oxwebauthn/src/Modules/Application/Model/d3_totp_user.php

<?php

/**
 * This Software is the property of Data Development and is protected
 * by copyright law - it is NOT Freeware.
 * Any unauthorized use of this software without a valid license
 * is a violation of the license agreement and will be prosecuted by
 * civil and criminal law.
 * http://www.shopmodule.com
 *
 * @copyright (C) D3 Data Development (Inh. Thomas Dartsch)
 * @author    D3 Data Development - Daniel Seifert <support@shopmodule.com>
 * @link      http://www.oxidmodule.com
 */

namespace D3\Totp\Modules\Application\Model;

use D3\Totp\Application\Model\d3totp;
use Doctrine\DBAL\DBALException;
use OxidEsales\Eshop\Core\DatabaseProvider;
use OxidEsales\Eshop\Core\Exception\DatabaseConnectionException;
use OxidEsales\Eshop\Core\Registry;

class d3_totp_user extends d3_totp_user_parent
{
    public function logout()
    {
        $return = parent::logout();

        // deleting session info
        Registry::getSession()->deleteVariable(d3totp::TOTP_SESSION_VARNAME);

        return $return;
    }

    /**
     * @param $sUserId
     * @param $sPassword
     * @return bool
     * @throws DatabaseConnectionException
     */
    public function d3CheckPasswordPass($sUserId, $sPassword)
    {
        return (bool) DatabaseProvider::getDb(DatabaseProvider::FETCH_MODE_ASSOC)->getOne(
            $this->d3GetPasswordCheckQuery($sUserId, $sPassword)
        );
    }

    /**
     * @param $sUserId
     * @param $sPassword
     * @return string
     * @throws DatabaseConnectionException
     */
    public function d3GetPasswordCheckQuery($sUserId, $sPassword)
    {
        $oDb = \OxidEsales\Eshop\Core\DatabaseProvider::getDb();

        $sUserSelect = "oxuser.oxid = " . $oDb->quote($sUserId);

        $sSalt = $oDb->getOne("SELECT `oxpasssalt` FROM `oxuser` WHERE  " . $sUserSelect);

        $sPassSelect = " oxuser.oxpassword = " . $oDb->quote($this->encodePassword($sPassword, $sSalt));

        $sSelect = "select `oxid` from oxuser where 1 and {$sPassSelect} and {$sUserSelect} ";

        return $sSelect;
    }

    /**
     * @return d3totp
     * @throws DatabaseConnectionException
     * @throws DBALException
     */
    public function d3getTotp()
    {
        $oTotp = oxNew(d3totp::class);
        $oTotp->loadByUserId($this->getId());

        return $oTotp;
    }
}