Method addUser

src/FileRise/Domain/UserModel.php:290–333

* Add a user. * * @param string $username * @param string $password * @param string $isAdmin "1" or "0" * @param bool $setupMode overwrite file if true */

($username, $password, $isAdmin, $setupMode)

     * @param bool   $setupMode overwrite file if true
     */
    public static function addUser($username, $password, $isAdmin, $setupMode)
    {
        $usersFile = USERS_DIR . USERS_FILE;

        // Defense in depth
        if (!preg_match(REGEX_USER, $username)) {
            return ["error" => "Invalid username"];
        }
        if (!is_string($password) || $password === '') {
            return ["error" => "Password required"];
        }
        $isAdmin = $isAdmin === '1' ? '1' : '0';

        if (!file_exists($usersFile)) {
            @file_put_contents($usersFile, '', LOCK_EX);
        }

        // Check duplicates
        $existingUsers = file($usersFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) ?: [];
        foreach ($existingUsers as $line) {
            $parts = explode(':', trim($line));
            if (isset($parts[0]) && strcasecmp($username, $parts[0]) === 0) {
                return ["error" => "User already exists"];
            }
        }

        $hashedPassword = password_hash($password, PASSWORD_BCRYPT);
        $newUserLine    = $username . ":" . $hashedPassword . ":" . $isAdmin . PHP_EOL;

        if ($setupMode) {
            if (file_put_contents($usersFile, $newUserLine, LOCK_EX) === false) {
                return ["error" => "Failed to write users file"];
            }
            if (!self::markSetupComplete()) {
                error_log('FileRise: initial admin was created but setup-complete marker could not be written.');
            }
        } else {
            if (file_put_contents($usersFile, $newUserLine, FILE_APPEND | LOCK_EX) === false) {
                return ["error" => "Failed to write users file"];
            }
        }

        return ["success" => "User added successfully"];
    }

    /**
     * Remove a user and update encrypted userPermissions.json.