Update: 2026-07-30 02:27:45

2026-07-30 02:27:45 +03:00
parent 5f62455113
commit ca4a7c2e70
56 changed files with 3391 additions and 709 deletions
@@ -0,0 +1,85 @@
+<?php
+/**
+ * CLI-ONLY migration script.
+ * Moved out of the public webroot on 2026-07-30 - it used to be reachable
+ * unauthenticated over HTTP. Run with: php scripts/legacy_migrations/<file>
+ */
+if (PHP_SAPI !== 'cli') {
+    http_response_code(404);
+    exit('Not Found');
+}
+require_once __DIR__ . '/../../app/bootstrap/init.php';
+use App\Core\Database;
+use App\Core\Encryption;
+
+try {
+    $db = Database::getInstance();
+    $db->beginTransaction();
+
+    // 1. Generate UUIDs
+    $tenantId = sprintf('%04x%04x-%04x-%04x-%04x-%04x%04x%04x',
+        mt_rand(0, 0xffff), mt_rand(0, 0xffff), mt_rand(0, 0xffff),
+        mt_rand(0, 0x0fff) | 0x4000, mt_rand(0, 0x3fff) | 0x8000,
+        mt_rand(0, 0xffff), mt_rand(0, 0xffff), mt_rand(0, 0xffff)
+    );
+
+    $userId = sprintf('%04x%04x-%04x-%04x-%04x-%04x%04x%04x',
+        mt_rand(0, 0xffff), mt_rand(0, 0xffff), mt_rand(0, 0xffff),
+        mt_rand(0, 0x0fff) | 0x4000, mt_rand(0, 0x3fff) | 0x8000,
+        mt_rand(0, 0xffff), mt_rand(0, 0xffff), mt_rand(0, 0xffff)
+    );
+
+    // 2. Test Account Data
+    $tenantName = "مكتب المراجعة التجريبي";
+    $tenantEmail = "reviewer@musadaq.jo";
+    
+    $userName = "App Reviewer";
+    $userEmail = "reviewer@musadaq.jo";
+    // Password must be supplied on the command line - never hardcoded.
+    //   php scripts/legacy_migrations/create_test_account.php '<password>'
+    $userPassword = $argv[1] ?? '';
+    if (strlen($userPassword) < 12) {
+        exit("Usage: php create_test_account.php '<password>'  (min 12 chars)\n");
+    }
+
+    // 3. Encrypt data
+    $encryptedTenantName = Encryption::encrypt($tenantName);
+    $encryptedTenantEmail = Encryption::encrypt($tenantEmail);
+    
+    $encryptedUserName = Encryption::encrypt($userName);
+    $encryptedUserEmail = Encryption::encrypt($userEmail);
+    $emailHash = hash('sha256', strtolower($userEmail));
+    $passwordHash = password_hash($userPassword, PASSWORD_DEFAULT);
+
+    // 4. Delete existing if any (prevent duplicates on re-run)
+    $stmt = $db->prepare("DELETE FROM users WHERE email_hash = ?");
+    $stmt->execute([$emailHash]);
+
+    // 5. Insert Tenant
+    $stmt = $db->prepare("INSERT INTO tenants (id, name, email, status, created_at) VALUES (?, ?, ?, 'active', NOW())");
+    $stmt->execute([
+        $tenantId,
+        $encryptedTenantName,
+        $encryptedTenantEmail
+    ]);
+
+    // 6. Insert User (Manager)
+    $stmtUser = $db->prepare("INSERT INTO users (id, tenant_id, name, email, email_hash, password_hash, role, created_at) VALUES (?, ?, ?, ?, ?, ?, 'admin', NOW())");
+    $stmtUser->execute([
+        $userId,
+        $tenantId,
+        $encryptedUserName,
+        $encryptedUserEmail,
+        $emailHash,
+        $passwordHash
+    ]);
+
+    $db->commit();
+    echo "<h3 style='color:green'>✅ تم إنشاء الحساب التجريبي بنجاح!</h3>";
+    echo "<p><b>البريد الإلكتروني:</b> $userEmail</p>";
+    echo "<p><b>كلمة المرور:</b> (the one you passed on the command line)</p>";
+
+} catch (\Exception $e) {
+    $db->rollBack();
+    echo "<h3 style='color:red'>❌ Error: " . htmlspecialchars($e->getMessage()) . "</h3>";
+}