CommunityID/modules/users/controllers/ProfilegeneralController.php

308 lines
10 KiB
PHP
Raw Normal View History

2019-07-17 20:08:50 +00:00
<?php
/*
* @copyright Copyright (C) 2005-2009 Keyboard Monkeys Ltd. http://www.kb-m.com
* @license http://creativecommons.org/licenses/BSD/ BSD License
* @author Keyboard Monkey Ltd
* @since CommunityID 0.9
* @package CommunityID
* @packager Keyboard Monkeys
*/
2019-07-17 20:16:19 +00:00
class Users_ProfilegeneralController extends CommunityID_Controller_Action
2019-07-17 20:08:50 +00:00
{
private $_users;
public function preDispatch()
{
2019-07-17 20:16:19 +00:00
if ($this->user->role != Users_Model_User::ROLE_ADMIN
2019-07-17 20:08:50 +00:00
&& $this->targetUser->id != $this->user->id)
{
throw new Monkeys_AccessDeniedException();
}
}
public function accountinfoAction()
{
}
public function editaccountinfoAction()
{
if ($this->targetUser->id != $this->user->id
// this condition checks for an non-admin trying to add a new user
2019-07-17 20:16:19 +00:00
&& ($this->targetUser->id != 0 || $this->user->role != Users_Model_User::ROLE_ADMIN))
2019-07-17 20:08:50 +00:00
{
throw new Monkeys_AccessDeniedException();
}
$appSession = Zend_Registry::get('appSession');
if (isset($appSession->accountInfoForm)) {
$this->view->accountInfoForm = $appSession->accountInfoForm;
unset($appSession->accountInfoForm);
} else {
2019-07-17 20:16:19 +00:00
$this->view->accountInfoForm = new Users_Form_AccountInfo(null, $this->targetUser);
2019-07-17 20:08:50 +00:00
$this->view->accountInfoForm->populate(array(
'username' => $this->targetUser->username,
'firstname' => $this->targetUser->firstname,
'lastname' => $this->targetUser->lastname,
'email' => $this->targetUser->email,
));
}
}
public function saveaccountinfoAction()
{
$isNewUser = is_null($this->targetUser->id)? true : false;
if (!$isNewUser && $this->targetUser->id != $this->user->id) {
// admins can add new users, but not edit existing ones
throw new Monkeys_AccessDeniedException();
}
2019-07-17 20:16:19 +00:00
$form = new Users_Form_AccountInfo(null, $this->targetUser);
2019-07-17 20:08:50 +00:00
$formData = $this->_request->getPost();
$form->populate($formData);
if (!$form->isValid($formData)) {
return $this->_redirectInvalidForm($form);
}
$existingUsernameOrEmail = false;
$newUsername = $form->getValue('username');
if (($isNewUser && $this->_usernameAlreadyExists($newUsername))
|| (!$isNewUser && ($this->targetUser->username != $newUsername)
&& $this->_usernameAlreadyExists($newUsername)))
{
$form->username->addError($this->view->translate('This username is already in use'));
$existingUsernameOrEmail = true;
}
$newEmail = $form->getValue('email');
if (($isNewUser && $this->_emailAlreadyExists($newEmail))
|| (!$isNewUser && ($this->targetUser->email != $newEmail)
&& $this->_emailAlreadyExists($newEmail)))
{
$form->email->addError($this->view->translate('This E-mail is already in use'));
$existingUsernameOrEmail = true;
}
if ($existingUsernameOrEmail) {
return $this->_redirectInvalidForm($form);
}
$this->targetUser->username = $newUsername;
$this->targetUser->firstname = $form->getValue('firstname');
$this->targetUser->lastname = $form->getValue('lastname');
$this->targetUser->email = $newEmail;
if ($isNewUser) {
$this->targetUser->accepted_eula = 1;
$this->targetUser->registration_date = date('Y-m-d');
$this->targetUser->openid = $this->_generateOpenId($this->targetUser->username);
2019-07-17 20:16:19 +00:00
$this->targetUser->role = Users_Model_User::ROLE_REGISTERED;
2019-07-17 20:08:50 +00:00
$this->targetUser->setClearPassword($form->getValue('password1'));
}
$this->targetUser->save();
/**
* When the form is submitted through a YUI request using a file, an iframe is used,
* so the framework doesn't detected it as ajax, so we have to manually ensure the
* layout is not shown.
*/
$this->_helper->layout->disableLayout();
$this->_forward('accountinfo', null , null, array('userid' => $this->targetUser->id));
}
private function _usernameAlreadyExists($username)
{
$users = $this->_getUsers();
2019-07-17 20:16:19 +00:00
return $users->getUserWithUsername($username);
2019-07-17 20:08:50 +00:00
}
private function _emailAlreadyExists($email)
{
$users = $this->_getUsers();
return $users->getUserWithEmail($email);
}
private function _redirectInvalidForm(Zend_Form $form)
{
$appSession = Zend_Registry::get('appSession');
$appSession->accountInfoForm = $form;
/**
* When the form is submitted through a YUI request using a file, an iframe is used,
* so the framework doesn't detected it as ajax, so we have to manually ensure the
* layout is not shown.
*/
$this->_helper->layout->disableLayout();
$this->_forward('editaccountinfo', null , null, array('userid' => $this->targetUser->id));
return;
}
/**
* Only the users themselves can change their passwords
*/
public function changepasswordAction()
{
if ($this->targetUser->id != $this->user->id)
{
throw new Monkeys_AccessDeniedException();
}
$appSession = Zend_Registry::get('appSession');
if (isset($appSession->changePasswordForm)) {
$this->view->changePasswordForm = $appSession->changePasswordForm;
unset($appSession->changePasswordForm);
} else {
2019-07-17 20:16:19 +00:00
$this->view->changePasswordForm = new Users_Form_ChangePassword();
2019-07-17 20:08:50 +00:00
}
}
public function savepasswordAction()
{
if ($this->targetUser->id != $this->user->id)
{
throw new Monkeys_AccessDeniedException();
}
2019-07-17 20:16:19 +00:00
$form = new Users_Form_ChangePassword();
2019-07-17 20:08:50 +00:00
$formData = $this->_request->getPost();
$form->populate($formData);
if (!$form->isValid($formData)) {
$appSession = Zend_Registry::get('appSession');
$appSession->changePasswordForm = $form;
return $this->_forward('changepassword', null , null, array('userid' => $this->targetUser->id));
}
$this->targetUser->setClearPassword($form->getValue('password1'));
$this->targetUser->save();
return $this->_forward('accountinfo', null , null, array('userid' => $this->targetUser->id));
}
public function confirmdeleteAction()
{
$this->_helper->actionStack('index', 'login', 'users');
}
public function deleteAction()
{
$mail = self::getMail();
2019-07-17 20:10:53 +00:00
$mail->setFrom($this->_config->email->supportemail);
2019-07-17 20:08:50 +00:00
$mail->addTo($this->_config->email->supportemail);
$mail->setSubject('Community-ID user deletion');
$userFullname = $this->user->getFullName();
$reasonsChecked = array();
if ($this->_getParam('reason_test')) {
$reasonsChecked[] = 'This was just a test account';
}
if ($this->_getParam('reason_foundbetter')) {
$reasonsChecked[] = 'I found a better service';
}
if ($this->_getParam('reason_lackedfeatures')) {
$reasonsChecked[] = 'Service lacked some key features I needed';
}
if ($this->_getParam('reason_none')) {
$reasonsChecked[] = 'No particular reason';
}
if ($reasonsChecked) {
$reasonsChecked = implode("\r\n", $reasonsChecked);
} else {
$reasonsChecked = 'None (no checkbox was ticked).';
}
$comment = $this->_getParam('reason_comments');
$body = <<<EOT
Dear Admin:
The user $userFullname has deleted his account, giving the following feedback:
Reasons checked:
$reasonsChecked
Comment:
$comment
EOT;
$mail->setBodyText($body);
try {
$mail->send();
} catch (Zend_Mail_Protocol_Exception $e) {
if ($this->_config->logging->level == Zend_Log::DEBUG) {
$this->_helper->FlashMessenger->addMessage('Account was deleted, but feedback form couldn\'t be sent to admins');
}
}
$users = $this->_getUsers();
$users->deleteUser($this->user);
Zend_Auth::getInstance()->clearIdentity();
$this->_helper->FlashMessenger->addMessage($this->view->translate('Your acccount has been successfully deleted'));
$this->_redirect('');
}
private function _generateOpenId($username)
{
$selfUrl = Zend_OpenId::selfUrl();
if (!preg_match('#(.*)/users/profile.*#', $selfUrl, $matches)) {
throw new Exception('Couldn\'t retrieve current URL');
}
if ($this->_config->subdomain->enabled) {
2019-07-17 20:16:19 +00:00
$openid = $this->getProtocol() . '://' . $username . '.' . $this->_config->subdomain->hostname;
2019-07-17 20:08:50 +00:00
} else {
$openid = $matches[1] . "/identity/$username";
}
if ($this->_config->SSL->enable_mixed_mode) {
$openid = str_replace('http://', 'https://', $openid);
}
Zend_OpenId::normalizeUrl($openid);
return $openid;
}
/**
* @return Zend_Mail
* @throws Zend_Mail_Protocol_Exception
*/
public static function getMail()
{
// can't use $this->_config 'cause it's a static function
$configEmail = Zend_Registry::get('config')->email;
switch (strtolower($configEmail->transport)) {
case 'smtp':
Zend_Mail::setDefaultTransport(
new Zend_Mail_Transport_Smtp(
$configEmail->host,
$configEmail->toArray()
)
);
break;
case 'mock':
Zend_Mail::setDefaultTransport(new Zend_Mail_Transport_Mock());
break;
default:
Zend_Mail::setDefaultTransport(new Zend_Mail_Transport_Sendmail());
}
$mail = new Zend_Mail();
return $mail;
}
private function _getUsers()
{
if (!isset($this->_users)) {
2019-07-17 20:16:19 +00:00
$this->_users = new Users_Model_Users();
2019-07-17 20:08:50 +00:00
}
return $this->_users;
}
}