src/Controller/AccountController.php line 206

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\Role;
  6. use App\Entity\User;
  7. use App\Entity\Share;
  8. use App\Entity\Visio;
  9. use Doctrine\ORM\EntityManagerInterface;
  10. use App\Utils\EmailSignature;
  11. use App\Utils\XmlRender;
  12. use App\Utils\UserInsert;
  13. use App\Service\UserSession;
  14. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  15. use Symfony\Component\Filesystem\Filesystem;
  16. use Symfony\Component\Ldap\Adapter\ExtLdap\Adapter;
  17. use Symfony\Component\Ldap\Entry;
  18. use Symfony\Component\Ldap\Ldap;
  19. use Symfony\Component\Process\Process;
  20. use Symfony\Component\HttpFoundation\Request;
  21. use Symfony\Component\HttpFoundation\Response;
  22. use Symfony\Component\Routing\Annotation\Route;
  23. use Sabre\CardDAV\Backend\PDO;
  24. use Sabre\CalDAV\Backend\PDO as CalPDO;
  25. use Sabre\VObject\Reader;
  26. use Sabre\VObject\Node;
  27. use Sabre\VObject\Document;
  28. use Sabre\VObject\Component\VCalendar;
  29. use Sabre\VObject\Component\VCard;
  31. class AccountController extends AbstractController
  32. {
  33.     private $pdo;
  34.     
  35.     #[Route('/account', name: 'account')]
  36.     public function account(EntityManagerInterface $entityManager, UserSession $userSession): Response
  37.     {
  38.         if (!$user = $this->getUser()) return $this->redirectToRoute('login');
  39.         else $userData = $userSession->getEntryFromSession();
  41.         $level = $entityManager->getRepository(Role::class)->findBy(array("type" => "level"), array('description' => 'ASC'));
  42.         $levels = [];
  43.         for($i=0;$i<count($level);$i++){
  44.             $tmp = [];
  45.             $lvl = preg_split('/_/',$level[$i]->getRole());
  46.             $tmp['value'] = strtolower($lvl[1]);
  47.             $tmp['label'] = $level[$i]->getDescription();
  48.             $levels[] = $tmp;
  49.         }
  51.         $site = $entityManager->getRepository(Role::class)->findBy(array("type" => "site"), array('role' => 'ASC'));
  52.         $sites = [];
  53.         for($i=0;$i<count($site);$i++){
  54.             $tmp = [];
  55.             $ste = preg_split('/_/',$site[$i]->getRole());
  56.             $tmp['value'] = $ste[1];
  57.             $tmp['label'] = $site[$i]->getDescription();
  58.             $sites[] = $tmp;
  59.         }
  61.         return $this->render('account/index.html.twig', [
  62.             'title_meta' => 'Comptes internes',
  63.             'page' => 'account',
  64.             'user' => $userData,
  65.             'level' => $levels,
  66.             'site' => $sites,
  67.         ]);
  68.     }
  70.     #[Route('/account/data', name: 'account_data')]
  71.     public function account_data(Request $request, Adapter $ldapAdapter, EntityManagerInterface $entityManager): Response
  72.     {
  73.         if (!$user = $this->getUser()) {
  74.             return $this->redirectToRoute('login');
  75.         }
  77.         $submittedToken = $request->request->get('token');
  78.         if ($this->isCsrfTokenValid('account-token', $submittedToken))
  79.         {
  80.             $ldap = new Ldap($ldapAdapter);
  81.             $ldap->bind($this->getParameter('app.ldap_service_user').','.$this->getParameter('app.ldap_service_dn'), $this->getParameter('app.ldap_service_password'));
  82.             $query = $ldap->query($this->getParameter('app.ldap_service_dn'), '(|(uid=*))');
  83.             $users = $query->execute()->toArray();
  84.             $usersData = [];
  85.             for($i=0;$i<count($users);$i++){
  86.                 $entry = $users[$i];
  87.                 if($entry->hasAttribute('uid')){
  88.                     $nickhandle = preg_split('/@/',$entry->getAttribute('mail')[0]);
  89.                     $qrcode = $request->getScheme() . '://' . $request->getHttpHost() . '/qr-code/eps/' . $entry->getAttribute('labeledURI')[0] . '/vcard/' . preg_replace('/\./', '-', $nickhandle[0]) . '.html';
  91.                     if($nickhandle[1] == 'batiformes.com' || $nickhandle[1] == 'scorev.fr'){
  92.                         $usersRole = 'ROLE_'.mb_strtoupper($entry->getAttribute('ou')[0]);
  93.                         $roleUsers = $entityManager->getRepository(Role::class)->findOneBy(array("role" => $usersRole));
  94.                         $phone = ($entry->hasAttribute('telephoneNumber') ) ? $entry->getAttribute('telephoneNumber')[0] : '';
  95.                         $mobile = ($entry->hasAttribute('mobile') ) ? $entry->getAttribute('mobile')[0] : '';
  96.                         $fax = ($entry->hasAttribute('facsimileTelephoneNumber') ) ? $entry->getAttribute('facsimileTelephoneNumber')[0] : '';
  97.                         $carddav = new UserInsert();
  98.                         $vcardData = $carddav->vcard_create($entry->getAttribute('givenName')[0],$entry->getAttribute('sn')[0],addslashes($entry->getAttribute('street')[0]),addslashes($entry->getAttribute('l')[0]),$entry->getAttribute('postalCode')[0],strtolower($entry->getAttribute('mail')[0]),$mobile,$phone,$fax,addslashes($entry->getAttribute('title')[0]),$roleUsers->getDescription(),$entry->getAttribute('o')[0]);
  99.                         $vcard = base64_encode($vcardData);
  100.                     }
  101.                     else{
  102.                         $vcard = '';
  103.                     }
  104.             
  105.                     $signature = new EmailSignature();
  106.                     $signatureTxt = base64_encode($signature->signature_ldap($entry,$vcard));
  108.                     $tmp['lastname'] = preg_replace(array('/\bVon\b/u','/\bDe\b/u'), array('von','de'), mb_convert_case($entry->getAttribute('sn')[0], MB_CASE_TITLE, "UTF-8"));
  109.                     $tmp['firstname'] = mb_convert_case($entry->getAttribute('givenName')[0], MB_CASE_TITLE, "UTF-8");
  110.                     if($entry->hasAttribute('telephoneNumber')) $tmp['phone'] = chunk_split($entry->getAttribute('telephoneNumber')[0], 2, ' ');
  111.                     else $tmp['phone'] = '';
  112.                     if($entry->hasAttribute('facsimileTelephoneNumber'))$tmp['fax'] = chunk_split($entry->getAttribute('facsimileTelephoneNumber')[0], 2, ' ');
  113.                     else $tmp['fax'] = '';
  114.                     if($entry->hasAttribute('mobile'))$tmp['mobile'] = chunk_split($entry->getAttribute('mobile')[0], 2, ' ');
  115.                     else $tmp['mobile'] = '';
  116.                     $tmp['mail'] = $entry->getAttribute('mail')[0];
  117.                     $tmp['type'] = $entry->getAttribute('employeeType')[0];
  118.                     $tmp['site'] = $entry->getAttribute('o')[0];
  119.                     $tmp['category'] = mb_strtoupper( mb_substr( $entry->getAttribute('departmentNumber')[0], 0, 1 )) . mb_substr( $entry->getAttribute('departmentNumber')[0], 1 );
  120.                     $tmp['btn'] = '<div class="dropdown pull-right">' . 
  121.                         '<a class="dropdown-toggle" href="#" role="button" data-bs-toggle="dropdown" aria-expanded="false"><i class="fas fa-ellipsis-v"></i></a>' .
  122.                         '<div class="dropdown-menu dropdown-menu-end">' .
  123.                             '<a class="dropdown-item edit" href="#" data-id="'.$entry->getAttribute('mail')[0].'"><i class="fas fa-pencil-alt"></i> Modifier</a>' .
  124.                             '<a class="dropdown-item qrcode" href="'.$qrcode.'" download="qrcode.eps" download><i class="fas fa-qrcode"></i> QrCode</a>' .
  125.                             '<a class="dropdown-item signature" href="data:application/octet-stream;base64,'.$signatureTxt.'" download="signature.txt" download><i class="fas fa-file-signature"></i> Signature</a>' .
  126.                             '<div class="dropdown-divider"></div>' .
  127.                             '<a class="dropdown-item trash" href="#" data-id="'.$entry->getAttribute('mail')[0].'"><i class="fas fa-trash-alt"></i> Supprimer</a>' .
  128.                         '</div>' .
  129.                     '</div>';
  130.                     $usersData[] = $tmp;
  131.                 }
  132.             }
  134.             usort($usersData, fn($a, $b) => $a['lastname'] <=> $b['lastname'] ?: $a['lastname'] <=> $b['lastname'] );
  136.             $data = $usersData;
  137.             return $this->json(
  138.                 $data,
  139.                 headers: ['Content-Type' => 'application/json;charset=UTF-8']
  140.             );
  141.         } else {
  142.             $data = [
  143.                 'alert' => 'error',
  144.                 'message' => 'Problème de CRSF.'
  145.             ];
  146.             return $this->json(
  147.                 $data,
  148.                 headers: ['Content-Type' => 'application/json;charset=UTF-8']
  149.             );
  150.         }
  151.             
  152.     }
  154.     #[Route('/account/edit', name: 'account_edit')]
  155.     public function account_edit(Request $request, Adapter $ldapAdapter): Response
  156.     {
  157.         if (!$user = $this->getUser()) {
  158.             return $this->redirectToRoute('login');
  159.         }
  161.         $submittedToken = $request->request->get('token');
  162.         if ($this->isCsrfTokenValid('account-token', $submittedToken))
  163.         {
  164.             if($request->request->get('id') != ''){
  165.                 $ldap = new Ldap($ldapAdapter);
  166.                 $ldap->bind($this->getParameter('app.ldap_service_user').','.$this->getParameter('app.ldap_service_dn'), $this->getParameter('app.ldap_service_password'));
  167.                 $query = $ldap->query($this->getParameter('app.ldap_service_dn'), '(|(uid='.$request->request->get('id').'*))');
  168.                 $users = $query->execute()->toArray();
  169.                 $usersData = [];
  170.                 for($i=0;$i<count($users);$i++){
  171.                     $entry = $users[$i];
  172.                     if($entry->hasAttribute('uid')){
  173.                         $tmp['lastname'] = $entry->getAttribute('sn')[0];
  174.                         $tmp['firstname'] = $entry->getAttribute('givenName')[0];
  175.                         $tmp['phone'] = ($entry->hasAttribute('telephoneNumber') ? $entry->getAttribute('telephoneNumber')[0] : '');
  176.                         $tmp['fax'] = ($entry->hasAttribute('facsimileTelephoneNumber') ? $entry->getAttribute('facsimileTelephoneNumber')[0] : '');
  177.                         $tmp['mobile'] = ($entry->hasAttribute('mobile') ? $entry->getAttribute('mobile')[0] : '');
  178.                         $tmp['mail'] = $entry->getAttribute('mail')[0];
  179.                         $tmp['site'] = preg_replace('/\s+/', '', $entry->getAttribute('o')[0]);
  180.                         $tmp['level'] = $entry->getAttribute('ou')[0];
  181.                         $tmp['function'] = $entry->getAttribute('title')[0];
  182.                         $tmp['contract'] = $entry->getAttribute('employeeType')[0];
  183.                         $tmp['category'] = mb_strtoupper( mb_substr( $entry->getAttribute('departmentNumber')[0], 0, 1 )) . mb_substr( $entry->getAttribute('departmentNumber')[0], 1 );
  184.                         $usersData[] = $tmp;
  185.                     }
  186.                 }
  187.                 $data = $usersData;
  188.                 return $this->json(
  189.                     $data,
  190.                     headers: ['Content-Type' => 'application/json;charset=UTF-8']
  191.                 );
  192.             }
  193.         } else {
  194.             $data = [
  195.                 'alert' => 'error',
  196.                 'message' => 'Problème de CRSF.'
  197.             ];
  198.             return $this->json(
  199.                 $data,
  200.                 headers: ['Content-Type' => 'application/json;charset=UTF-8']
  201.             );
  202.         }
  203.     }
  205.     #[Route('/account/add', name: 'account_add')]
  206.     public function account_add(Request $request, Adapter $ldapAdapter, EntityManagerInterface $entityManager): Response
  207.     {
  208.         if (!$user = $this->getUser()) {
  209.             return $this->redirectToRoute('login');
  210.         }
  212.         $submittedToken = $request->request->get('add-token');
  213.         if ($this->isCsrfTokenValid('add-token', $submittedToken))
  214.         {
  215.             $direction = $entityManager->getRepository(Role::class)->findOneBy(array("role" => 'ROLE_'.$request->request->get('site-input')));
  216.             $role = $entityManager->getRepository(Role::class)->findOneBy(array("role" => 'ROLE_'.strtoupper($request->request->get('level-input'))));
  217.             $bdd = $this->getDatabaseConnection();
  218.             $sabreBackend = new PDO($bdd);
  219.             $userInsert = new UserInsert();
  220.             $nickhandle = preg_split('/@/',$request->request->get('mail-input'));
  221.             $vcard = '';
  222.             if($nickhandle[1] == 'batiformes.com' || $nickhandle[1] == 'scorev.fr'){
  223.                 $phone = ($request->request->get('phone-input')) ? preg_replace('/-/','',$request->request->get('phone-input')) : '';
  224.                 $mobile = ($request->request->get('mobile-input')) ? preg_replace('/-/','',$request->request->get('mobile-input')) : '';
  225.                 $fax = ($request->request->get('fax-input')) ? preg_replace('/-/','',$request->request->get('fax-input')) : '';
  226.                 $vcard = $userInsert->vcard_create($request->request->get('firstname-input'),$request->request->get('lastname-input'),$direction->getData()['direction'],$direction->getData()['city'],$direction->getData()['zipcode'],$request->request->get('mail-input'),$mobile,$phone,$fax,$request->request->get('function-input'),$role->getDescription(),$request->request->get('site-input'));
  227.             }
  228.             else{
  229.                 $vcard = $userInsert->vcard_ext_create($request->request->get('firstname-input'),$request->request->get('lastname-input'),$request->request->get('mail-input'),$mobile,$phone,$fax,$request->request->get('function-input'),$role->getDescription(),'EXT');
  230.             }
  231.             $ldap = new Ldap($ldapAdapter);
  232.             $ldap->bind($this->getParameter('app.ldap_service_user').','.$this->getParameter('app.ldap_service_dn'), $this->getParameter('app.ldap_service_password'));
  233.             $entryManager = $ldap->getEntryManager();
  234.             if($request->request->get('account-id') != ''){
  235.                 $query = $ldap->query($this->getParameter('app.ldap_service_dn'), '(&(uid='.$request->request->get('account-id').'))');
  236.                 $result = $query->execute()->toArray();
  237.                 $entry = $result[0];
  238.                 $gid = $entry->getAttributes()['ou'][0];
  239.                 if($gid == $request->request->get('level-input')){
  240.                     $gidNumber = $entry->getAttributes()['gidNumber'][0];
  241.                 }
  242.                 else{
  243.                     $queryGroup = $ldap->query($this->getParameter('app.ldap_service_dn'), '(&(cn='.$request->request->get('level-input').'))');
  244.                     $resultGroup = $queryGroup->execute()->toArray();
  245.                     $group = $resultGroup[0];
  246.                     $gidNumber = $group->getAttributes()['gidNumber'][0];
  247.                     $gid = $request->request->get('level-input');
  248.                 }
  250.                 $entry->setAttribute('givenName', [strtolower($request->request->get('firstname-input'))]);
  251.                 $entry->setAttribute('sn', [strtolower($request->request->get('lastname-input'))]);
  252.                 $entry->setAttribute('cn', [strtolower($request->request->get('lastname-input')).' '.strtolower($request->request->get('firstname-input'))]);
  253.                 if($request->request->get('phone-input') == '' && $entry->hasAttribute('telephoneNumber') ) $entry->setAttribute('telephoneNumber', [preg_replace('/-/','',$request->request->get('phone-input'))]);
  254.                 if($request->request->get('phone-input') != '') $entry->setAttribute('telephoneNumber', [preg_replace('/-/','',$request->request->get('phone-input'))]);
  255.                 if($request->request->get('mobile-input') == '' && $entry->hasAttribute('mobile') ) $entry->setAttribute('mobile', [preg_replace('/-/','',$request->request->get('mobile-input'))]);
  256.                 if($request->request->get('mobile-input') != '') $entry->setAttribute('mobile', [preg_replace('/-/','',$request->request->get('mobile-input'))]);
  257.                 if($request->request->get('fax-input') == '' && $entry->hasAttribute('facsimileTelephoneNumber') ) $entry->setAttribute('facsimileTelephoneNumber', [preg_replace('/-/','',$request->request->get('fax-input'))]);
  258.                 if($request->request->get('fax-input') != '') $entry->setAttribute('facsimileTelephoneNumber', [preg_replace('/-/','',$request->request->get('fax-input'))]);
  259.                 $entry->setAttribute('street', [$direction->getData()['direction']]);
  260.                 $entry->setAttribute('postalCode', [$direction->getData()['zipcode']]);
  261.                 $entry->setAttribute('l', [$direction->getData()['city']]);
  262.                 $entry->setAttribute('employeeType', [$request->request->get('contract-input')]);
  263.                 $entry->setAttribute('departmentNumber', [$role->getDescription()]);
  264.                 $entry->setAttribute('o', [$direction->getDescription()]);
  265.                 $entry->setAttribute('title', [strtolower($request->request->get('function-input'))]);
  266.                 $entry->setAttribute('gidNumber', [$gidNumber]);
  267.                 $entry->setAttribute('ou', [$gid]);
  268.                 $entry->setAttribute('st', [$direction->getData()['state']]);
  269.                 $entry->setAttribute('postalAddress', [$direction->getData()['gmap']]);
  270.                 $entry->setAttribute('registeredAddress', [$direction->getData()['lat'].':'.$direction->getData()['lng']]);
  271.                 $entryManager->update($entry);
  273.                 if($vcard != '') {
  274.                     $query = $ldap->query($this->getParameter('app.ldap_service_dn'), '(|(uid=*))');
  275.                     $users = $query->execute()->toArray();
  276.                     for($i=0;$i<count($users);$i++){
  277.                         $addressbooks = $bdd->prepare("SELECT id FROM addressbooks WHERE principaluri = 'principals/".$users[$i]->getAttribute('mail')[0]."' AND uri = 'annuaire'");
  278.                         $addressbooks->execute();
  279.                         $addressbooksResult = $addressbooks->fetchAll(\PDO::FETCH_ASSOC);
  280.                         $addressbooksId = $addressbooksResult[0]['id'];
  281.                         $sabreBackend->updateCard($addressbooksId, $users[$i]->getAttribute('mail')[0].'-'.$request->request->get('account-id').'.vcf', $vcard);
  282.                     }
  283.                 }
  285.                 $message = 'Compte updaté.';
  286.             }
  287.             else{
  288.                 $queryGroup = $ldap->query($this->getParameter('app.ldap_service_dn'), '(&(cn='.$request->request->get('level-input').'))');
  289.                 $result = $queryGroup->execute()->toArray();
  290.                 $group = $result[0];
  291.                 $gidNumber = $group->getAttributes()['gidNumber'][0];
  292.                 $uidnumber = mt_rand('10000', '30000');
  293.                 $uuid = strtoupper(substr(bin2hex(random_bytes(32)), 0, 32));
  294.                 $userpassword = '{SHA}' . base64_encode(sha1( 'B@tiF0rme5-'.strtolower($request->request->get('firstname-input')), TRUE ));
  295.                 $entry = new Entry('uid='.strtolower($request->request->get('mail-input')).',ou=users,dc=batiformes,dc=com', [
  296.                     'objectClass' => [
  297.                         '0' => 'posixAccount',
  298.                         '1' => 'inetOrgPerson'
  299.                     ],
  300.                     'uid' => [strtolower($request->request->get('mail-input'))],
  301.                     'cn' => [strtolower($request->request->get('lastname-input')).' '.strtolower($request->request->get('firstname-input'))],
  302.                     'uidnumber' => [$uidnumber],
  303.                     'gidNumber' => [$gidNumber],
  304.                     'userPassword' => [$userpassword],
  305.                     'loginShell' => ['/bin/false'],
  306.                     'homeDirectory' => ['/mnt/data/private/'.strtolower($request->request->get('mail-input'))],
  307.                     'ou' => [$request->request->get('level-input')],
  308.                     'employeeNumber' => [$uuid],
  309.                     'departmentNumber' => [$role->getDescription()],
  310.                     'labeledURI' => [$direction->getData()['url']],
  311.                     'sn' => [strtolower($request->request->get('lastname-input'))],
  312.                     'givenName' => [strtolower($request->request->get('firstname-input'))],
  313.                     'employeeType' => [$request->request->get('contract-input')],
  314.                     'o' => [$direction->getDescription()],
  315.                     'title' => [strtolower($request->request->get('function-input'))],
  316.                     'street' => [$direction->getData()['direction']],
  317.                     'st' => [$direction->getData()['state']],
  318.                     'postalAddress' => [$direction->getData()['gmap']],
  319.                     'registeredAddress' => [$direction->getData()['lat'].':'.$direction->getData()['lng']],
  320.                     'postalCode' => [$direction->getData()['zipcode']],
  321.                     'l' => [$direction->getData()['city']],
  322.                     'mail' => [strtolower($request->request->get('mail-input'))],
  323.                 ]);
  324.                 
  325.                 if($request->request->get('phone-input') != '') $entry->setAttribute('telephoneNumber', [preg_replace('/-/','',$request->request->get('phone-input'))]);
  326.                 if($request->request->get('mobile-input') != '') $entry->setAttribute('mobile', [preg_replace('/-/','',$request->request->get('mobile-input'))]);
  327.                 if($request->request->get('fax-input') != '') $entry->setAttribute('facsimileTelephoneNumber', [preg_replace('/-/','',$request->request->get('fax-input'))]);
  328.                 $entryManager->add($entry);
  329.     
  330.                 $filesystem = new Filesystem();
  331.                 $filesystem->mkdir('/mnt/data/private/'.strtolower($request->request->get('mail-input')));
  333.                 $filesystem->mkdir('/opt/picapport/.picapport/users/user/'.strtolower($request->request->get('mail-input')));
  335.                 $fileUser = '/opt/picapport/.picapport/users/user/'.strtolower($request->request->get('mail-input')).'/'.strtolower($request->request->get('mail-input')).'.xml';
  336.                 $xmlUser = new XmlRender();
  337.                 $xmlUser->user_add($fileUser,strtolower($request->request->get('mail-input')),mb_convert_case($request->request->get('firstname-input'), MB_CASE_TITLE, "UTF-8").' '.preg_replace(array('/\bVon\b/u','/\bDe\b/u'), array('von','de'), mb_convert_case($request->request->get('lastname-input'), MB_CASE_TITLE, "UTF-8")),'B@tiF0rme5-'.strtolower($request->request->get('firstname-input')),$uuid);
  339.                 $role = 'user';
  340.                 $userRole = 'ROLE_'.mb_strtoupper($request->request->get('level-input'));
  341.                 if('ROLE_IT' == $userRole || 'ROLE_COMMUNICATION' == $userRole){
  342.                     $role = 'publisher';
  343.                 }
  344.                 $fileGrpe = '/opt/picapport/.picapport/users/roles/'.$role.'/'.$role.'.xml';
  345.                 $xmlUser->group_edit($fileGrpe,$role,strtolower($request->request->get('mail-input')));
  347.                 $pathToPicApportScript = "/home/websites/scripts/picapport.sh";
  348.                 $process = new Process(['sh', $pathToPicApportScript]);
  349.                 $process->run();
  351.                 $userInsert->create_user($bdd,strtolower($request->request->get('mail-input')),strtolower($request->request->get('firstname-input')),preg_replace(array('/\bVon\b/u','/\bDe\b/u'), array('von','de'), mb_convert_case($request->request->get('lastname-input'), MB_CASE_TITLE, "UTF-8")));
  353.                 if($vcard != '') {
  354.                     $addressbooks = $bdd->prepare("SELECT id FROM addressbooks WHERE principaluri = 'principals/".strtolower($request->request->get('mail-input'))."' AND uri = 'annuaire'");
  355.                     $addressbooks->execute();
  356.                     $addressbooksResult = $addressbooks->fetchAll(\PDO::FETCH_ASSOC);
  357.                     $addressbooksId = $addressbooksResult[0]['id'];
  358.                     $sabreBackend->createCard($addressbooksId, strtolower($request->request->get('mail-input'))."-".strtolower($request->request->get('mail-input')).'.vcf', $vcard);
  359.                 }
  361.                 $query = $ldap->query($this->getParameter('app.ldap_service_dn'), '(|(uid=*))');
  362.                 $users = $query->execute()->toArray();
  363.                 for($i=0;$i<count($users);$i++){
  364.                     if($users[$i]->getAttribute('mail')[0] != strtolower($request->request->get('mail-input'))){
  365.                         $usersRole = 'ROLE_'.mb_strtoupper($users[$i]->getAttribute('ou')[0]);
  366.                         $roleUsers = $entityManager->getRepository(Role::class)->findOneBy(array("role" => $usersRole));
  367.                         $phone = '';
  368.                         $mobile = '';
  369.                         $fax = '';
  370.                         if($users[$i]->hasAttribute('telephoneNumber') ) $phone = $users[$i]->getAttribute('telephoneNumber')[0];
  371.                         if($users[$i]->hasAttribute('mobile') ) $mobile = $users[$i]->getAttribute('mobile')[0];
  372.                         if($users[$i]->hasAttribute('facsimileTelephoneNumber') ) $fax = $users[$i]->getAttribute('facsimileTelephoneNumber')[0];
  373.                         /*if($vcard != ''){
  374.                             $sabreBackend->createCard($addressbooksId, strtolower($request->request->get('mail-input'))."-".$users[$i]->getAttribute('mail')[0].'.vcf', $vcard);
  375.                             //$sabreBackend->createCard($addressbooksId, $users[$i]->getAttribute('mail')[0]."-".strtolower($request->request->get('mail-input')).'.vcf', $vcard);
  376.                         } */
  377.                         $nickhandle = preg_split('/@/',strtolower($users[$i]->getAttribute('mail')[0]));
  378.                         if($nickhandle[1] == 'batiformes.com' || $nickhandle[1] == 'scorev.fr'){
  379.                             $vcardCollaborator = $userInsert->vcard_create(addslashes($users[$i]->getAttribute('givenName')[0]),addslashes($users[$i]->getAttribute('sn')[0]),addslashes($users[$i]->getAttribute('street')[0]),addslashes($users[$i]->getAttribute('l')[0]),$users[$i]->getAttribute('postalCode')[0],strtolower($users[$i]->getAttribute('mail')[0]),$mobile,$phone,$fax,addslashes($users[$i]->getAttribute('title')[0]),$roleUsers->getDescription(),$users[$i]->getAttribute('o')[0]);
  380.                         }
  381.                         else{
  382.                             $vcardCollaborator = $userInsert->vcard_ext_create(addslashes($users[$i]->getAttribute('givenName')[0]),addslashes($users[$i]->getAttribute('sn')[0]),$request->request->get('mail-input'),strtolower($users[$i]->getAttribute('mail')[0]),$mobile,$phone,$fax,addslashes($users[$i]->getAttribute('title')[0]),$roleUsers->getDescription(),$users[$i]->getAttribute('o')[0]);
  383.                         }
  384.                         if($vcardCollaborator != '') {
  385.                             //$sabreBackend->createCard($addressbooksId, strtolower($request->request->get('mail-input'))."-".strtolower($request->request->get('mail-input')).'.vcf', $vcard);
  386.                             $addressbooksCollaborator = $bdd->prepare("SELECT id FROM addressbooks WHERE principaluri = 'principals/".$users[$i]->getAttribute('mail')[0]."' AND uri = 'annuaire'");
  387.                             $addressbooksCollaborator->execute();
  388.                             $addressbooksCollaboratorResult = $addressbooksCollaborator->fetchAll(\PDO::FETCH_ASSOC);
  389.                             $addressbooksIdCollaborator = $addressbooksCollaboratorResult[0]['id'];
  390.                             $sabreBackend->createCard($addressbooksIdCollaborator, $users[$i]->getAttribute('mail')[0]."-".strtolower($request->request->get('mail-input')).'.vcf', $vcard);
  391.                             $sabreBackend->createCard($addressbooksId, strtolower($request->request->get('mail-input'))."-".$users[$i]->getAttribute('mail')[0].'.vcf', $vcardCollaborator);
  392.                             //$sabreBackend->createCard($addressbooksIdCollaborator, strtolower($request->request->get('mail-input'))."-".$users[$i]->getAttribute('mail')[0].'.vcf', $vcardCollaborator);
  393.                         }
  394.                     }
  395.                 }
  397.                 $message = 'Compte créé.';
  398.             }
  399.             $bdd = null;
  400.             $data = [
  401.                 'alert' => 'success',
  402.                 'message' => $message
  403.             ];
  404.             return $this->json(
  405.                 $data,
  406.                 headers: ['Content-Type' => 'application/json;charset=UTF-8']
  407.             );
  408.         } else {
  409.             $data = [
  410.                 'alert' => 'danger',
  411.                 'message' => 'Problème de CRSF.'
  412.             ];
  413.             return $this->json(
  414.                 $data,
  415.                 headers: ['Content-Type' => 'application/json;charset=UTF-8']
  416.             );
  417.         }
  418.     }
  420.     #[Route('/account/delete', name: 'account_delete')]
  421.     public function account_delete(Request $request, Adapter $ldapAdapter, EntityManagerInterface $entityManager): Response
  422.     {
  423.         if (!$user = $this->getUser()) {
  424.             return $this->redirectToRoute('login');
  425.         }
  427.         $submittedToken = $request->request->get('token');
  428.         if ($this->isCsrfTokenValid('account-token', $submittedToken))
  429.         {
  430.             $share_entity = $entityManager->getRepository(Share::class)->findBy(['owner' => $request->request->get('id')]);
  431.             for($i=0;$i<count($share_entity);$i++){
  432.                 $entityManager->getRepository(Share::class)->remove($share_entity[$i], true);
  433.             }
  434.             
  435.             /*$visio_entity = $entityManager->getRepository(Visio::class)->findBy(['user' => $request->request->get('id')]);
  436.             for($i=0;$i<count($visio_entity);$i++){
  437.                 $visio_entity->getRepository(Visio::class)->remove($visio_entity[$i], true);
  438.             }*/
  439.             
  440.             $filesystem = new Filesystem();
  441.             $filesystem->remove('/mnt/data/private/'.$request->request->get('id'));
  442.             $filesystem->remove('/opt/picapport/.picapport/users/user/'.$request->request->get('id'));
  444.             $ldap = new Ldap($ldapAdapter);
  445.             $ldap->bind($this->getParameter('app.ldap_service_user').','.$this->getParameter('app.ldap_service_dn'), $this->getParameter('app.ldap_service_password'));
  446.             $entryManager = $ldap->getEntryManager();
  447.             $query = $ldap->query($this->getParameter('app.ldap_service_dn'), '(&(uid='.$request->request->get('id').'))');
  448.             $result = $query->execute()->toArray();
  449.             $entry = $result[0];
  451.             $role = 'user';
  452.             $userRole = 'ROLE_'.mb_strtoupper($entry->getAttributes()['ou'][0]);
  453.             if('ROLE_IT' == $userRole || 'ROLE_COMMUNICATION' == $userRole){
  454.                 $role = 'publisher';
  455.             }
  456.             $url = '/opt/picapport/.picapport/users/roles/'.$role.'/'.$role.'.xml';
  457.             $xmlUser = new XmlRender();
  458.             $xmlUser->group_trash($url,$role,$request->request->get('id'));
  460.             $pathToPicApportScript = "/home/websites/scripts/picapport.sh";
  461.             $process = new Process(['sh', $pathToPicApportScript]);
  462.             $process->run();
  463.             
  464.             $entryManager->remove($entry);
  466.             $query = $ldap->query($this->getParameter('app.ldap_service_dn'), '(|(uid=*))');
  467.             $users = $query->execute()->toArray();
  468.             $bdd = $this->getDatabaseConnection();
  469.             $cardBackend = new PDO($bdd);
  470.             $userDel = new UserInsert();
  472.             for($i=0;$i<count($users);$i++){
  473.                 $addressbooks = $bdd->prepare("SELECT id,synctoken FROM addressbooks WHERE principaluri = 'principals/".$users[$i]->getAttribute('mail')[0]."' AND uri = 'annuaire'");
  474.                 $addressbooks->execute();
  475.                 $addressbooksResult = $addressbooks->fetchAll(\PDO::FETCH_ASSOC);
  476.                 if(isset($addressbooksResult[0]['id'])){
  477.                     $cardBackend->deleteCard($addressbooksResult[0]['id'], $users[$i]->getAttribute('mail')[0]."-".$request->request->get('id').".vcf");
  478.                 }
  479.             }
  480.             
  481.             $addressbooks = $bdd->prepare("SELECT id FROM addressbooks WHERE principaluri = 'principals/".$request->request->get('id')."'");
  482.             $addressbooks->execute();
  483.             $addressbooksResult = $addressbooks->fetchAll(\PDO::FETCH_ASSOC);
  484.             if(isset($addressbooksResult[0]['id'])){
  485.                 $cardBackend->deleteAddressBook($addressbooksResult[0]['id']);
  486.             }
  487.     
  488.             $userDel = $bdd->prepare("DELETE FROM users WHERE username = '".$request->request->get('id')."'");
  489.             $userDel->execute();
  490.                 
  491.             $user_entity = $entityManager->getRepository(User::class)->findBy(['username' => $request->request->get('id')]);
  492.             if(!empty($user_entity)){
  493.                 $entityManager->remove($user_entity[0], true);
  494.                 $entityManager->flush();
  495.             }
  497.             $bdd = null;
  498.             $data = [
  499.                 'alert' => 'success',
  500.                 'message' => 'Le compte a été supprimé.'
  501.             ];
  502.             return $this->json(
  503.                 $data,
  504.                 headers: ['Content-Type' => 'application/json;charset=UTF-8']
  505.             );
  506.         }
  507.         else{
  508.             $data = [
  509.                 'alert' => 'error',
  510.                 'message' => 'Problème de CRSF.'
  511.             ];
  512.             return $this->json(
  513.                 $data,
  514.                 headers: ['Content-Type' => 'application/json;charset=UTF-8']
  515.             );
  516.         }
  517.     }
  519.     private function getDatabaseConnection(){ 
  520.         if ($this->pdo === null) {
  521.             $this->pdo = new \PDO('mysql:host=ma77924-001.dbaas.ovh.net:35815;dbname='.$this->getParameter('app.sabre_bdd'),'sabre','d4cvRR2bNvqsbmC68yPFJJa1ACw87DD');
  522.             $this->pdo->setAttribute(\PDO::ATTR_ERRMODE, \PDO::ERRMODE_EXCEPTION);
  523.             $this->pdo->query("SET NAMES 'UTF8'"); 
  524.         }
  525.         return $this->pdo;
  526.     }    
  527. }