel; use Joomla\Component\Users\Administrator\Service\Encrypt; use Joomla\Database\DatabaseInterface; use Joomla\Database\ParameterType; use Joomla\Event\DispatcherInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Table for the Multi-Factor Authentication records * * @property int $id Record ID. * @property int $user_id User ID * @property string $title Record title. * @property string $method MFA Method (corresponds to one of the plugins). * @property int $default Is this the default Method? * @property array $options Configuration options for the MFA Method. * @property string $created_on Date and time the record was created. * @property string $last_used Date and time the record was last used successfully. * @property int $tries Counter for unsuccessful tries * @property string $last_try Date and time of the last unsuccessful try * * @since 4.2.0 / class MfaTable extends Table implements CurrentUserInterface, UserFactoryAwareInterface { use CurrentUserTrait; use UserFactoryAwareTrait; /* * Delete flags per ID, set up onBeforeDelete and used onAfterDelete * * @var array * @since 4.2.0 / private $deleteFlags = []; /* * Encryption service * * @var Encrypt * @since 4.2.0 / private $encryptService; /* * Indicates that columns fully support the NULL value in the database * * @var boolean * @since 4.2.0 / // phpcs:ignore protected $_supportNullValue = true; /* * Table constructor * * @param DatabaseInterface $db Database driver object * @param ?DispatcherInterface $dispatcher Events dispatcher object * * @since 4.2.0 / public function __construct(DatabaseInterface $db, ?DispatcherInterface $dispatcher = null) { parent::__construct('#__user_mfa', 'id', $db, $dispatcher); $this->encryptService = new Encrypt(); } /* * Method to store a row in the database from the Table instance properties. * * If a primary key value is set the row with that primary key value will be updated with the instance property values. * If no primary key value is set a new row will be inserted into the database with the properties from the Table instance. * * @param boolean $updateNulls True to update fields even if they are null. * * @return boolean True on success. * * @since 4.2.0 / public function store($updateNulls = true) { // Encrypt the options before saving them $this->options = $this->encryptService->encrypt(json_encode($this->options ?: [])); // Set last_used date to null if empty or zero date if (!((int) $this->last_used)) { $this->last_used = null; } $records = MfaHelper::getUserMfaRecords($this->user_id); if ($this->id) { // Existing record. Remove it from the list of records. $records = array_filter( $records, function ($rec) { return $rec->id != $this->id; } ); } // Update the dates on a new record if (empty($this->id)) { $this->created_on = Date::getInstance()->toSql(); $this->last_used = null; } // Do I need to mark this record as the default? if ($this->default == 0) { $hasDefaultRecord = array_reduce( $records, function ($carry, $record) { return $carry \|\| ($record->default == 1); }, false ); $this->default = $hasDefaultRecord ? 0 : 1; } // Let's find out if we are saving a new MFA method record without having backup codes yet. $mustCreateBackupCodes = false; if (empty($this->id) && $this->method !== 'backupcodes') { // Do I have any backup records? $hasBackupCodes = array_reduce( $records, function (bool $carry, $record) { return $carry \|\| $record->method === 'backupcodes'; }, false ); $mustCreateBackupCodes = !$hasBackupCodes; // If the only other entry is the backup records one I need to make this the default method if ($hasBackupCodes && \count($records) === 1) { $this->default = 1; } } // Store the record try { $result = parent::store($updateNulls); } catch (\Throwable $e) { $this->setError($e->getMessage()); $result = false; } // Decrypt the options (they must be decrypted in memory) $this->decryptOptions(); if ($result) { // If this record is the default unset the default flag from all other records $this->switchDefaultRecord(); // Do I need to generate backup codes? if ($mustCreateBackupCodes) { $this->generateBackupCodes(); } } return $result; } /* * Method to load a row from the database by primary key and bind the fields to the Table instance properties. * * @param mixed $keys An optional primary key value to load the row by, or an array of fields to match. * If not set the instance property value is used. * @param boolean $reset True to reset the default values before loading the new row. * * @return boolean True if successful. False if row not found. * * @since 4.2.0 * @throws \InvalidArgumentException * @throws \RuntimeException * @throws \UnexpectedValueException / public function load($keys = null, $reset = true) { $result = parent::load($keys, $reset); if ($result) { $this->decryptOptions(); } return $result; } /* * Method to delete a row from the database table by primary key value. * * @param mixed $pk An optional primary key value to delete. If not set the instance property value is used. * * @return boolean True on success. * * @since 4.2.0 * @throws \UnexpectedValueException / public function delete($pk = null) { $record = $this; if ($pk != $this->id) { $record = clone $this; $record->reset(); $result = $record->load($pk); if (!$result) { // If the record does not exist I will stomp my feet and deny your request throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } } $user = $this->getCurrentUser(); // The user must be a registered user, not a guest if ($user->guest) { throw new \RuntimeException(Text::_('JERROR_ALERTNOAUTHOR'), 403); } // Save flags used onAfterDelete $this->deleteFlags[$record->id] = [ 'default' => $record->default, 'numRecords' => $this->getNumRecords($record->user_id), 'user_id' => $record->user_id, 'method' => $record->method, ]; if (\is_null($pk)) { $pk = [$this->_tbl_key => $this->id]; } elseif (!\is_array($pk)) { $pk = [$this->_tbl_key => $pk]; } $isDeleted = parent::delete($pk); if ($isDeleted) { $this->afterDelete($pk); } return $isDeleted; } /* * Decrypt the possibly encrypted options * * @return void * @since 4.2.0 / private function decryptOptions(): void { // Try with modern decryption $decrypted = @json_decode($this->encryptService->decrypt($this->options ?? ''), true); if (\is_string($decrypted)) { $decrypted = @json_decode($decrypted, true); } // Fall back to legacy decryption if (!\is_array($decrypted)) { $decrypted = @json_decode($this->encryptService->decrypt($this->options ?? '', true), true); if (\is_string($decrypted)) { $decrypted = @json_decode($decrypted, true); } } $this->options = $decrypted ?: []; } /* * If this record is set to be the default, unset the default flag from the other records for the same user. * * @return void * @since 4.2.0 / private function switchDefaultRecord(): void { if (!$this->default) { return; } /* * This record is marked as default, therefore we need to unset the default flag from all other records for this * user. / $db = $this->getDatabase(); $query = $db->getQuery(true) ->update($db->quoteName('#__user_mfa')) ->set($db->quoteName('default') . ' = 0') ->where($db->quoteName('user_id') . ' = :user_id') ->where($db->quoteName('id') . ' != :id') ->bind(':user_id', $this->user_id, ParameterType::INTEGER) ->bind(':id', $this->id, ParameterType::INTEGER); $db->setQuery($query)->execute(); } /* * Regenerate backup code is the flag is set. * * @return void * @throws \Exception * @since 4.2.0 / private function generateBackupCodes(): void { /* @var MVCFactoryInterface $factory / $factory = Factory::getApplication()->bootComponent('com_users')->getMVCFactory(); /* @var BackupcodesModel $backupCodes / $backupCodes = $factory->createModel('Backupcodes', 'Administrator'); $user = $this->getUserFactory()->loadUserById($this->user_id); $backupCodes->regenerateBackupCodes($user); } /* * Runs after successfully deleting a record * * @param int\|array $pk The promary key of the deleted record * * @return void * @since 4.2.0 / private function afterDelete($pk): void { if (\is_array($pk)) { $pk = $pk[$this->_tbl_key] ?? array_shift($pk); } if (!isset($this->deleteFlags[$pk])) { return; } if (($this->deleteFlags[$pk]['numRecords'] <= 2) && ($this->deleteFlags[$pk]['method'] != 'backupcodes')) { /* * This was the second to last MFA record in the database (the last one is the `backupcodes`). Therefore, we * need to delete the remaining entry and go away. We don't trigger this if the Method we are deleting was * the `backupcodes` because we might just be regenerating the backup codes. / $db = $this->getDatabase(); $query = $db->getQuery(true) ->delete($db->quoteName('#__user_mfa')) ->where($db->quoteName('user_id') . ' = :user_id') ->bind(':user_id', $this->deleteFlags[$pk]['user_id'], ParameterType::INTEGER); $db->setQuery($query)->execute(); unset($this->deleteFlags[$pk]); return; } // This was the default record. Promote the next available record to default. if ($this->deleteFlags[$pk]['default']) { $db = $this->getDatabase(); $query = $db->getQuery(true) ->select($db->quoteName('id')) ->from($db->quoteName('#__user_mfa')) ->where($db->quoteName('user_id') . ' = :user_id') ->where($db->quoteName('method') . ' != ' . $db->quote('backupcodes')) ->bind(':user_id', $this->deleteFlags[$pk]['user_id'], ParameterType::INTEGER); $ids = $db->setQuery($query)->loadColumn(); if (empty($ids)) { return; } $id = array_shift($ids); $query = $db->getQuery(true) ->update($db->quoteName('#__user_mfa')) ->set($db->quoteName('default') . ' = 1') ->where($db->quoteName('id') . ' = :id') ->bind(':id', $id, ParameterType::INTEGER); $db->setQuery($query)->execute(); } } /* * Get the number of MFA records for a give user ID * * @param int $userId The user ID to check * * @return integer * * @since 4.2.0 / private function getNumRecords(int $userId): int { $db = $this->getDatabase(); $query = $db->getQuery(true) ->select('COUNT()') ->from($db->quoteName('#__user_mfa')) ->where($db->quoteName('user_id') . ' = :user_id') ->bind(':user_id', $userId, ParameterType::INTEGER); $numOldRecords = $db->setQuery($query)->loadResult(); return (int) $numOldRecords; } } PK��%�\�Sʉ��src/Table/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\��.��.��src/Service/HTML/Users.phpnu��[��<?php /** * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Service\HTML; use Joomla\CMS\Factory; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\LanguageHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\Database\ParameterType; use Joomla\Filesystem\Path; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Extended Utility class for the Users component. * * @since 2.5 / class Users { /* * Display an image. * * @param string $src The source of the image * * @return string A <img> element if the specified file exists, otherwise, a null string * * @since 2.5 * @throws \Exception / public function image($src) { $src = preg_replace('#[^A-Z0-9\-_\./]#i', '', $src); $file = JPATH_SITE . '/' . $src; Path::check($file); if (!file_exists($file)) { return ''; } return '<img src="' . Uri::root() . $src . '" alt="">'; } /* * Displays an icon to add a note for this user. * * @param integer $userId The user ID * * @return string A link to add a note * * @since 2.5 / public function addNote($userId) { $title = Text::_('COM_USERS_ADD_NOTE'); return '<a href="' . Route::_('index.php?option=com_users&task=note.add&u_id=' . (int) $userId) . '" class="btn btn-secondary btn-sm"><span class="icon-plus pe-1" aria-hidden="true">' . '</span>' . $title . '</a>'; } /* * Displays an icon to filter the notes list on this user. * * @param integer $count The number of notes for the user * @param integer $userId The user ID * * @return string A link to apply a filter * * @since 2.5 / public function filterNotes($count, $userId) { if (empty($count)) { return ''; } $title = Text::_('COM_USERS_FILTER_NOTES'); return '<a href="' . Route::_('index.php?option=com_users&view=notes&filter[search]=uid:' . (int) $userId) . '" class="dropdown-item"><span class="icon-list pe-1" aria-hidden="true"></span>' . $title . '</a>'; } /* * Displays a note icon. * * @param integer $count The number of notes for the user * @param integer $userId The user ID * * @return string A link to a modal window with the user notes * * @since 2.5 / public function notes($count, $userId) { if (empty($count)) { return ''; } $title = Text::plural('COM_USERS_N_USER_NOTES', $count); return '<button type="button" data-bs-target="#userModal_' . (int) $userId . '" id="modal-' . (int) $userId . '" data-bs-toggle="modal" class="dropdown-item"><span class="icon-eye pe-1" aria-hidden="true"></span>' . $title . '</button>'; } /* * Renders the modal html. * * @param integer $count The number of notes for the user * @param integer $userId The user ID * * @return string The html for the rendered modal * * @since 3.4.1 / public function notesModal($count, $userId) { if (empty($count)) { return ''; } $title = Text::plural('COM_USERS_N_USER_NOTES', $count); $footer = '<button type="button" class="btn btn-secondary" data-bs-dismiss="modal">' . Text::_('JTOOLBAR_CLOSE') . '</button>'; return HTMLHelper::_( 'bootstrap.renderModal', 'userModal_' . (int) $userId, [ 'title' => $title, 'backdrop' => 'static', 'keyboard' => true, 'closeButton' => true, 'footer' => $footer, 'url' => Route::_('index.php?option=com_users&view=notes&tmpl=component&layout=modal&filter[user_id]=' . (int) $userId), 'height' => '300px', 'width' => '800px', ] ); } /* * Build an array of block/unblock user states to be used by jgrid.state, * State options will be different for any user * and for currently logged in user * * @param boolean $self True if state array is for currently logged in user * * @return array a list of possible states to display * * @since 3.0 / public function blockStates($self = false) { if ($self) { $states = [ 1 => [ 'task' => 'unblock', 'text' => '', 'active_title' => 'COM_USERS_TOOLBAR_BLOCK', 'inactive_title' => '', 'tip' => true, 'active_class' => 'unpublish', 'inactive_class' => 'unpublish', ], 0 => [ 'task' => 'block', 'text' => '', 'active_title' => '', 'inactive_title' => 'COM_USERS_USERS_ERROR_CANNOT_BLOCK_SELF', 'tip' => true, 'active_class' => 'publish', 'inactive_class' => 'publish', ], ]; } else { $states = [ 1 => [ 'task' => 'unblock', 'text' => '', 'active_title' => 'COM_USERS_TOOLBAR_UNBLOCK', 'inactive_title' => '', 'tip' => true, 'active_class' => 'unpublish', 'inactive_class' => 'unpublish', ], 0 => [ 'task' => 'block', 'text' => '', 'active_title' => 'COM_USERS_TOOLBAR_BLOCK', 'inactive_title' => '', 'tip' => true, 'active_class' => 'publish', 'inactive_class' => 'publish', ], ]; } return $states; } /* * Build an array of activate states to be used by jgrid.state, * * @return array a list of possible states to display * * @since 3.0 / public function activateStates() { $states = [ 1 => [ 'task' => 'activate', 'text' => '', 'active_title' => 'COM_USERS_TOOLBAR_ACTIVATE', 'inactive_title' => '', 'tip' => true, 'active_class' => 'unpublish', 'inactive_class' => 'unpublish', ], 0 => [ 'task' => '', 'text' => '', 'active_title' => '', 'inactive_title' => 'COM_USERS_ACTIVATED', 'tip' => true, 'active_class' => 'publish', 'inactive_class' => 'publish', ], ]; return $states; } /* * Get the sanitized value * * @param mixed $value Value of the field * * @return mixed String/void * * @since 1.6 / public function value($value) { if (\is_string($value)) { $value = trim($value); } if (empty($value)) { return Text::_('COM_USERS_PROFILE_VALUE_NOT_FOUND'); } if (!\is_array($value)) { return htmlspecialchars($value, ENT_COMPAT, 'UTF-8'); } } /* * Get the space symbol * * @param mixed $value Value of the field * * @return string * * @since 1.6 / public function spacer($value) { return ''; } /* * Get the sanitized template style * * @param mixed $value Value of the field * * @return mixed String/void * * @since 1.6 / public function templatestyle($value) { if (empty($value)) { return static::value($value); } $db = Factory::getDbo(); $query = $db->getQuery(true) ->select($db->quoteName('title')) ->from($db->quoteName('#__template_styles')) ->where($db->quoteName('id') . ' = :id') ->bind(':id', $value, ParameterType::INTEGER); $db->setQuery($query); $title = $db->loadResult(); if ($title) { return htmlspecialchars($title, ENT_COMPAT, 'UTF-8'); } return static::value(''); } /* * Get the sanitized language * * @param mixed $value Value of the field * * @return mixed String/void * * @since 1.6 / public function admin_language($value) { if (!$value) { return static::value($value); } $path = LanguageHelper::getLanguagePath(JPATH_ADMINISTRATOR, $value); $file = $path . '/langmetadata.xml'; if (!is_file($file)) { // For language packs from before 4.0. $file = $path . '/' . $value . '.xml'; if (!is_file($file)) { return static::value($value); } } $result = LanguageHelper::parseXMLLanguageFile($file); if ($result) { return htmlspecialchars($result['name'], ENT_COMPAT, 'UTF-8'); } return static::value($value); } /* * Get the sanitized language * * @param mixed $value Value of the field * * @return mixed String/void * * @since 1.6 / public function language($value) { if (!$value) { return static::value($value); } $path = LanguageHelper::getLanguagePath(JPATH_SITE, $value); $file = $path . '/langmetadata.xml'; if (!is_file($file)) { // For language packs from before 4.0. $file = $path . '/' . $value . '.xml'; if (!is_file($file)) { return static::value($value); } } $result = LanguageHelper::parseXMLLanguageFile($file); if ($result) { return htmlspecialchars($result['name'], ENT_COMPAT, 'UTF-8'); } return static::value($value); } /* * Get the sanitized editor name * * @param mixed $value Value of the field * * @return mixed String/void * * @since 1.6 / public function editor($value) { if (empty($value)) { return static::value($value); } $db = Factory::getDbo(); $lang = Factory::getLanguage(); $query = $db->getQuery(true) ->select($db->quoteName('name')) ->from($db->quoteName('#__extensions')) ->where($db->quoteName('element') . ' = :element') ->where($db->quoteName('folder') . ' = ' . $db->quote('editors')) ->bind(':element', $value); $db->setQuery($query); $title = $db->loadResult(); if ($title) { $lang->load("plg_editors_$value.sys", JPATH_ADMINISTRATOR) \|\| $lang->load("plg_editors_$value.sys", JPATH_PLUGINS . '/editors/' . $value); $lang->load($title . '.sys'); return Text::_($title); } return static::value(''); } } PK��%�\�Sʉ��src/Service/HTML/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\:Yn��src/Service/Encrypt.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Service; use Joomla\CMS\Encrypt\Aes; use Joomla\CMS\Factory; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Data encryption service. * * @since 4.2.0 / class Encrypt { /* * The encryption engine used by this service * * @var Aes * @since 4.2.0 / private $aes; /* * EncryptService constructor. * * @since 4.2.0 / public function __construct() { $this->initialize(); } /* * Encrypt the plaintext $data and return the ciphertext prefixed by ###AES128### * * @param string $data The plaintext data * * @return string The ciphertext, prefixed by ###AES128### * * @since 4.2.0 / public function encrypt(string $data): string { if (!\is_object($this->aes)) { return $data; } $this->aes->setPassword($this->getPassword(), false); $encrypted = $this->aes->encryptString($data, true); return '###AES128###' . $encrypted; } /* * Decrypt the ciphertext, prefixed by ###AES128###, and return the plaintext. * * @param string $data The ciphertext, prefixed by ###AES128### * @param bool $legacy Use legacy key expansion. We recommend against using it. * * @return string The plaintext data * * @since 4.2.0 / public function decrypt(string $data, bool $legacy = false): string { if (!str_starts_with($data, '###AES128###')) { return $data; } $data = substr($data, 12); if (!\is_object($this->aes)) { return $data; } $this->aes->setPassword($this->getPassword(), $legacy); $decrypted = $this->aes->decryptString($data, true); // Decrypted data is null byte padded. We have to remove the padding before proceeding. return rtrim($decrypted, "\0"); } /* * Initialize the AES cryptography object * * @return void * @since 4.2.0 / private function initialize(): void { if (\is_object($this->aes)) { return; } $password = $this->getPassword(); if (empty($password)) { return; } $this->aes = new Aes('cbc'); $this->aes->setPassword($password); } /* * Returns the password used to encrypt information in the component * * @return string * * @since 4.2.0 / private function getPassword(): string { try { return Factory::getApplication()->get('secret', ''); } catch (\Exception) { return ''; } } } PK��%�\9�\|\.��\.��src/Helper/Mfa.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Helper; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Document\HtmlDocument; use Joomla\CMS\Event\MultiFactor\GetMethod; use Joomla\CMS\Factory; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Uri\Uri; use Joomla\CMS\User\User; use Joomla\CMS\User\UserFactoryInterface; use Joomla\Component\Users\Administrator\DataShape\MethodDescriptor; use Joomla\Component\Users\Administrator\Model\BackupcodesModel; use Joomla\Component\Users\Administrator\Model\MethodsModel; use Joomla\Component\Users\Administrator\Table\MfaTable; use Joomla\Component\Users\Administrator\View\Methods\HtmlView; use Joomla\Database\DatabaseInterface; use Joomla\Database\ParameterType; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Helper functions for captive MFA handling * * @since 4.2.0 / abstract class Mfa { /* * Cache of all currently active MFAs * * @var array\|null * @since 4.2.0 / protected static $allMFAs = null; /* * Are we inside the administrator application * * @var boolean * @since 4.2.0 / protected static $isAdmin = null; /* * Get the HTML for the Multi-factor Authentication configuration interface for a user. * * This helper method uses a sort of primitive HMVC to display the com_users' Methods page which * renders the MFA configuration interface. * * @param User $user The user we are going to show the configuration UI for. * * @return string\|null The HTML of the UI; null if we cannot / must not show it. * @throws \Exception * @since 4.2.0 / public static function getConfigurationInterface(User $user): ?string { // Check the conditions if (!self::canShowConfigurationInterface($user)) { return null; } /* @var CMSApplication $app / $app = Factory::getApplication(); if ($app->getInput()->getCmd('option', '') !== 'com_users') { $app->getLanguage()->load('com_users'); $app->getDocument() ->getWebAssetManager() ->getRegistry() ->addExtensionRegistryFile('com_users'); } // Get a model /* @var MVCFactoryInterface $factory / $factory = Factory::getApplication()->bootComponent('com_users')->getMVCFactory(); /* @var MethodsModel $methodsModel / $methodsModel = $factory->createModel('Methods', 'Administrator'); /* @var BackupcodesModel $methodsModel / $backupCodesModel = $factory->createModel('Backupcodes', 'Administrator'); // Get a view object $appRoot = $app->isClient('site') ? \JPATH_SITE : \JPATH_ADMINISTRATOR; $prefix = $app->isClient('site') ? 'Site' : 'Administrator'; /* @var HtmlView $view / $view = $factory->createView( 'Methods', $prefix, 'Html', [ 'base_path' => $appRoot . '/components/com_users', ] ); $view->setModel($methodsModel, true); /* @noinspection PhpParamsInspection / $view->setModel($backupCodesModel); $view->setDocument($app->getDocument()); $view->returnURL = base64_encode(Uri::getInstance()->toString()); $view->user = $user; $view->forHMVC = true; $view->setLanguage($app->getLanguage()); @ob_start(); try { $view->display(); } catch (\Throwable $e) { @ob_end_clean(); /* * This is intentional! When you are developing a Multi-factor Authentication plugin you * will inevitably mess something up and end up with an error. This would cause the * entire MFA configuration page to disappear. No problem! Set Debug System to Yes in * Global Configuration and you can see the error exception which will help you solve * your problem. / if (\defined('JDEBUG') && JDEBUG) { throw $e; } return null; } return @ob_get_clean(); } /* * Get a list of all of the MFA Methods * * @return MethodDescriptor[] * @since 4.2.0 / public static function getMfaMethods(): array { PluginHelper::importPlugin('multifactorauth'); if (\is_null(self::$allMFAs)) { // Get all the plugin results $event = new GetMethod(); $temp = Factory::getApplication() ->getDispatcher() ->dispatch($event->getName(), $event) ->getArgument('result', []); // Normalize the results self::$allMFAs = []; foreach ($temp as $method) { if (!\is_array($method) && !($method instanceof MethodDescriptor)) { continue; } $method = $method instanceof MethodDescriptor ? $method : new MethodDescriptor($method); if (empty($method['name'])) { continue; } self::$allMFAs[$method['name']] = $method; } } return self::$allMFAs; } /* * Is the current user allowed to add/edit MFA methods for $user? * * This is only allowed if I am adding / editing methods for myself. * * If the target user is a member of any group disallowed to use MFA this will return false. * * @param User\|null $user The user you want to know if we're allowed to edit * * @return boolean * @throws \Exception * @since 4.2.0 / public static function canAddEditMethod(?User $user = null): bool { // Cannot do MFA operations on no user or a guest user. if (\is_null($user) \|\| $user->guest) { return false; } // If the user is in a user group which disallows MFA we cannot allow adding / editing methods. $neverMFAGroups = ComponentHelper::getParams('com_users')->get('neverMFAUserGroups', []); $neverMFAGroups = \is_array($neverMFAGroups) ? $neverMFAGroups : []; if (\count(array_intersect($user->getAuthorisedGroups(), $neverMFAGroups))) { return false; } // Check if this is the same as the logged-in user. $myUser = Factory::getApplication()->getIdentity() ?: Factory::getContainer()->get(UserFactoryInterface::class)->loadUserById(0); return $myUser->id === $user->id; } /* * Is the current user allowed to delete MFA methods / disable MFA for $user? * * This is allowed if: * - The user being queried is the same as the logged-in user * - The logged-in user is a Super User AND the queried user is NOT a Super User. * * Note that Super Users can be edited by their own user only for security reasons. If a Super * User gets locked out they must use the Backup Codes to regain access. If that's not possible, * they will need to delete their records from the `#__user_mfa` table. * * @param User\|null $user The user being queried. * * @return boolean * @throws \Exception * @since 4.2.0 / public static function canDeleteMethod(?User $user = null): bool { // Cannot do MFA operations on no user or a guest user. if (\is_null($user) \|\| $user->guest) { return false; } $myUser = Factory::getApplication()->getIdentity() ?: Factory::getContainer()->get(UserFactoryInterface::class)->loadUserById(0); return $myUser->id === $user->id \|\| ($myUser->authorise('core.admin') && !$user->authorise('core.admin')); } /* * Return all MFA records for a specific user * * @param int\|null $userId User ID. NULL for currently logged in user. * * @return MfaTable[] * @throws \Exception * * @since 4.2.0 / public static function getUserMfaRecords(?int $userId): array { if (empty($userId)) { $user = Factory::getApplication()->getIdentity() ?: Factory::getUser(); $userId = $user->id ?: 0; } /* @var DatabaseInterface $db / $db = Factory::getContainer()->get(DatabaseInterface::class); $query = $db->getQuery(true) ->select($db->quoteName('id')) ->from($db->quoteName('#__user_mfa')) ->where($db->quoteName('user_id') . ' = :user_id') ->bind(':user_id', $userId, ParameterType::INTEGER); try { $ids = $db->setQuery($query)->loadColumn() ?: []; } catch (\Exception) { $ids = []; } if (empty($ids)) { return []; } /* @var MVCFactoryInterface $factory / $factory = Factory::getApplication()->bootComponent('com_users')->getMVCFactory(); // Map all results to MFA table objects $records = array_map( function ($id) use ($factory) { /* @var MfaTable $record / $record = $factory->createTable('Mfa', 'Administrator'); $loaded = $record->load($id); return $loaded ? $record : null; }, $ids ); // Let's remove Methods we couldn't decrypt when reading from the database. $hasBackupCodes = false; $records = array_filter( $records, function ($record) use (&$hasBackupCodes) { $isValid = !\is_null($record) && (!empty($record->options)); if ($isValid && ($record->method === 'backupcodes')) { $hasBackupCodes = true; } return $isValid; } ); // If the only Method is backup codes it's as good as having no records if ((\count($records) === 1) && $hasBackupCodes) { return []; } return $records; } /* * Are the conditions for showing the MFA configuration interface met? * * @param User\|null $user The user to be configured * * @return boolean * @throws \Exception * @since 4.2.0 / public static function canShowConfigurationInterface(?User $user = null): bool { // If I have no user to check against that's all the checking I can do. if (empty($user)) { return false; } // I need at least one MFA method plugin for the setup interface to make any sense. $plugins = PluginHelper::getPlugin('multifactorauth'); if (\count($plugins) < 1) { return false; } /* @var CMSApplication $app / $app = Factory::getApplication(); // We can only show a configuration page in the front- or backend application. if (!$app->isClient('site') && !$app->isClient('administrator')) { return false; } // Only show the configuration page if we have an HTML document if (!($app->getDocument() instanceof HtmlDocument)) { return false; } // I must be able to add, edit or delete the user's MFA settings return self::canAddEditMethod($user) \|\| self::canDeleteMethod($user); } } PK��%�\B!>��src/Helper/UsersHelper.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2017 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Helper; use Joomla\CMS\Factory; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Helper\UserGroupsHelper; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Object\CMSObject; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users component helper. * * @since 1.6 / class UsersHelper extends ContentHelper { /* * @var CMSObject A cache for the available actions. * @since 1.6 * @deprecated 5.3 will be removed in 7.0 without replacement / protected static $actions; /* * Get a list of filter options for the blocked state of a user. * * @return array An array of \JHtmlOption elements. * * @since 1.6 * @deprecated 5.3 will be removed in 7.0 * Use Form Fields instead / public static function getStateOptions() { // Build the filter options. $options = []; $options[] = HTMLHelper::_('select.option', '0', Text::_('JENABLED')); $options[] = HTMLHelper::_('select.option', '1', Text::_('JDISABLED')); return $options; } /* * Get a list of filter options for the activated state of a user. * * @return array An array of \JHtmlOption elements. * * @since 1.6 * @deprecated 5.3 will be removed in 7.0 * Use Form Fields instead / public static function getActiveOptions() { // Build the filter options. $options = []; $options[] = HTMLHelper::_('select.option', '0', Text::_('COM_USERS_ACTIVATED')); $options[] = HTMLHelper::_('select.option', '1', Text::_('COM_USERS_UNACTIVATED')); return $options; } /* * Get a list of the user groups for filtering. * * @return array An array of \JHtmlOption elements. * * @since 1.6 / public static function getGroups() { $options = UserGroupsHelper::getInstance()->getAll(); foreach ($options as &$option) { $option->value = $option->id; $option->text = str_repeat('- ', $option->level) . $option->title; } return $options; } /* * Creates a list of range options used in filter select list * used in com_users on users view * * @return array * * @since 2.5 * @deprecated 5.3 will be removed in 7.0 * Use Form Fields instead / public static function getRangeOptions() { $options = [ HTMLHelper::_('select.option', 'today', Text::_('COM_USERS_OPTION_RANGE_TODAY')), HTMLHelper::_('select.option', 'past_week', Text::_('COM_USERS_OPTION_RANGE_PAST_WEEK')), HTMLHelper::_('select.option', 'past_1month', Text::_('COM_USERS_OPTION_RANGE_PAST_1MONTH')), HTMLHelper::_('select.option', 'past_3month', Text::_('COM_USERS_OPTION_RANGE_PAST_3MONTH')), HTMLHelper::_('select.option', 'past_6month', Text::_('COM_USERS_OPTION_RANGE_PAST_6MONTH')), HTMLHelper::_('select.option', 'past_year', Text::_('COM_USERS_OPTION_RANGE_PAST_YEAR')), HTMLHelper::_('select.option', 'post_year', Text::_('COM_USERS_OPTION_RANGE_POST_YEAR')), ]; return $options; } /* * No longer used. * * @return array * * @since 3.2.0 * @throws \Exception * * @deprecated 4.2 will be removed in 6.0 * No longer used, will be removed without replacement / public static function getTwoFactorMethods() { return []; } /* * Get a list of the User Groups for Viewing Access Levels * * @param string $rules User Groups in JSON format * * @return string $groups Comma separated list of User Groups * * @since 3.6 / public static function getVisibleByGroups($rules) { $rules = json_decode($rules); if (!$rules) { return false; } $db = Factory::getDbo(); $query = $db->getQuery(true) ->select($db->quoteName('title', 'text')) ->from($db->quoteName('#__usergroups')) ->whereIn($db->quoteName('id'), $rules); $db->setQuery($query); $groups = $db->loadColumn(); $groups = implode(', ', $groups); return $groups; } /* * Returns a valid section for users. If it is not valid then null * is returned. * * @param string $section The section to get the mapping for * * @return string\|null The new section * * @since 3.7.0 * @throws \Exception * * @deprecated 4.3 will be removed in 6.0 * Use \Joomla\Component\Users\Administrator\Extension\UsersComponent::validateSection() instead. / public static function validateSection($section) { return Factory::getApplication()->bootComponent('com_users')->validateSection($section, null); } /* * Returns valid contexts * * @return array * * @since 3.7.0 * * @deprecated 4.3 will be removed in 6.0 * Use \Joomla\Component\Users\Administrator\Extension\UsersComponent::getContexts() instead. / public static function getContexts() { return Factory::getApplication()->bootComponent('com_users')->getContexts(); } } PK��%�\�Sʉ��src/Helper/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�&��d��d��src/Helper/DebugHelper.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2017 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Helper; use Joomla\CMS\Access\Access; use Joomla\CMS\Factory; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users component debugging helper. * * @since 1.6 / class DebugHelper { /* * Get a list of the components. * * @return array * * @since 1.6 / public static function getComponents() { // Initialise variable. $db = Factory::getDbo(); $query = $db->getQuery(true) ->select('name AS text, element AS value') ->from('#__extensions') ->where('enabled >= 1') ->where('type =' . $db->quote('component')); $items = $db->setQuery($query)->loadObjectList(); if (\count($items)) { $lang = Factory::getLanguage(); foreach ($items as &$item) { // Load language $extension = $item->value; $source = JPATH_ADMINISTRATOR . '/components/' . $extension; $lang->load("$extension.sys", JPATH_ADMINISTRATOR) \|\| $lang->load("$extension.sys", $source); // Translate component name $item->text = Text::_($item->text); } // Sort by component name $items = ArrayHelper::sortObjects($items, 'text', 1, true, true); } return $items; } /* * Get a list of the actions for the component or code actions. * * @param string $component The name of the component. * * @return array * * @since 1.6 / public static function getDebugActions($component = null) { $actions = []; // Try to get actions for the component if (!empty($component)) { $component_actions = Access::getActionsFromFile(JPATH_ADMINISTRATOR . '/components/' . $component . '/access.xml'); if (!empty($component_actions)) { // Load language $lang = Factory::getApplication()->getLanguage(); $lang->load($component, JPATH_ADMINISTRATOR, null, false, false); foreach ($component_actions as &$action) { $descr = (string) $action->title; if (!empty($action->description)) { $descr = (string) $action->description; } $actions[$action->title] = [$action->name, $descr]; } } } // Use default actions from configuration if no component selected or component doesn't have actions if (empty($actions)) { $filename = JPATH_ADMINISTRATOR . '/components/com_config/forms/application.xml'; if (is_file($filename)) { $xml = simplexml_load_file($filename); foreach ($xml->children()->fieldset as $fieldset) { if ('permissions' == (string) $fieldset['name']) { foreach ($fieldset->children() as $field) { if ('rules' == (string) $field['name']) { foreach ($field->children() as $action) { $descr = (string) $action['title']; if (isset($action['description']) && !empty($action['description'])) { $descr = (string) $action['description']; } $actions[(string) $action['title']] = [ (string) $action['name'], $descr, ]; } break; } } } } // Load language $lang = Factory::getLanguage(); $extension = 'com_config'; $source = JPATH_ADMINISTRATOR . '/components/' . $extension; $lang->load($extension, JPATH_ADMINISTRATOR, null, false, false) \|\| $lang->load($extension, $source, null, false, false) \|\| $lang->load($extension, JPATH_ADMINISTRATOR, $lang->getDefault(), false, false) \|\| $lang->load($extension, $source, $lang->getDefault(), false, false); } } return $actions; } /* * Get a list of filter options for the levels. * * @return array An array of \JHtmlOption elements. / public static function getLevelsOptions() { // Build the filter options. $options = []; $options[] = HTMLHelper::_('select.option', '1', Text::sprintf('COM_USERS_OPTION_LEVEL_COMPONENT', 1)); $options[] = HTMLHelper::_('select.option', '2', Text::sprintf('COM_USERS_OPTION_LEVEL_CATEGORY', 2)); $options[] = HTMLHelper::_('select.option', '3', Text::sprintf('COM_USERS_OPTION_LEVEL_DEEPER', 3)); $options[] = HTMLHelper::_('select.option', '4', '4'); $options[] = HTMLHelper::_('select.option', '5', '5'); $options[] = HTMLHelper::_('select.option', '6', '6'); return $options; } } PK��%�\&��t��t��"��src/Field/ModulesPositionField.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Field; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Select modules positions. * * Reuses the same field from com_modules. Don't lose it; reuse it! * * @since 4.2.0 / class ModulesPositionField extends \Joomla\Component\Modules\Administrator\Field\ModulesPositionField { } PK��%�\�W��J��J��src/Field/GroupparentField.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Field; use Joomla\CMS\Access\Access; use Joomla\CMS\Factory; use Joomla\CMS\Form\Field\ListField; use Joomla\CMS\Helper\UserGroupsHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User Group Parent field.. * * @since 1.6 / class GroupparentField extends ListField { /* * The form field type. * * @var string * @since 1.6 / protected $type = 'GroupParent'; /* * Method to clean the Usergroup Options from all children starting by a given father * * @param array $userGroupsOptions The usergroup options to clean * @param integer $fatherId The father ID to start with * * @return array The cleaned field options * * @since 3.9.4 / private function cleanOptionsChildrenByFather($userGroupsOptions, $fatherId) { foreach ($userGroupsOptions as $userGroupsOptionsId => $userGroupsOptionsData) { if ((int) $userGroupsOptionsData->parent_id === (int) $fatherId) { unset($userGroupsOptions[$userGroupsOptionsId]); $userGroupsOptions = $this->cleanOptionsChildrenByFather($userGroupsOptions, $userGroupsOptionsId); } } return $userGroupsOptions; } /* * Method to get the field options. * * @return array The field option objects * * @since 1.6 / protected function getOptions() { $options = UserGroupsHelper::getInstance()->getAll(); $currentGroupId = (int) Factory::getApplication()->getInput()->get('id', 0, 'int'); // Prevent to set yourself as parent if ($currentGroupId) { unset($options[$currentGroupId]); } // We should not remove any groups when we are creating a new group if ($currentGroupId !== 0) { // Prevent parenting direct children and children of children of this item. $options = $this->cleanOptionsChildrenByFather($options, $currentGroupId); } $options = array_values($options); $isSuperAdmin = $this->getCurrentUser()->authorise('core.admin'); // Pad the option text with spaces using depth level as a multiplier. foreach ($options as $i => $option) { // Show groups only if user is super admin or group is not super admin if ($isSuperAdmin \|\| !Access::checkGroup($option->id, 'core.admin')) { $option->value = $option->id; $option->text = str_repeat('- ', $option->level) . $option->title; } else { unset($options[$i]); } } // Merge any additional options in the XML definition. return array_merge(parent::getOptions(), $options); } } PK��%�\�Z&��src/Field/LevelsField.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2016 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Field; use Joomla\CMS\Form\Field\ListField; use Joomla\Component\Users\Administrator\Helper\DebugHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Access Levels field. * * @since 3.6.0 / class LevelsField extends ListField { /* * The form field type. * * @var string * @since 3.6.0 / protected $type = 'Levels'; /* * Method to get the field options. * * @return array The field option objects * * @since 3.6.0 / protected function getOptions() { // Merge any additional options in the XML definition. return array_merge(parent::getOptions(), DebugHelper::getLevelsOptions()); } } PK��%�\�Sʉ��src/Field/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�/�ŝ��src/Model/MailModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Access\Access; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; use Joomla\CMS\Filter\InputFilter; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Text; use Joomla\CMS\Log\Log; use Joomla\CMS\Mail\Exception\MailDisabledException; use Joomla\CMS\Mail\MailTemplate; use Joomla\CMS\MVC\Model\AdminModel; use Joomla\Database\ParameterType; use PHPMailer\PHPMailer\Exception as phpMailerException; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users mail model. * * @since 1.6 / class MailModel extends AdminModel { /* * Method to get the row form. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.mail', 'mail', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } return $form; } /* * Method to get the data that should be injected in the form. * * @return mixed The data for the form. * * @since 1.6 * @throws \Exception / protected function loadFormData() { // Check the session for previously entered form data. $data = Factory::getApplication()->getUserState('com_users.display.mail.data', []); $this->preprocessData('com_users.mail', $data); return $data; } /* * Method to preprocess the form * * @param Form $form A form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @since 1.6 * @throws \Exception if there is an error loading the form. / protected function preprocessForm(Form $form, $data, $group = 'user') { parent::preprocessForm($form, $data, $group); } /* * Send the email * * @return boolean * * @throws \Exception / public function send() { $app = Factory::getApplication(); $data = $app->getInput()->post->get('jform', [], 'array'); $user = $this->getCurrentUser(); $db = $this->getDatabase(); $language = Factory::getLanguage(); $mode = \array_key_exists('mode', $data) ? (int) $data['mode'] : 0; $subject = \array_key_exists('subject', $data) ? $data['subject'] : ''; $grp = \array_key_exists('group', $data) ? (int) $data['group'] : 0; $recurse = \array_key_exists('recurse', $data) ? (int) $data['recurse'] : 0; $bcc = \array_key_exists('bcc', $data) ? (int) $data['bcc'] : 0; $disabled = \array_key_exists('disabled', $data) ? (int) $data['disabled'] : 0; $message_body = \array_key_exists('message', $data) ? $data['message'] : ''; // Automatically removes html formatting if (!$mode) { $message_body = InputFilter::getInstance()->clean($message_body, 'string'); } // Check for a message body and subject if (!$message_body \|\| !$subject) { $app->setUserState('com_users.display.mail.data', $data); $this->setError(Text::_('COM_USERS_MAIL_PLEASE_FILL_IN_THE_FORM_CORRECTLY')); return false; } // Get users in the group out of the ACL, if group is provided. $to = $grp !== 0 ? Access::getUsersByGroup($grp, $recurse) : []; // When group is provided but no users are found in the group. if ($grp !== 0 && !$to) { $rows = []; } else { // Get all users email and group except for senders $uid = (int) $user->id; $query = $db->getQuery(true) ->select( [ $db->quoteName('email'), $db->quoteName('name'), ] ) ->from($db->quoteName('#__users')) ->where($db->quoteName('id') . ' != :id') ->bind(':id', $uid, ParameterType::INTEGER); if ($grp !== 0) { $query->whereIn($db->quoteName('id'), $to); } if ($disabled === 0) { $query->where($db->quoteName('block') . ' = 0'); } $db->setQuery($query); $rows = $db->loadObjectList(); } // Check to see if there are any users in this group before we continue if (!$rows) { $app->setUserState('com_users.display.mail.data', $data); if (\in_array($user->id, $to)) { $this->setError(Text::_('COM_USERS_MAIL_ONLY_YOU_COULD_BE_FOUND_IN_THIS_GROUP')); } else { $this->setError(Text::_('COM_USERS_MAIL_NO_USERS_COULD_BE_FOUND_IN_THIS_GROUP')); } return false; } // Get the Mailer $mailer = new MailTemplate('com_users.massmail.mail', $language->getTag()); $params = ComponentHelper::getParams('com_users'); try { // Build email message format. $data = [ 'subject' => stripslashes($subject), 'body' => $message_body, 'subjectprefix' => $params->get('mailSubjectPrefix', ''), 'bodysuffix' => $params->get('mailBodySuffix', ''), ]; $mailer->addTemplateData($data); $recipientType = $bcc ? 'bcc' : 'to'; // Add recipients foreach ($rows as $row) { $mailer->addRecipient($row->email, $row->name, $recipientType); } if ($bcc) { $mailer->addRecipient($app->get('mailfrom'), $app->get('fromname')); } // Send the Mail $rs = $mailer->send(); } catch (MailDisabledException \| phpMailerException $exception) { try { Log::add(Text::_($exception->getMessage()), Log::WARNING, 'jerror'); $rs = false; } catch (\RuntimeException $exception) { Factory::getApplication()->enqueueMessage(Text::_($exception->getMessage()), 'warning'); $rs = false; } } // Check for an error if ($rs !== true) { $app->setUserState('com_users.display.mail.data', $data); $this->setError($mailer->ErrorInfo); return false; } if (empty($rs)) { $app->setUserState('com_users.display.mail.data', $data); $this->setError(Text::_('COM_USERS_MAIL_THE_MAIL_COULD_NOT_BE_SENT')); return false; } /* * Fill the data (specially for the 'mode', 'group' and 'bcc': they could not exist in the array * when the box is not checked and in this case, the default value would be used instead of the '0' * one) / $data['mode'] = $mode; $data['subject'] = $subject; $data['group'] = $grp; $data['recurse'] = $recurse; $data['bcc'] = $bcc; $data['message'] = $message_body; $app->setUserState('com_users.display.mail.data', []); $app->enqueueMessage(Text::plural('COM_USERS_MAIL_EMAIL_SENT_TO_N_USERS', \count($rows)), 'message'); return true; } } PK��%�\�K��src/Model/UserModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2008 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Access\Access; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Multilanguage; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\AdminModel; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Table\Table; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\CMS\User\UserHelper; use Joomla\Database\ParameterType; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User model. * * @since 1.6 / class UserModel extends AdminModel implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * An item. * * @var array / protected $_item = null; /* * Constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null) { $config = array_merge( [ 'event_after_delete' => 'onUserAfterDelete', 'event_after_save' => 'onUserAfterSave', 'event_before_delete' => 'onUserBeforeDelete', 'event_before_save' => 'onUserBeforeSave', 'events_map' => ['save' => 'user', 'delete' => 'user', 'validate' => 'user'], ], $config ); parent::__construct($config, $factory); } /* * Returns a reference to the a Table object, always creating it. * * @param string $type The table type to instantiate * @param string $prefix A prefix for the table class name. Optional. * @param array $config Configuration array for model. Optional. * * @return Table A database object * * @since 1.6 / public function getTable($type = 'User', $prefix = 'Joomla\\CMS\\Table\\', $config = []) { $table = Table::getInstance($type, $prefix, $config); return $table; } /* * Method to get a single record. * * @param integer $pk The id of the primary key. * * @return mixed Object on success, false on failure. * * @since 1.6 / public function getItem($pk = null) { $pk = (!empty($pk)) ? $pk : (int) $this->getState('user.id'); if ($this->_item === null) { $this->_item = []; } if (!isset($this->_item[$pk])) { $this->_item[$pk] = parent::getItem($pk); } return $this->_item[$pk]; } /* * Method to get the record form. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form\|bool A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.user', 'user', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } $user = $this->getCurrentUser(); // If the user needs to change their password, mark the password fields as required if ($user->requireReset) { $form->setFieldAttribute('password', 'required', 'true'); $form->setFieldAttribute('password2', 'required', 'true'); } // When multilanguage is set, a user's default site language should also be a Content Language if (Multilanguage::isEnabled()) { $form->setFieldAttribute('language', 'type', 'frontendlanguage', 'params'); } $userId = (int) $form->getValue('id'); // The user should not be able to set the requireReset value on their own account if ($userId === (int) $user->id) { $form->removeField('requireReset'); } /* * If users without core.manage permission editing their own account, remove some fields which they should * not be allowed to change and prevent them to change user name if configured / if (!$user->authorise('core.manage', 'com_users') && (int) $user->id === $userId) { if (!ComponentHelper::getParams('com_users')->get('change_login_name')) { $form->setFieldAttribute('username', 'required', 'false'); $form->setFieldAttribute('username', 'readonly', 'true'); $form->setFieldAttribute('username', 'description', 'COM_USERS_USER_FIELD_NOCHANGE_USERNAME_DESC'); } $form->removeField('lastResetTime'); $form->removeField('resetCount'); $form->removeField('sendEmail'); $form->removeField('block'); } return $form; } /* * Method to get the data that should be injected in the form. * * @return mixed The data for the form. * * @since 1.6 * @throws \Exception / protected function loadFormData() { // Check the session for previously entered form data. $data = Factory::getApplication()->getUserState('com_users.edit.user.data', []); if (empty($data)) { $data = $this->getItem(); } $this->preprocessData('com_users.profile', $data, 'user'); return $data; } /* * Override Joomla\CMS\MVC\Model\AdminModel::preprocessForm to ensure the correct plugin group is loaded. * * @param Form $form A Form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @since 1.6 * * @throws \Exception if there is an error in the form event. / protected function preprocessForm(Form $form, $data, $group = 'user') { parent::preprocessForm($form, $data, $group); } /* * Method to save the form data. * * @param array $data The form data. * * @return boolean True on success. * * @since 1.6 * @throws \Exception / public function save($data) { $pk = (!empty($data['id'])) ? $data['id'] : (int) $this->getState('user.id'); $user = $this->getUserFactory()->loadUserById($pk); $my = $this->getCurrentUser(); $iAmSuperAdmin = $my->authorise('core.admin'); // User cannot modify own user groups if ((int) $user->id == (int) $my->id && !$iAmSuperAdmin && isset($data['groups'])) { // Form was probably tampered with Factory::getApplication()->enqueueMessage(Text::_('COM_USERS_USERS_ERROR_CANNOT_EDIT_OWN_GROUP'), 'warning'); $data['groups'] = null; } if ($data['block'] && $pk == $my->id && !$my->block) { $this->setError(Text::_('COM_USERS_USERS_ERROR_CANNOT_BLOCK_SELF')); return false; } // Make sure user groups is selected when add/edit an account if (empty($data['groups']) && ((int) $user->id != (int) $my->id \|\| $iAmSuperAdmin)) { $this->setError(Text::_('COM_USERS_USERS_ERROR_CANNOT_SAVE_ACCOUNT_WITHOUT_GROUPS')); return false; } // Make sure that we are not removing ourself from Super Admin group if ($iAmSuperAdmin && $my->id == $pk) { // Check that at least one of our new groups is Super Admin $stillSuperAdmin = false; $myNewGroups = $data['groups']; foreach ($myNewGroups as $group) { $stillSuperAdmin = $stillSuperAdmin ?: Access::checkGroup($group, 'core.admin'); } if (!$stillSuperAdmin) { $this->setError(Text::_('COM_USERS_USERS_ERROR_CANNOT_DEMOTE_SELF')); return false; } } // Unset the username if it should not be overwritten if ( !$my->authorise('core.manage', 'com_users') && (int) $user->id === (int) $my->id && !ComponentHelper::getParams('com_users')->get('change_login_name') ) { unset($data['username']); } // Bind the data. if (!$user->bind($data)) { $this->setError($user->getError()); return false; } // Store the data. if (!$user->save()) { $this->setError($user->getError()); return false; } // Destroy all active sessions for the user after changing the password or blocking him if (!empty($data['password2']) \|\| $data['block']) { UserHelper::destroyUserSessions($user->id, true); } $this->setState('user.id', $user->id); return true; } /* * Method to delete rows. * * @param array &$pks An array of item ids. * * @return boolean Returns true on success, false on failure. * * @since 1.6 * @throws \Exception / public function delete(&$pks) { $user = $this->getCurrentUser(); $table = $this->getTable(); $pks = (array) $pks; // Check if I am a Super Admin $iAmSuperAdmin = $user->authorise('core.admin'); PluginHelper::importPlugin($this->events_map['delete']); if (\in_array($user->id, $pks)) { $this->setError(Text::_('COM_USERS_USERS_ERROR_CANNOT_DELETE_SELF')); return false; } // Iterate the items to delete each one. foreach ($pks as $i => $pk) { if ($table->load($pk)) { // Access checks. $allow = $user->authorise('core.delete', 'com_users'); // Don't allow non-super-admin to delete a super admin $allow = (!$iAmSuperAdmin && Access::check($pk, 'core.admin')) ? false : $allow; if ($allow) { // Get users data for the users to delete. $user_to_delete = $this->getUserFactory()->loadUserById($pk); // Fire the before delete event. Factory::getApplication()->triggerEvent($this->event_before_delete, [$table->getProperties()]); if (!$table->delete($pk)) { $this->setError($table->getError()); return false; } // Trigger the after delete event. Factory::getApplication()->triggerEvent($this->event_after_delete, [ArrayHelper::fromObject($user_to_delete, false), true, $this->getError()]); } else { // Prune items that you can't change. unset($pks[$i]); Factory::getApplication()->enqueueMessage(Text::_('JERROR_CORE_DELETE_NOT_PERMITTED'), 'error'); } } else { $this->setError($table->getError()); return false; } } return true; } /* * Method to block user records. * * @param array &$pks The ids of the items to publish. * @param integer $value The value of the published state * * @return boolean True on success. * * @since 1.6 * @throws \Exception / public function block(&$pks, $value = 1) { $app = Factory::getApplication(); $user = $this->getCurrentUser(); // Check if I am a Super Admin $iAmSuperAdmin = $user->authorise('core.admin'); $table = $this->getTable(); $pks = (array) $pks; PluginHelper::importPlugin($this->events_map['save']); // Prepare the logout options. $options = [ 'clientid' => $app->get('shared_session', '0') ? null : 0, ]; // Access checks. foreach ($pks as $i => $pk) { if ($value == 1 && $pk == $user->id) { // Cannot block yourself. unset($pks[$i]); Factory::getApplication()->enqueueMessage(Text::_('COM_USERS_USERS_ERROR_CANNOT_BLOCK_SELF'), 'error'); } elseif ($table->load($pk)) { $old = $table->getProperties(); $allow = $user->authorise('core.edit.state', 'com_users'); // Don't allow non-super-admin to delete a super admin $allow = (!$iAmSuperAdmin && Access::check($pk, 'core.admin')) ? false : $allow; if ($allow) { // Skip changing of same state if ($table->block == $value) { unset($pks[$i]); continue; } $table->block = (int) $value; // If unblocking, also change password reset count to zero to unblock reset if ($table->block === 0) { $table->resetCount = 0; } // Allow an exception to be thrown. try { if (!$table->check()) { $this->setError($table->getError()); return false; } // Trigger the before save event. $result = Factory::getApplication()->triggerEvent($this->event_before_save, [$old, false, $table->getProperties()]); if (\in_array(false, $result, true)) { // Plugin will have to raise its own error or throw an exception. return false; } // Store the table. if (!$table->store()) { $this->setError($table->getError()); return false; } if ($table->block) { UserHelper::destroyUserSessions($table->id); } // Trigger the after save event Factory::getApplication()->triggerEvent($this->event_after_save, [$table->getProperties(), false, true, null]); } catch (\Exception $e) { $this->setError($e->getMessage()); return false; } // Log the user out. if ($value) { $app->logout($table->id, $options); } } else { // Prune items that you can't change. unset($pks[$i]); Factory::getApplication()->enqueueMessage(Text::_('JLIB_APPLICATION_ERROR_EDITSTATE_NOT_PERMITTED'), 'error'); } } } return true; } /* * Method to activate user records. * * @param array &$pks The ids of the items to activate. * * @return boolean True on success. * * @since 1.6 * @throws \Exception / public function activate(&$pks) { $user = $this->getCurrentUser(); // Check if I am a Super Admin $iAmSuperAdmin = $user->authorise('core.admin'); $table = $this->getTable(); $pks = (array) $pks; PluginHelper::importPlugin($this->events_map['save']); // Access checks. foreach ($pks as $i => $pk) { if ($table->load($pk)) { $old = $table->getProperties(); $allow = $user->authorise('core.edit.state', 'com_users'); // Don't allow non-super-admin to delete a super admin $allow = (!$iAmSuperAdmin && Access::check($pk, 'core.admin')) ? false : $allow; if (empty($table->activation)) { // Ignore activated accounts. unset($pks[$i]); } elseif ($allow) { $table->block = 0; $table->activation = ''; // Allow an exception to be thrown. try { if (!$table->check()) { $this->setError($table->getError()); return false; } // Trigger the before save event. $result = Factory::getApplication()->triggerEvent($this->event_before_save, [$old, false, $table->getProperties()]); if (\in_array(false, $result, true)) { // Plugin will have to raise it's own error or throw an exception. return false; } // Store the table. if (!$table->store()) { $this->setError($table->getError()); return false; } // Fire the after save event Factory::getApplication()->triggerEvent($this->event_after_save, [$table->getProperties(), false, true, null]); } catch (\Exception $e) { $this->setError($e->getMessage()); return false; } } else { // Prune items that you can't change. unset($pks[$i]); Factory::getApplication()->enqueueMessage(Text::_('JLIB_APPLICATION_ERROR_EDITSTATE_NOT_PERMITTED'), 'error'); } } } return true; } /* * Method to perform batch operations on an item or a set of items. * * @param array $commands An array of commands to perform. * @param array $pks An array of item ids. * @param array $contexts An array of item contexts. * * @return boolean Returns true on success, false on failure. * * @since 2.5 / public function batch($commands, $pks, $contexts) { // Sanitize user ids. $pks = array_unique($pks); $pks = ArrayHelper::toInteger($pks); // Remove any values of zero. if (array_search(0, $pks, true)) { unset($pks[array_search(0, $pks, true)]); } if (empty($pks)) { $this->setError(Text::_('COM_USERS_USERS_NO_ITEM_SELECTED')); return false; } $done = false; if (!empty($commands['group_id'])) { $cmd = ArrayHelper::getValue($commands, 'group_action', 'add'); if (!$this->batchUser((int) $commands['group_id'], $pks, $cmd)) { return false; } $done = true; } if (!empty($commands['reset_id'])) { if (!$this->batchReset($pks, $commands['reset_id'])) { return false; } $done = true; } if (!$done) { $this->setError(Text::_('JLIB_APPLICATION_ERROR_INSUFFICIENT_BATCH_INFORMATION')); return false; } // Clear the cache $this->cleanCache(); return true; } /* * Batch flag users as being required to reset their passwords * * @param array $userIds An array of user IDs on which to operate * @param string $action The action to perform * * @return boolean True on success, false on failure * * @since 3.2 / public function batchReset($userIds, $action) { $userIds = ArrayHelper::toInteger($userIds); // Check if user can perform management tasks in com_users if (!$this->getCurrentUser()->authorise('core.manage', 'com_users')) { $this->setError(Text::_('JLIB_APPLICATION_ERROR_BATCH_CANNOT_EDIT')); return false; } // Check if I am a Super Admin $iAmSuperAdmin = $this->getCurrentUser()->authorise('core.admin'); // Non-super super user cannot work with super-admin user. if (!$iAmSuperAdmin && UserHelper::checkSuperUserInUsers($userIds)) { $this->setError(Text::_('COM_USERS_ERROR_CANNOT_BATCH_SUPERUSER')); return false; } // Set the action to perform if ($action === 'yes') { $value = 1; } else { $value = 0; } // Prune out the current user if they are in the supplied user ID array $userIds = array_diff($userIds, [$this->getCurrentUser()->id]); if (empty($userIds)) { $this->setError(Text::_('COM_USERS_USERS_ERROR_CANNOT_REQUIRERESET_SELF')); return false; } // Get the DB object $db = $this->getDatabase(); $userIds = ArrayHelper::toInteger($userIds); $query = $db->getQuery(true); // Update the reset flag $query->update($db->quoteName('#__users')) ->set($db->quoteName('requireReset') . ' = :requireReset') ->whereIn($db->quoteName('id'), $userIds) ->bind(':requireReset', $value, ParameterType::INTEGER); $db->setQuery($query); try { $db->execute(); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } return true; } /* * Perform batch operations * * @param integer $groupId The group ID which assignments are being edited * @param array $userIds An array of user IDs on which to operate * @param string $action The action to perform * * @return boolean True on success, false on failure * * @since 1.6 / public function batchUser($groupId, $userIds, $action) { $userIds = ArrayHelper::toInteger($userIds); // Check if user can perform management tasks in com_users if (!$this->getCurrentUser()->authorise('core.manage', 'com_users')) { $this->setError(Text::_('JLIB_APPLICATION_ERROR_BATCH_CANNOT_EDIT')); return false; } // Check if I am a Super Admin $iAmSuperAdmin = $this->getCurrentUser()->authorise('core.admin'); // Non-super super user cannot work with super-admin user. if (!$iAmSuperAdmin && UserHelper::checkSuperUserInUsers($userIds)) { $this->setError(Text::_('COM_USERS_ERROR_CANNOT_BATCH_SUPERUSER')); return false; } // Non-super admin cannot work with super-admin group. if ((!$iAmSuperAdmin && Access::checkGroup($groupId, 'core.admin')) \|\| $groupId < 1) { $this->setError(Text::_('COM_USERS_ERROR_INVALID_GROUP')); return false; } // Get the DB object $db = $this->getDatabase(); switch ($action) { case 'set': // Sets users to a selected group $doDelete = 'all'; $doAssign = true; break; case 'del': // Remove users from a selected group $doDelete = 'group'; break; case 'add': default: // Add users to a selected group $doAssign = true; break; } // Remove the users from the group if requested. if (isset($doDelete)) { / * First we need to check that the user is part of more than one group * otherwise we will end up with a user that is not part of any group * unless we are moving the user to a new group. / if ($doDelete === 'group') { $query = $db->getQuery(true); $query->select($db->quoteName('user_id')) ->from($db->quoteName('#__user_usergroup_map')) ->whereIn($db->quoteName('user_id'), $userIds); // Add the group by clause to remove users who are only in one group $query->group($db->quoteName('user_id')) ->having('COUNT(user_id) > 1'); $db->setQuery($query); $users = $db->loadColumn(); // If we have no users to process, throw an error to notify the user if (empty($users)) { $this->setError(Text::_('COM_USERS_ERROR_ONLY_ONE_GROUP')); return false; } // Check to see if the users are in the group to be removed $query->clear() ->select($db->quoteName('user_id')) ->from($db->quoteName('#__user_usergroup_map')) ->whereIn($db->quoteName('user_id'), $users) ->where($db->quoteName('group_id') . ' = :group_id') ->bind(':group_id', $groupId, ParameterType::INTEGER); $db->setQuery($query); $users = $db->loadColumn(); // If we have no users to process, throw an error to notify the user if (empty($users)) { $this->setError(Text::_('COM_USERS_ERROR_NOT_IN_GROUP')); return false; } // Finally remove the users from the group $query->clear() ->delete($db->quoteName('#__user_usergroup_map')) ->whereIn($db->quoteName('user_id'), $users) ->where($db->quoteName('group_id') . '= :group_id') ->bind(':group_id', $groupId, ParameterType::INTEGER); $db->setQuery($query); } elseif ($doDelete === 'all') { $query = $db->getQuery(true); $query->delete($db->quoteName('#__user_usergroup_map')) ->whereIn($db->quoteName('user_id'), $userIds); } $db->setQuery($query); try { $db->execute(); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } } // Assign the users to the group if requested. if (isset($doAssign)) { $query = $db->getQuery(true); // First, we need to check if the user is already assigned to a group $query->select($db->quoteName('user_id')) ->from($db->quoteName('#__user_usergroup_map')) ->where($db->quoteName('group_id') . ' = :group_id') ->bind(':group_id', $groupId, ParameterType::INTEGER); $db->setQuery($query); $users = $db->loadColumn(); // Build the values clause for the assignment query. $query->clear(); $groups = false; foreach ($userIds as $id) { if (!\in_array($id, $users)) { $query->values($id . ',' . $groupId); $groups = true; } } // If we have no users to process, throw an error to notify the user if (!$groups) { $this->setError(Text::_('COM_USERS_ERROR_NO_ADDITIONS')); return false; } $query->insert($db->quoteName('#__user_usergroup_map')) ->columns([$db->quoteName('user_id'), $db->quoteName('group_id')]); $db->setQuery($query); try { $db->execute(); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } } return true; } /* * Gets the available groups. * * @return array An array of groups * * @since 1.6 / public function getGroups() { $user = $this->getCurrentUser(); if ($user->authorise('core.edit', 'com_users') && $user->authorise('core.manage', 'com_users')) { $model = $this->bootComponent('com_users') ->getMVCFactory()->createModel('Groups', 'Administrator', ['ignore_request' => true]); return $model->getItems(); } return null; } /* * Gets the groups this object is assigned to * * @param integer $userId The user ID to retrieve the groups for * * @return array An array of assigned groups * * @since 1.6 / public function getAssignedGroups($userId = null) { $userId = (!empty($userId)) ? $userId : (int) $this->getState('user.id'); if (empty($userId)) { $result = []; $form = $this->getForm(); if ($form) { $groupsIDs = $form->getValue('groups'); } if (!empty($groupsIDs)) { $result = $groupsIDs; } else { $params = ComponentHelper::getParams('com_users'); if ($groupId = $params->get('new_usertype', $params->get('guest_usergroup', 1))) { $result[] = $groupId; } } } else { $result = UserHelper::getUserGroups($userId); } return $result; } /* * No longer used * * @param integer $userId Ignored * * @return \stdClass * * @since 3.2 * * @deprecated 4.2 will be removed in 6.0. * Will be removed without replacement / public function getOtpConfig($userId = null) { @trigger_error( \sprintf( '%s() is deprecated. Use \Joomla\Component\Users\Administrator\Helper\Mfa::getUserMfaRecords() instead.', __METHOD__ ), E_USER_DEPRECATED ); // Return the configuration object return (object) [ 'method' => 'none', 'config' => [], 'otep' => [], ]; } /* * No longer used * * @param integer $userId Ignored * @param \stdClass $otpConfig Ignored * * @return boolean True on success * * @since 3.2 * * @deprecated 4.2 will be removed in 5.0. * Will be removed without replacement / public function setOtpConfig($userId, $otpConfig) { @trigger_error( \sprintf( '%s() is deprecated. Multi-factor Authentication actions are handled by plugins in the multifactorauth folder.', __METHOD__ ), E_USER_DEPRECATED ); return true; } /* * No longer used * * @return string * * @since 3.2 * * @deprecated 4.2 will be removed in 6.0. * Use \Joomla\CMS\Factory::getApplication()->get('secret') instead' / public function getOtpConfigEncryptionKey() { @trigger_error( \sprintf( '%s() is deprecated. Use \Joomla\CMS\Factory::getApplication()->get(\'secret\') instead', __METHOD__ ), E_USER_DEPRECATED ); return Factory::getApplication()->get('secret'); } /* * No longer used * * @param integer $userId Ignored * * @return array Empty array * * @since 3.2 * @throws \Exception * * @deprecated 4.2 will be removed in 5.0. * Will be removed without replacement / public function getTwofactorform($userId = null) { @trigger_error( \sprintf( '%s() is deprecated. Use \Joomla\Component\Users\Administrator\Helper\Mfa::getConfigurationInterface()', __METHOD__ ), E_USER_DEPRECATED ); return []; } /* * No longer used * * @param integer $userId Ignored * @param integer $count Ignored * * @return array Empty array * * @since 3.2 * * @deprecated 4.2 will be removed in 5.0 * Will be removed without replacement / public function generateOteps($userId, $count = 10) { @trigger_error( \sprintf( '%s() is deprecated. See \Joomla\Component\Users\Administrator\Model\BackupcodesModel::saveBackupCodes()', __METHOD__ ), E_USER_DEPRECATED ); return []; } /* * No longer used. Always returns true. * * @param integer $userId Ignored * @param string $secretKey Ignored * @param array $options Ignored * * @return boolean Always true * * @since 3.2 * @throws \Exception * * @deprecated 4.2 will be removed in 5.0 * Will be removed without replacement / public function isValidSecretKey($userId, $secretKey, $options = []) { @trigger_error( \sprintf( '%s() is deprecated. Multi-factor Authentication actions are handled by plugins in the multifactorauth folder.', __METHOD__ ), E_USER_DEPRECATED ); return true; } /* * No longer used * * @param integer $userId Ignored * @param string $otep Ignored * @param object $otpConfig Ignored * * @return boolean Always true * * @since 3.2 * * @deprecated 4.2 will be removed in 5.0 * Will be removed without replacement / public function isValidOtep($userId, $otep, $otpConfig = null) { @trigger_error( \sprintf( '%s() is deprecated. Multi-factor Authentication actions are handled by plugins in the multifactorauth folder.', __METHOD__ ), E_USER_DEPRECATED ); return true; } } PK��%�\R�S�3��3��src/Model/NoteModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Factory; use Joomla\CMS\MVC\Model\AdminModel; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Versioning\VersionableModelTrait; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User note model. * * @since 2.5 / class NoteModel extends AdminModel { use VersionableModelTrait; /* * The type alias for this content type. * * @var string * @since 3.2 / public $typeAlias = 'com_users.note'; /* * Method to get the record form. * * @param array $data Data for the form. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return \Joomla\CMS\Form\Form\|bool A Form object on success, false on failure * * @since 2.5 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.note', 'note', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } return $form; } /* * Method to get a single record. * * @param integer $pk The id of the primary key. * * @return mixed Object on success, false on failure. * * @since 2.5 * @throws \Exception / public function getItem($pk = null) { $result = parent::getItem($pk); // Get the dispatcher and load the content plugins. PluginHelper::importPlugin('content'); // Load the user plugins for backward compatibility (v3.3.3 and earlier). PluginHelper::importPlugin('user'); // Trigger the data preparation event. Factory::getApplication()->triggerEvent('onContentPrepareData', ['com_users.note', $result]); return $result; } /* * Method to get the data that should be injected in the form. * * @return mixed The data for the form. * * @since 1.6 * @throws \Exception / protected function loadFormData() { // Get the application $app = Factory::getApplication(); // Check the session for previously entered form data. $data = $app->getUserState('com_users.edit.note.data', []); if (empty($data)) { $data = $this->getItem(); // Prime some default values. if ($this->getState('note.id') == 0) { $data->set('catid', $app->getInput()->get('catid', $app->getUserState('com_users.notes.filter.category_id'), 'int')); } $userId = $app->getInput()->get('u_id', 0, 'int'); if ($userId != 0) { $data->user_id = $userId; } } $this->preprocessData('com_users.note', $data); return $data; } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @return void * * @since 2.5 * @throws \Exception / protected function populateState() { parent::populateState(); $userId = Factory::getApplication()->getInput()->get('u_id', 0, 'int'); $this->setState('note.user_id', $userId); } } PK��%�\R�̽��src/Model/DebuguserModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\ListModel; use Joomla\CMS\User\User; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\Component\Users\Administrator\Helper\DebugHelper; use Joomla\Database\ParameterType; use Joomla\Database\QueryInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Methods supporting a list of User ACL permissions * * @since 1.6 / class DebuguserModel extends ListModel implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * Constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null) { if (empty($config['filter_fields'])) { $config['filter_fields'] = [ 'a.title', 'component', 'a.name', 'a.lft', 'a.id', 'level_start', 'level_end', 'a.level', ]; } parent::__construct($config, $factory); } /* * Get a list of the actions. * * @return array * * @since 1.6 / public function getDebugActions() { $component = $this->getState('filter.component'); return DebugHelper::getDebugActions($component); } /* * Override getItems method. * * @return array * * @since 1.6 / public function getItems() { $userId = $this->getState('user_id'); $user = $this->getUserFactory()->loadUserById($userId); if (($assets = parent::getItems()) && $userId) { $actions = $this->getDebugActions(); foreach ($assets as &$asset) { $asset->checks = []; foreach ($actions as $action) { $name = $action[0]; $asset->checks[$name] = $user->authorise($name, $asset->name); } } } return $assets; } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @param string $ordering An optional ordering field. * @param string $direction An optional direction (asc\|desc). * * @return void * * @since 1.6 * @throws \Exception / protected function populateState($ordering = 'a.lft', $direction = 'asc') { $app = Factory::getApplication(); // Adjust the context to support modal layouts. $layout = $app->getInput()->get('layout', 'default'); if ($layout) { $this->context .= '.' . $layout; } // Load the filter state. $this->setState('user_id', $this->getUserStateFromRequest($this->context . '.user_id', 'user_id', 0, 'int', false)); $levelStart = $this->getUserStateFromRequest($this->context . '.filter.level_start', 'filter_level_start', '', 'cmd'); $this->setState('filter.level_start', $levelStart); $value = $this->getUserStateFromRequest($this->context . '.filter.level_end', 'filter_level_end', '', 'cmd'); if ($value > 0 && $value < $levelStart) { $value = $levelStart; } $this->setState('filter.level_end', $value); $this->setState('filter.component', $this->getUserStateFromRequest($this->context . '.filter.component', 'filter_component', '', 'string')); // Load the parameters. $params = ComponentHelper::getParams('com_users'); $this->setState('params', $params); // List state information. parent::populateState($ordering, $direction); } /* * Method to get a store id based on model configuration state. * * This is necessary because the model is used by the component and * different modules that might need different sets of data or different * ordering requirements. * * @param string $id A prefix for the store id. * * @return string A store id. / protected function getStoreId($id = '') { // Compile the store id. $id .= ':' . $this->getState('user_id'); $id .= ':' . $this->getState('filter.search'); $id .= ':' . $this->getState('filter.level_start'); $id .= ':' . $this->getState('filter.level_end'); $id .= ':' . $this->getState('filter.component'); return parent::getStoreId($id); } /* * Get the user being debugged. * * @return User * * @since 1.6 / public function getUser() { $userId = $this->getState('user_id'); return $this->getUserFactory()->loadUserById($userId); } /* * Build an SQL query to load the list data. * * @return QueryInterface * * @since 1.6 / protected function getListQuery() { // Create a new query object. $db = $this->getDatabase(); $query = $db->getQuery(true); // Select the required fields from the table. $query->select( $this->getState( 'list.select', 'a.id, a.name, a.title, a.level, a.lft, a.rgt' ) ); $query->from($db->quoteName('#__assets', 'a')); // Filter the items over the search string if set. if ($this->getState('filter.search')) { $search = '%' . trim($this->getState('filter.search')) . '%'; // Add the clauses to the query. $query->where( '(' . $db->quoteName('a.name') . ' LIKE :name' . ' OR ' . $db->quoteName('a.title') . ' LIKE :title)' ) ->bind(':name', $search) ->bind(':title', $search); } // Filter on the start and end levels. $levelStart = (int) $this->getState('filter.level_start'); $levelEnd = (int) $this->getState('filter.level_end'); if ($levelEnd > 0 && $levelEnd < $levelStart) { $levelEnd = $levelStart; } if ($levelStart > 0) { $query->where($db->quoteName('a.level') . ' >= :levelStart') ->bind(':levelStart', $levelStart, ParameterType::INTEGER); } if ($levelEnd > 0) { $query->where($db->quoteName('a.level') . ' <= :levelEnd') ->bind(':levelEnd', $levelEnd, ParameterType::INTEGER); } // Filter the items over the component if set. if ($this->getState('filter.component')) { $component = $this->getState('filter.component'); $lcomponent = $component . '.%'; $query->where( '(' . $db->quoteName('a.name') . ' = :component' . ' OR ' . $db->quoteName('a.name') . ' LIKE :lcomponent)' ) ->bind(':component', $component) ->bind(':lcomponent', $lcomponent); } // Add the list ordering clause. $query->order($db->escape($this->getState('list.ordering', 'a.lft')) . ' ' . $db->escape($this->getState('list.direction', 'ASC'))); return $query; } } PK��%�\�1� �� src/Model/GroupsModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Helper\UserGroupsHelper; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\ListModel; use Joomla\Database\ParameterType; use Joomla\Database\QueryInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Methods supporting a list of user group records. * * @since 1.6 / class GroupsModel extends ListModel { /* * Override parent constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null) { if (empty($config['filter_fields'])) { $config['filter_fields'] = [ 'id', 'a.id', 'parent_id', 'a.parent_id', 'title', 'a.title', 'lft', 'a.lft', 'rgt', 'a.rgt', ]; } parent::__construct($config, $factory); } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @param string $ordering An optional ordering field. * @param string $direction An optional direction (asc\|desc). * * @return void * * @since 1.6 / protected function populateState($ordering = 'a.lft', $direction = 'asc') { // Load the parameters. $params = ComponentHelper::getParams('com_users'); $this->setState('params', $params); // List state information. parent::populateState($ordering, $direction); } /* * Method to get a store id based on model configuration state. * * This is necessary because the model is used by the component and * different modules that might need different sets of data or different * ordering requirements. * * @param string $id A prefix for the store id. * * @return string A store id. / protected function getStoreId($id = '') { // Compile the store id. $id .= ':' . $this->getState('filter.search'); return parent::getStoreId($id); } /* * Gets the list of groups and adds expensive joins to the result set. * * @return mixed An array of data items on success, false on failure. * * @since 1.6 / public function getItems() { // Get a storage key. $store = $this->getStoreId(); // Try to load the data from internal storage. if (empty($this->cache[$store])) { $items = parent::getItems(); // Bail out on an error or empty list. if (empty($items)) { $this->cache[$store] = $items; return $items; } try { $items = $this->populateExtraData($items); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } // Add the items to the internal cache. $this->cache[$store] = $items; } return $this->cache[$store]; } /* * Build an SQL query to load the list data. * * @return QueryInterface / protected function getListQuery() { // Create a new query object. $db = $this->getDatabase(); $query = $db->getQuery(true); // Select the required fields from the table. $query->select( $this->getState( 'list.select', 'a.' ) ); $query->from($db->quoteName('#__usergroups') . ' AS a'); // Filter the comments over the search string if set. $search = $this->getState('filter.search'); if (!empty($search)) { if (stripos($search, 'id:') === 0) { $ids = (int) substr($search, 3); $query->where($db->quoteName('a.id') . ' = :id'); $query->bind(':id', $ids, ParameterType::INTEGER); } else { $search = '%' . trim($search) . '%'; $query->where($db->quoteName('a.title') . ' LIKE :title'); $query->bind(':title', $search); } } // Add the list ordering clause. $query->order($db->escape($this->getState('list.ordering', 'a.lft')) . ' ' . $db->escape($this->getState('list.direction', 'ASC'))); return $query; } /** * Populate level & path for items. * * @param array $items Array of \stdClass objects * * @return array * * @since 3.6.3 / private function populateExtraData(array $items) { // First pass: get list of the group ids and reset the counts. $groupsByKey = []; foreach ($items as $item) { $groupsByKey[(int) $item->id] = $item; } $groupIds = array_keys($groupsByKey); $db = $this->getDatabase(); // Get total enabled users in group. $query = $db->getQuery(true); // Count the objects in the user group. $query->select('map.group_id, COUNT(DISTINCT map.user_id) AS user_count') ->from($db->quoteName('#__user_usergroup_map', 'map')) ->join('LEFT', $db->quoteName('#__users', 'u'), $db->quoteName('u.id') . ' = ' . $db->quoteName('map.user_id')) ->whereIn($db->quoteName('map.group_id'), $groupIds) ->where($db->quoteName('u.block') . ' = 0') ->group($db->quoteName('map.group_id')); $db->setQuery($query); try { $countEnabled = $db->loadAssocList('group_id', 'count_enabled'); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } // Get total disabled users in group. $query->clear(); $query->select('map.group_id, COUNT(DISTINCT map.user_id) AS user_count') ->from($db->quoteName('#__user_usergroup_map', 'map')) ->join('LEFT', $db->quoteName('#__users', 'u'), $db->quoteName('u.id') . ' = ' . $db->quoteName('map.user_id')) ->whereIn($db->quoteName('map.group_id'), $groupIds) ->where($db->quoteName('u.block') . ' = 1') ->group($db->quoteName('map.group_id')); $db->setQuery($query); try { $countDisabled = $db->loadAssocList('group_id', 'count_disabled'); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } // Inject the values back into the array. foreach ($groupsByKey as &$item) { $item->count_enabled = isset($countEnabled[$item->id]) ? (int) $countEnabled[$item->id]['user_count'] : 0; $item->count_disabled = isset($countDisabled[$item->id]) ? (int) $countDisabled[$item->id]['user_count'] : 0; $item->user_count = $item->count_enabled + $item->count_disabled; } $groups = new UserGroupsHelper($groupsByKey); return array_values($groups->getAll()); } } PK��%�\�s�ek&��k&��src/Model/LevelModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Access\Access; use Joomla\CMS\Factory; use Joomla\CMS\Filter\InputFilter; use Joomla\CMS\Form\Form; use Joomla\CMS\Helper\UserGroupsHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Model\AdminModel; use Joomla\CMS\Table\Table; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User view level model. * * @since 1.6 / class LevelModel extends AdminModel { /* * Method to delete one or more access levels. * * @param array $pks An array of primary keys. * * @return boolean True if successful, false if an error occurs. * * @since 5.2.0 / public function delete(&$pks) { $pks = (array) $pks; $table = $this->getTable(); $levelsInUse = []; // Iterate the items to delete each one. foreach ($pks as $i => $pk) { if ($table->load($pk)) { // Check if the access level is being used. $db = $this->getDatabase(); $query = $db->getQuery(true) ->select('DISTINCT access'); // Get all tables that have the access field $checkTables = $db->getTableList(); $prefix = $db->getPrefix(); foreach ($checkTables as $checktable) { // Get all of the columns in the table $fields = $db->getTableColumns($checktable); /* * We are looking for the access field. If custom tables are using something other * than the 'access' field they are on their own unfortunately. * Also make sure the table prefix matches the live db prefix (eg, it is not a "bak_" table) / if (str_starts_with($checktable, $prefix) && isset($fields['access'])) { // Lookup the distinct values of the field. $query->clear('from') ->from($db->quoteName($checktable)); $db->setQuery($query); try { $values = $db->loadColumn(); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } // Check if the table uses this access level if (\in_array($pk, $values)) { // Add the table to the list of tables that use this access level $levelsInUse[$pk][] = $checktable; // Remove the access level from the list of items to delete unset($pks[$i]); } } } } } if (!empty($levelsInUse)) { $app = Factory::getApplication(); $app->enqueueMessage(Text::_('COM_USERS_ERROR_VIEW_LEVEL_IN_USE'), 'error'); foreach ($levelsInUse as $levelId => $usedIn) { $msg = Text::sprintf('COM_USERS_ERROR_VIEW_LEVEL_IN_USE_DETAILS', $levelId, implode(', ', $usedIn)); $app->enqueueMessage($msg, 'error'); } } if (empty($pks)) { // Nothing left to delete return true; } return parent::delete($pks); } /* * Method to test whether a record can be deleted. * * @param object $record A record object. * * @return boolean True if allowed to delete the record. Defaults to the permission set in the component. * * @since 1.6 / protected function canDelete($record) { $groups = json_decode($record->rules); if ($groups === null) { throw new \RuntimeException('Invalid rules schema'); } $isAdmin = $this->getCurrentUser()->authorise('core.admin'); // Check permissions foreach ($groups as $group) { if (!$isAdmin && Access::checkGroup($group, 'core.admin')) { $this->setError(Text::_('JERROR_ALERTNOAUTHOR')); return false; } } return parent::canDelete($record); } /* * Returns a reference to the a Table object, always creating it. * * @param string $type The table type to instantiate * @param string $prefix A prefix for the table class name. Optional. * @param array $config Configuration array for model. Optional. * * @return Table A database object * * @since 1.6 / public function getTable($type = 'ViewLevel', $prefix = 'Joomla\\CMS\\Table\\', $config = []) { $return = Table::getInstance($type, $prefix, $config); return $return; } /* * Method to get a single record. * * @param integer $pk The id of the primary key. * * @return mixed Object on success, false on failure. * * @since 1.6 / public function getItem($pk = null) { $result = parent::getItem($pk); if ($result) { // Convert the params field to an array. $result->rules = $result->rules !== null ? json_decode($result->rules) : []; } return $result; } /* * Method to get the record form. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form\|bool A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.level', 'level', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } return $form; } /* * Method to get the data that should be injected in the form. * * @return mixed The data for the form. * * @since 1.6 * @throws \Exception / protected function loadFormData() { // Check the session for previously entered form data. $data = Factory::getApplication()->getUserState('com_users.edit.level.data', []); if (empty($data)) { $data = $this->getItem(); } $this->preprocessData('com_users.level', $data); return $data; } /* * Method to preprocess the form * * @param Form $form A form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @since 1.6 * @throws \Exception if there is an error loading the form. / protected function preprocessForm(Form $form, $data, $group = '') { // TO DO warning! parent::preprocessForm($form, $data, 'user'); } /* * Method to save the form data. * * @param array $data The form data. * * @return boolean True on success. * * @since 1.6 / public function save($data) { if (!isset($data['rules'])) { $data['rules'] = []; } $data['title'] = InputFilter::getInstance()->clean($data['title'], 'TRIM'); return parent::save($data); } /* * Method to validate the form data. * * @param Form $form The form to validate against. * @param array $data The data to validate. * @param string $group The name of the field group to validate. * * @return array\|boolean Array of filtered data if valid, false otherwise. * * @see \Joomla\CMS\Form\FormRule * @see \Joomla\CMS\Filter\InputFilter * @since 3.8.8 / public function validate($form, $data, $group = null) { $isSuperAdmin = $this->getCurrentUser()->authorise('core.admin'); // Non Super user should not be able to change the access levels of super user groups if (!$isSuperAdmin) { if (!isset($data['rules']) \|\| !\is_array($data['rules'])) { $data['rules'] = []; } $groups = array_values(UserGroupsHelper::getInstance()->getAll()); $rules = []; if (!empty($data['id'])) { $table = $this->getTable(); $table->load($data['id']); $rules = json_decode($table->rules); } $rules = ArrayHelper::toInteger($rules); foreach ($groups as $value) { if (Access::checkGroup((int) $value->id, 'core.admin')) { if (\in_array((int) $value->id, $rules) && !\in_array((int) $value->id, $data['rules'])) { $data['rules'][] = (int) $value->id; } elseif (!\in_array((int) $value->id, $rules) && \in_array((int) $value->id, $data['rules'])) { $this->setError(Text::_('JLIB_USER_ERROR_NOT_SUPERADMIN')); return false; } } } } return parent::validate($form, $data, $group); } } PK��%�\��[$��src/Model/LevelsModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\ListModel; use Joomla\CMS\Table\Table; use Joomla\Database\ParameterType; use Joomla\Database\QueryInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Methods supporting a list of user access level records. * * @since 1.6 / class LevelsModel extends ListModel { /* * Override parent constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null) { if (empty($config['filter_fields'])) { $config['filter_fields'] = [ 'id', 'a.id', 'title', 'a.title', 'ordering', 'a.ordering', ]; } parent::__construct($config, $factory); } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @param string $ordering An optional ordering field. * @param string $direction An optional direction (asc\|desc). * * @return void * * @since 1.6 / protected function populateState($ordering = 'a.ordering', $direction = 'asc') { // Load the parameters. $params = ComponentHelper::getParams('com_users'); $this->setState('params', $params); // List state information. parent::populateState($ordering, $direction); } /* * Method to get a store id based on model configuration state. * * This is necessary because the model is used by the component and * different modules that might need different sets of data or different * ordering requirements. * * @param string $id A prefix for the store id. * * @return string A store id. / protected function getStoreId($id = '') { // Compile the store id. $id .= ':' . $this->getState('filter.search'); return parent::getStoreId($id); } /* * Build an SQL query to load the list data. * * @return QueryInterface / protected function getListQuery() { // Create a new query object. $db = $this->getDatabase(); $query = $db->getQuery(true); // Select the required fields from the table. $query->select( $this->getState( 'list.select', 'a.' ) ); $query->from($db->quoteName('#__viewlevels') . ' AS a'); // Add the level in the tree. $query->group('a.id, a.title, a.ordering, a.rules'); // Filter the items over the search string if set. $search = $this->getState('filter.search'); if (!empty($search)) { if (stripos($search, 'id:') === 0) { $ids = (int) substr($search, 3); $query->where($db->quoteName('a.id') . ' = :id'); $query->bind(':id', $ids, ParameterType::INTEGER); } else { $search = '%' . trim($search) . '%'; $query->where('a.title LIKE :title') ->bind(':title', $search); } } $query->group('a.id'); // Add the list ordering clause. $query->order($db->escape($this->getState('list.ordering', 'a.ordering')) . ' ' . $db->escape($this->getState('list.direction', 'ASC'))); return $query; } /** * Method to adjust the ordering of a row. * * @param integer $pk The ID of the primary key to move. * @param integer $direction Increment, usually +1 or -1 * * @return boolean False on failure or error, true otherwise. / public function reorder($pk, $direction = 0) { // Sanitize the id and adjustment. $pk = (!empty($pk)) ? $pk : (int) $this->getState('level.id'); $user = $this->getCurrentUser(); // Get an instance of the record's table. $table = Table::getInstance('ViewLevel', 'Joomla\\CMS\Table\\'); // Load the row. if (!$table->load($pk)) { $this->setError($table->getError()); return false; } // Access checks. $allow = $user->authorise('core.edit.state', 'com_users'); if (!$allow) { $this->setError(Text::_('JLIB_APPLICATION_ERROR_EDITSTATE_NOT_PERMITTED')); return false; } // Move the row. // @todo: Where clause to restrict category. $table->move($pk); return true; } /* * Saves the manually set order of records. * * @param array $pks An array of primary key ids. * @param integer $order Order position * * @return boolean Boolean true on success, boolean false * * @throws \Exception / public function saveorder($pks, $order) { $table = Table::getInstance('viewlevel', 'Joomla\\CMS\Table\\'); $user = $this->getCurrentUser(); $conditions = []; if (empty($pks)) { Factory::getApplication()->enqueueMessage(Text::_('COM_USERS_ERROR_LEVELS_NOLEVELS_SELECTED'), 'error'); return false; } // Update ordering values foreach ($pks as $i => $pk) { $table->load((int) $pk); // Access checks. $allow = $user->authorise('core.edit.state', 'com_users'); if (!$allow) { // Prune items that you can't change. unset($pks[$i]); Factory::getApplication()->enqueueMessage(Text::_('JLIB_APPLICATION_ERROR_EDITSTATE_NOT_PERMITTED'), 'error'); } elseif ($table->ordering != $order[$i]) { $table->ordering = $order[$i]; if (!$table->store()) { $this->setError($table->getError()); return false; } } } // Execute reorder for each category. foreach ($conditions as $cond) { $table->load($cond[0]); $table->reorder($cond[1]); } return true; } } PK��%�\��/��/��src/Model/GroupModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Access\Access; use Joomla\CMS\Event\User\UserGroupAfterDeleteEvent; use Joomla\CMS\Event\User\UserGroupBeforeDeleteEvent; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\AdminModel; use Joomla\CMS\Object\CMSObject; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Table\Table; use Joomla\String\StringHelper; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User group model. * * @since 1.6 / class GroupModel extends AdminModel { /* * Override parent constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null) { $config = array_merge( [ 'event_after_delete' => 'onUserAfterDeleteGroup', 'event_after_save' => 'onUserAfterSaveGroup', 'event_before_delete' => 'onUserBeforeDeleteGroup', 'event_before_save' => 'onUserBeforeSaveGroup', 'events_map' => ['delete' => 'user', 'save' => 'user'], ], $config ); parent::__construct($config, $factory); } /* * Returns a reference to the a Table object, always creating it. * * @param string $type The table type to instantiate * @param string $prefix A prefix for the table class name. Optional. * @param array $config Configuration array for model. Optional. * * @return Table A database object * * @since 1.6 / public function getTable($type = 'Usergroup', $prefix = 'Joomla\\CMS\\Table\\', $config = []) { $return = Table::getInstance($type, $prefix, $config); return $return; } /* * Method to get the record form. * * @param array $data An optional array of data for the form to interrogate. * @param boolean $loadData True if the form is to load its own data (default case), false if not. * * @return Form\|bool A Form object on success, false on failure * * @since 1.6 / public function getForm($data = [], $loadData = true) { // Get the form. $form = $this->loadForm('com_users.group', 'group', ['control' => 'jform', 'load_data' => $loadData]); if (empty($form)) { return false; } return $form; } /* * Method to get the data that should be injected in the form. * * @return mixed The data for the form. * * @since 1.6 * @throws \Exception / protected function loadFormData() { // Check the session for previously entered form data. $data = Factory::getApplication()->getUserState('com_users.edit.group.data', []); if (empty($data)) { $data = $this->getItem(); } $this->preprocessData('com_users.group', $data); return $data; } /* * Override preprocessForm to load the user plugin group instead of content. * * @param Form $form A form object. * @param mixed $data The data expected for the form. * @param string $group The name of the plugin group to import (defaults to "content"). * * @return void * * @since 1.6 * @throws \Exception if there is an error loading the form. / protected function preprocessForm(Form $form, $data, $group = '') { $obj = \is_array($data) ? ArrayHelper::toObject($data, CMSObject::class) : $data; if (isset($obj->parent_id) && $obj->parent_id == 0 && $obj->id > 0) { $form->setFieldAttribute('parent_id', 'type', 'hidden'); $form->setFieldAttribute('parent_id', 'hidden', 'true'); } parent::preprocessForm($form, $data, 'user'); } /* * Method to save the form data. * * @param array $data The form data. * * @return boolean True on success. * * @since 1.6 / public function save($data) { // Include the user plugins for events. PluginHelper::importPlugin($this->events_map['save']); /* * Check the super admin permissions for group * We get the parent group permissions and then check the group permissions manually * We have to calculate the group permissions manually because we haven't saved the group yet / $parentSuperAdmin = Access::checkGroup($data['parent_id'], 'core.admin'); // Get core.admin rules from the root asset $rules = Access::getAssetRules('root.1')->getData(); // Get the value for the current group (will be true (allowed), false (denied), or null (inherit) $groupSuperAdmin = $rules['core.admin']->allow($data['id']); // We only need to change the $groupSuperAdmin if the parent is true or false. Otherwise, the value set in the rule takes effect. if ($parentSuperAdmin === false) { // If parent is false (Denied), effective value will always be false $groupSuperAdmin = false; } elseif ($parentSuperAdmin === true) { // If parent is true (allowed), group is true unless explicitly set to false $groupSuperAdmin = ($groupSuperAdmin === false) ? false : true; } // Check for non-super admin trying to save with super admin group $iAmSuperAdmin = $this->getCurrentUser()->authorise('core.admin'); if (!$iAmSuperAdmin && $groupSuperAdmin) { $this->setError(Text::_('JLIB_USER_ERROR_NOT_SUPERADMIN')); return false; } /* * Check for super-admin changing self to be non-super-admin * First, are we a super admin / if ($iAmSuperAdmin) { // Next, are we a member of the current group? $myGroups = Access::getGroupsByUser($this->getCurrentUser()->id, false); if (\in_array($data['id'], $myGroups)) { // Now, would we have super admin permissions without the current group? $otherGroups = array_diff($myGroups, [$data['id']]); $otherSuperAdmin = false; foreach ($otherGroups as $otherGroup) { $otherSuperAdmin = $otherSuperAdmin ?: Access::checkGroup($otherGroup, 'core.admin'); } /* * If we would not otherwise have super admin permissions * and the current group does not have super admin permissions, throw an exception / if ((!$otherSuperAdmin) && (!$groupSuperAdmin)) { $this->setError(Text::_('JLIB_USER_ERROR_CANNOT_DEMOTE_SELF')); return false; } } } if (Factory::getApplication()->getInput()->get('task') == 'save2copy') { $data['title'] = $this->generateGroupTitle($data['parent_id'], $data['title']); } // Proceed with the save return parent::save($data); } /* * Method to delete rows. * * @param array &$pks An array of item ids. * * @return boolean Returns true on success, false on failure. * * @since 1.6 * @throws \Exception / public function delete(&$pks) { // Typecast variable. $pks = (array) $pks; $user = $this->getCurrentUser(); $groups = Access::getGroupsByUser($user->id); $context = $this->option . '.' . $this->name; $dispatcher = $this->getDispatcher(); // Get a row instance. $table = $this->getTable(); // Load plugins. PluginHelper::importPlugin($this->events_map['delete'], null, true, $dispatcher); // Check if I am a Super Admin $iAmSuperAdmin = $user->authorise('core.admin'); foreach ($pks as $pk) { // Do not allow to delete groups to which the current user belongs if (\in_array($pk, $groups)) { Factory::getApplication()->enqueueMessage(Text::_('COM_USERS_DELETE_ERROR_INVALID_GROUP'), 'error'); return false; } if (!$table->load($pk)) { // Item is not in the table. $this->setError($table->getError()); return false; } } // Iterate the items to delete each one. foreach ($pks as $i => $pk) { if ($table->load($pk)) { // Access checks. $allow = $user->authorise('core.edit.state', 'com_users'); // Don't allow non-super-admin to delete a super admin $allow = (!$iAmSuperAdmin && Access::checkGroup($pk, 'core.admin')) ? false : $allow; if ($allow) { // Fire the before delete event. $beforeDeleteEvent = new UserGroupBeforeDeleteEvent($this->event_before_delete, [ 'data' => $table->getProperties(), // @TODO: Remove data argument in Joomla 6, see UserGroupBeforeDeleteEvent 'context' => $context, 'subject' => $table, ]); $result = $dispatcher->dispatch($this->event_before_delete, $beforeDeleteEvent)->getArgument('result', []); if (\in_array(false, $result, true)) { $this->setError($table->getError()); return false; } if (!$table->delete($pk)) { $this->setError($table->getError()); return false; } // Trigger the after delete event. $dispatcher->dispatch($this->event_after_delete, new UserGroupAfterDeleteEvent($this->event_after_delete, [ 'data' => $table->getProperties(), // @TODO: Remove data argument in Joomla 6, see UserGroupAfterDeleteEvent 'deletingResult' => true, // @TODO: Remove deletingResult argument in Joomla 6, see UserGroupAfterDeleteEvent 'errorMessage' => $this->getError(), // @TODO: Remove errorMessage argument in Joomla 6, see UserGroupAfterDeleteEvent 'context' => $context, 'subject' => $table, ])); } else { // Prune items that you can't change. unset($pks[$i]); Factory::getApplication()->enqueueMessage(Text::_('JERROR_CORE_DELETE_NOT_PERMITTED'), 'error'); } } } return true; } /* * Method to generate the title of group on Save as Copy action * * @param integer $parentId The id of the parent. * @param string $title The title of group * * @return string Contains the modified title. * * @since 3.3.7 / protected function generateGroupTitle($parentId, $title) { // Alter the title & alias $table = $this->getTable(); while ($table->load(['title' => $title, 'parent_id' => $parentId])) { if ($title == $table->title) { $title = StringHelper::increment($title); } } return $title; } } PK��%�\��׽��src/Model/DebuggroupModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Access\Access; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\ListModel; use Joomla\Component\Users\Administrator\Helper\DebugHelper; use Joomla\Database\ParameterType; use Joomla\Database\QueryInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Methods supporting a list of User ACL permissions * * @since 1.6 / class DebuggroupModel extends ListModel { /* * Constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null) { if (empty($config['filter_fields'])) { $config['filter_fields'] = [ 'a.title', 'component', 'a.name', 'a.lft', 'a.id', 'level_start', 'level_end', 'a.level', ]; } parent::__construct($config, $factory); } /* * Get a list of the actions. * * @return array * * @since 1.6 / public function getDebugActions() { $component = $this->getState('filter.component'); return DebugHelper::getDebugActions($component); } /* * Override getItems method. * * @return array * * @since 1.6 / public function getItems() { $groupId = $this->getState('group_id'); if (($assets = parent::getItems()) && $groupId) { $actions = $this->getDebugActions(); foreach ($assets as &$asset) { $asset->checks = []; foreach ($actions as $action) { $name = $action[0]; $asset->checks[$name] = Access::checkGroup($groupId, $name, $asset->name); } } } return $assets; } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @param string $ordering An optional ordering field. * @param string $direction An optional direction (asc\|desc). * * @return void * * @since 1.6 / protected function populateState($ordering = 'a.lft', $direction = 'asc') { $app = Factory::getApplication(); // Adjust the context to support modal layouts. $layout = $app->getInput()->get('layout', 'default'); if ($layout) { $this->context .= '.' . $layout; } // Load the filter state. $this->setState('group_id', $this->getUserStateFromRequest($this->context . '.group_id', 'group_id', 0, 'int', false)); $levelStart = $this->getUserStateFromRequest($this->context . '.filter.level_start', 'filter_level_start', '', 'cmd'); $this->setState('filter.level_start', $levelStart); $value = $this->getUserStateFromRequest($this->context . '.filter.level_end', 'filter_level_end', '', 'cmd'); if ($value > 0 && $value < $levelStart) { $value = $levelStart; } $this->setState('filter.level_end', $value); $this->setState('filter.component', $this->getUserStateFromRequest($this->context . '.filter.component', 'filter_component', '', 'string')); // Load the parameters. $params = ComponentHelper::getParams('com_users'); $this->setState('params', $params); // List state information. parent::populateState($ordering, $direction); } /* * Method to get a store id based on model configuration state. * * This is necessary because the model is used by the component and * different modules that might need different sets of data or different * ordering requirements. * * @param string $id A prefix for the store id. * * @return string A store id. / protected function getStoreId($id = '') { // Compile the store id. $id .= ':' . $this->getState('group_id'); $id .= ':' . $this->getState('filter.search'); $id .= ':' . $this->getState('filter.level_start'); $id .= ':' . $this->getState('filter.level_end'); $id .= ':' . $this->getState('filter.component'); return parent::getStoreId($id); } /* * Get the group being debugged. * * @return \stdClass * * @since 1.6 / public function getGroup() { $groupId = (int) $this->getState('group_id'); $db = $this->getDatabase(); $query = $db->getQuery(true) ->select($db->quoteName(['id', 'title'])) ->from($db->quoteName('#__usergroups')) ->where($db->quoteName('id') . ' = :id') ->bind(':id', $groupId, ParameterType::INTEGER); $db->setQuery($query); try { $group = $db->loadObject(); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } return $group; } /* * Build an SQL query to load the list data. * * @return QueryInterface * * @since 1.6 / protected function getListQuery() { // Create a new query object. $db = $this->getDatabase(); $query = $db->getQuery(true); // Select the required fields from the table. $query->select( $this->getState( 'list.select', 'a.id, a.name, a.title, a.level, a.lft, a.rgt' ) ); $query->from($db->quoteName('#__assets', 'a')); // Filter the items over the search string if set. if ($this->getState('filter.search')) { $search = '%' . trim($this->getState('filter.search')) . '%'; // Add the clauses to the query. $query->where( '(' . $db->quoteName('a.name') . ' LIKE :name' . ' OR ' . $db->quoteName('a.title') . ' LIKE :title)' ) ->bind(':name', $search) ->bind(':title', $search); } // Filter on the start and end levels. $levelStart = (int) $this->getState('filter.level_start'); $levelEnd = (int) $this->getState('filter.level_end'); if ($levelEnd > 0 && $levelEnd < $levelStart) { $levelEnd = $levelStart; } if ($levelStart > 0) { $query->where($db->quoteName('a.level') . ' >= :levelStart') ->bind(':levelStart', $levelStart, ParameterType::INTEGER); } if ($levelEnd > 0) { $query->where($db->quoteName('a.level') . ' <= :levelEnd') ->bind(':levelEnd', $levelEnd, ParameterType::INTEGER); } // Filter the items over the component if set. if ($this->getState('filter.component')) { $component = $this->getState('filter.component'); $lcomponent = $component . '.%'; $query->where( '(' . $db->quoteName('a.name') . ' = :component' . ' OR ' . $db->quoteName('a.name') . ' LIKE :lcomponent)' ) ->bind(':component', $component) ->bind(':lcomponent', $lcomponent); } // Add the list ordering clause. $query->order($db->escape($this->getState('list.ordering', 'a.lft')) . ' ' . $db->escape($this->getState('list.direction', 'ASC'))); return $query; } } PK��%�\qZ�\|��\|��src/Model/NotesModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Factory; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\ListModel; use Joomla\CMS\User\User; use Joomla\Database\ParameterType; use Joomla\Database\QueryInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User notes model class. * * @since 2.5 / class NotesModel extends ListModel { /* * Constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null) { // Set the list ordering fields. if (empty($config['filter_fields'])) { $config['filter_fields'] = [ 'id', 'a.id', 'user_id', 'a.user_id', 'u.name', 'subject', 'a.subject', 'catid', 'a.catid', 'category_id', 'state', 'a.state', 'published', 'c.title', 'review_time', 'a.review_time', 'publish_up', 'a.publish_up', 'publish_down', 'a.publish_down', 'level', 'c.level', ]; } parent::__construct($config, $factory); } /* * Build an SQL query to load the list data. * * @return QueryInterface An object implementing QueryInterface to retrieve the data set. * * @since 2.5 / protected function getListQuery() { $db = $this->getDatabase(); $query = $db->getQuery(true); // Select the required fields from the table. $query->select( $this->getState( 'list.select', 'a.id, a.subject, a.checked_out, a.checked_out_time,' . 'a.catid, a.created_time, a.review_time,' . 'a.state, a.publish_up, a.publish_down' ) ); $query->from('#__user_notes AS a'); // Join over the category $query->select('c.title AS category_title, c.params AS category_params') ->join('LEFT', '#__categories AS c ON c.id = a.catid'); // Join over the users for the note user. $query->select('u.name AS user_name') ->join('LEFT', '#__users AS u ON u.id = a.user_id'); // Join over the users for the checked out user. $query->select('uc.name AS editor') ->join('LEFT', '#__users AS uc ON uc.id = a.checked_out'); // Filter by search in title $search = $this->getState('filter.search'); if (!empty($search)) { if (stripos($search, 'id:') === 0) { $search3 = (int) substr($search, 3); $query->where($db->quoteName('a.id') . ' = :id'); $query->bind(':id', $search3, ParameterType::INTEGER); } elseif (stripos($search, 'uid:') === 0) { $search4 = (int) substr($search, 4); $query->where($db->quoteName('a.user_id') . ' = :id'); $query->bind(':id', $search4, ParameterType::INTEGER); } else { $search = '%' . trim($search) . '%'; $query->where( '(' . $db->quoteName('a.subject') . ' LIKE :subject' . ' OR ' . $db->quoteName('u.name') . ' LIKE :name' . ' OR ' . $db->quoteName('u.username') . ' LIKE :username)' ); $query->bind(':subject', $search); $query->bind(':name', $search); $query->bind(':username', $search); } } // Filter by published state $published = $this->getState('filter.published'); if (is_numeric($published)) { $query->where($db->quoteName('a.state') . ' = :state') ->bind(':state', $published, ParameterType::INTEGER); } elseif ($published !== '') { $query->whereIn($db->quoteName('a.state'), [0, 1]); } // Filter by a single category. $categoryId = (int) $this->getState('filter.category_id'); if ($categoryId) { $query->where($db->quoteName('a.catid') . ' = :catid') ->bind(':catid', $categoryId, ParameterType::INTEGER); } // Filter by a single user. $userId = (int) $this->getState('filter.user_id'); if ($userId) { // Add the body and where filter. $query->select('a.body') ->where($db->quoteName('a.user_id') . ' = :user_id') ->bind(':user_id', $userId, ParameterType::INTEGER); } // Filter on the level. if ($level = $this->getState('filter.level')) { $level = (int) $level; $query->where($db->quoteName('c.level') . ' <= :level') ->bind(':level', $level, ParameterType::INTEGER); } // Add the list ordering clause. $query->order($db->escape($this->getState('list.ordering', 'a.review_time')) . ' ' . $db->escape($this->getState('list.direction', 'DESC'))); return $query; } /** * Method to get a store id based on model configuration state. * * This is necessary because the model is used by the component and * different modules that might need different sets of data or different * ordering requirements. * * @param string $id A prefix for the store id. * * @return string A store id. * * @since 2.5 / protected function getStoreId($id = '') { // Compile the store id. $id .= ':' . $this->getState('filter.search'); $id .= ':' . $this->getState('filter.published'); $id .= ':' . $this->getState('filter.category_id'); $id .= ':' . $this->getState('filter.user_id'); $id .= ':' . $this->getState('filter.level'); return parent::getStoreId($id); } /* * Gets a user object if the user filter is set. * * @return User The User object * * @since 2.5 / public function getUser() { $user = new User(); // Filter by search in title $search = (int) $this->getState('filter.user_id'); if ($search != 0) { $user->load((int) $search); } return $user; } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @param string $ordering An optional ordering field. * @param string $direction An optional direction (asc\|desc). * * @return void * * @since 1.6 * @throws \Exception / protected function populateState($ordering = 'a.review_time', $direction = 'desc') { // Adjust the context to support modal layouts. if ($layout = Factory::getApplication()->getInput()->get('layout')) { $this->context .= '.' . $layout; } parent::populateState($ordering, $direction); } } PK��%�\��I�Q��Q��src/Model/UsersModel.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2008 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Model; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Date\Date; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\ListModel; use Joomla\CMS\Plugin\PluginHelper; use Joomla\Database\ParameterType; use Joomla\Database\QueryInterface; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Methods supporting a list of user records. * * @since 1.6 / class UsersModel extends ListModel { /* * A list of filter variables to not merge into the model's state * * @var array * @since 4.0.0 / protected $filterForbiddenList = ['groups', 'excluded']; /* * Override parent constructor. * * @param array $config An optional associative array of configuration settings. * @param ?MVCFactoryInterface $factory The factory. * * @see \Joomla\CMS\MVC\Model\BaseDatabaseModel * @since 3.2 / public function __construct($config = [], ?MVCFactoryInterface $factory = null) { if (empty($config['filter_fields'])) { $config['filter_fields'] = [ 'id', 'a.id', 'name', 'a.name', 'username', 'a.username', 'email', 'a.email', 'block', 'a.block', 'sendEmail', 'a.sendEmail', 'registerDate', 'a.registerDate', 'lastvisitDate', 'a.lastvisitDate', 'activation', 'a.activation', 'active', 'group_id', 'range', 'lastvisitrange', 'state', 'mfa', ]; } parent::__construct($config, $factory); } /* * Method to auto-populate the model state. * * Note. Calling getState in this method will result in recursion. * * @param string $ordering An optional ordering field. * @param string $direction An optional direction (asc\|desc). * * @return void * * @since 1.6 * @throws \Exception / protected function populateState($ordering = 'a.name', $direction = 'asc') { $app = Factory::getApplication(); $input = $app->getInput(); // Adjust the context to support modal layouts. if ($layout = $input->get('layout', 'default', 'cmd')) { $this->context .= '.' . $layout; } $groups = json_decode(base64_decode($input->get('groups', '', 'BASE64'))); if (isset($groups)) { $groups = ArrayHelper::toInteger($groups); } $this->setState('filter.groups', $groups); $excluded = json_decode(base64_decode($input->get('excluded', '', 'BASE64'))); if (isset($excluded)) { $excluded = ArrayHelper::toInteger($excluded); } $this->setState('filter.excluded', $excluded); // Load the parameters. $params = ComponentHelper::getParams('com_users'); $this->setState('params', $params); // List state information. parent::populateState($ordering, $direction); } /* * Method to get a store id based on model configuration state. * * This is necessary because the model is used by the component and * different modules that might need different sets of data or different * ordering requirements. * * @param string $id A prefix for the store id. * * @return string A store id. * * @since 1.6 / protected function getStoreId($id = '') { // Compile the store id. $id .= ':' . $this->getState('filter.search'); $id .= ':' . $this->getState('filter.active'); $id .= ':' . $this->getState('filter.state'); $id .= ':' . $this->getState('filter.group_id'); $id .= ':' . $this->getState('filter.range'); if (PluginHelper::isEnabled('multifactorauth')) { $id .= ':' . $this->getState('filter.mfa'); } return parent::getStoreId($id); } /* * Gets the list of users and adds expensive joins to the result set. * * @return mixed An array of data items on success, false on failure. * * @since 1.6 / public function getItems() { // Get a storage key. $store = $this->getStoreId(); // Try to load the data from internal storage. if (empty($this->cache[$store])) { $groups = $this->getState('filter.groups'); $groupId = $this->getState('filter.group_id'); if (isset($groups) && (empty($groups) \|\| $groupId && !\in_array($groupId, $groups))) { $items = []; } else { $items = parent::getItems(); } // Bail out on an error or empty list. if (empty($items)) { $this->cache[$store] = $items; return $items; } // Joining the groups with the main query is a performance hog. // Find the information only on the result set. // First pass: get list of the user ids and reset the counts. $userIds = []; foreach ($items as $item) { $userIds[] = (int) $item->id; $item->group_count = 0; $item->group_names = ''; $item->note_count = 0; } // Get the counts from the database only for the users in the list. $db = $this->getDatabase(); $query = $db->getQuery(true); // Join over the group mapping table. $query->select('map.user_id, COUNT(map.group_id) AS group_count') ->from('#__user_usergroup_map AS map') ->whereIn($db->quoteName('map.user_id'), $userIds) ->group('map.user_id') // Join over the user groups table. ->join('LEFT', '#__usergroups AS g2 ON g2.id = map.group_id'); $db->setQuery($query); // Load the counts into an array indexed on the user id field. try { $userGroups = $db->loadObjectList('user_id'); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } $query->clear() ->select('n.user_id, COUNT(n.id) As note_count') ->from('#__user_notes AS n') ->whereIn($db->quoteName('n.user_id'), $userIds) ->where('n.state >= 0') ->group('n.user_id'); $db->setQuery($query); // Load the counts into an array indexed on the aro.value field (the user id). try { $userNotes = $db->loadObjectList('user_id'); } catch (\RuntimeException $e) { $this->setError($e->getMessage()); return false; } // Second pass: collect the group counts into the main items array. foreach ($items as &$item) { if (isset($userGroups[$item->id])) { $item->group_count = $userGroups[$item->id]->group_count; // Group_concat in other databases is not supported $item->group_names = $this->getUserDisplayedGroups($item->id); } if (isset($userNotes[$item->id])) { $item->note_count = $userNotes[$item->id]->note_count; } } // Add the items to the internal cache. $this->cache[$store] = $items; } return $this->cache[$store]; } /* * Get the filter form * * @param array $data data * @param boolean $loadData load current data * * @return Form\|null The \JForm object or null if the form can't be found * * @since 4.2.0 / public function getFilterForm($data = [], $loadData = true) { $form = parent::getFilterForm($data, $loadData); if ($form && !PluginHelper::isEnabled('multifactorauth')) { $form->removeField('mfa', 'filter'); } return $form; } /* * Build an SQL query to load the list data. * * @return QueryInterface * * @since 1.6 / protected function getListQuery() { // Create a new query object. $db = $this->getDatabase(); $query = $db->getQuery(true); // Select the required fields from the table. $query->select( $this->getState( 'list.select', 'a.' ) ); $query->from($db->quoteName('#__users') . ' AS a'); // Include MFA information if (PluginHelper::isEnabled('multifactorauth')) { $subQuery = $db->getQuery(true) ->select( [ 'MIN(' . $db->quoteName('user_id') . ') AS ' . $db->quoteName('uid'), 'COUNT() AS ' . $db->quoteName('mfaRecords'), ] ) ->from($db->quoteName('#__user_mfa')) ->group($db->quoteName('user_id')); $query->select($db->quoteName('mfa.mfaRecords')) ->join( 'left', '(' . $subQuery . ') AS ' . $db->quoteName('mfa'), $db->quoteName('mfa.uid') . ' = ' . $db->quoteName('a.id') ); $mfaState = $this->getState('filter.mfa'); if (is_numeric($mfaState)) { $mfaState = (int) $mfaState; if ($mfaState === 1) { $query->where( '((' . $db->quoteName('mfa.mfaRecords') . ' > 0) OR (' . $db->quoteName('a.otpKey') . ' IS NOT NULL AND ' . $db->quoteName('a.otpKey') . ' != ' . $db->quote('') . '))' ); } else { $query->where( '((' . $db->quoteName('mfa.mfaRecords') . ' = 0 OR ' . $db->quoteName('mfa.mfaRecords') . ' IS NULL) AND (' . $db->quoteName('a.otpKey') . ' IS NULL OR ' . $db->quoteName('a.otpKey') . ' = ' . $db->quote('') . '))' ); } } } // If the model is set to check item state, add to the query. $state = $this->getState('filter.state'); if (is_numeric($state)) { $query->where($db->quoteName('a.block') . ' = :state') ->bind(':state', $state, ParameterType::INTEGER); } // If the model is set to check the activated state, add to the query. $active = $this->getState('filter.active'); if (is_numeric($active)) { if ($active == '0') { $query->whereIn($db->quoteName('a.activation'), ['', '0'], ParameterType::STRING); } elseif ($active == '1') { $query->whereNotIn($db->quoteName('a.activation'), ['', '0'], ParameterType::STRING); } } // If the model is set to check receive system email, add to the query. $receiveSystemEmail = $this->getState('filter.receiveSystemEmail'); if (is_numeric($receiveSystemEmail)) { $query->where($db->quoteName('a.sendEmail') . ' = :receiveSystemEmail') ->bind(':receiveSystemEmail', $receiveSystemEmail, ParameterType::INTEGER); } // Filter the items over the group id if set. $groupId = $this->getState('filter.group_id'); $groups = $this->getState('filter.groups'); if ($groupId \|\| isset($groups)) { $group_by = [ 'a.id', 'a.name', 'a.username', 'a.password', 'a.block', 'a.sendEmail', 'a.registerDate', 'a.lastvisitDate', 'a.activation', 'a.params', 'a.email', 'a.lastResetTime', 'a.resetCount', 'a.otpKey', 'a.otep', 'a.requireReset', ]; if (PluginHelper::isEnabled('multifactorauth')) { $group_by[] = 'mfa.mfaRecords'; } $query->join('LEFT', '#__user_usergroup_map AS map2 ON map2.user_id = a.id') ->group($db->quoteName($group_by)); if ($groupId) { $groupId = (int) $groupId; $query->where($db->quoteName('map2.group_id') . ' = :group_id') ->bind(':group_id', $groupId, ParameterType::INTEGER); } if (isset($groups)) { $query->whereIn($db->quoteName('map2.group_id'), $groups); } } // Filter the items over the search string if set. $search = $this->getState('filter.search'); if (!empty($search)) { if (stripos($search, 'id:') === 0) { $ids = (int) substr($search, 3); $query->where($db->quoteName('a.id') . ' = :id'); $query->bind(':id', $ids, ParameterType::INTEGER); } elseif (stripos($search, 'username:') === 0) { $search = '%' . substr($search, 9) . '%'; $query->where($db->quoteName('a.username') . ' LIKE :username'); $query->bind(':username', $search); } else { $search = '%' . trim($search) . '%'; // Add the clauses to the query. $query->where( '(' . $db->quoteName('a.name') . ' LIKE :name' . ' OR ' . $db->quoteName('a.username') . ' LIKE :username' . ' OR ' . $db->quoteName('a.email') . ' LIKE :email)' ) ->bind(':name', $search) ->bind(':username', $search) ->bind(':email', $search); } } // Add filter for registration time ranges select list. UI Visitors get a range of predefined // values. API users can do a full range based on ISO8601 $range = $this->getState('filter.range'); $registrationStart = $this->getState('filter.registrationDateStart'); $registrationEnd = $this->getState('filter.registrationDateEnd'); // Apply the range filter. if ($range \|\| ($registrationStart && $registrationEnd)) { if ($range) { $dates = $this->buildDateRange($range); } else { $dates = [ 'dNow' => $registrationEnd, 'dStart' => $registrationStart, ]; } if ($dates['dStart'] !== false) { $dStart = $dates['dStart']->format('Y-m-d H:i:s'); if ($dates['dNow'] === false) { $query->where($db->quoteName('a.registerDate') . ' < :registerDate'); $query->bind(':registerDate', $dStart); } else { $dNow = $dates['dNow']->format('Y-m-d H:i:s'); $query->where($db->quoteName('a.registerDate') . ' BETWEEN :registerDate1 AND :registerDate2'); $query->bind(':registerDate1', $dStart); $query->bind(':registerDate2', $dNow); } } } // Add filter for last visit time ranges select list. UI Visitors get a range of predefined // values. API users can do a full range based on ISO8601 $lastvisitrange = $this->getState('filter.lastvisitrange'); $lastVisitStart = $this->getState('filter.lastVisitStart'); $lastVisitEnd = $this->getState('filter.lastVisitEnd'); // Apply the range filter. if ($lastvisitrange \|\| ($lastVisitStart && $lastVisitEnd)) { if ($lastvisitrange) { $dates = $this->buildDateRange($lastvisitrange); } else { $dates = [ 'dNow' => $lastVisitEnd, 'dStart' => $lastVisitStart, ]; } if ($dates['dStart'] === false) { $query->where($db->quoteName('a.lastvisitDate') . ' IS NULL'); } else { $query->where($db->quoteName('a.lastvisitDate') . ' IS NOT NULL'); $dStart = $dates['dStart']->format('Y-m-d H:i:s'); if ($dates['dNow'] === false) { $query->where($db->quoteName('a.lastvisitDate') . ' < :lastvisitDate'); $query->bind(':lastvisitDate', $dStart); } else { $dNow = $dates['dNow']->format('Y-m-d H:i:s'); $query->where($db->quoteName('a.lastvisitDate') . ' BETWEEN :lastvisitDate1 AND :lastvisitDate2'); $query->bind(':lastvisitDate1', $dStart); $query->bind(':lastvisitDate2', $dNow); } } } // Filter by excluded users $excluded = $this->getState('filter.excluded'); if (!empty($excluded)) { $query->whereNotIn($db->quoteName('id'), $excluded); } // Add the list ordering clause. $query->order( $db->quoteName($db->escape($this->getState('list.ordering', 'a.name'))) . ' ' . $db->escape($this->getState('list.direction', 'ASC')) ); return $query; } /* * Construct the date range to filter on. * * @param string $range The textual range to construct the filter for. * * @return array The date range to filter on. * * @since 3.6.0 * @throws \Exception / private function buildDateRange($range) { // Get UTC for now. $dNow = new Date(); $dStart = clone $dNow; switch ($range) { case 'past_week': $dStart->modify('-7 day'); break; case 'past_1month': $dStart->modify('-1 month'); break; case 'past_3month': $dStart->modify('-3 month'); break; case 'past_6month': $dStart->modify('-6 month'); $arr = []; break; case 'post_year': $dNow = false; // No break case 'past_year': $dStart->modify('-1 year'); break; case 'today': // Ranges that need to align with local 'days' need special treatment. $app = Factory::getApplication(); $offset = $app->get('offset'); // Reset the start time to be the beginning of today, local time. $dStart = new Date('now', $offset); $dStart->setTime(0, 0, 0); // Now change the timezone back to UTC. $tz = new \DateTimeZone('GMT'); $dStart->setTimezone($tz); break; case 'never': $dNow = false; $dStart = false; break; } return ['dNow' => $dNow, 'dStart' => $dStart]; } /* * SQL server change * * @param integer $userId User identifier * * @return string Groups titles imploded :$ / protected function getUserDisplayedGroups($userId) { $db = $this->getDatabase(); $query = $db->getQuery(true) ->select($db->quoteName('title')) ->from($db->quoteName('#__usergroups', 'ug')) ->join('LEFT', $db->quoteName('#__user_usergroup_map', 'map') . ' ON (ug.id = map.group_id)') ->where($db->quoteName('map.user_id') . ' = :user_id') ->bind(':user_id', $userId, ParameterType::INTEGER); try { $result = $db->setQuery($query)->loadColumn(); } catch (\RuntimeException) { $result = []; } return implode("\n", $result); } } PK��%�\��E��&��src/DataShape/CaptiveRenderOptions.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\DataShape; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * @property string $pre_message Custom HTML to display above the MFA form * @property string $field_type How to render the MFA code field. "input" or "custom". * @property string $input_type The type attribute for the HTML input box. Typically "text" or "password". * @property string $placeholder Placeholder text for the HTML input box. Leave empty if you don't need it. * @property string $label Label to show above the HTML input box. Leave empty if you don't need it. * @property string $html Custom HTML. Only used when field_type = custom. * @property string $post_message Custom HTML to display below the MFA form * @property bool $hide_submit Should I hide the default Submit button? * @property bool $allowEntryBatching Is this method validating against all configured authenticators of this type? * @property string $help_url URL for help content * * @since 4.2.0 / class CaptiveRenderOptions extends DataShapeObject { /* * Display a standard HTML5 input field. Use the input_type, placeholder and label properties to set it up. * * @since 4.2.0 / public const FIELD_INPUT = 'input'; /* * Display a custom HTML document. Use the html property to set it up. * * @since 4.2.0 / public const FIELD_CUSTOM = 'custom'; /* * Custom HTML to display above the MFA form * * @var string * @since 4.2.0 / protected $pre_message = ''; /* * How to render the MFA code field. "input" (HTML input element) or "custom" (custom HTML) * * @var string * @since 4.2.0 / protected $field_type = 'input'; /* * The type attribute for the HTML input box. Typically "text" or "password". Use any HTML5 input type. * * @var string * @since 4.2.0 / protected $input_type = ''; /* * Attributes other than type and id which will be added to the HTML input box. * * @var array * @since 4.2.0 / protected $input_attributes = []; /* * Placeholder text for the HTML input box. Leave empty if you don't need it. * * @var string * @since 4.2.0 / protected $placeholder = ''; /* * Label to show above the HTML input box. Leave empty if you don't need it. * * @var string * @since 4.2.0 / protected $label = ''; /* * Custom HTML. Only used when field_type = custom. * * @var string * @since 4.2.0 / protected $html = ''; /* * Custom HTML to display below the MFA form * * @var string * @since 4.2.0 / protected $post_message = ''; /* * Should I hide the default Submit button? * * @var boolean * @since 4.2.0 / protected $hide_submit = false; /* * Additional CSS classes for the submit button (apply the MFA setup) * * @var string * @since 4.2.0 / protected $submit_class = ''; /* * Icon class to use for the submit button * * @var string * @since 4.2.0 / protected $submit_icon = 'icon icon-rightarrow icon-arrow-right'; /* * Language key to use for the text on the submit button * * @var string * @since 4.2.0 / protected $submit_text = 'COM_USERS_MFA_VALIDATE'; /* * Is this MFA method validating against all configured authenticators of the same type? * * @var boolean * @since 4.2.0 / protected $allowEntryBatching = true; /* * URL for help content * * @var string * @since 4.2.0 / protected $help_url = ''; /* * Autocomplete default * * @var string * @since 5.1.0 / protected $autocomplete = 'off'; /* * Setter for the field_type property * * @param string $value One of self::FIELD_INPUT, self::FIELD_CUSTOM * * @since 4.2.0 * @throws \InvalidArgumentException / // phpcs:ignore protected function setField_type(string $value) { if (!\in_array($value, [self::FIELD_INPUT, self::FIELD_CUSTOM])) { throw new \InvalidArgumentException('Invalid value for property field_type.'); } $this->field_type = $value; } /* * Setter for the input_attributes property. * * @param array $value The value to set * * @return void * @since 4.2.0 / // phpcs:ignore protected function setInput_attributes(array $value) { $forbiddenAttributes = ['id', 'type', 'name', 'value']; foreach ($forbiddenAttributes as $key) { if (isset($value[$key])) { unset($value[$key]); } } $this->input_attributes = $value; } } PK��%�\��$��src/DataShape/SetupRenderOptions.phpnu��[��<?php /** * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\DataShape; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Data shape for Method Setup Render Options * * @property string $default_title Default title if you are setting up this MFA Method for the first time * @property string $pre_message Custom HTML to display above the MFA setup form * @property string $table_heading Heading for displayed tabular data. Typically used to display a list of fixed MFA * codes, TOTP setup parameters etc * @property array $tabular_data Any tabular data to display (label => custom HTML). See above * @property array $hidden_data Hidden fields to include in the form (name => value) * @property string $field_type How to render the MFA setup code field. "input" (HTML input element) or "custom" * (custom HTML) * @property string $input_type The type attribute for the HTML input box. Typically "text" or "password". Use any * HTML5 input type. * @property string $input_value Pre-filled value for the HTML input box. Typically used for fixed codes, the fixed * YubiKey ID etc. * @property string $placeholder Placeholder text for the HTML input box. Leave empty if you don't need it. * @property string $label Label to show above the HTML input box. Leave empty if you don't need it. * @property string $html Custom HTML. Only used when field_type = custom. * @property bool $show_submit Should I show the submit button (apply the MFA setup)? * @property string $submit_class Additional CSS classes for the submit button (apply the MFA setup) * @property string $post_message Custom HTML to display below the MFA setup form * @property string $help_url A URL with help content for this Method to display to the user * * @since 4.2.0 / class SetupRenderOptions extends DataShapeObject { /* * Display a standard HTML5 input field. Use the input_type, placeholder and label properties to set it up. * * @since 4.2.0 / public const FIELD_INPUT = 'input'; /* * Display a custom HTML document. Use the html property to set it up. * * @since 4.2.0 / public const FIELD_CUSTOM = 'custom'; /* * Default title if you are setting up this MFA Method for the first time * * @var string * @since 4.2.0 / protected $default_title = ''; /* * Custom HTML to display above the MFA setup form parameters etc * * @var string * @since 4.2.0 / protected $pre_message = ''; /* * Heading for displayed tabular data. Typically used to display a list of fixed MFA codes, TOTP setup * * @var string * @since 4.2.0 / protected $table_heading = ''; /* * Any tabular data to display (label => custom HTML). See above * * @var array * @since 4.2.0 / protected $tabular_data = []; /* * Hidden fields to include in the form (name => value) * * @var array * @since 4.2.0 / protected $hidden_data = []; /* * How to render the MFA setup code field. "input" (HTML input element) or "custom" (custom HTML) * * @var string * @since 4.2.0 / protected $field_type = 'input'; /* * The type attribute for the HTML input box. Typically "text" or "password". Use any HTML5 input type. * * @var string * @since 4.2.0 / protected $input_type = 'text'; /* * Attributes other than type and id which will be added to the HTML input box. * * @var array * @since 4.2.0 / protected $input_attributes = []; /* * Pre-filled value for the HTML input box. Typically used for fixed codes, the fixed YubiKey ID etc. * * @var string * @since 4.2.0 / protected $input_value = ''; /* * Placeholder text for the HTML input box. Leave empty if you don't need it. * * @var string * @since 4.2.0 / protected $placeholder = ''; /* * Label to show above the HTML input box. Leave empty if you don't need it. * * @var string * @since 4.2.0 / protected $label = ''; /* * Custom HTML. Only used when field_type = custom. * * @var string * @since 4.2.0 / protected $html = ''; /* * Should I show the submit button (apply the MFA setup)? * * @var boolean * @since 4.2.0 / protected $show_submit = true; /* * Additional CSS classes for the submit button (apply the MFA setup) * * @var string * @since 4.2.0 / protected $submit_class = ''; /* * Icon class to use for the submit button * * @var string * @since 4.2.0 / protected $submit_icon = 'icon icon-ok'; /* * Language key to use for the text on the submit button * * @var string * @since 4.2.0 / protected $submit_text = 'JSAVE'; /* * Custom HTML to display below the MFA setup form * * @var string * @since 4.2.0 / protected $post_message = ''; /* * A URL with help content for this Method to display to the user * * @var string * @since 4.2.0 / protected $help_url = ''; /* * Setter for the field_type property * * @param string $value One of self::FIELD_INPUT, self::FIELD_CUSTOM * * @since 4.2.0 * @throws \InvalidArgumentException / // phpcs:ignore protected function setField_type($value) { if (!\in_array($value, [self::FIELD_INPUT, self::FIELD_CUSTOM])) { throw new \InvalidArgumentException('Invalid value for property field_type.'); } $this->field_type = $value; } /* * Setter for the input_attributes property. * * @param array $value The value to set * * @return void * @since 4.2.0 / // phpcs:ignore protected function setInput_attributes(array $value) { $forbiddenAttributes = ['id', 'type', 'name', 'value']; foreach ($forbiddenAttributes as $key) { if (isset($value[$key])) { unset($value[$key]); } } $this->input_attributes = $value; } } PK��%�\y�#��!��src/DataShape/DataShapeObject.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\DataShape; /* * Generic helper for handling data shapes in com_users * * @since 4.2.0 / abstract class DataShapeObject implements \ArrayAccess { /* * Public constructor * * @param array $array The data to initialise this object with * * @since 4.2.0 / public function __construct(array $array = []) { if (!\is_array($array) && !($array instanceof self)) { throw new \InvalidArgumentException(\sprintf('%s needs an array or a %s object', __METHOD__, __CLASS__)); } foreach (($array instanceof self) ? $array->asArray() : $array as $k => $v) { $this[$k] = $v; } } /* * Get the data shape as a key-value array * * @return array * * @since 4.2.0 / public function asArray(): array { return get_object_vars($this); } /* * Merge another data shape object or key-value array into this object. * * @param array\|self $newValues The object or array to merge into self. * * @return $this * * @since 4.2.0 / public function merge($newValues): self { if (!\is_array($newValues) && !($newValues instanceof self)) { throw new \InvalidArgumentException(\sprintf('%s needs an array or a %s object', __METHOD__, __CLASS__)); } foreach (($newValues instanceof self) ? $newValues->asArray() : $newValues as $k => $v) { if (!isset($this->{$k})) { continue; } $this[$k] = $v; } return $this; } /* * Magic getter * * @param string $name The name of the property to retrieve * * @return mixed * * @since 4.2.0 / public function __get($name) { $methodName = 'get' . ucfirst($name); if (method_exists($this, $methodName)) { return $this->{$methodName}; } if (property_exists($this, $name)) { return $this->{$name}; } throw new \InvalidArgumentException(\sprintf('Property %s not found in %s', $name, __CLASS__)); } /* * Magic Setter * * @param string $name The property to set the value for * @param mixed $value The property value to set it to * * @return mixed * @since 4.2.0 / public function __set($name, $value) { $methodName = 'set' . ucfirst($name); if (method_exists($this, $methodName)) { return $this->{$methodName}($value); } if (property_exists($this, $name)) { $this->{$name} = $value; } throw new \InvalidArgumentException(\sprintf('Property %s not found in %s', $name, __CLASS__)); } /* * Is a property set? * * @param string $name Property name * * @return boolean Does it exist in the object? * @since 4.2.0 / public function __isset($name): bool { $methodName = 'get' . ucfirst($name); return method_exists($this, $methodName) \|\| property_exists($this, $name); } /* * Does the property exist (array access)? * * @param string $offset Property name * * @return boolean * @since 4.2.0 / public function offsetExists($offset): bool { return isset($this->{$offset}); } /* * Get the value of a property (array access). * * @param string $offset Property name * * @return mixed * @since 4.2.0 / public function offsetGet($offset): mixed { return $this->{$offset}; } /* * Set the value of a property (array access). * * @param string $offset Property name * @param mixed $value Property value * * @return void * @since 4.2.0 / public function offsetSet($offset, $value): void { $this->{$offset} = $value; } /* * Unset a property (array access). * * @param string $offset Property name * * @return void * @since 4.2.0 / public function offsetUnset($offset): void { throw new \LogicException(\sprintf('You cannot unset members of %s', __CLASS__)); } } PK��%�\�Sʉ��src/DataShape/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\I��w��w��"��src/DataShape/MethodDescriptor.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\DataShape; use Joomla\Component\Users\Administrator\Table\MfaTable; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * @property string $name Internal code of this MFA Method * @property string $display User-facing name for this MFA Method * @property string $shortinfo Short description of this MFA Method displayed to the user * @property string $image URL to the logo image for this Method * @property bool $canDisable Are we allowed to disable it? * @property bool $allowMultiple Are we allowed to have multiple instances of it per user? * @property string $help_url URL for help content * @property bool $allowEntryBatching Allow authentication against all entries of this MFA Method. * * @since 4.2.0 / class MethodDescriptor extends DataShapeObject { /* * Internal code of this MFA Method * * @var string * @since 4.2.0 / protected $name = ''; /* * User-facing name for this MFA Method * * @var string * @since 4.2.0 / protected $display = ''; /* * Short description of this MFA Method displayed to the user * * @var string * @since 4.2.0 / protected $shortinfo = ''; /* * URL to the logo image for this Method * * @var string * @since 4.2.0 / protected $image = ''; /* * Are we allowed to disable it? * * @var boolean * @since 4.2.0 / protected $canDisable = true; /* * Are we allowed to have multiple instances of it per user? * * @var boolean * @since 4.2.0 / protected $allowMultiple = false; /* * URL for help content * * @var string * @since 4.2.0 / protected $help_url = ''; /* * Allow authentication against all entries of this MFA Method. * * Otherwise authentication takes place against a SPECIFIC entry at a time. * * @var boolean * @since 4.2.0 / protected $allowEntryBatching = false; /* * Active authentication methods, used internally only * * @var MfaTable[] * @since 4.2.0 * @internal / protected $active = []; /* * Adds an active MFA method * * @param MfaTable $record The MFA method record to add * * @return void * @since 4.2.0 / public function addActiveMethod(MfaTable $record) { $this->active[$record->id] = $record; } } PK��%�\��\Ay��y��src/View/Groups/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Groups; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Model\GroupsModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View class for a list of user groups. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * The item data. * * @var object * @since 1.6 / protected $items; /* * The pagination object. * * @var \Joomla\CMS\Pagination\Pagination * @since 1.6 / protected $pagination; /* * The model state. * * @var \Joomla\Registry\Registry * @since 1.6 / protected $state; /* * Form object for search filters * * @var \Joomla\CMS\Form\Form * * @since 4.0.0 / public $filterForm; /* * The active search filters * * @var array * @since 4.0.0 / public $activeFilters; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void / public function display($tpl = null) { /* @var GroupsModel $model / $model = $this->getModel(); $model->setUseExceptions(true); $this->items = $model->getItems(); $this->pagination = $model->getPagination(); $this->state = $model->getState(); $this->filterForm = $model->getFilterForm(); $this->activeFilters = $model->getActiveFilters(); $this->addToolbar(); parent::display($tpl); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 / protected function addToolbar() { $canDo = ContentHelper::getActions('com_users'); $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title(Text::_('COM_USERS_VIEW_GROUPS_TITLE'), 'users-cog groups'); if ($canDo->get('core.create')) { $toolbar->addNew('group.add'); } if ($canDo->get('core.delete')) { $toolbar->delete('groups.delete') ->message('JGLOBAL_CONFIRM_DELETE'); $toolbar->divider(); } if ($canDo->get('core.admin') \|\| $canDo->get('core.options')) { $toolbar->preferences('com_users'); $toolbar->divider(); } $toolbar->help('Users:_Groups'); } } PK��%�\�iK�I��I��src/View/User/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2007 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\User; use Joomla\CMS\Factory; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\Toolbar; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; use Joomla\Component\Users\Administrator\Helper\Mfa; use Joomla\Component\Users\Administrator\Model\UserModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User view class. * * @since 1.5 / class HtmlView extends BaseHtmlView implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * The active item * * @var object / protected $item; /* * Gets the available groups * * @var array / protected $grouplist; /* * The groups this user is assigned to * * @var array * @since 1.6 / protected $groups; /* * The model state * * @var \Joomla\Registry\Registry / protected $state; /* * The Multi-factor Authentication configuration interface for the user. * * @var string\|null * @since 4.2.0 / protected $mfaConfigurationUI; /* * Array of fieldsets not to display * * @var string[] * * @since 5.2.0 / public $ignore_fieldsets = []; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void * * @since 1.5 / public function display($tpl = null) { /* @var UserModel $model / $model = $this->getModel(); $model->setUseExceptions(true); // If no item found, dont show the edit screen, redirect with message if (false === $this->item = $model->getItem()) { $app = Factory::getApplication(); $app->enqueueMessage(Text::_('JLIB_APPLICATION_ERROR_NOT_EXIST'), 'error'); $app->redirect('index.php?option=com_users&view=users'); } $this->form = $model->getForm(); $this->state = $model->getState(); // Prevent user from modifying own group(s) $user = $this->getCurrentUser(); if ((int) $user->id != (int) $this->item->id \|\| $user->authorise('core.admin')) { $this->grouplist = $model->getGroups(); $this->groups = $model->getAssignedGroups(); } $this->form->setValue('password', null); $this->form->setValue('password2', null); $userBeingEdited = $this->getUserFactory()->loadUserById($this->item->id); if ($this->item->id > 0 && (int) $userBeingEdited->id == (int) $this->item->id) { try { $this->mfaConfigurationUI = Mfa::canShowConfigurationInterface($userBeingEdited) ? Mfa::getConfigurationInterface($userBeingEdited) : ''; } catch (\Exception) { // In case something goes really wrong with the plugins; prevents hard breaks. $this->mfaConfigurationUI = null; } } parent::display($tpl); $this->addToolbar(); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 * @throws \Exception / protected function addToolbar() { Factory::getApplication()->getInput()->set('hidemainmenu', true); $user = $this->getCurrentUser(); $canDo = ContentHelper::getActions('com_users'); $isNew = ($this->item->id == 0); $isProfile = $this->item->id == $user->id; $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title( Text::_( $isNew ? 'COM_USERS_VIEW_NEW_USER_TITLE' : ($isProfile ? 'COM_USERS_VIEW_EDIT_PROFILE_TITLE' : 'COM_USERS_VIEW_EDIT_USER_TITLE') ), 'user ' . ($isNew ? 'user-add' : ($isProfile ? 'user-profile' : 'user-edit')) ); if ($canDo->get('core.edit') \|\| $canDo->get('core.create') \|\| $isProfile) { $toolbar->apply('user.apply'); } $saveGroup = $toolbar->dropdownButton('save-group'); $saveGroup->configure( function (Toolbar $childBar) use ($canDo, $isProfile) { if ($canDo->get('core.edit') \|\| $canDo->get('core.create') \|\| $isProfile) { $childBar->save('user.save'); } if ($canDo->get('core.create') && $canDo->get('core.manage')) { $childBar->save2new('user.save2new'); } } ); if (empty($this->item->id)) { $toolbar->cancel('user.cancel', 'JTOOLBAR_CANCEL'); } else { $toolbar->cancel('user.cancel'); } $toolbar->divider(); $toolbar->help('Users:_Edit_Profile'); } } PK��%�\�Sʉ��src/View/User/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\d圆��src/View/Levels/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Levels; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Model\LevelsModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View class for a list of view levels. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * The item data. * * @var object * @since 1.6 / protected $items; /* * The pagination object. * * @var \Joomla\CMS\Pagination\Pagination * @since 1.6 / protected $pagination; /* * The model state. * * @var \Joomla\Registry\Registry * @since 1.6 / protected $state; /* * Form object for search filters * * @var \Joomla\CMS\Form\Form * * @since 4.0.0 / public $filterForm; /* * The active search filters * * @var array * @since 4.0.0 / public $activeFilters; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void / public function display($tpl = null) { /* @var LevelsModel $model / $model = $this->getModel(); $model->setUseExceptions(true); $this->items = $model->getItems(); $this->pagination = $model->getPagination(); $this->state = $model->getState(); $this->filterForm = $model->getFilterForm(); $this->activeFilters = $model->getActiveFilters(); $this->addToolbar(); parent::display($tpl); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 / protected function addToolbar() { $canDo = ContentHelper::getActions('com_users'); $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title(Text::_('COM_USERS_VIEW_LEVELS_TITLE'), 'user-lock levels'); if ($canDo->get('core.create')) { $toolbar->addNew('level.add'); } if ($canDo->get('core.delete')) { $toolbar->delete('level.delete') ->message('JGLOBAL_CONFIRM_DELETE'); $toolbar->divider(); } if ($canDo->get('core.admin') \|\| $canDo->get('core.options')) { $toolbar->preferences('com_users'); $toolbar->divider(); } $toolbar->help('Users:_Viewing_Access_Levels'); } } PK��%�\��src/View/Notes/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Notes; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\Button\DropdownButton; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\Model\NotesModel; use Joomla\Registry\Registry; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User notes list view * * @since 2.5 / class HtmlView extends BaseHtmlView { /* * A list of user note objects. * * @var array * @since 2.5 / protected $items; /* * The pagination object. * * @var \Joomla\CMS\Pagination\Pagination * @since 2.5 / protected $pagination; /* * The model state. * * @var \Joomla\Registry\Registry * @since 2.5 / protected $state; /* * The model state. * * @var User * @since 2.5 / protected $user; /* * Form object for search filters * * @var \Joomla\CMS\Form\Form * * @since 4.0.0 / public $filterForm; /* * The active search filters * * @var array * @since 4.0.0 / public $activeFilters; /* * Is this view an Empty State * * @var boolean * @since 4.0.0 / private $isEmptyState = false; /* * Override the display method for the view. * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void * * @since 2.5 / public function display($tpl = null) { /* @var NotesModel $model / $model = $this->getModel(); $model->setUseExceptions(true); // Initialise view variables. $this->items = $model->getItems(); $this->pagination = $model->getPagination(); $this->state = $model->getState(); $this->user = $model->getUser(); $this->filterForm = $model->getFilterForm(); $this->activeFilters = $model->getActiveFilters(); if (!\count($this->items) && $this->isEmptyState = $model->getIsEmptyState()) { $this->setLayout('emptystate'); } // Turn parameters into registry objects foreach ($this->items as $item) { $item->cparams = new Registry($item->category_params); } $this->addToolbar(); parent::display($tpl); } /* * Display the toolbar. * * @return void * * @since 2.5 / protected function addToolbar() { $canDo = ContentHelper::getActions('com_users', 'category', $this->state->get('filter.category_id')); $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title(Text::_('COM_USERS_VIEW_NOTES_TITLE'), 'users user'); if ($canDo->get('core.create')) { $toolbar->addNew('note.add'); } if (!$this->isEmptyState && ($canDo->get('core.edit.state') \|\| $canDo->get('core.admin'))) { /* @var DropdownButton $dropdown / $dropdown = $toolbar->dropdownButton('status-group', 'JTOOLBAR_CHANGE_STATUS') ->toggleSplit(false) ->icon('icon-ellipsis-h') ->buttonClass('btn btn-action') ->listCheck(true); $childBar = $dropdown->getChildToolbar(); if ($canDo->get('core.edit.state')) { $childBar->publish('notes.publish')->listCheck(true); $childBar->unpublish('notes.unpublish')->listCheck(true); $childBar->archive('notes.archive')->listCheck(true); $childBar->checkin('notes.checkin')->listCheck(true); } if ($this->state->get('filter.published') != -2 && $canDo->get('core.edit.state')) { $childBar->trash('notes.trash'); } } if (!$this->isEmptyState && $this->state->get('filter.published') == -2 && $canDo->get('core.delete')) { $toolbar->delete('notes.delete', 'JTOOLBAR_DELETE_FROM_TRASH') ->message('JGLOBAL_CONFIRM_DELETE') ->listCheck(true); } if ($canDo->get('core.admin') \|\| $canDo->get('core.options')) { $toolbar->preferences('com_users'); } $toolbar->help('User_Notes'); } } PK��%�\�Sʉ��src/View/Notes/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\��&x ��x ��src/View/Level/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Level; use Joomla\CMS\Factory; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\GenericDataException; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\Toolbar; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Model\LevelModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View to edit a user view level. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * The item data. * * @var object * @since 1.6 / protected $item; /* * The model state. * * @var \Joomla\Registry\Registry * @since 1.6 / protected $state; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void / public function display($tpl = null) { /* @var LevelModel $model / $model = $this->getModel(); $this->form = $model->getForm(); $this->item = $model->getItem(); $this->state = $model->getState(); // Check for errors. if (\count($errors = $model->getErrors())) { throw new GenericDataException(implode("\n", $errors), 500); } $this->addToolbar(); parent::display($tpl); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 * @throws \Exception / protected function addToolbar() { Factory::getApplication()->getInput()->set('hidemainmenu', true); $isNew = ($this->item->id == 0); $canDo = ContentHelper::getActions('com_users'); $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title(Text::_($isNew ? 'COM_USERS_VIEW_NEW_LEVEL_TITLE' : 'COM_USERS_VIEW_EDIT_LEVEL_TITLE'), 'user-lock levels-add'); if ($canDo->get('core.edit') \|\| $canDo->get('core.create')) { $toolbar->apply('level.apply'); } $saveGroup = $toolbar->dropdownButton('save-group'); $saveGroup->configure( function (Toolbar $childBar) use ($canDo, $isNew) { if ($canDo->get('core.edit') \|\| $canDo->get('core.create')) { $childBar->save('level.save'); } if ($canDo->get('core.create')) { $childBar->save2new('level.save2new'); } // If an existing item, can save to a copy. if (!$isNew && $canDo->get('core.create')) { $childBar->save2copy('level.save2copy'); } } ); if (empty($this->item->id)) { $toolbar->cancel('level.cancel', 'JTOOLBAR_CANCEL'); } else { $toolbar->cancel('level.cancel'); } $toolbar->divider(); $toolbar->help('Users:_Edit_Viewing_Access_Level'); } } PK��%�\�Sʉ��src/View/Level/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\2j�� src/View/Debuggroup/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Debuggroup; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Model\DebuggroupModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View class for a list of User Group ACL permissions. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * List of component actions * * @var array / protected $actions; /* * The item data. * * @var object * @since 1.6 / protected $items; /* * The pagination object. * * @var \Joomla\CMS\Pagination\Pagination * @since 1.6 / protected $pagination; /* * The model state. * * @var \Joomla\Registry\Registry * @since 1.6 / protected $state; /* * The id and title for the user group. * * @var \stdClass * @since 4.0.0 / protected $group; /* * Form object for search filters * * @var \Joomla\CMS\Form\Form / public $filterForm; /* * The active search filters * * @var array / public $activeFilters; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void / public function display($tpl = null) { // Access check. if (!$this->getCurrentUser()->authorise('core.manage', 'com_users')) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } /* @var DebuggroupModel $model / $model = $this->getModel(); $model->setUseExceptions(true); $this->actions = $model->getDebugActions(); $this->items = $model->getItems(); $this->pagination = $model->getPagination(); $this->state = $model->getState(); $this->group = $model->getGroup(); $this->filterForm = $model->getFilterForm(); $this->activeFilters = $model->getActiveFilters(); $this->addToolbar(); parent::display($tpl); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 / protected function addToolbar() { $canDo = ContentHelper::getActions('com_users'); $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title(Text::sprintf('COM_USERS_VIEW_DEBUG_GROUP_TITLE', $this->group->id, $this->escape($this->group->title)), 'users groups'); $toolbar->cancel('group.cancel'); if ($canDo->get('core.admin') \|\| $canDo->get('core.options')) { $toolbar->preferences('com_users'); $toolbar->divider(); } $toolbar->help('Permissions_for_Group'); } } PK��%�\�Sʉ��src/View/Debuggroup/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�FX54��4��src/View/Note/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Note; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\GenericDataException; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\Toolbar; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Model\NoteModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User note edit view * * @since 2.5 / class HtmlView extends BaseHtmlView { /* * The edit form. * * @var \Joomla\CMS\Form\Form * * @since 2.5 / protected $form; /* * The item data. * * @var object * @since 2.5 / protected $item; /* * The model state. * * @var \Joomla\Registry\Registry * @since 2.5 / protected $state; /* * Override the display method for the view. * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void * * @since 2.5 * @throws \Exception / public function display($tpl = null) { /* @var NoteModel $model / $model = $this->getModel(); // Initialise view variables. $this->state = $model->getState(); $this->item = $model->getItem(); $this->form = $model->getForm(); // Check for errors. if (\count($errors = $model->getErrors())) { throw new GenericDataException(implode("\n", $errors), 500); } parent::display($tpl); $this->addToolbar(); } /* * Display the toolbar. * * @return void * * @since 2.5 * @throws \Exception / protected function addToolbar() { $input = Factory::getApplication()->getInput(); $input->set('hidemainmenu', 1); $user = $this->getCurrentUser(); $isNew = ($this->item->id == 0); $checkedOut = !(\is_null($this->item->checked_out) \|\| $this->item->checked_out == $user->id); $toolbar = $this->getDocument()->getToolbar(); // Since we don't track these assets at the item level, use the category id. $canDo = ContentHelper::getActions('com_users', 'category', $this->item->catid); ToolbarHelper::title(Text::_('COM_USERS_NOTES'), 'users user'); // If not checked out, can save the item. if (!$checkedOut && ($canDo->get('core.edit') \|\| \count($user->getAuthorisedCategories('com_users', 'core.create')))) { $toolbar->apply('note.apply'); } $saveGroup = $toolbar->dropdownButton('save-group'); $saveGroup->configure( function (Toolbar $childBar) use ($checkedOut, $canDo, $user, $isNew) { // If not checked out, can save the item. if (!$checkedOut && ($canDo->get('core.edit') \|\| \count($user->getAuthorisedCategories('com_users', 'core.create')))) { $childBar->save('note.save'); } if (!$checkedOut && \count($user->getAuthorisedCategories('com_users', 'core.create'))) { $childBar->save2new('note.save2new'); } // If an existing item, can save to a copy. if (!$isNew && (\count($user->getAuthorisedCategories('com_users', 'core.create')) > 0)) { $childBar->save2copy('note.save2copy'); } } ); if (empty($this->item->id)) { $toolbar->cancel('note.cancel', 'JTOOLBAR_CANCEL'); } else { $toolbar->cancel('note.cancel'); if (ComponentHelper::isEnabled('com_contenthistory') && $this->state->get('params')->get('save_history', 0) && $canDo->get('core.edit')) { $toolbar->versions('com_users.note', $this->item->id); } } $toolbar->divider(); $toolbar->help('User_Notes:_New_or_Edit'); } } PK��%�\�Sʉ��src/View/Note/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\9hjr��src/View/SiteTemplateTrait.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Factory; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Dynamically modify the frontend template when showing a MFA captive page. * * @since 4.2.0 / trait SiteTemplateTrait { /* * Set a specific site template style in the frontend application * * @return void * @throws \Exception * @since 4.2.0 / private function setSiteTemplateStyle(): void { $app = Factory::getApplication(); $templateStyle = (int) ComponentHelper::getParams('com_users')->get('captive_template', ''); if (empty($templateStyle) \|\| !$app->isClient('site')) { return; } $itemId = $app->getInput()->get('Itemid'); if (!empty($itemId)) { return; } $app->getInput()->set('templateStyle', $templateStyle); try { $refApp = new \ReflectionObject($app); $refTemplate = $refApp->getProperty('template'); $refTemplate->setAccessible(true); $refTemplate->setValue($app, null); } catch (\ReflectionException) { return; } $template = $app->getTemplate(true); $app->set('theme', $template->template); $app->set('themeParams', $template->params); } } PK��%�\u�o��src/View/Debuguser/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Debuguser; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\CMS\User\User; use Joomla\Component\Users\Administrator\Model\DebuguserModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View class for a list of User ACL permissions. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * List of component actions * * @var array / protected $actions; /* * The item data. * * @var object * @since 1.6 / protected $items; /* * The pagination object. * * @var \Joomla\CMS\Pagination\Pagination * @since 1.6 / protected $pagination; /* * The model state. * * @var \Joomla\Registry\Registry * @since 1.6 / protected $state; /* * The user object of the user being debugged. * * @var User / protected $user; /* * Form object for search filters * * @var \Joomla\CMS\Form\Form / public $filterForm; /* * The active search filters * * @var array / public $activeFilters; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void / public function display($tpl = null) { // Access check. if (!$this->getCurrentUser()->authorise('core.manage', 'com_users')) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } /* @var DebuguserModel $model / $model = $this->getModel(); $model->setUseExceptions(true); $this->actions = $model->getDebugActions(); $this->items = $model->getItems(); $this->pagination = $model->getPagination(); $this->state = $model->getState(); $this->user = $model->getUser(); $this->filterForm = $model->getFilterForm(); $this->activeFilters = $model->getActiveFilters(); $this->addToolbar(); parent::display($tpl); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 / protected function addToolbar() { $canDo = ContentHelper::getActions('com_users'); $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title(Text::sprintf('COM_USERS_VIEW_DEBUG_USER_TITLE', $this->user->id, $this->escape($this->user->name)), 'users user'); $toolbar->cancel('user.cancel'); if ($canDo->get('core.admin') \|\| $canDo->get('core.options')) { $toolbar->preferences('com_users'); $toolbar->divider(); } $toolbar->help('Permissions_for_User'); } } PK��%�\�Sʉ��src/View/Debuguser/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�/N��src/View/Group/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Group; use Joomla\CMS\Factory; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\GenericDataException; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\Toolbar; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Model\GroupModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View to edit a user group. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * The item data. * * @var object * @since 1.6 / protected $item; /* * The model state. * * @var \Joomla\Registry\Registry * @since 1.6 / protected $state; /* * Array of fieldsets not to display * * @var string[] * * @since 5.2.0 / public $ignore_fieldsets = []; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void / public function display($tpl = null) { /* @var GroupModel $model / $model = $this->getModel(); $this->state = $model->getState(); $this->item = $model->getItem(); $this->form = $model->getForm(); // Check for errors. if (\count($errors = $model->getErrors())) { throw new GenericDataException(implode("\n", $errors), 500); } $this->addToolbar(); parent::display($tpl); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 * @throws \Exception / protected function addToolbar() { Factory::getApplication()->getInput()->set('hidemainmenu', true); $isNew = ($this->item->id == 0); $canDo = ContentHelper::getActions('com_users'); $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title(Text::_($isNew ? 'COM_USERS_VIEW_NEW_GROUP_TITLE' : 'COM_USERS_VIEW_EDIT_GROUP_TITLE'), 'users-cog groups-add'); if ($canDo->get('core.edit') \|\| $canDo->get('core.create')) { $toolbar->apply('group.apply'); } $saveGroup = $toolbar->dropdownButton('save-group'); $saveGroup->configure( function (Toolbar $childBar) use ($canDo, $isNew) { if ($canDo->get('core.edit') \|\| $canDo->get('core.create')) { $childBar->save('group.save'); } if ($canDo->get('core.create')) { $childBar->save2new('group.save2new'); } // If an existing item, can save to a copy. if (!$isNew && $canDo->get('core.create')) { $childBar->save2copy('group.save2copy'); } } ); if (empty($this->item->id)) { $toolbar->cancel('group.cancel', 'JTOOLBAR_CANCEL'); } else { $toolbar->cancel('group.cancel'); } $toolbar->divider(); $toolbar->help('Users:_New_or_Edit_Group'); } } PK��%�\�Sʉ��src/View/Group/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\��ա��src/View/Users/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2007 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Users; use Joomla\CMS\Factory; use Joomla\CMS\Helper\ContentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Toolbar\Button\DropdownButton; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Model\UsersModel; use Joomla\Database\DatabaseDriver; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * View class for a list of users. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * The item data. * * @var object * @since 1.6 / protected $items; /* * The pagination object. * * @var \Joomla\CMS\Pagination\Pagination * @since 1.6 / protected $pagination; /* * The model state. * * @var \Joomla\Registry\Registry * @since 1.6 / protected $state; /* * A Form instance with filter fields. * * @var \Joomla\CMS\Form\Form * * @since 3.6.3 / public $filterForm; /* * An array with active filters. * * @var array * @since 3.6.3 / public $activeFilters; /* * An ACL object to verify user rights. * * @var \Joomla\Registry\Registry * @since 3.6.3 / protected $canDo; /* * An instance of DatabaseDriver. * * @var DatabaseDriver * @since 3.6.3 * * @deprecated 4.3 will be removed in 6.0 * Will be removed without replacement use database from the container instead * Example: Factory::getContainer()->get(DatabaseInterface::class); / protected $db; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void / public function display($tpl = null) { /* @var UsersModel $model / $model = $this->getModel(); $model->setUseExceptions(true); $this->items = $model->getItems(); $this->pagination = $model->getPagination(); $this->state = $model->getState(); $this->filterForm = $model->getFilterForm(); $this->activeFilters = $model->getActiveFilters(); $this->canDo = ContentHelper::getActions('com_users'); $this->db = Factory::getDbo(); $this->addToolbar(); parent::display($tpl); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 / protected function addToolbar() { $canDo = $this->canDo; $user = $this->getCurrentUser(); // Get the toolbar object instance $toolbar = $this->getDocument()->getToolbar(); ToolbarHelper::title(Text::_('COM_USERS_VIEW_USERS_TITLE'), 'users user'); if ($canDo->get('core.create')) { $toolbar->addNew('user.add'); } if ($canDo->get('core.edit.state') \|\| $canDo->get('core.admin')) { /* @var DropdownButton $dropdown / $dropdown = $toolbar->dropdownButton('status-group', 'JTOOLBAR_CHANGE_STATUS') ->toggleSplit(false) ->icon('icon-ellipsis-h') ->buttonClass('btn btn-action') ->listCheck(true); $childBar = $dropdown->getChildToolbar(); $childBar->publish('users.activate', 'COM_USERS_TOOLBAR_ACTIVATE'); $childBar->unpublish('users.block', 'COM_USERS_TOOLBAR_BLOCK'); $childBar->standardButton('unblock', 'COM_USERS_TOOLBAR_UNBLOCK', 'users.unblock') ->listCheck(true); // Add a batch button if ( $user->authorise('core.create', 'com_users') && $user->authorise('core.edit', 'com_users') && $user->authorise('core.edit.state', 'com_users') ) { $childBar->popupButton('batch', 'JTOOLBAR_BATCH') ->popupType('inline') ->textHeader(Text::_('COM_USERS_BATCH_OPTIONS')) ->url('#joomla-dialog-batch') ->modalWidth('800px') ->modalHeight('fit-content') ->listCheck(true); } if ($canDo->get('core.delete')) { $childBar->delete('users.delete', 'JTOOLBAR_DELETE') ->message('JGLOBAL_CONFIRM_DELETE') ->listCheck(true); } } if ($canDo->get('core.admin') \|\| $canDo->get('core.options')) { $toolbar->preferences('com_users'); } $toolbar->help('Users'); } } PK��%�\�T. �� src/View/Mail/HtmlView.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\View\Mail; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\View\HtmlView as BaseHtmlView; use Joomla\CMS\Router\Route; use Joomla\CMS\Toolbar\ToolbarHelper; use Joomla\Component\Users\Administrator\Model\MailModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users mail view. * * @since 1.6 / class HtmlView extends BaseHtmlView { /* * The Form object * * @var \Joomla\CMS\Form\Form / protected $form; /* * Display the view * * @param string $tpl The name of the template file to parse; automatically searches through the template paths. * * @return void * * @throws \Exception / public function display($tpl = null) { // Redirect to admin index if mass mailer disabled in conf if (Factory::getApplication()->get('massmailoff', 0) == 1) { Factory::getApplication()->redirect(Route::_('index.php', false)); } /* @var MailModel $model / $model = $this->getModel(); // Get data from the model $this->form = $model->getForm(); $this->addToolbar(); parent::display($tpl); } /* * Add the page title and toolbar. * * @return void * * @since 1.6 * @throws \Exception / protected function addToolbar() { Factory::getApplication()->getInput()->set('hidemainmenu', true); ToolbarHelper::title(Text::_('COM_USERS_MASS_MAIL'), 'users massmail'); $toolbar = $this->getDocument()->getToolbar(); $toolbar->standardButton('send', 'COM_USERS_TOOLBAR_MAIL_SEND_MAIL', 'mail.send') ->icon('icon-envelope') ->formValidation(true); $toolbar->cancel('mail.cancel', 'JTOOLBAR_CANCEL'); $toolbar->divider(); $toolbar->preferences('com_users'); $toolbar->divider(); $toolbar->help('Mass_Mail_Users'); } } PK��%�\�Sʉ��src/View/Mail/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�^��^�� src/Extension/UsersComponent.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2018 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Extension; use Joomla\CMS\Component\Router\RouterServiceInterface; use Joomla\CMS\Component\Router\RouterServiceTrait; use Joomla\CMS\Extension\BootableExtensionInterface; use Joomla\CMS\Extension\MVCComponent; use Joomla\CMS\Factory; use Joomla\CMS\Fields\FieldsFormServiceInterface; use Joomla\CMS\Fields\FieldsServiceTrait; use Joomla\CMS\HTML\HTMLRegistryAwareTrait; use Joomla\Component\Users\Administrator\Service\HTML\Users; use Psr\Container\ContainerInterface; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Component class for com_users * * @since 4.0.0 / class UsersComponent extends MVCComponent implements BootableExtensionInterface, RouterServiceInterface, FieldsFormServiceInterface { use FieldsServiceTrait; use RouterServiceTrait; use HTMLRegistryAwareTrait; /* * Booting the extension. This is the function to set up the environment of the extension like * registering new class loaders, etc. * * If required, some initial set up can be done from services of the container, eg. * registering HTML services. * * @param ContainerInterface $container The container * * @return void * * @since 4.0.0 / public function boot(ContainerInterface $container) { $this->getRegistry()->register('users', new Users()); } /* * Returns a valid section for the given section. If it is not valid then null is returned. * * @param string $section The section to get the mapping for * @param object\|null $item The content item or null * * @return string\|null The new section or null * * @since 4.0.0 / public function validateSection($section, $item = null) { if (Factory::getApplication()->isClient('site')) { switch ($section) { case 'registration': case 'profile': return 'user'; } } if ($section === 'user') { return $section; } // We don't know other sections. return null; } /* * Returns valid contexts. * * @return array Associative array with contexts as keys and translated strings as values * * @since 4.0.0 / public function getContexts(): array { $language = Factory::getApplication()->getLanguage(); $language->load('com_users', JPATH_ADMINISTRATOR); return [ 'com_users.user' => $language->_('COM_USERS'), ]; } } PK��%�\�Sʉ��src/Extension/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\&��T��!��src/Controller/NoteController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\MVC\Controller\FormController; use Joomla\CMS\Versioning\VersionableControllerTrait; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User note controller class. * * @since 2.5 / class NoteController extends FormController { use VersionableControllerTrait; /* * The prefix to use with controller messages. * * @var string * @since 2.5 / protected $text_prefix = 'COM_USERS_NOTE'; /* * Gets the URL arguments to append to an item redirect. * * @param integer $recordId The primary key id for the item. * @param string $key The name of the primary key variable. * * @return string The arguments to append to the redirect URL. * * @since 2.5 / protected function getRedirectToItemAppend($recordId = null, $key = 'id') { $append = parent::getRedirectToItemAppend($recordId, $key); $userId = $this->input->get('u_id', 0, 'int'); if ($userId) { $append .= '&u_id=' . $userId; } return $append; } } PK��%�\nm��"��src/Controller/NotesController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\MVC\Controller\AdminController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User notes controller class. * * @since 2.5 / class NotesController extends AdminController { /* * The prefix to use with controller messages. * * @var string * @since 2.5 / protected $text_prefix = 'COM_USERS_NOTES'; /* * Method to get a model object, loading it if required. * * @param string $name The model name. Optional. * @param string $prefix The class prefix. Optional. * @param array $config Configuration array for model. Optional. * * @return \Joomla\CMS\MVC\Model\BaseDatabaseModel The model. * * @since 2.5 / public function getModel($name = 'Note', $prefix = 'Administrator', $config = ['ignore_request' => true]) { return parent::getModel($name, $prefix, $config); } } PK��%�\@�_q��q��!��src/Controller/MailController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Users mail controller. * * @since 1.6 / class MailController extends BaseController { /* * Send the mail * * @return void * * @since 1.6 / public function send() { // Redirect to admin index if mass mailer disabled in conf if ($this->app->get('massmailoff', 0) == 1) { $this->app->redirect(Route::_('index.php', false)); } // Check for request forgeries. $this->checkToken('request'); $model = $this->getModel('Mail'); if ($model->send()) { $type = 'message'; } else { $type = 'error'; } $msg = $model->getError(); $this->setRedirect('index.php?option=com_users&view=mail', $msg, $type); } /* * Cancel the mail * * @return void * * @since 1.6 / public function cancel() { // Check for request forgeries. $this->checkToken('request'); // Clear data from session. $this->app->setUserState('com_users.display.mail.data', null); $this->setRedirect('index.php?option=com_users&view=users'); } } PK��%�\��9� �� "��src/Controller/GroupController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Access\Access; use Joomla\CMS\MVC\Controller\FormController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User view level controller class. * * @since 1.6 / class GroupController extends FormController { /* * @var string The prefix to use with controller messages. * @since 1.6 / protected $text_prefix = 'COM_USERS_GROUP'; /* * Method to check if you can save a new or existing record. * * Overrides Joomla\CMS\MVC\Controller\FormController::allowSave to check the core.admin permission. * * @param array $data An array of input data. * @param string $key The name of the key for the primary key. * * @return boolean * * @since 1.6 / protected function allowSave($data, $key = 'id') { return $this->app->getIdentity()->authorise('core.admin', $this->option) && parent::allowSave($data, $key); } /* * Overrides Joomla\CMS\MVC\Controller\FormController::allowEdit * * Checks that non-Super Admins are not editing Super Admins. * * @param array $data An array of input data. * @param string $key The name of the key for the primary key. * * @return boolean * * @since 1.6 / protected function allowEdit($data = [], $key = 'id') { // Check if this group is a Super Admin if (Access::checkGroup($data[$key], 'core.admin')) { // If I'm not a Super Admin, then disallow the edit. if (!$this->app->getIdentity()->authorise('core.admin')) { return false; } } return parent::allowEdit($data, $key); } } PK��%�\�kq��"��src/Controller/LevelController.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Administrator\Controller; use Joomla\CMS\Access\Access; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\FormController; use Joomla\CMS\Router\Route; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * User view level controller class. * * @since 1.6 / class LevelController extends FormController { /* * @var string The prefix to use with controller messages. * @since 1.6 / protected $text_prefix = 'COM_USERS_LEVEL'; /* * Method to check if you can save a new or existing record. * * Overrides Joomla\CMS\MVC\Controller\FormController::allowSave to check the core.admin permission. * * @param array $data An array of input data. * @param string $key The name of the key for the primary key. * * @return boolean * * @since 1.6 / protected function allowSave($data, $key = 'id') { return $this->app->getIdentity()->authorise('core.admin', $this->option) && parent::allowSave($data, $key); } /* * Overrides JControllerForm::allowEdit * * Checks that non-Super Admins are not editing Super Admins. * * @param array $data An array of input data. * @param string $key The name of the key for the primary key. * * @return boolean * * @since 3.8.8 / protected function allowEdit($data = [], $key = 'id') { // Check for if Super Admin can edit $viewLevel = $this->getModel('Level', 'Administrator')->getItem((int) $data['id']); // If this group is super admin and this user is not super admin, canEdit is false if (!$this->app->getIdentity()->authorise('core.admin') && $viewLevel->rules && Access::checkGroup($viewLevel->rules[0], 'core.admin')) { $this->setMessage(Text::_('JLIB_APPLICATION_ERROR_EDIT_NOT_PERMITTED'), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ) ); return false; } return parent::allowEdit($data, $key); } /* * Removes an item. * * Overrides Joomla\CMS\MVC\Controller\FormController::delete to check the core.admin permission. * * @return void * * @since 1.6 / public function delete() { // Check for request forgeries. $this->checkToken(); $ids = (array) $this->input->get('cid', [], 'int'); // Remove zero values resulting from input filter $ids = array_filter($ids); if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); } if (empty($ids)) { $this->setMessage(Text::_('COM_USERS_NO_LEVELS_SELECTED'), 'warning'); } else { // Get the model. $model = $this->getModel(); // Remove the items. if ($model->delete($ids)) { $this->setMessage(Text::plural('COM_USERS_N_LEVELS_DELETED', \count($ids))); } } $this->setRedirect('index.php?option=com_users&view=levels'); } } PK��%�\E�[�� tmpl/mail/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var Joomla\Component\Users\Administrator\View\Mail\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); $comUserParams = ComponentHelper::getParams('com_users'); ?> <form action="<?php echo Route::_('index.php?option=com_users&view=mail'); ?>" name="adminForm" method="post" id="mail-form" aria-label="<?php echo Text::_('COM_USERS_MASSMAIL_FORM_NEW'); ?>" class="main-card p-4 form-validate"> <div class="row"> <div class="col-lg-9"> <div class="control-group"> <?php echo $this->form->getLabel('subject'); ?> <span class="input-group"> <?php if (!empty($comUserParams->get('mailSubjectPrefix'))) : ?> <span class="input-group-text"><?php echo $comUserParams->get('mailSubjectPrefix'); ?></span> <?php endif; ?> <?php echo $this->form->getInput('subject'); ?> </span> </div> <div class="control-group"> <?php echo $this->form->getLabel('message'); ?> <?php echo $this->form->getInput('message'); ?> <?php if (!empty($comUserParams->get('mailBodySuffix'))) : ?> <div class="mt-1 card"> <div class="card-body"> <?php echo $comUserParams->get('mailBodySuffix'); ?> </div> </div> <?php endif; ?> </div> </div> <div class="col-lg-3"> <?php echo $this->form->renderField('recurse'); ?> <?php echo $this->form->renderField('mode'); ?> <?php echo $this->form->renderField('disabled'); ?> <?php echo $this->form->renderField('bcc'); ?> <?php echo $this->form->renderField('group'); ?> </div> </div> <input type="hidden" name="task" value=""> <?php echo HTMLHelper::_('form.token'); ?> </form> PK��%�\J��tmpl/mail/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_MAIL_VIEW_DEFAULT_TITLE"> <message> <![CDATA[COM_USERS_MAIL_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��%�\�Sʉ��tmpl/mail/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\��'��tmpl/note/edit.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_NOTE_VIEW_EDIT_TITLE"> <message> <![CDATA[COM_USERS_NOTE_VIEW_EDIT_DESC]]> </message> </layout> </metadata> PK��%�\4� � �� tmpl/note/edit.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Administrator\View\Note\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); ?> <form action="<?php echo Route::_('index.php?option=com_users&view=note&id=' . (int) $this->item->id); ?>" method="post" name="adminForm" id="note-form" aria-label="<?php echo Text::_('COM_USERS_NOTE_FORM_' . ((int) $this->item->id === 0 ? 'NEW' : 'EDIT'), true); ?>" class="form-validate"> <fieldset class="adminform"> <div class="card mt-4"> <div class="card-body"> <div class="row"> <div class="form-grid"> <?php echo $this->form->renderField('subject'); ?> <?php echo $this->form->renderField('user_id'); ?> <?php echo $this->form->renderField('catid'); ?> <?php echo $this->form->renderField('state'); ?> <?php echo $this->form->renderField('review_time'); ?> <?php echo $this->form->renderField('version_note'); ?> <input type="hidden" name="task" value=""> <?php echo HTMLHelper::_('form.token'); ?> </div> <div class="col-12"> <?php echo $this->form->renderField('body'); ?> </div> </div> </div> </div> </fieldset> </form> PK��%�\�Sʉ��tmpl/note/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\G��tmpl/group/edit.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_GROUP_VIEW_EDIT_TITLE"> <message> <![CDATA[COM_USERS_GROUP_VIEW_EDIT_DESC]]> </message> </layout> </metadata> PK��%�\G��tmpl/group/edit.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Administrator\View\Group\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); $this->useCoreUI = true; ?> <form action="<?php echo Route::_('index.php?option=com_users&layout=edit&id=' . (int) $this->item->id); ?>" method="post" name="adminForm" id="group-form" aria-label="<?php echo Text::_('COM_USERS_GROUP_FORM_' . ((int) $this->item->id === 0 ? 'NEW' : 'EDIT'), true); ?>" class="main-card form-validate"> <?php echo HTMLHelper::_('uitab.startTabSet', 'myTab', ['active' => 'details', 'recall' => true, 'breakpoint' => 768]); ?> <?php echo HTMLHelper::_('uitab.addTab', 'myTab', 'details', Text::_('COM_USERS_USERGROUP_DETAILS')); ?> <div class="form-grid"> <?php echo $this->form->renderField('title'); ?> <?php echo $this->form->renderField('parent_id'); ?> </div> <?php echo HTMLHelper::_('uitab.endTab'); ?> <?php $this->ignore_fieldsets = ['group_details']; ?> <?php echo LayoutHelper::render('joomla.edit.params', $this); ?> <?php echo HTMLHelper::_('uitab.endTabSet'); ?> <input type="hidden" name="task" value=""> <?php echo HTMLHelper::_('form.token'); ?> </form> PK��%�\�Sʉ��tmpl/group/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\(��tmpl/level/edit.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_LEVEL_VIEW_EDIT_TITLE"> <message> <![CDATA[COM_USERS_LEVEL_VIEW_EDIT_DESC]]> </message> </layout> </metadata> PK��%�\�~m" ��" ��tmpl/level/edit.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Administrator\View\Level\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); ?> <form action="<?php echo Route::_('index.php?option=com_users&id=' . (int) $this->item->id); ?>" method="post" name="adminForm" id="level-form" aria-label="<?php echo Text::_('COM_USERS_LEVEL_FORM_' . ((int) $this->item->id === 0 ? 'NEW' : 'EDIT'), true); ?>" class="form-validate main-card"> <?php echo HTMLHelper::_('uitab.startTabSet', 'myTab', ['active' => 'details', 'recall' => true, 'breakpoint' => 768]); ?> <?php echo HTMLHelper::_('uitab.addTab', 'myTab', 'details', Text::_('COM_USERS_LEVEL_DETAILS')); ?> <fieldset class="options-form"> <legend><?php echo Text::_('COM_USERS_LEVEL_DETAILS'); ?></legend> <div class="control-group"> <div class="control-label"> <?php echo $this->form->getLabel('title'); ?> </div> <div class="controls"> <?php echo $this->form->getInput('title'); ?> </div> </div> </fieldset> <?php echo HTMLHelper::_('uitab.endTab'); ?> <?php echo HTMLHelper::_('uitab.addTab', 'myTab', 'groups', Text::_('COM_USERS_USER_GROUPS_HAVING_ACCESS')); ?> <fieldset class="options-form"> <legend><?php echo Text::_('COM_USERS_USER_GROUPS_HAVING_ACCESS'); ?></legend> <div> <?php echo HTMLHelper::_('access.usergroups', 'jform[rules]', $this->item->rules, true); ?> </div> </fieldset> <?php echo HTMLHelper::_('uitab.endTab'); ?> <?php echo HTMLHelper::_('uitab.endTabSet'); ?> <input type="hidden" name="task" value=""> <?php echo HTMLHelper::_('form.token'); ?> </form> PK��%�\�Sʉ��tmpl/level/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\��_��tmpl/levels/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Access\Access; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Router\Route; use Joomla\CMS\Session\Session; use Joomla\Component\Users\Administrator\Helper\UsersHelper; /* @var \Joomla\Component\Users\Administrator\View\Levels\HtmlView $this / /* @var \Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('table.columns') ->useScript('multiselect'); $user = $this->getCurrentUser(); $listOrder = $this->escape($this->state->get('list.ordering')); $listDirn = $this->escape($this->state->get('list.direction')); $saveOrder = $listOrder == 'a.ordering'; if ($saveOrder && !empty($this->items)) { $saveOrderingUrl = 'index.php?option=com_users&task=levels.saveOrderAjax&tmpl=component&' . Session::getFormToken() . '=1'; HTMLHelper::_('draggablelist.draggable'); } ?> <form action="<?php echo Route::_('index.php?option=com_users&view=levels'); ?>" method="post" id="adminForm" name="adminForm"> <div class="row"> <div class="col-md-12"> <div id="j-main-container" class="j-main-container"> <?php echo LayoutHelper::render('joomla.searchtools.default', ['view' => $this, 'options' => ['filterButton' => false]]); ?> <?php if (empty($this->items)) : ?> <div class="alert alert-info"> <span class="icon-info-circle" aria-hidden="true"></span><span class="visually-hidden"><?php echo Text::_('INFO'); ?></span> <?php echo Text::_('JGLOBAL_NO_MATCHING_RESULTS'); ?> </div> <?php else : ?> <table class="table" id="levelList"> <caption class="visually-hidden"> <?php echo Text::_('COM_USERS_LEVELS_TABLE_CAPTION'); ?>, <span id="orderedBy"><?php echo Text::_('JGLOBAL_SORTED_BY'); ?> </span>, <span id="filteredBy"><?php echo Text::_('JGLOBAL_FILTERED_BY'); ?></span> </caption> <thead> <tr> <td class="w-1 text-center"> <?php echo HTMLHelper::_('grid.checkall'); ?> </td> <th scope="col" class="w-1 text-center d-none d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', '', 'a.ordering', $listDirn, $listOrder, null, 'asc', 'JGRID_HEADING_ORDERING', 'icon-sort'); ?> </th> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_LEVEL_NAME', 'a.title', $listDirn, $listOrder); ?> </th> <th scope="col" class="d-none d-md-table-cell"> <?php echo Text::_('COM_USERS_USER_GROUPS_HAVING_ACCESS'); ?> </th> <th scope="col" class="w-1 d-none d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'JGRID_HEADING_ID', 'a.id', $listDirn, $listOrder); ?> </th> </tr> </thead> <tbody<?php if ($saveOrder) : ?> class="js-draggable" data-url="<?php echo $saveOrderingUrl; ?>" data-direction="<?php echo strtolower($listDirn); ?>"<?php endif; ?>> <?php $count = count($this->items); ?> <?php foreach ($this->items as $i => $item) : $ordering = ($listOrder == 'a.ordering'); $canCreate = $user->authorise('core.create', 'com_users'); $canEdit = $user->authorise('core.edit', 'com_users'); $canChange = $user->authorise('core.edit.state', 'com_users'); // Decode level groups $groups = json_decode($item->rules); // If this group is super admin and this user is not super admin, $canEdit is false if (!$this->getCurrentUser()->authorise('core.admin') && $groups && Access::checkGroup($groups[0], 'core.admin')) { $canEdit = false; $canChange = false; } ?> <tr class="row<?php echo $i % 2; ?>"> <td class="text-center"> <?php if ($canEdit) : ?> <?php echo HTMLHelper::_('grid.id', $i, $item->id, false, 'cid', 'cb', $item->title); ?> <?php endif; ?> </td> <td class="text-center d-none d-md-table-cell"> <?php $iconClass = ''; if (!$canChange) { $iconClass = ' inactive'; } elseif (!$saveOrder) { $iconClass = ' inactive" title="' . Text::_('JORDERINGDISABLED'); } ?> <span class="sortable-handler<?php echo $iconClass ?>"> <span class="icon-ellipsis-v" aria-hidden="true"></span> </span> <?php if ($canChange && $saveOrder) : ?> <input type="text" name="order[]" size="5" value="<?php echo $item->ordering; ?>" class="width-20 text-area-order hidden"> <?php endif; ?> </td> <th scope="row"> <?php if ($canEdit) : ?> <a href="<?php echo Route::_('index.php?option=com_users&task=level.edit&id=' . $item->id); ?>" title="<?php echo Text::_('JACTION_EDIT'); ?> <?php echo $this->escape($item->title); ?>"> <?php echo $this->escape($item->title); ?></a> <?php else : ?> <?php echo $this->escape($item->title); ?> <?php endif; ?> </th> <td class="d-none d-md-table-cell"> <?php echo UsersHelper::getVisibleByGroups($item->rules); ?> </td> <td class="d-none d-md-table-cell"> <?php echo (int) $item->id; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> <?php // load the pagination. ?> <?php echo $this->pagination->getListFooter(); ?> <?php endif; ?> <input type="hidden" name="task" value=""> <input type="hidden" name="boxchecked" value="0"> <?php echo HTMLHelper::_('form.token'); ?> </div> </div> </div> </form> PK��%�\۽j ��tmpl/levels/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_LEVELS_VIEW_DEFAULT_TITLE"> <message> <![CDATA[COM_USERS_LEVELS_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��%�\�Sʉ��tmpl/levels/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\I��X ��X ��tmpl/debuguser/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Administrator\View\Debuguser\HtmlView $this / $listOrder = $this->escape($this->state->get('list.ordering')); $listDirn = $this->escape($this->state->get('list.direction')); /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('table.columns'); ?> <form action="<?php echo Route::_('index.php?option=com_users&view=debuguser&user_id=' . (int) $this->state->get('user_id')); ?>" method="post" name="adminForm" id="adminForm"> <div id="j-main-container" class="j-main-container"> <?php echo LayoutHelper::render('joomla.searchtools.default', ['view' => $this]); ?> <?php if (empty($this->items)) : ?> <div class="alert alert-info"> <span class="icon-info-circle" aria-hidden="true"></span><span class="visually-hidden"><?php echo Text::_('INFO'); ?></span> <?php echo Text::_('JGLOBAL_NO_MATCHING_RESULTS'); ?> </div> <?php else : ?> <?php // Split the actions table $loginActions = []; $actions = []; foreach ($this->actions as $action) : $name = $action[0]; if (in_array($name, ['core.login.site', 'core.login.admin', 'core.login.api', 'core.login.offline'])) : $loginActions[] = $action; else : $actions[] = $action; endif; endforeach; ?> <div class="d-flex flex-wrap"> <?php foreach ($loginActions as $action) : $name = $action[0]; $check = $this->items[0]->checks[$name]; if ($check === true) : $class = 'text-success icon-check'; $button = 'btn-success'; $text = Text::_('COM_USERS_DEBUG_EXPLICIT_ALLOW'); elseif ($check === false) : $class = 'text-danger icon-times'; $button = 'btn-danger'; $text = Text::_('COM_USERS_DEBUG_EXPLICIT_DENY'); elseif ($check === null) : $class = 'text-danger icon-minus-circle'; $button = 'btn-warning'; $text = Text::_('COM_USERS_DEBUG_IMPLICIT_DENY'); endif; ?> <div class="d-inline p-2"> <?php echo Text::_($action[1]); ?> <span class="<?php echo $class; ?>" aria-hidden="true"></span> <span class="visually-hidden"><?php echo Text::_($text); ?></span> </div> <?php endforeach; ?> </div> <table class="table"> <caption class="visually-hidden"> <?php echo Text::_('COM_USERS_DEBUG_USER_TABLE_CAPTION'); ?>, <span id="orderedBy"><?php echo Text::_('JGLOBAL_SORTED_BY'); ?> </span>, <span id="filteredBy"><?php echo Text::_('JGLOBAL_FILTERED_BY'); ?></span> </caption> <thead> <tr> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_ASSET_TITLE', 'a.title', $listDirn, $listOrder); ?> </th> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_ASSET_NAME', 'a.name', $listDirn, $listOrder); ?> </th> <?php foreach ($actions as $key => $action) : ?> <th scope="col" class="w-6 text-center"> <?php echo Text::_($action[1]); ?> </th> <?php endforeach; ?> <th scope="col" class="w-6"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_LFT', 'a.lft', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-3"> <?php echo HTMLHelper::_('searchtools.sort', 'JGRID_HEADING_ID', 'a.id', $listDirn, $listOrder); ?> </th> </tr> </thead> <tbody> <?php foreach ($this->items as $i => $item) :?> <tr class="row0" scope="row"> <td> <?php echo $this->escape(Text::_($item->title)); ?> </td> <td> <?php echo LayoutHelper::render('joomla.html.treeprefix', ['level' => $item->level + 1]) . $this->escape($item->name); ?> </td> <?php foreach ($actions as $action) : ?> <?php $name = $action[0]; $check = $item->checks[$name]; if ($check === true) : $class = 'text-success icon-check'; $button = 'btn-success'; $text = Text::_('COM_USERS_DEBUG_EXPLICIT_ALLOW'); elseif ($check === false) : $class = 'text-danger icon-times'; $button = 'btn-danger'; $text = Text::_('COM_USERS_DEBUG_EXPLICIT_DENY'); elseif ($check === null) : $class = 'text-danger icon-minus-circle'; $button = 'btn-warning'; $text = Text::_('COM_USERS_DEBUG_IMPLICIT_DENY'); else : $class = ''; $button = ''; $text = ''; endif; ?> <td class="text-center"> <span class="<?php echo $class; ?>" aria-hidden="true"></span> <span class="visually-hidden"> <?php echo $text; ?></span> </td> <?php endforeach; ?> <td> <?php echo (int) $item->lft; ?> - <?php echo (int) $item->rgt; ?> </td> <td> <?php echo (int) $item->id; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> <div class="legend"> <span class="text-danger icon-minus-circle" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_DEBUG_IMPLICIT_DENY'); ?>  <span class="text-success icon-check" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_DEBUG_EXPLICIT_ALLOW'); ?>  <span class="text-danger icon-times" aria-hidden="true"> </span><?php echo Text::_('COM_USERS_DEBUG_EXPLICIT_DENY'); ?> </div> <?php // load the pagination. ?> <?php echo $this->pagination->getListFooter(); ?> <input type="hidden" name="task" value=""> <input type="hidden" name="boxchecked" value="0"> <?php echo HTMLHelper::_('form.token'); ?> <?php endif; ?> </div> </form> PK��%�\�Sʉ��tmpl/debuguser/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\A�i��tmpl/user/edit_groups.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2008 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\Component\Users\Administrator\View\User\HtmlView; /* @var HtmlView $this / echo HTMLHelper::_('access.usergroups', 'jform[groups]', $this->groups, true); PK��%�\��tmpl/user/edit.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_USER_VIEW_EDIT_TITLE"> <message> <![CDATA[COM_USERS_USER_VIEW_EDIT_DESC]]> </message> </layout> </metadata> PK��%�\�#�q��tmpl/user/edit.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2008 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Factory; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Router\Route; /* @var Joomla\Component\Users\Administrator\View\User\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('keepalive') ->useScript('form.validate'); $input = Factory::getApplication()->getInput(); // Get the form fieldsets. $fieldsets = $this->form->getFieldsets(); $settings = []; $this->useCoreUI = true; ?> <form action="<?php echo Route::_('index.php?option=com_users&layout=edit&id=' . (int) $this->item->id); ?>" method="post" name="adminForm" id="user-form" enctype="multipart/form-data" aria-label="<?php echo Text::_('COM_USERS_USER_FORM_' . ((int) $this->item->id === 0 ? 'NEW' : 'EDIT'), true); ?>" class="form-validate"> <h2><?php echo $this->escape($this->form->getValue('name', null, Text::_('COM_USERS_USER_NEW_USER_TITLE'))); ?></h2> <div class="main-card"> <?php echo HTMLHelper::_('uitab.startTabSet', 'myTab', ['active' => 'details', 'recall' => true, 'breakpoint' => 768]); ?> <?php echo HTMLHelper::_('uitab.addTab', 'myTab', 'details', Text::_('COM_USERS_USER_ACCOUNT_DETAILS')); ?> <fieldset class="options-form"> <legend><?php echo Text::_('COM_USERS_USER_ACCOUNT_DETAILS'); ?></legend> <div class="form-grid"> <?php echo $this->form->renderFieldset('user_details'); ?> </div> </fieldset> <?php echo HTMLHelper::_('uitab.endTab'); ?> <?php if ($this->grouplist) : ?> <?php echo HTMLHelper::_('uitab.addTab', 'myTab', 'groups', Text::_('COM_USERS_ASSIGNED_GROUPS')); ?> <fieldset id="fieldset-groups" class="options-form"> <legend><?php echo Text::_('COM_USERS_ASSIGNED_GROUPS'); ?></legend> <div> <?php echo $this->loadTemplate('groups'); ?> </div> </fieldset> <?php echo HTMLHelper::_('uitab.endTab'); ?> <?php endif; ?> <?php $this->ignore_fieldsets = ['user_details']; echo LayoutHelper::render('joomla.edit.params', $this); ?> <?php if (!empty($this->mfaConfigurationUI)) : ?> <?php echo HTMLHelper::_('uitab.addTab', 'myTab', 'multifactorauth', Text::_('COM_USERS_USER_MULTIFACTOR_AUTH')); ?> <fieldset class="options-form"> <legend><?php echo Text::_('COM_USERS_USER_MULTIFACTOR_AUTH'); ?></legend> <?php echo $this->mfaConfigurationUI ?> </fieldset> <?php echo HTMLHelper::_('uitab.endTab'); ?> <?php endif; ?> <?php echo HTMLHelper::_('uitab.endTabSet'); ?> </div> <input type="hidden" name="task" value=""> <input type="hidden" name="return" value="<?php echo $input->getBase64('return'); ?>"> <?php echo HTMLHelper::_('form.token'); ?> </form> PK��%�\�Sʉ��tmpl/user/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\,��!��!��tmpl/groups/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Access\Access; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Administrator\View\Groups\HtmlView $this / $user = $this->getCurrentUser(); $listOrder = $this->escape($this->state->get('list.ordering')); $listDirn = $this->escape($this->state->get('list.direction')); Text::script('COM_USERS_GROUPS_CONFIRM_DELETE', true); /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('com_users.admin-users-groups') ->useScript('multiselect') ->useScript('table.columns'); ?> <form action="<?php echo Route::_('index.php?option=com_users&view=groups'); ?>" method="post" name="adminForm" id="adminForm"> <div class="row"> <div class="col-md-12"> <div id="j-main-container" class="j-main-container"> <?php echo LayoutHelper::render('joomla.searchtools.default', ['view' => $this, 'options' => ['filterButton' => false]]); ?> <?php if (empty($this->items)) : ?> <div class="alert alert-info"> <span class="icon-info-circle" aria-hidden="true"></span><span class="visually-hidden"><?php echo Text::_('INFO'); ?></span> <?php echo Text::_('JGLOBAL_NO_MATCHING_RESULTS'); ?> </div> <?php else : ?> <table class="table" id="groupList"> <caption class="visually-hidden"> <?php echo Text::_('COM_USERS_GROUPS_TABLE_CAPTION'); ?>, <span id="orderedBy"><?php echo Text::_('JGLOBAL_SORTED_BY'); ?> </span>, <span id="filteredBy"><?php echo Text::_('JGLOBAL_FILTERED_BY'); ?></span> </caption> <thead> <tr> <td class="w-1 text-center"> <?php echo HTMLHelper::_('grid.checkall'); ?> </td> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_GROUP_TITLE', 'a.title', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-10 text-center"> <?php echo Text::_('COM_USERS_DEBUG_PERMISSIONS'); ?> </th> <th scope="col" class="w-10 text-center d-none d-md-table-cell"> <span class="icon-check" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_COUNT_ENABLED_USERS'); ?> </th> <th scope="col" class="w-10 text-center d-none d-md-table-cell"> <span class="icon-times" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_COUNT_DISABLED_USERS'); ?> </th> <th scope="col" class="w-5 d-none d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'JGRID_HEADING_ID', 'a.id', $listDirn, $listOrder); ?> </th> </tr> </thead> <tbody> <?php foreach ($this->items as $i => $item) : $canCreate = $user->authorise('core.create', 'com_users'); $canEdit = $user->authorise('core.edit', 'com_users'); // If this group is super admin and this user is not super admin, $canEdit is false if (!$user->authorise('core.admin') && Access::checkGroup($item->id, 'core.admin')) { $canEdit = false; } $canChange = $user->authorise('core.edit.state', 'com_users'); ?> <tr class="row<?php echo $i % 2; ?>"> <td class="text-center" data-usercount="<?php echo $item->user_count; ?>"> <?php if ($canEdit) : ?> <?php echo HTMLHelper::_('grid.id', $i, $item->id, false, 'cid', 'cb', $item->title); ?> <?php endif; ?> </td> <th scope="row"> <?php echo LayoutHelper::render('joomla.html.treeprefix', ['level' => $item->level + 1]); ?> <?php if ($canEdit) : ?> <a href="<?php echo Route::_('index.php?option=com_users&task=group.edit&id=' . $item->id); ?>" title="<?php echo Text::_('JACTION_EDIT'); ?> <?php echo $this->escape($item->title); ?>"> <?php echo $this->escape($item->title); ?></a> <?php else : ?> <?php echo $this->escape($item->title); ?> <?php endif; ?> </th> <td class="text-center btns"> <a href="<?php echo Route::_('index.php?option=com_users&view=debuggroup&group_id=' . (int) $item->id); ?>"> <span class="icon-list" aria-hidden="true"></span> <span class="visually-hidden"><?php echo Text::_('COM_USERS_DEBUG_PERMISSIONS'); ?></span> </a> </td> <td class="text-center btns itemnumber d-none d-md-table-cell"> <a class="btn <?php echo $item->count_enabled > 0 ? 'btn-success' : 'btn-secondary'; ?>" href="<?php echo Route::_('index.php?option=com_users&view=users&filter[group_id]=' . (int) $item->id . '&filter[state]=0'); ?>" aria-describedby="tip-enabled<?php echo $i; ?>"> <?php echo $item->count_enabled; ?> </a> <div role="tooltip" id="tip-enabled<?php echo $i; ?>"> <?php echo Text::_('COM_USERS_COUNT_ENABLED_USERS'); ?> </div> </td> <td class="text-center btns itemnumber d-none d-md-table-cell"> <a class="btn <?php echo $item->count_disabled > 0 ? 'btn-danger' : 'btn-secondary'; ?>" href="<?php echo Route::_('index.php?option=com_users&view=users&filter[group_id]=' . (int) $item->id . '&filter[state]=1'); ?>" aria-describedby="tip-blocked<?php echo $i; ?>"> <?php echo $item->count_disabled; ?> </a> <div role="tooltip" id="tip-blocked<?php echo $i; ?>"> <?php echo Text::_('COM_USERS_COUNT_DISABLED_USERS'); ?> </div> </td> <td class="d-none d-md-table-cell"> <?php echo (int) $item->id; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> <?php // load the pagination. ?> <?php echo $this->pagination->getListFooter(); ?> <?php endif; ?> <input type="hidden" name="task" value=""> <input type="hidden" name="boxchecked" value="0"> <?php echo HTMLHelper::_('form.token'); ?> </div> </div> </div> </form> PK��%�\��tmpl/groups/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_GROUPS_VIEW_DEFAULT_TITLE"> <message> <![CDATA[COM_USERS_GROUPS_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��%�\�Sʉ��tmpl/groups/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\K��g��g��tmpl/users/modal.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Factory; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Administrator\View\Users\HtmlView $this / /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('multiselect')->useScript('modal-content-select'); $input = Factory::getApplication()->getInput(); $field = $input->getCmd('field', ''); $listOrder = $this->escape($this->state->get('list.ordering', '')); $listDirn = $this->escape($this->state->get('list.direction', '')); $enabledStates = [0 => 'icon-check', 1 => 'icon-times']; $activatedStates = [0 => 'icon-check', 1 => 'icon-times']; $userRequired = (int) $input->get('required', 0, 'int'); ?> <div class="container-popup"> <form action="<?php echo Route::_('index.php?option=com_users&view=users&layout=modal&tmpl=component&groups=' . $input->get('groups', '', 'BASE64') . '&excluded=' . $input->get('excluded', '', 'BASE64')); ?>" method="post" name="adminForm" id="adminForm"> <?php if (!$userRequired) : ?> <div> <button type="button" class="btn btn-primary button-select" data-content-select data-content-type="com_users.user" data-id="" data-name="" data-user-value="" data-user-name="" data-user-field="<?php echo $this->escape($field); ?>"><?php echo Text::_('JOPTION_NO_USER'); ?></button>  </div> <?php endif; ?> <?php echo LayoutHelper::render('joomla.searchtools.default', ['view' => $this]); ?> <?php if (empty($this->items)) : ?> <div class="alert alert-info"> <span class="icon-info-circle" aria-hidden="true"></span><span class="visually-hidden"><?php echo Text::_('INFO'); ?></span> <?php echo Text::_('JGLOBAL_NO_MATCHING_RESULTS'); ?> </div> <?php else : ?> <table class="table table-sm"> <caption class="visually-hidden"> <?php echo Text::_('COM_USERS_USERS_TABLE_CAPTION'); ?>, <span id="orderedBy"><?php echo Text::_('JGLOBAL_SORTED_BY'); ?> </span>, <span id="filteredBy"><?php echo Text::_('JGLOBAL_FILTERED_BY'); ?></span> </caption> <thead> <tr> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_NAME', 'a.name', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-25"> <?php echo HTMLHelper::_('searchtools.sort', 'JGLOBAL_USERNAME', 'a.username', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-1 text-center"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_ENABLED', 'a.block', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-1 text-center"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_ACTIVATED', 'a.activation', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-25"> <?php echo Text::_('COM_USERS_HEADING_GROUPS'); ?> </th> <th scope="col" class="w-1"> <?php echo HTMLHelper::_('searchtools.sort', 'JGRID_HEADING_ID', 'a.id', $listDirn, $listOrder); ?> </th> </tr> </thead> <tbody> <?php $i = 0; ?> <?php foreach ($this->items as $item) : $attribs = 'data-content-select data-content-type="com_users.user"' . ' data-id="' . ((int) $item->id) . '"' . ' data-name="' . $this->escape($item->name) . '"' // @TODO: data-user-value, data-user-name, data-user-field is for backward compatibility, remove in Joomla 6 . ' data-user-value="' . ((int) $item->id) . '"' . ' data-user-name="' . $this->escape($item->name) . '"' . ' data-user-field="' . $this->escape($field) . '"'; ?> <tr class="row<?php echo $i % 2; ?>"> <th scope="row"> <a class="pointer button-select" href="#" <?php echo $attribs; ?>> <?php echo $this->escape($item->name); ?> </a> </th> <td> <?php echo $this->escape($item->username); ?> </td> <td class="text-center"> <span class="tbody-icon"> <span class="<?php echo $enabledStates[(int) $this->escape($item->block)]; ?>"></span> </span> </td> <td class="text-center"> <span class="tbody-icon"> <span class="<?php echo $activatedStates[(empty($item->activation) ? 0 : 1)]; ?>"></span> </span> </td> <td> <?php echo nl2br($item->group_names, false); ?> </td> <td> <?php echo (int) $item->id; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> <?php // load the pagination. ?> <?php echo $this->pagination->getListFooter(); ?> <?php endif; ?> <input type="hidden" name="task" value=""> <input type="hidden" name="field" value="<?php echo $this->escape($field); ?>"> <input type="hidden" name="boxchecked" value="0"> <input type="hidden" name="required" value="<?php echo $userRequired; ?>"> <?php echo HTMLHelper::_('form.token'); ?> </form> </div> PK��%�\��9��9��tmpl/users/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2007 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Access\Access; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Plugin\PluginHelper; use Joomla\CMS\Router\Route; use Joomla\CMS\String\PunycodeHelper; /* @var \Joomla\Component\Users\Administrator\View\Users\HtmlView $this / /* @var \Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('table.columns') ->useScript('multiselect'); $listOrder = $this->escape($this->state->get('list.ordering')); $listDirn = $this->escape($this->state->get('list.direction')); $loggeduser = $this->getCurrentUser(); $mfa = PluginHelper::isEnabled('multifactorauth'); ?> <form action="<?php echo Route::_('index.php?option=com_users&view=users'); ?>" method="post" name="adminForm" id="adminForm"> <div class="row"> <div class="col-md-12"> <div id="j-main-container" class="j-main-container"> <?php // Search tools bar echo LayoutHelper::render('joomla.searchtools.default', ['view' => $this]); ?> <?php if (empty($this->items)) : ?> <div class="alert alert-info"> <span class="icon-info-circle" aria-hidden="true"></span><span class="visually-hidden"><?php echo Text::_('INFO'); ?></span> <?php echo Text::_('JGLOBAL_NO_MATCHING_RESULTS'); ?> </div> <?php else : ?> <table class="table" id="userList"> <caption class="visually-hidden"> <?php echo Text::_('COM_USERS_USERS_TABLE_CAPTION'); ?>, <span id="orderedBy"><?php echo Text::_('JGLOBAL_SORTED_BY'); ?> </span>, <span id="filteredBy"><?php echo Text::_('JGLOBAL_FILTERED_BY'); ?></span> </caption> <thead> <tr> <td class="w-1 text-center"> <?php echo HTMLHelper::_('grid.checkall'); ?> </td> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_NAME', 'a.name', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-10 d-none d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'JGLOBAL_USERNAME', 'a.username', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-5 text-center d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_ENABLED', 'a.block', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-5 text-center d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_ACTIVATED', 'a.activation', $listDirn, $listOrder); ?> </th> <?php if ($mfa) : ?> <th scope="col" class="w-5 text-center d-none d-md-table-cell"> <?php echo Text::_('COM_USERS_HEADING_MFA'); ?> </th> <?php endif; ?> <th scope="col" class="w-12 d-none d-md-table-cell"> <?php echo Text::_('COM_USERS_HEADING_GROUPS'); ?> </th> <th scope="col" class="w-12 d-none d-xl-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'JGLOBAL_EMAIL', 'a.email', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-12 d-none d-xl-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_LAST_VISIT_DATE', 'a.lastvisitDate', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-12 d-none d-xl-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_REGISTRATION_DATE', 'a.registerDate', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-5 d-none d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'JGRID_HEADING_ID', 'a.id', $listDirn, $listOrder); ?> </th> </tr> </thead> <tbody> <?php foreach ($this->items as $i => $item) : $canEdit = $this->canDo->get('core.edit'); $canChange = $loggeduser->authorise('core.edit.state', 'com_users'); // If this group is super admin and this user is not super admin, $canEdit is false if ((!$loggeduser->authorise('core.admin')) && Access::check($item->id, 'core.admin')) { $canEdit = false; $canChange = false; } ?> <tr class="row<?php echo $i % 2; ?>"> <td class="text-center"> <?php if ($canEdit \|\| $canChange) : ?> <?php echo HTMLHelper::_('grid.id', $i, $item->id, false, 'cid', 'cb', $item->name); ?> <?php endif; ?> </td> <th scope="row"> <div class="name break-word"> <?php if ($canEdit) : ?> <a href="<?php echo Route::_('index.php?option=com_users&task=user.edit&id=' . (int) $item->id); ?>" title="<?php echo Text::sprintf('COM_USERS_EDIT_USER', $this->escape($item->name)); ?>"> <?php echo $this->escape($item->name); ?></a> <?php else : ?> <?php echo $this->escape($item->name); ?> <?php endif; ?> </div> <div class="btn-group"> <?php echo HTMLHelper::_('users.addNote', $item->id); ?> <?php if ($item->note_count > 0) : ?> <button type="button" class="btn btn-secondary btn-sm dropdown-toggle dropdown-toggle-split" data-bs-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <span class="visually-hidden"><?php echo Text::_('JGLOBAL_TOGGLE_DROPDOWN'); ?></span> </button> <div class="dropdown-menu"> <?php echo HTMLHelper::_('users.filterNotes', $item->note_count, $item->id); ?> <?php echo HTMLHelper::_('users.notes', $item->note_count, $item->id); ?> </div> <?php endif; ?> </div> <?php echo HTMLHelper::_('users.notesModal', $item->note_count, $item->id); ?> <?php if ($item->requireReset == '1') : ?> <span class="badge bg-warning"><?php echo Text::_('COM_USERS_PASSWORD_RESET_REQUIRED'); ?></span> <?php endif; ?> </th> <td class="break-word d-none d-md-table-cell"> <?php echo $this->escape($item->username); ?> </td> <td class="text-center d-md-table-cell"> <?php $self = $loggeduser->id == $item->id; ?> <?php if ($canChange) : ?> <?php echo HTMLHelper::_('jgrid.state', HTMLHelper::_('users.blockStates', $self), $item->block, $i, 'users.', !$self); ?> <?php else : ?> <?php echo HTMLHelper::_('jgrid.state', HTMLHelper::_('users.blockStates', $self), $item->block, $i, 'users.', false); ?> <?php endif; ?> </td> <td class="text-center d-md-table-cell"> <?php if (empty($item->activation)) : ?> <span class="icon-check" aria-hidden="true" aria-describedby="tip-activated<?php echo $i; ?>"></span> <div role="tooltip" id="tip-activated<?php echo $i; ?>"> <?php echo Text::_('COM_USERS_ACTIVATED'); ?> </div> <?php else : ?> <?php echo HTMLHelper::_('jgrid.state', HTMLHelper::_('users.activateStates'), 1, $i, 'users.', true); ?> <?php endif; ?> </td> <?php if ($mfa) : ?> <td class="text-center d-none d-md-table-cell"> <?php if ($item->mfaRecords > 0 \|\| !empty($item->otpKey)) : ?> <span class="icon-check" aria-hidden="true" aria-describedby="tip-mfa<?php echo $i; ?>"></span> <div role="tooltip" id="tip-mfa<?php echo $i; ?>"> <?php echo Text::_('COM_USERS_MFA_ACTIVE'); ?> </div> <?php else : ?> <span class="icon-times" aria-hidden="true" aria-describedby="tip-mfa<?php echo $i; ?>"></span> <div role="tooltip" id="tip-mfa<?php echo $i; ?>"> <?php echo Text::_('COM_USERS_MFA_NOTACTIVE'); ?> </div> <?php endif; ?> </td> <?php endif; ?> <td class="d-none d-md-table-cell"> <?php if (substr_count($item->group_names, "\n") > 1) : ?> <span tabindex="0"><?php echo Text::_('COM_USERS_USERS_MULTIPLE_GROUPS'); ?></span> <div role="tooltip" id="tip<?php echo $i; ?>"> <strong><?php echo Text::_('COM_USERS_HEADING_GROUPS'); ?></strong> <ul><li><?php echo str_replace("\n", '</li><li>', $item->group_names); ?></li></ul> </div> <?php else : ?> <?php echo nl2br($item->group_names, false); ?> <?php endif; ?> <a class="btn btn-sm btn-secondary" href="<?php echo Route::_('index.php?option=com_users&view=debuguser&user_id=' . (int) $item->id); ?>"> <?php echo Text::_('COM_USERS_DEBUG_PERMISSIONS'); ?> </a> </td> <td class="d-none d-xl-table-cell break-word"> <?php echo $this->escape(PunycodeHelper::emailToUTF8($item->email)); ?> </td> <td class="d-none d-xl-table-cell"> <?php if ($item->lastvisitDate !== null) : ?> <?php echo HTMLHelper::_('date', $item->lastvisitDate, Text::_('DATE_FORMAT_LC6')); ?> <?php else : ?> <?php echo Text::_('JNEVER'); ?> <?php endif; ?> </td> <td class="d-none d-xl-table-cell"> <?php echo HTMLHelper::_('date', $item->registerDate, Text::_('DATE_FORMAT_LC6')); ?> </td> <td class="d-none d-md-table-cell"> <?php echo (int) $item->id; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> <?php // load the pagination. ?> <?php echo $this->pagination->getListFooter(); ?> <?php // Load the batch processing form if user is allowed ?> <?php if ( $loggeduser->authorise('core.create', 'com_users') && $loggeduser->authorise('core.edit', 'com_users') && $loggeduser->authorise('core.edit.state', 'com_users') ) : ?> <template id="joomla-dialog-batch"><?php echo $this->loadTemplate('batch_body'); ?></template> <?php endif; ?> <?php endif; ?> <input type="hidden" name="task" value=""> <input type="hidden" name="boxchecked" value="0"> <?php echo HTMLHelper::_('form.token'); ?> </div> </div> </div> </form> PK��%�\i��tmpl/users/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_USERS_VIEW_DEFAULT_TITLE"> <message> <![CDATA[COM_USERS_USERS_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��%�\M�̗� �� !��tmpl/users/default_batch_body.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2015 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; /* @var \Joomla\Component\Users\Administrator\View\Users\HtmlView $this / // Create the copy/move options. $options = [ HTMLHelper::_('select.option', 'add', Text::_('COM_USERS_BATCH_ADD')), HTMLHelper::_('select.option', 'del', Text::_('COM_USERS_BATCH_DELETE')), HTMLHelper::_('select.option', 'set', Text::_('COM_USERS_BATCH_SET')) ]; // Create the reset password options. $resetOptions = [ HTMLHelper::_('select.option', '', Text::_('COM_USERS_NO_ACTION')), HTMLHelper::_('select.option', 'yes', Text::_('JYES')), HTMLHelper::_('select.option', 'no', Text::_('JNO')) ]; /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('joomla.batch-copymove'); ?> <div class="p-3"> <div class="form-group"> <label id="batch-choose-action-lbl" class="control-label" for="batch-group-id"> <?php echo Text::_('COM_USERS_BATCH_GROUP'); ?> </label> <div id="batch-choose-action" class="combo controls"> <select class="form-select" name="batch[group_id]" id="batch-group-id"> <option value=""><?php echo Text::_('JSELECT'); ?></option> <?php echo HTMLHelper::_('select.options', HTMLHelper::_('user.groups')); ?> </select> </div> </div> <div class="form-group"> <fieldset> <legend> <?php echo Text::_('COM_USERS_BATCH_ACTIONS'); ?> </legend> <?php echo HTMLHelper::_('select.radiolist', $options, 'batch[group_action]', '', 'value', 'text', 'add'); ?> </fieldset> </div> <div class="form-group"> <fieldset id="batch-password-reset_id"> <legend> <?php echo Text::_('COM_USERS_REQUIRE_PASSWORD_RESET'); ?> </legend> <?php echo HTMLHelper::_('select.radiolist', $resetOptions, 'batch[reset_id]', '', 'value', 'text', ''); ?> </fieldset> </div> </div> <div class="btn-toolbar p-3"> <joomla-toolbar-button task="user.batch" class="ms-auto"> <button type="button" class="btn btn-success"><?php echo Text::_('JGLOBAL_BATCH_PROCESS'); ?></button> </joomla-toolbar-button> </div> PK��%�\�Sʉ��tmpl/users/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\&�8��tmpl/notes/modal.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; /* @var \Joomla\Component\Users\Administrator\View\Notes\HtmlView $this / ?> <div class="unotes"> <h1><?php echo Text::sprintf('COM_USERS_NOTES_FOR_USER', $this->user->name, $this->user->id); ?></h1> <?php if (empty($this->items)) : ?> <?php echo Text::_('COM_USERS_NO_NOTES'); ?> <?php else : ?> <ul class="alternating"> <?php foreach ($this->items as $item) : ?> <li> <div class="fltlft utitle"> <?php if ($item->subject) : ?> <h4><?php echo Text::sprintf('COM_USERS_NOTE_N_SUBJECT', (int) $item->id, $this->escape($item->subject)); ?></h4> <?php else : ?> <h4><?php echo Text::sprintf('COM_USERS_NOTE_N_SUBJECT', (int) $item->id, Text::_('COM_USERS_EMPTY_SUBJECT')); ?></h4> <?php endif; ?> </div> <div class="fltlft utitle"> <?php echo HTMLHelper::_('date', $item->created_time, Text::_('DATE_FORMAT_LC2')); ?> </div> <?php $category_image = $item->cparams->get('image'); ?> <?php if ($item->catid && isset($category_image)) : ?> <div class="fltlft utitle"> <?php echo HTMLHelper::_('users.image', $category_image); ?> </div> <div class="fltlft utitle"> <em><?php echo $this->escape($item->category_title); ?></em> </div> <?php endif; ?> <div class="clr"></div> <div class="ubody"> <?php echo (isset($item->body) ? HTMLHelper::_('content.prepare', $item->body) : ''); ?> </div> </li> <?php endforeach; ?> </ul> <?php endif; ?> </div> PK��%�\h3��J��J��tmpl/notes/emptystate.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2021 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\Layout\LayoutHelper; /* @var \Joomla\Component\Users\Administrator\View\Notes\HtmlView $this / $displayData = [ 'textPrefix' => 'COM_USERS_NOTES', 'formURL' => 'index.php?option=com_users&view=notes', 'helpURL' => 'https://docs.joomla.org/Special:MyLanguage/Help5.x:User_Notes', 'icon' => 'icon-users user', ]; if ($this->getCurrentUser()->authorise('core.create', 'com_users')) { $displayData['createURL'] = 'index.php?option=com_users&task=note.add'; } echo LayoutHelper::render('joomla.content.emptystate', $displayData); PK��%�\O� �>��>��tmpl/notes/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Administrator\View\Notes\HtmlView $this / /* @var \Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('table.columns') ->useScript('multiselect'); $user = $this->getCurrentUser(); $listOrder = $this->escape($this->state->get('list.ordering')); $listDirn = $this->escape($this->state->get('list.direction')); ?> <form action="<?php echo Route::_('index.php?option=com_users&view=notes'); ?>" method="post" name="adminForm" id="adminForm"> <div class="row"> <div class="col-md-12"> <div id="j-main-container" class="j-main-container"> <?php echo LayoutHelper::render('joomla.searchtools.default', ['view' => $this]); ?> <?php if (empty($this->items)) : ?> <div class="alert alert-info"> <span class="icon-info-circle" aria-hidden="true"></span><span class="visually-hidden"><?php echo Text::_('INFO'); ?></span> <?php echo Text::_('JGLOBAL_NO_MATCHING_RESULTS'); ?> </div> <?php else : ?> <table class="table"> <caption class="visually-hidden"> <?php echo Text::_('COM_USERS_NOTES_TABLE_CAPTION'); ?>, <span id="orderedBy"><?php echo Text::_('JGLOBAL_SORTED_BY'); ?> </span>, <span id="filteredBy"><?php echo Text::_('JGLOBAL_FILTERED_BY'); ?></span> </caption> <thead> <tr> <td class="w-1 text-center"> <?php echo HTMLHelper::_('grid.checkall'); ?> </td> <th scope="col" class="w-1 text-center"> <?php echo HTMLHelper::_('searchtools.sort', 'JSTATUS', 'a.state', $listDirn, $listOrder); ?> </th> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_SUBJECT', 'a.subject', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-20 d-none d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_USER', 'u.name', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-10 d-none d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_REVIEW', 'a.review_time', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-1 d-none d-md-table-cell"> <?php echo HTMLHelper::_('searchtools.sort', 'JGRID_HEADING_ID', 'a.id', $listDirn, $listOrder); ?> </th> </tr> </thead> <tbody> <?php foreach ($this->items as $i => $item) : $canEdit = $user->authorise('core.edit', 'com_users.category.' . $item->catid); $canCheckin = $user->authorise('core.admin', 'com_checkin') \|\| $item->checked_out == $user->id \|\| is_null($item->checked_out); $canChange = $user->authorise('core.edit.state', 'com_users.category.' . $item->catid) && $canCheckin; $subject = $item->subject ?: Text::_('COM_USERS_EMPTY_SUBJECT'); ?> <tr class="row<?php echo $i % 2; ?>"> <td class="text-center checklist"> <?php echo HTMLHelper::_('grid.id', $i, $item->id, false, 'cid', 'cb', $subject); ?> </td> <td class="text-center"> <?php echo HTMLHelper::_('jgrid.published', $item->state, $i, 'notes.', $canChange, 'cb', $item->publish_up, $item->publish_down); ?> </td> <th scope="row"> <?php if ($item->checked_out) : ?> <?php echo HTMLHelper::_('jgrid.checkedout', $i, $item->editor, $item->checked_out_time, 'notes.', $canCheckin); ?> <?php endif; ?> <?php $subject = $item->subject ?: Text::_('COM_USERS_EMPTY_SUBJECT'); ?> <?php if ($canEdit) : ?> <a href="<?php echo Route::_('index.php?option=com_users&task=note.edit&id=' . $item->id); ?>" title="<?php echo Text::_('JACTION_EDIT'); ?> <?php echo $this->escape($subject); ?>"> <?php echo $this->escape($subject); ?></a> <?php else : ?> <?php echo $this->escape($subject); ?> <?php endif; ?> <div class="small"> <?php echo Text::_('JCATEGORY') . ': ' . $this->escape($item->category_title); ?> </div> </th> <td class="d-none d-md-table-cell"> <?php echo !empty($item->user_name) ? $this->escape($item->user_name) : '[ ' . Text::_('JNONE') . ' ]'; ?> </td> <td class="d-none d-md-table-cell"> <?php if ($item->review_time !== null) : ?> <?php echo HTMLHelper::_('date', $item->review_time, Text::_('DATE_FORMAT_LC4')); ?> <?php else : ?> <?php echo Text::_('COM_USERS_EMPTY_REVIEW'); ?> <?php endif; ?> </td> <td class="d-none d-md-table-cell"> <?php echo (int) $item->id; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> <?php // load the pagination. ?> <?php echo $this->pagination->getListFooter(); ?> <?php endif; ?> <div> <input type="hidden" name="task" value=""> <input type="hidden" name="boxchecked" value="0"> <?php echo HTMLHelper::_('form.token'); ?> </div> </div> </div> </div> </form> PK��%�\�X�C��tmpl/notes/default.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <metadata> <layout title="COM_USERS_NOTES_VIEW_DEFAULT_TITLE"> <message> <![CDATA[COM_USERS_NOTES_VIEW_DEFAULT_DESC]]> </message> </layout> </metadata> PK��%�\�Sʉ��tmpl/notes/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�T��Q ��Q ��tmpl/debuggroup/default.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / defined('_JEXEC') or die; use Joomla\CMS\HTML\HTMLHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\Layout\LayoutHelper; use Joomla\CMS\Router\Route; /* @var \Joomla\Component\Users\Administrator\View\Debuggroup\HtmlView $this / $listOrder = $this->escape($this->state->get('list.ordering')); $listDirn = $this->escape($this->state->get('list.direction')); /* @var Joomla\CMS\WebAsset\WebAssetManager $wa / $wa = $this->getDocument()->getWebAssetManager(); $wa->useScript('table.columns'); ?> <form action="<?php echo Route::_('index.php?option=com_users&view=debuggroup&group_id=' . (int) $this->state->get('group_id')); ?>" method="post" name="adminForm" id="adminForm"> <div id="j-main-container" class="j-main-container"> <?php echo LayoutHelper::render('joomla.searchtools.default', ['view' => $this]); ?> <?php if (empty($this->items)) : ?> <div class="alert alert-info"> <span class="icon-info-circle" aria-hidden="true"></span><span class="visually-hidden"><?php echo Text::_('INFO'); ?></span> <?php echo Text::_('JGLOBAL_NO_MATCHING_RESULTS'); ?> </div> <?php else : ?> <?php // Split the actions table $loginActions = []; $actions = []; foreach ($this->actions as $action) : $name = $action[0]; if (in_array($name, ['core.login.site', 'core.login.admin', 'core.login.offline', 'core.login.api', 'core.admin'])) : $loginActions[] = $action; else : $actions[] = $action; endif; endforeach; ?> <div class="d-flex flex-wrap"> <?php foreach ($loginActions as $action) : $name = $action[0]; $check = $this->items[0]->checks[$name]; if ($check === true) : $class = 'text-success icon-check'; $button = 'btn-success'; $text = Text::_('COM_USERS_DEBUG_EXPLICIT_ALLOW'); elseif ($check === false) : $class = 'text-danger icon-times'; $button = 'btn-danger'; $text = Text::_('COM_USERS_DEBUG_EXPLICIT_DENY'); elseif ($check === null) : $class = 'text-danger icon-minus-circle'; $button = 'btn-warning'; $text = Text::_('COM_USERS_DEBUG_IMPLICIT_DENY'); endif; ?> <div class="d-inline p-2"> <?php echo Text::_($action[1]); ?> <span class="<?php echo $class; ?>" aria-hidden="true"></span> <span class="visually-hidden"><?php echo $text; ?></span> </div> <?php endforeach; ?> </div> <table class="table"> <caption class="visually-hidden"> <?php echo Text::_('COM_USERS_DEBUG_GROUP_TABLE_CAPTION'); ?>, <span id="orderedBy"><?php echo Text::_('JGLOBAL_SORTED_BY'); ?> </span>, <span id="filteredBy"><?php echo Text::_('JGLOBAL_FILTERED_BY'); ?></span> </caption> <thead> <tr> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_ASSET_TITLE', 'a.title', $listDirn, $listOrder); ?> </th> <th scope="col"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_ASSET_NAME', 'a.name', $listDirn, $listOrder); ?> </th> <?php foreach ($actions as $key => $action) : ?> <th scope="col" class="w-6 text-center"> <?php echo Text::_($action[1]); ?> </th> <?php endforeach; ?> <th scope="col" class="w-6"> <?php echo HTMLHelper::_('searchtools.sort', 'COM_USERS_HEADING_LFT', 'a.lft', $listDirn, $listOrder); ?> </th> <th scope="col" class="w-3"> <?php echo HTMLHelper::_('searchtools.sort', 'JGRID_HEADING_ID', 'a.id', $listDirn, $listOrder); ?> </th> </tr> </thead> <tbody> <?php foreach ($this->items as $i => $item) : ?> <tr class="row0"> <th scope="row"> <?php echo $this->escape(Text::_($item->title)); ?> </th> <td> <?php echo LayoutHelper::render('joomla.html.treeprefix', ['level' => $item->level + 1]) . $this->escape($item->name); ?> </td> <?php foreach ($actions as $action) : ?> <?php $name = $action[0]; $check = $item->checks[$name]; if ($check === true) : $class = 'text-success icon-check'; $button = 'btn-success'; $text = Text::_('COM_USERS_DEBUG_EXPLICIT_ALLOW'); elseif ($check === false) : $class = 'text-danger icon-times'; $button = 'btn-danger'; $text = Text::_('COM_USERS_DEBUG_EXPLICIT_DENY'); elseif ($check === null) : $class = 'text-danger icon-minus-circle'; $button = 'btn-warning'; $text = Text::_('COM_USERS_DEBUG_IMPLICIT_DENY'); else : $class = ''; $button = ''; $text = ''; endif; ?> <td class="text-center"> <span class="<?php echo $class; ?>" aria-hidden="true"></span> <span class="visually-hidden"> <?php echo $text; ?></span> </td> <?php endforeach; ?> <td> <?php echo (int) $item->lft; ?> - <?php echo (int) $item->rgt; ?> </td> <td> <?php echo (int) $item->id; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> <div class="legend"> <span class="text-danger icon-minus-circle" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_DEBUG_IMPLICIT_DENY'); ?>  <span class="text-success icon-check" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_DEBUG_EXPLICIT_ALLOW'); ?>  <span class="text-danger icon-times" aria-hidden="true"></span> <?php echo Text::_('COM_USERS_DEBUG_EXPLICIT_DENY'); ?> </div> <?php // load the pagination. ?> <?php echo $this->pagination->getListFooter(); ?> <input type="hidden" name="task" value=""> <input type="hidden" name="boxchecked" value="0"> <?php echo HTMLHelper::_('form.token'); ?> <?php endif; ?> </div> </form> PK��%�\�Sʉ��tmpl/debuggroup/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�M��services/provider.phpnu��[��<?php /* * @package Joomla.Administrator * @subpackage com_users * * @copyright (C) 2018 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / \defined('_JEXEC') or die; use Joomla\CMS\Component\Router\RouterFactoryInterface; use Joomla\CMS\Dispatcher\ComponentDispatcherFactoryInterface; use Joomla\CMS\Extension\ComponentInterface; use Joomla\CMS\Extension\Service\Provider\ComponentDispatcherFactory; use Joomla\CMS\Extension\Service\Provider\MVCFactory; use Joomla\CMS\Extension\Service\Provider\RouterFactory; use Joomla\CMS\HTML\Registry; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\Component\Users\Administrator\Extension\UsersComponent; use Joomla\DI\Container; use Joomla\DI\ServiceProviderInterface; /* * The users service provider. * * @since 4.0.0 / return new class () implements ServiceProviderInterface { /* * Registers the service provider with a DI container. * * @param Container $container The DI container. * * @return void * * @since 4.0.0 / public function register(Container $container) { $container->registerServiceProvider(new MVCFactory('\\Joomla\\Component\\Users')); $container->registerServiceProvider(new ComponentDispatcherFactory('\\Joomla\\Component\\Users')); $container->registerServiceProvider(new RouterFactory('\\Joomla\\Component\\Users')); $container->set( ComponentInterface::class, function (Container $container) { $component = new UsersComponent($container->get(ComponentDispatcherFactoryInterface::class)); $component->setMVCFactory($container->get(MVCFactoryInterface::class)); $component->setRouterFactory($container->get(RouterFactoryInterface::class)); $component->setRegistry($container->get(Registry::class)); return $component; } ); } }; PK��%�\�Sʉ��services/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\w4�/�� users.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <extension type="component" method="upgrade"> <name>com_users</name> <author>Joomla! Project</author> <creationDate>2006-04</creationDate> <copyright>(C) 2006 Open Source Matters, Inc.</copyright> <license>GNU General Public License version 2 or later; see LICENSE.txt</license> <authorEmail>admin@joomla.org</authorEmail> <authorUrl>www.joomla.org</authorUrl> <version>4.0.0</version> <description>COM_USERS_XML_DESCRIPTION</description> <namespace path="src">Joomla\Component\Users</namespace> <files folder="site"> <folder>forms</folder> <folder>src</folder> <folder>tmpl</folder> </files> <languages folder="site"> <language tag="en-GB">language/en-GB/com_users.ini</language> </languages> <media destination="com_users" folder="media"> <folder>js</folder> </media> <administration> <files folder="admin"> <filename>access.xml</filename> <filename>config.xml</filename> <filename>users.xml</filename> <folder>forms</folder> <folder>helpers</folder> <folder>postinstall</folder> <folder>presets</folder> <folder>services</folder> <folder>src</folder> <folder>tmpl</folder> </files> <languages folder="admin"> <language tag="en-GB">language/en-GB/com_users.ini</language> <language tag="en-GB">language/en-GB/com_users.sys.ini</language> </languages> </administration> <dashboards> <dashboard title="COM_USERS_DASHBOARD_TITLE" icon="icon-users">users</dashboard> </dashboards> </extension> PK��%�\ X �� access.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <access component="com_users"> <section name="component"> <action name="core.admin" title="JACTION_ADMIN" /> <action name="core.options" title="JACTION_OPTIONS" /> <action name="core.manage" title="JACTION_MANAGE" /> <action name="core.create" title="JACTION_CREATE" /> <action name="core.delete" title="JACTION_DELETE" /> <action name="core.edit" title="JACTION_EDIT" /> <action name="core.edit.state" title="JACTION_EDITSTATE" /> <action name="core.edit.value" title="JACTION_EDITVALUE" /> </section> <section name="category"> <action name="core.create" title="JACTION_CREATE" /> <action name="core.delete" title="JACTION_DELETE" /> <action name="core.edit" title="JACTION_EDIT" /> <action name="core.edit.state" title="JACTION_EDITSTATE" /> <action name="core.edit.own" title="JACTION_EDITOWN" /> </section> <section name="fieldgroup"> <action name="core.create" title="JACTION_CREATE" /> <action name="core.delete" title="JACTION_DELETE" /> <action name="core.edit" title="JACTION_EDIT" /> <action name="core.edit.state" title="JACTION_EDITSTATE" /> <action name="core.edit.own" title="JACTION_EDITOWN" /> <action name="core.edit.value" title="JACTION_EDITVALUE" /> </section> <section name="field"> <action name="core.delete" title="JACTION_DELETE" /> <action name="core.edit" title="JACTION_EDIT" /> <action name="core.edit.state" title="JACTION_EDITSTATE" /> <action name="core.edit.value" title="JACTION_EDITVALUE" /> </section> </access> PK��%�\Ϡk��forms/fields/user.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fields name="params" label="COM_FIELDS_FIELD_BASIC_LABEL"> <fieldset name="basic"> <field name="display" type="hidden" default="2" /> </fieldset> </fields> </form> PK��%�\�Sʉ��forms/fields/.htaccessnu��7��m��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>PK��%�\�3�q��forms/group.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form addfieldprefix="Joomla\Component\Users\Administrator\Field"> <fieldset name="group_details"> <field name="id" type="hidden" default="0" readonly="true" /> <field name="title" type="text" label="COM_USERS_GROUP_FIELD_TITLE_LABEL" required="true" /> <field name="parent_id" type="groupparent" label="COM_USERS_GROUP_FIELD_PARENT_LABEL" validate="options" > <option value="0" disabled="disabled">COM_USERS_GROUP_FIELD_PARENT_SELECT</option> </field> <field name="actions" type="hidden" multiple="true" /> <field name="lft" type="hidden" filter="unset" /> <field name="rgt" type="hidden" filter="unset" /> </fieldset> </form> PK��%�\��8N��N��forms/user.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form addfieldprefix="Joomla\Component\Users\Administrator\Field"> <fieldset name="user_details" label="COM_USERS_USER_ACCOUNT_DETAILS"> <field name="name" type="text" label="COM_USERS_USER_FIELD_NAME_LABEL" required="true" /> <field name="username" type="text" label="COM_USERS_USER_FIELD_USERNAME_LABEL" required="true" /> <field name="password" type="password" label="JGLOBAL_PASSWORD" rules="true" autocomplete="new-password" class="validate-password-strength" filter="raw" validate="password" strengthmeter="true" force="on" /> <field name="password2" type="password" label="COM_USERS_USER_FIELD_PASSWORD2_LABEL" autocomplete="new-password" class="validate-passwordExtra" filter="raw" message="COM_USERS_USER_FIELD_PASSWORD1_MESSAGE" validate="equals" field="password" /> <field name="email" type="email" label="JGLOBAL_EMAIL" required="true" validate="email" validDomains="com_users.domains" /> <field name="registerDate" type="calendar" label="COM_USERS_USER_FIELD_REGISTERDATE_LABEL" class="readonly" readonly="true" translateformat="true" showtime="true" filter="user_utc" /> <field name="lastvisitDate" type="calendar" label="COM_USERS_USER_FIELD_LASTVISIT_LABEL" class="readonly" readonly="true" translateformat="true" showtime="true" filter="user_utc" /> <field name="lastResetTime" type="calendar" label="COM_USERS_USER_FIELD_LASTRESET_LABEL" class="readonly" readonly="true" translateformat="true" showtime="true" filter="user_utc" /> <field name="resetCount" type="number" label="COM_USERS_USER_FIELD_RESETCOUNT_LABEL" class="readonly" default="0" readonly="true" /> <field name="sendEmail" type="radio" label="COM_USERS_USER_FIELD_SENDEMAIL_LABEL" default="0" layout="joomla.form.field.radio.switcher" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="block" type="radio" label="COM_USERS_USER_FIELD_BLOCK_LABEL" layout="joomla.form.field.radio.switcher" default="0" > <option value="1">COM_USERS_USER_FIELD_BLOCK</option> <option value="0">COM_USERS_USER_FIELD_ENABLE</option> </field> <field name="requireReset" type="radio" label="COM_USERS_USER_FIELD_REQUIRERESET_LABEL" default="0" layout="joomla.form.field.radio.switcher" > <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="id" type="text" label="JGLOBAL_FIELD_ID_LABEL" class="readonly" default="0" readonly="true" /> </fieldset> <field name="groups" type="hidden" /> <fields name="params"> <!-- Basic user account settings. --> <fieldset name="settings" label="COM_USERS_SETTINGS_FIELDSET_LABEL"> <field name="admin_style" type="templatestyle" label="COM_USERS_USER_FIELD_BACKEND_TEMPLATE_LABEL" client="administrator" filter="uint" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="colorScheme" type="list" label="COM_USERS_USER_COLORSCHEME_LABEL" default="" validate="options" > <option value="">JOPTION_USE_DEFAULT</option> <option value="os">COM_USERS_USER_COLORSCHEME_OPTION_FOLLOW_OS</option> <option value="light">COM_USERS_USER_COLORSCHEME_OPTION_LIGHT</option> <option value="dark">COM_USERS_USER_COLORSCHEME_OPTION_DARK</option> </field> <field name="allowTourAutoStart" type="list" label="COM_USERS_USER_ALLOWTOURAUTOSTART_LABEL" default="" validate="options" > <option value="">JOPTION_USE_DEFAULT</option> <option value="0">JNO</option> <option value="1">JYES</option> </field> <field name="admin_language" type="language" label="COM_USERS_USER_FIELD_BACKEND_LANGUAGE_LABEL" client="administrator" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="language" type="language" label="COM_USERS_USER_FIELD_FRONTEND_LANGUAGE_LABEL" client="site" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="editor" type="plugins" label="COM_USERS_USER_FIELD_EDITOR_LABEL" folder="editors" > <option value="">JOPTION_USE_DEFAULT</option> </field> <field name="timezone" type="timezone" label="COM_USERS_USER_FIELD_TIMEZONE_LABEL" layout="joomla.form.field.groupedlist-fancy-select" > <option value="">JOPTION_USE_DEFAULT</option> </field> </fieldset> <!-- User accessibility settings --> <fieldset name="accessibility" label="COM_USERS_A11Y_SETTINGS_FIELDSET_LABEL" description="COM_USERS_A11Y_SETTINGS_FIELDSET_DESC" > <field name="a11y_mono" type="radio" label="COM_USERS_A11Y_SETTINGS_FIELD_MONOCHROME" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="monochrome">JYES</option> </field> <field name="a11y_contrast" type="radio" label="COM_USERS_A11Y_SETTINGS_FIELD_CONTRAST" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="high_contrast">JYES</option> </field> <field name="a11y_highlight" type="radio" label="COM_USERS_A11Y_SETTINGS_FIELD_HIGHLIGHT" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="highlight">JYES</option> </field> <field name="a11y_font" type="radio" label="COM_USERS_A11Y_SETTINGS_FIELD_FONTSIZE" layout="joomla.form.field.radio.switcher" default="0" > <option value="0">JNO</option> <option value="fontsize">JYES</option> </field> </fieldset> </fields> </form> PK��%�\��%��forms/config_domain.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset> <field name="name" type="text" label="COM_USERS_CONFIG_FIELD_DOMAIN_NAME_LABEL" description="COM_USERS_CONFIG_FIELD_DOMAIN_NAME_DESC" required="true" /> <field name="rule" type="radio" label="COM_USERS_CONFIG_FIELD_DOMAIN_RULE_LABEL" description="COM_USERS_CONFIG_FIELD_DOMAIN_RULE_DESC" layout="joomla.form.field.radio.switcher" required="true" default="0" filter="integer" validate="options" > <option value="0">COM_USERS_CONFIG_FIELD_DOMAIN_RULE_OPTION_DISALLOW</option> <option value="1">COM_USERS_CONFIG_FIELD_DOMAIN_RULE_OPTION_ALLOW</option> </field> </fieldset> </form> PK��%�\��&��forms/filter_notes.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fields name="filter"> <field name="search" type="text" inputmode="search" label="COM_USERS_SEARCH_USER_NOTES" description="COM_USERS_SEARCH_IN_NOTE_TITLE" hint="JSEARCH_FILTER" /> <field name="published" type="status" label="JSTATUS" class="js-select-submit-on-change" > <option value="">JOPTION_SELECT_PUBLISHED</option> </field> <field name="category_id" type="category" label="JCATEGORY" extension="com_users" class="js-select-submit-on-change" > <option value="">JOPTION_SELECT_CATEGORY</option> </field> <field name="level" type="integer" label="JGLOBAL_MAXLEVEL_LABEL" first="1" last="10" step="1" languages="" class="js-select-submit-on-change" > <option value="">JOPTION_SELECT_MAX_LEVELS</option> </field> </fields> <fields name="list"> <field name="fullordering" type="list" label="JGLOBAL_SORT_BY" class="js-select-submit-on-change" default="a.review_time DESC" validate="options" > <option value="">JGLOBAL_SORT_BY</option> <option value="a.state ASC">JSTATUS_ASC</option> <option value="a.state DESC">JSTATUS_DESC</option> <option value="a.subject ASC">COM_USERS_HEADING_SUBJECT_ASC</option> <option value="a.subject DESC">COM_USERS_HEADING_SUBJECT_DESC</option> <option value="c.title ASC">COM_USERS_HEADING_CATEGORY_ASC</option> <option value="c.title DESC">COM_USERS_HEADING_CATEGORY_DESC</option> <option value="u.name ASC">COM_USERS_HEADING_USER_ASC</option> <option value="u.name DESC">COM_USERS_HEADING_USER_DESC</option> <option value="a.review_time ASC">COM_USERS_HEADING_REVIEW_ASC</option> <option value="a.review_time DESC">COM_USERS_HEADING_REVIEW_DESC</option> <option value="a.id ASC">JGRID_HEADING_ID_ASC</option> <option value="a.id DESC">JGRID_HEADING_ID_DESC</option> </field> <field name="limit" type="limitbox" label="JGLOBAL_LIST_LIMIT" default="25" class="js-select-submit-on-change" /> </fields> </form> PK��%�\�x6�X��X��forms/filter_debuguser.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form addfieldprefix="Joomla\Component\Users\Administrator\Field"> <fields name="filter"> <field name="search" type="text" inputmode="search" label="COM_USERS_SEARCH_ASSETS" description="COM_USERS_SEARCH_IN_ASSETS" hint="JSEARCH_FILTER" /> <field name="component" type="Components" label="COM_USERS_OPTION_LABEL_COMPONENT" class="js-select-submit-on-change" > <option value="">COM_USERS_OPTION_SELECT_COMPONENT</option> </field> <field name="level_start" type="Levels" label="COM_USERS_OPTION_LABEL_LEVEL_START" class="js-select-submit-on-change" > <option value="">COM_USERS_OPTION_SELECT_LEVEL_START</option> </field> <field name="level_end" type="Levels" label="COM_USERS_OPTION_LABEL_LEVEL_END" class="js-select-submit-on-change" > <option value="">COM_USERS_OPTION_SELECT_LEVEL_END</option> </field> </fields> <fields name="list"> <field name="fullordering" type="list" label="JGLOBAL_SORT_BY" class="js-select-submit-on-change" default="a.lft ASC" validate="options" > <option value="">JGLOBAL_SORT_BY</option> <option value="a.title ASC">COM_USERS_HEADING_ASSET_TITLE_ASC</option> <option value="a.title DESC">COM_USERS_HEADING_ASSET_TITLE_DESC</option> <option value="a.name ASC">COM_USERS_HEADING_ASSET_NAME_ASC</option> <option value="a.name DESC">COM_USERS_HEADING_ASSET_NAME_DESC</option> <option value="a.lft ASC">COM_USERS_HEADING_LFT_ASC</option> <option value="a.lft DESC">COM_USERS_HEADING_LFT_DESC</option> <option value="a.id ASC">JGRID_HEADING_ID_ASC</option> <option value="a.id DESC">JGRID_HEADING_ID_DESC</option> </field> <field name="limit" type="limitbox" label="JGLOBAL_LIST_LIMIT" default="25" class="js-select-submit-on-change" /> </fields> </form> PK��%�\J�B�-��-��forms/filter_levels.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fields name="filter"> <field name="search" type="text" inputmode="search" label="COM_USERS_SEARCH_ACCESS_LEVELS" description="COM_USERS_SEARCH_IN_LEVEL_NAME" hint="JSEARCH_FILTER" /> </fields> <fields name="list"> <field name="fullordering" type="list" label="JGLOBAL_SORT_BY" class="js-select-submit-on-change" default="a.ordering ASC" validate="options" > <option value="">JGLOBAL_SORT_BY</option> <option value="a.ordering ASC">JGRID_HEADING_ORDERING_ASC</option> <option value="a.ordering DESC">JGRID_HEADING_ORDERING_DESC</option> <option value="a.title ASC">COM_USERS_HEADING_LEVEL_NAME_ASC</option> <option value="a.title DESC">COM_USERS_HEADING_LEVEL_NAME_DESC</option> <option value="a.id ASC">JGRID_HEADING_ID_ASC</option> <option value="a.id DESC">JGRID_HEADING_ID_DESC</option> </field> <field name="limit" type="limitbox" label="JGLOBAL_LIST_LIMIT" default="25" class="js-select-submit-on-change" /> </fields> </form> PK��%�\&��forms/level.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset> <field name="id" type="hidden" default="0" readonly="true" /> <field name="title" type="text" label="COM_USERS_LEVEL_FIELD_TITLE_LABEL" required="true" /> <field name="ordering" type="text" label="JFIELD_ORDERING_LABEL" description="JFIELD_ORDERING_DESC" default="0" /> <field name="rules" type="hidden" filter="intarray" /> </fieldset> </form> PK��%�\��G ��G ��forms/note.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset addfieldprefix="Joomla\Component\Categories\Administrator\Field"> <field name="id" type="hidden" label="COM_USERS_FIELD_ID_LABEL" class="readonly" default="0" readonly="true" /> <field name="user_id" type="user" label="COM_USERS_FIELD_USER_ID_LABEL" required="true" validate="UserId" /> <field name="catid" type="modal_category" label="COM_USERS_FIELD_CATEGORY_ID_LABEL" extension="com_users" required="true" select="true" new="true" edit="true" clear="true" /> <field name="subject" type="text" label="COM_USERS_FIELD_SUBJECT_LABEL" /> <field name="body" type="editor" label="COM_USERS_FIELD_NOTEBODY_LABEL" rows="10" cols="80" filter="safehtml" /> <field name="state" type="list" label="JSTATUS" class="form-select-color-state" default="1" validate="options" > <option value="1">JPUBLISHED</option> <option value="0">JUNPUBLISHED</option> <option value="2">JARCHIVED</option> <option value="-2">JTRASHED</option> </field> <field name="review_time" type="calendar" label="COM_USERS_FIELD_REVIEW_TIME_LABEL" default="NOW" translateformat="true" filter="user_utc" /> <field name="checked_out" type="hidden" filter="unset" /> <field name="checked_out_time" type="hidden" filter="unset" /> <field name="created_user_id" type="hidden" label="JGLOBAL_FIELD_CREATED_BY_LABEL" filter="unset" /> <field name="created_time" type="hidden" label="JGLOBAL_FIELD_CREATED_LABEL" filter="unset" /> <field name="modified_user_id" type="hidden" label="JGLOBAL_FIELD_MODIFIED_BY_LABEL" filter="unset" /> <field name="modified_time" type="hidden" label="JGLOBAL_FIELD_MODIFIED_LABEL" filter="unset" /> <field name="publish_up" type="calendar" label="JGLOBAL_FIELD_PUBLISH_UP_LABEL" translateformat="true" showtime="true" filter="user_utc" /> <field name="publish_down" type="calendar" label="JGLOBAL_FIELD_PUBLISH_DOWN_LABEL" translateformat="true" showtime="true" filter="user_utc" /> <field name="version_note" type="text" label="JGLOBAL_FIELD_VERSION_NOTE_LABEL" maxlength="255" /> </fieldset> </form> PK��%�\=3��forms/filter_users.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fields name="filter"> <field name="search" type="text" inputmode="search" label="COM_USERS_SEARCH_USERS" description="COM_USERS_SEARCH_IN_NAME" hint="JSEARCH_FILTER" /> <field name="state" type="userstate" label="JSTATUS" class="js-select-submit-on-change" > <option value="">COM_USERS_FILTER_STATE</option> </field> <field name="mfa" type="list" label="COM_USERS_HEADING_MFA" class="js-select-submit-on-change" > <option value="">COM_USERS_FILTER_MFA</option> <option value="1">JENABLED</option> <option value="0">JDISABLED</option> </field> <field name="active" type="useractive" label="COM_USERS_HEADING_ACTIVATED" class="js-select-submit-on-change" > <option value="">COM_USERS_FILTER_ACTIVE</option> </field> <field name="group_id" type="usergrouplist" label="COM_USERS_HEADING_GROUPS" class="js-select-submit-on-change" > <option value="">COM_USERS_FILTER_USERGROUP</option> </field> <field name="lastvisitrange" type="lastvisitdaterange" label="COM_USERS_HEADING_LAST_VISIT_DATE" class="js-select-submit-on-change" > <option value="">COM_USERS_OPTION_FILTER_LAST_VISIT_DATE</option> </field> <field name="range" type="registrationdaterange" label="COM_USERS_HEADING_REGISTRATION_DATE" class="js-select-submit-on-change" > <option value="">COM_USERS_OPTION_FILTER_DATE</option> </field> </fields> <fields name="list"> <field name="fullordering" type="list" label="JGLOBAL_SORT_BY" class="js-select-submit-on-change" default="a.name ASC" validate="options" > <option value="">JGLOBAL_SORT_BY</option> <option value="a.name ASC">JGLOBAL_NAME_ASC</option> <option value="a.name DESC">JGLOBAL_NAME_DESC</option> <option value="a.username ASC">COM_USERS_HEADING_USERNAME_ASC</option> <option value="a.username DESC">COM_USERS_HEADING_USERNAME_DESC</option> <option value="a.block ASC">COM_USERS_HEADING_ENABLED_ASC</option> <option value="a.block DESC">COM_USERS_HEADING_ENABLED_DESC</option> <option value="a.activation ASC">COM_USERS_HEADING_ACTIVATED_ASC</option> <option value="a.activation DESC">COM_USERS_HEADING_ACTIVATED_DESC</option> <option value="a.email ASC">COM_USERS_HEADING_EMAIL_ASC</option> <option value="a.email DESC">COM_USERS_HEADING_EMAIL_DESC</option> <option value="a.lastvisitDate ASC">COM_USERS_HEADING_LAST_VISIT_DATE_ASC</option> <option value="a.lastvisitDate DESC">COM_USERS_HEADING_LAST_VISIT_DATE_DESC</option> <option value="a.registerDate ASC">COM_USERS_HEADING_REGISTRATION_DATE_ASC</option> <option value="a.registerDate DESC">COM_USERS_HEADING_REGISTRATION_DATE_DESC</option> <option value="a.id ASC">JGRID_HEADING_ID_ASC</option> <option value="a.id DESC">JGRID_HEADING_ID_DESC</option> </field> <field name="limit" type="limitbox" label="JGLOBAL_LIST_LIMIT" default="25" class="js-select-submit-on-change" /> </fields> </form> PK��%�\o��&��&��forms/mail.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fieldset> <field name="recurse" type="checkbox" label="COM_USERS_MAIL_FIELD_RECURSE_LABEL" value="1" /> <field name="mode" type="checkbox" label="COM_USERS_MAIL_FIELD_SEND_IN_HTML_MODE_LABEL" value="1" /> <field name="disabled" type="checkbox" label="COM_USERS_MAIL_FIELD_EMAIL_DISABLED_USERS_LABEL" value="1" /> <field name="group" type="usergrouplist" label="COM_USERS_MAIL_FIELD_GROUP_LABEL" default="0" > <option value="0">COM_USERS_MAIL_FIELD_VALUE_ALL_USERS_GROUPS</option> </field> <field name="bcc" type="checkbox" label="COM_USERS_MAIL_FIELD_SEND_AS_BLIND_CARBON_COPY_LABEL" default="1" value="1" checked="1" /> <field name="subject" type="text" label="COM_USERS_MAIL_FIELD_SUBJECT_LABEL" maxlength="150" required="true" /> <field name="message" type="textarea" label="COM_USERS_MAIL_FIELD_MESSAGE_LABEL" cols="70" rows="20" required="true" /> </fieldset> </form> PK��%�\�D)]��]��forms/filter_debuggroup.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form addfieldprefix="Joomla\Component\Users\Administrator\Field"> <fields name="filter"> <field name="search" type="text" inputmode="search" label="COM_USERS_SEARCH_ASSETS" description="COM_USERS_SEARCH_IN_ASSETS" hint="JSEARCH_FILTER" /> <field name="component" type="Components" label="COM_USERS_OPTION_LABEL_COMPONENT" class="js-select-submit-on-change" > <option value="">COM_USERS_OPTION_SELECT_COMPONENT</option> </field> <field name="level_start" type="Levels" label="COM_USERS_OPTION_LABEL_LEVEL_START" class="js-select-submit-on-change" > <option value="">COM_USERS_OPTION_SELECT_LEVEL_START</option> </field> <field name="level_end" type="Levels" label="COM_USERS_OPTION_LABEL_LEVEL_END" class="js-select-submit-on-change" > <option value="">COM_USERS_OPTION_SELECT_LEVEL_END</option> </field> </fields> <fields name="list"> <field name="fullordering" type="list" label="JGLOBAL_SORT_BY" class="js-select-submit-on-change" default="a.lft ASC" validate="options" > <option value="">JGLOBAL_SORT_BY</option> <option value="a.title ASC">COM_USERS_HEADING_ASSET_TITLE_ASC</option> <option value="a.title DESC">COM_USERS_HEADING_ASSET_TITLE_DESC</option> <option value="a.name ASC">COM_USERS_HEADING_ASSET_NAME_ASC</option> <option value="a.name DESC">COM_USERS_HEADING_ASSET_NAME_DESC</option> <option value="a.lft ASC">COM_USERS_HEADING_LFT_ASC</option> <option value="a.lft DESC">COM_USERS_HEADING_LFT_DESC</option> <option value="a.id ASC">JGRID_HEADING_ID_ASC</option> <option value="a.id DESC">JGRID_HEADING_ID_DESC</option> </field> <field name="limit" type="limitbox" label="JGLOBAL_LIST_LIMIT" default="25" class="js-select-submit-on-change" /> </fields> </form> PK��%�\�ͨ��forms/filter_groups.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <fields name="filter"> <field name="search" type="text" inputmode="search" label="COM_USERS_SEARCH_GROUPS_LABEL" description="COM_USERS_SEARCH_IN_GROUPS" hint="JSEARCH_FILTER" /> </fields> <fields name="list"> <field name="fullordering" type="list" label="JGLOBAL_SORT_BY" class="js-select-submit-on-change" default="a.lft ASC" validate="options" > <option value="">JGLOBAL_SORT_BY</option> <option value="a.lft ASC">JGRID_HEADING_ORDERING_ASC</option> <option value="a.lft DESC">JGRID_HEADING_ORDERING_DESC</option> <option value="a.title ASC">COM_USERS_HEADING_GROUP_TITLE_ASC</option> <option value="a.title DESC">COM_USERS_HEADING_GROUP_TITLE_DESC</option> <option value="a.id ASC">JGRID_HEADING_ID_ASC</option> <option value="a.id DESC">JGRID_HEADING_ID_DESC</option> </field> <field name="limit" type="limitbox" label="JGLOBAL_LIST_LIMIT" default="25" class="js-select-submit-on-change" /> </fields> </form> PK��%�\��ޒ��forms/category.xmlnu��[��<?xml version="1.0" encoding="UTF-8"?> <form> <help key="User_Notes:_New_or_Edit_Category" /> <listhelp key="User_Notes:_Categories" /> </form> PK��8�\/a�s��src/View/Groups/JsonapiView.phpnu��[��PK��8�\�Sʉ��M��src/View/Groups/.htaccessnu��7��m��PK��8�\A��src/View/Levels/JsonapiView.phpnu��[��PK��8�\�Sʉ�� src/View/Levels/.htaccessnu��7��m��PK��8�\��Ɖ� �� src/View/Users/JsonapiView.phpnu��[��PK��8�\�Sʉ��src/View/Users/.htaccessnu��7��m��PK��8�\�Sʉ��1��src/View/.htaccessnu��7��m��PK��8�\�N�;��#��`��src/Controller/LevelsController.phpnu��[��PK��8�\�7dd`��`��#��src/Controller/GroupsController.phpnu��[��PK��8�\��!��"��K,��src/Controller/UsersController.phpnu��[��PK��8�\�Sʉ��?@��src/Controller/.htaccessnu��7��m��PK��8�\�Sʉ�� tA��src/.htaccessnu��7��m��PK��8�\�Sʉ�� B��.htaccessnu��7��m��PK��="�\$A��l ��l ��C��src/Service/Router.phpnu��[��PK��="�\�Sʉ��vN��src/Service/.htaccessnu��7��m��PK��="�\�V�[� �� O��src/Dispatcher/Dispatcher.phpnu��[��PK��="�\�Sʉ��Y��src/Dispatcher/.htaccessnu��7��m��PK��="�\}\��Z��src/Model/RemindModel.phpnu��[��PK��="�\z� 4z��z��r��src/Model/LoginModel.phpnu��[��PK��="�\�V��l5��l5��f��src/Model/CaptiveModel.phpnu��[��PK��="�\ZN�?��?��src/Model/MethodModel.phpnu��[��PK��="�\�v��(��(��src/Model/ProfileModel.phpnu��[��PK��="�\��Y��Y��src/Model/RegistrationModel.phpnu��[��PK��="�\��AZA��ZA��U�src/Model/ResetModel.phpnu��[��PK��="�\\|��K!��K!��h��src/Model/BackupcodesModel.phpnu��[��PK��="�\�Sʉ��src/Model/.htaccessnu��7��m��PK��="�\�b�JH��H��1��src/Model/MethodsModel.phpnu��[��PK��="�\Zd�f �� !��src/Rule/LoginUniqueFieldRule.phpnu��[��PK��="�\��Ҙ �� "��"��src/Rule/LogoutUniqueFieldRule.phpnu��[��PK��="�\�Sʉ��src/Rule/.htaccessnu��7��m��PK��="�\} ��"��src/View/Registration/HtmlView.phpnu��[��PK��="�\�Sʉ��src/View/Registration/.htaccessnu��7��m��PK��="�\ dsp��src/View/Methods/HtmlView.phpnu��[��PK��="�\�Sʉ��src/View/Methods/.htaccessnu��7��m��PK��="�\:��src/View/Login/HtmlView.phpnu��[��PK��="�\�Sʉ��%�src/View/Login/.htaccessnu��7��m��PK��="�\W>��&�src/View/Method/HtmlView.phpnu��[��PK��="�\�Sʉ��@�src/View/Method/.htaccessnu��7��m��PK��="�\2��\|��\|��'B�src/View/Remind/HtmlView.phpnu��[��PK��="�\�Sʉ��N�src/View/Remind/.htaccessnu��7��m��PK��="�\��6n ��n ��%P�src/View/Reset/HtmlView.phpnu��[��PK��="�\�Sʉ��]�src/View/Reset/.htaccessnu��7��m��PK��="�\��S��_�src/View/Profile/HtmlView.phpnu��[��PK��="�\�Sʉ��3u�src/View/Profile/.htaccessnu��7��m��PK��="�\�t�pR��R��jv�src/View/Captive/HtmlView.phpnu��[��PK��="�\�Sʉ�� src/View/Captive/.htaccessnu��7��m��PK��="�\��X ��X ��%��@��src/Controller/CallbackController.phpnu��[��PK��="�\\|W�/��/��!��src/Controller/UserController.phpnu��[��PK��="�\�d\|XM%��M%��)��m��src/Controller/RegistrationController.phpnu��[��PK��="�\"l5�Y��Y��"��src/Controller/ResetController.phpnu��[��PK��="�\�5-1��$��src/Controller/MethodsController.phpnu��[��PK��="�\��#��#��$�� src/Controller/CaptiveController.phpnu��[��PK��="�\�ry��#��;.�src/Controller/RemindController.phpnu��[��PK��="�\�W��$��5�src/Controller/DisplayController.phpnu��[��PK��="�\�O�a��a��$��G�src/Controller/ProfileController.phpnu��[��PK��="�\'鸺}@��}@��#��re�src/Controller/MethodController.phpnu��[��PK��="�\�C�\|��B��tmpl/login/logout.xmlnu��[��PK��="�\^�U� �� t��tmpl/login/default_logout.phpnu��[��PK��="�\�Y�q��tmpl/login/default_login.phpnu��[��PK��="�\jP�5g��g��tmpl/login/default.phpnu��[��PK��="�\y�J��U��tmpl/login/default.xmlnu��[��PK��="�\�Sʉ��?��tmpl/login/.htaccessnu��7��m��PK��="�\U��3��p��tmpl/remind/default.phpnu��[��PK��="�\ܢ5��5��tmpl/remind/default.xmlnu��[��PK��="�\�Sʉ��,��tmpl/remind/.htaccessnu��7��m��PK��="�\Xz�8��^��tmpl/profile/default_params.phpnu��[��PK��="�\�D50��0��tmpl/profile/edit.xmlnu��[��PK��="�\ʤ��tmpl/profile/edit.phpnu��[��PK��="�\��E��E��Z �tmpl/profile/default.phpnu��[��PK��="�\��42 ��2 ��tmpl/profile/default_custom.phpnu��[��PK��="�\�,� +��+��h�tmpl/profile/default.xmlnu��[��PK��="�\�h��tmpl/profile/default_core.phpnu��[��PK��="�\�Sʉ��$�tmpl/profile/.htaccessnu��7��m��PK��="�\��%�tmpl/captive/default.phpnu��[��PK��="�\��R�� <�tmpl/captive/select.phpnu��[��PK��="�\�Sʉ��I�tmpl/captive/.htaccessnu��7��m��PK��="�\A�A/1 ��1 ��?J�tmpl/registration/default.phpnu��[��PK��="�\L�O��O��T�tmpl/registration/complete.phpnu��[��PK��="�\ݪ@�=��=��ZW�tmpl/registration/default.xmlnu��[��PK��="�\�Sʉ��X�tmpl/registration/.htaccessnu��7��m��PK��="�\��Z�tmpl/reset/confirm.phpnu��[��PK��="�\�lZ-��_a�tmpl/reset/default.phpnu��[��PK��="�\��h�tmpl/reset/complete.phpnu��[��PK��="�\�?w%��%��o�tmpl/reset/default.xmlnu��[��PK��="�\�Sʉ��Mq�tmpl/reset/.htaccessnu��7��m��PK��="�\AB�ס$��$��~r�tmpl/methods/list.phpnu��[��PK��="�\OS`��d��tmpl/methods/default.phpnu��[��PK��="�\�b��ß�tmpl/methods/firsttime.phpnu��[��PK��="�\�Sʉ��tmpl/methods/.htaccessnu��7��m��PK��="�\�r�)� �� )��tmpl/method/backupcodes.phpnu��[��PK��="�\P��tmpl/method/edit.phpnu��[��PK��="�\�Sʉ��tmpl/method/.htaccessnu��7��m��PK��="�\�Sʉ��+��tmpl/.htaccessnu��7��m��PK��="�\Mjx��V��forms/frontend_admin.xmlnu��[��PK��="�\�?�3h��h��V��forms/login.xmlnu��[��PK��="�\��~��forms/remind.xmlnu��[��PK��="�\)�2=��forms/reset_confirm.xmlnu��[��PK��="�\��ݝQ��Q��forms/profile.xmlnu��[��PK��="�\�~��e��forms/reset_request.xmlnu��[��PK��="�\��$��F��forms/frontend.xmlnu��[��PK��="�\�$��forms/reset_complete.xmlnu��[��PK��="�\�<5�U��U��forms/sitelang.xmlnu��[��PK��="�\��)z��z��M��forms/registration.xmlnu��[��PK��="�\�Sʉ�� forms/.htaccessnu��7��m��PK��%�\�L��%��%�� 9��config.xmlnu��[��PK��%�\��΂��]�presets/users.xmlnu��[��PK��%�\�Sʉ�� '�presets/.htaccessnu��7��m��PK��%�\� }W��N(�helpers/users.phpnu��[��PK��%�\�Sʉ��?+�helpers/.htaccessnu��7��m��PK��%�\4^��m,�helpers/debug.phpnu��[��PK��%�\F7��~/�postinstall/multifactorauth.phpnu��[��PK��%�\�Sʉ��6�postinstall/.htaccessnu��7��m��PK��%�\�3�)w ��w ��7�src/Table/NoteTable.phpnu��[��PK��%�\yVӾP6��P6��E�src/Table/MfaTable.phpnu��[��PK��%�\�Sʉ��.\|�src/Table/.htaccessnu��7��m��PK��%�\��.��.��^}�src/Service/HTML/Users.phpnu��[��PK��%�\�Sʉ��src/Service/HTML/.htaccessnu��7��m��PK��%�\:Yn��ʭ�src/Service/Encrypt.phpnu��[��PK��%�\9�\|\.��\.��src/Helper/Mfa.phpnu��[��PK��%�\B!>��src/Helper/UsersHelper.phpnu��[��PK��%�\�Sʉ��}��src/Helper/.htaccessnu��7��m��PK��%�\�&��d��d��src/Helper/DebugHelper.phpnu��[��PK��%�\&��t��t��"��\�src/Field/ModulesPositionField.phpnu��[��PK��%�\�W��J��J��"�src/Field/GroupparentField.phpnu��[��PK��%�\�Z&��&�src/Field/LevelsField.phpnu��[��PK��%�\�Sʉ�� +�src/Field/.htaccessnu��7��m��PK��%�\�/�ŝ��P,�src/Model/MailModel.phpnu��[��PK��%�\�K��4L�src/Model/UserModel.phpnu��[��PK��%�\R�S�3��3��src/Model/NoteModel.phpnu��[��PK��%�\R�̽��src/Model/DebuguserModel.phpnu��[��PK��%�\�1� �� src/Model/GroupsModel.phpnu��[��PK��%�\�s�ek&��k&�� src/Model/LevelModel.phpnu��[��PK��%�\��[$��G�src/Model/LevelsModel.phpnu��[��PK��%�\��/��/��b�src/Model/GroupModel.phpnu��[��PK��%�\��׽��src/Model/DebuggroupModel.phpnu��[��PK��%�\qZ�\|��\|��src/Model/NotesModel.phpnu��[��PK��%�\��I�Q��Q��W��src/Model/UsersModel.phpnu��[��PK��%�\��E��&��"�src/DataShape/CaptiveRenderOptions.phpnu��[��PK��%�\*��$��7�src/DataShape/SetupRenderOptions.phpnu��[��PK��%�\y�#��!��R�src/DataShape/DataShapeObject.phpnu��[��PK��%�\�Sʉ��e�src/DataShape/.htaccessnu��7��m��PK��%�\I��w��w��"��Ef�src/DataShape/MethodDescriptor.phpnu��[��PK��%�\��\Ay��y��r�src/View/Groups/HtmlView.phpnu��[��PK��%�\�iK�I��I��}�src/View/User/HtmlView.phpnu��[��PK��%�\�Sʉ��f��src/View/User/.htaccessnu��7��m��PK��%�\d圆��src/View/Levels/HtmlView.phpnu��[��PK��%�\��l��src/View/Notes/HtmlView.phpnu��[��PK��%�\�Sʉ��src/View/Notes/.htaccessnu��7��m��PK��%�\��&x ��x ��src/View/Level/HtmlView.phpnu��[��PK��%�\�Sʉ��z��src/View/Level/.htaccessnu��7��m��PK��%�\2j�� src/View/Debuggroup/HtmlView.phpnu��[��PK��%�\�Sʉ��src/View/Debuggroup/.htaccessnu��7��m��PK��%�\�FX54��4��-��src/View/Note/HtmlView.phpnu��[��PK��%�\�Sʉ��src/View/Note/.htaccessnu��7��m��PK��%�\9hjr��src/View/SiteTemplateTrait.phpnu��[��PK��%�\u�o��src/View/Debuguser/HtmlView.phpnu��[��PK��%�\�Sʉ��src/View/Debuguser/.htaccessnu��7��m��PK��%�\�/N��>��src/View/Group/HtmlView.phpnu��[��PK��%�\�Sʉ�� src/View/Group/.htaccessnu��7��m��PK��%�\��ա�� src/View/Users/HtmlView.phpnu��[��PK��%�\�T. �� src/View/Mail/HtmlView.phpnu��[��PK��%�\�Sʉ��<' �src/View/Mail/.htaccessnu��7��m��PK��%�\�^��^�� p( �src/Extension/UsersComponent.phpnu��[��PK��%�\�Sʉ��4 �src/Extension/.htaccessnu��7��m��PK��%�\&��T��!��R5 �src/Controller/NoteController.phpnu��[��PK��%�\nm��"��S; �src/Controller/NotesController.phpnu��[��PK��%�\@�_q��q��!��@ �src/Controller/MailController.phpnu��[��PK��%�\��9� �� "��kG �src/Controller/GroupController.phpnu��[��PK��%�\�kq��"��O �src/Controller/LevelController.phpnu��[��PK��%�\E�[�� ^ �tmpl/mail/default.phpnu��[��PK��%�\J��h �tmpl/mail/default.xmlnu��[��PK��%�\�Sʉ��i �tmpl/mail/.htaccessnu��7��m��PK��%�\��'��j �tmpl/note/edit.xmlnu��[��PK��%�\4� � �� k �tmpl/note/edit.phpnu��[��PK��%�\�Sʉ��>s �tmpl/note/.htaccessnu��7��m��PK��%�\G��nt �tmpl/group/edit.xmlnu��[��PK��%�\G��su �tmpl/group/edit.phpnu��[��PK��%�\�Sʉ��R\| �tmpl/group/.htaccessnu��7��m��PK��%�\(��} �tmpl/level/edit.xmlnu��[��PK��%�\�~m" ��" ��~ �tmpl/level/edit.phpnu��[��PK��%�\�Sʉ�� tmpl/level/.htaccessnu��7��m��PK��%�\��_�� tmpl/levels/default.phpnu��[��PK��%�\۽j �� tmpl/levels/default.xmlnu��[��PK��%�\�Sʉ�� tmpl/levels/.htaccessnu��7��m��PK��%�\I��X ��X ��,� �tmpl/debuguser/default.phpnu��[��PK��%�\�Sʉ�� tmpl/debuguser/.htaccessnu��7��m��PK��%�\A�i�� tmpl/user/edit_groups.phpnu��[��PK��%�\�� tmpl/user/edit.xmlnu��[��PK��%�\�#�q�� tmpl/user/edit.phpnu��[��PK��%�\�Sʉ��^� �tmpl/user/.htaccessnu��7��m��PK��%�\,��!��!�� tmpl/groups/default.phpnu��[��PK��%�\�� tmpl/groups/default.xmlnu��[��PK��%�\�Sʉ�� tmpl/groups/.htaccessnu��7��m��PK��%�\K��g��g�� tmpl/users/modal.phpnu��[��PK��%�\��9��9�� tmpl/users/default.phpnu��[��PK��%�\i��V �tmpl/users/default.xmlnu��[��PK��%�\M�̗� �� !��W �tmpl/users/default_batch_body.phpnu��[��PK��%�\�Sʉ��)b �tmpl/users/.htaccessnu��7��m��PK��%�\&�8��Zc �tmpl/notes/modal.phpnu��[��PK��%�\h3��J��J��k �tmpl/notes/emptystate.phpnu��[��PK��%�\O� �>��>��!o �tmpl/notes/default.phpnu��[��PK��%�\�X�C�� tmpl/notes/default.xmlnu��[��PK��%�\�Sʉ�� tmpl/notes/.htaccessnu��7��m��PK��%�\�T��Q ��Q �� tmpl/debuggroup/default.phpnu��[��PK��%�\�Sʉ�� tmpl/debuggroup/.htaccessnu��7��m��PK��%�\�M�� services/provider.phpnu��[��PK��%�\�Sʉ�� services/.htaccessnu��7��m��PK��%�\w4�/�� users.xmlnu��[��PK��%�\ X �� 5� �access.xmlnu��[��PK��%�\Ϡk��s� �forms/fields/user.xmlnu��[��PK��%�\�Sʉ�� forms/fields/.htaccessnu��7��m��PK��%�\�3�q�� forms/group.xmlnu��[��PK��%�\��8N��N�� forms/user.xmlnu��[��PK��%�\��%�� forms/config_domain.xmlnu��[��PK��%�\��&�� forms/filter_notes.xmlnu��[��PK��%�\�x6�X��X�� forms/filter_debuguser.xmlnu��[��PK��%�\J�B�-��-�� forms/filter_levels.xmlnu��[��PK��%�\&�� forms/level.xmlnu��[��PK��%�\��G ��G ��1� �forms/note.xmlnu��[��PK��%�\=3��forms/filter_users.xmlnu��[��PK��%�\o��&��&��forms/mail.xmlnu��[��PK��%�\�D)]��]��a�forms/filter_debuggroup.xmlnu��[��PK��%�\�ͨ�� forms/filter_groups.xmlnu��[��PK��%�\��ޒ��k"�forms/category.xmlnu��[��PK��^M��?#��

| ver. 1.4 | Github | . | PHP 8.2.32 | Generation time: 0.12 | proxy | phpinfo | Settings