first commit
This commit is contained in:
250
components/com_users/src/Controller/RegistrationController.php
Normal file
250
components/com_users/src/Controller/RegistrationController.php
Normal file
@ -0,0 +1,250 @@
|
||||
<?php
|
||||
|
||||
/**
|
||||
* @package Joomla.Site
|
||||
* @subpackage com_users
|
||||
*
|
||||
* @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org>
|
||||
* @license GNU General Public License version 2 or later; see LICENSE.txt
|
||||
*/
|
||||
|
||||
namespace Joomla\Component\Users\Site\Controller;
|
||||
|
||||
use Joomla\CMS\Component\ComponentHelper;
|
||||
use Joomla\CMS\Language\Text;
|
||||
use Joomla\CMS\MVC\Controller\BaseController;
|
||||
use Joomla\CMS\Router\Route;
|
||||
use Joomla\CMS\User\UserFactoryAwareInterface;
|
||||
use Joomla\CMS\User\UserFactoryAwareTrait;
|
||||
|
||||
// phpcs:disable PSR1.Files.SideEffects
|
||||
\defined('_JEXEC') or die;
|
||||
// phpcs:enable PSR1.Files.SideEffects
|
||||
|
||||
/**
|
||||
* Registration controller class for Users.
|
||||
*
|
||||
* @since 1.6
|
||||
*/
|
||||
class RegistrationController extends BaseController implements UserFactoryAwareInterface
|
||||
{
|
||||
use UserFactoryAwareTrait;
|
||||
|
||||
/**
|
||||
* Method to activate a user.
|
||||
*
|
||||
* @return boolean True on success, false on failure.
|
||||
*
|
||||
* @since 1.6
|
||||
* @throws \Exception
|
||||
*/
|
||||
public function activate()
|
||||
{
|
||||
$user = $this->app->getIdentity();
|
||||
$input = $this->input;
|
||||
$uParams = ComponentHelper::getParams('com_users');
|
||||
|
||||
// Check for admin activation. Don't allow non-super-admin to delete a super admin
|
||||
if ($uParams->get('useractivation') != 2 && $user->get('id')) {
|
||||
$this->setRedirect('index.php');
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
// If user registration or account activation is disabled, throw a 403.
|
||||
if ($uParams->get('useractivation') == 0 || $uParams->get('allowUserRegistration') == 0) {
|
||||
throw new \Exception(Text::_('JLIB_APPLICATION_ERROR_ACCESS_FORBIDDEN'), 403);
|
||||
}
|
||||
|
||||
/** @var \Joomla\Component\Users\Site\Model\RegistrationModel $model */
|
||||
$model = $this->getModel('Registration', 'Site');
|
||||
$token = $input->getAlnum('token');
|
||||
|
||||
// Check that the token is in a valid format.
|
||||
if ($token === null || \strlen($token) !== 32) {
|
||||
throw new \Exception(Text::_('JINVALID_TOKEN'), 403);
|
||||
}
|
||||
|
||||
// Get the User ID
|
||||
$userIdToActivate = $model->getUserIdFromToken($token);
|
||||
|
||||
if (!$userIdToActivate) {
|
||||
$this->setMessage(Text::_('COM_USERS_ACTIVATION_TOKEN_NOT_FOUND'));
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=login', false));
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
// Get the user we want to activate
|
||||
$userToActivate = $this->getUserFactory()->loadUserById($userIdToActivate);
|
||||
|
||||
// Admin activation is on and admin is activating the account
|
||||
if (($uParams->get('useractivation') == 2) && $userToActivate->getParam('activate', 0)) {
|
||||
// If a user admin is not logged in, redirect them to the login page with an error message
|
||||
if (!$user->authorise('core.create', 'com_users') || !$user->authorise('core.manage', 'com_users')) {
|
||||
$activationUrl = 'index.php?option=com_users&task=registration.activate&token=' . $token;
|
||||
$loginUrl = 'index.php?option=com_users&view=login&return=' . base64_encode($activationUrl);
|
||||
|
||||
// In case we still run into this in the second step the user does not have the right permissions
|
||||
$message = Text::_('COM_USERS_REGISTRATION_ACL_ADMIN_ACTIVATION_PERMISSIONS');
|
||||
|
||||
// When we are not logged in we should login
|
||||
if ($user->guest) {
|
||||
$message = Text::_('COM_USERS_REGISTRATION_ACL_ADMIN_ACTIVATION');
|
||||
}
|
||||
|
||||
$this->setMessage($message);
|
||||
$this->setRedirect(Route::_($loginUrl, false));
|
||||
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
// Attempt to activate the user.
|
||||
$return = $model->activate($token);
|
||||
|
||||
// Check for errors.
|
||||
if ($return === false) {
|
||||
// Redirect back to the home page.
|
||||
$this->setMessage(Text::sprintf('COM_USERS_REGISTRATION_SAVE_FAILED', $model->getError()), 'error');
|
||||
$this->setRedirect('index.php');
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
$useractivation = $uParams->get('useractivation');
|
||||
|
||||
// Redirect to the login screen.
|
||||
if ($useractivation == 0) {
|
||||
$this->setMessage(Text::_('COM_USERS_REGISTRATION_SAVE_SUCCESS'));
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=login', false));
|
||||
} elseif ($useractivation == 1) {
|
||||
$this->setMessage(Text::_('COM_USERS_REGISTRATION_ACTIVATE_SUCCESS'));
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=login', false));
|
||||
} elseif ($return->getParam('activate')) {
|
||||
$this->setMessage(Text::_('COM_USERS_REGISTRATION_VERIFY_SUCCESS'));
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false));
|
||||
} else {
|
||||
$this->setMessage(Text::_('COM_USERS_REGISTRATION_ADMINACTIVATE_SUCCESS'));
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false));
|
||||
}
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
/**
|
||||
* Method to register a user.
|
||||
*
|
||||
* @return boolean True on success, false on failure.
|
||||
*
|
||||
* @since 1.6
|
||||
* @throws \Exception
|
||||
*/
|
||||
public function register()
|
||||
{
|
||||
// Check for request forgeries.
|
||||
$this->checkToken();
|
||||
|
||||
// If registration is disabled - Redirect to login page.
|
||||
if (ComponentHelper::getParams('com_users')->get('allowUserRegistration') == 0) {
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=login', false));
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
$app = $this->app;
|
||||
|
||||
/** @var \Joomla\Component\Users\Site\Model\RegistrationModel $model */
|
||||
$model = $this->getModel('Registration', 'Site');
|
||||
|
||||
// Get the user data.
|
||||
$requestData = $this->input->post->get('jform', [], 'array');
|
||||
|
||||
// Validate the posted data.
|
||||
$form = $model->getForm();
|
||||
|
||||
if (!$form) {
|
||||
throw new \Exception($model->getError(), 500);
|
||||
}
|
||||
|
||||
$data = $model->validate($form, $requestData);
|
||||
|
||||
// Check for validation errors.
|
||||
if ($data === false) {
|
||||
// Get the validation messages.
|
||||
$errors = $model->getErrors();
|
||||
|
||||
// Push up to three validation messages out to the user.
|
||||
for ($i = 0, $n = \count($errors); $i < $n && $i < 3; $i++) {
|
||||
if ($errors[$i] instanceof \Exception) {
|
||||
$app->enqueueMessage($errors[$i]->getMessage(), 'error');
|
||||
} else {
|
||||
$app->enqueueMessage($errors[$i], 'error');
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* We need the filtered value of calendar fields because the UTC normalisation is
|
||||
* done in the filter and on output. This would apply the Timezone offset on
|
||||
* reload. We set the calendar values we save to the processed date.
|
||||
*/
|
||||
$filteredData = $form->filter($requestData);
|
||||
|
||||
foreach ($form->getFieldset() as $field) {
|
||||
if ($field->type === 'Calendar') {
|
||||
$fieldName = $field->fieldname;
|
||||
|
||||
if ($field->group) {
|
||||
if (isset($filteredData[$field->group][$fieldName])) {
|
||||
$requestData[$field->group][$fieldName] = $filteredData[$field->group][$fieldName];
|
||||
}
|
||||
} else {
|
||||
if (isset($filteredData[$fieldName])) {
|
||||
$requestData[$fieldName] = $filteredData[$fieldName];
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Save the data in the session.
|
||||
$app->setUserState('com_users.registration.data', $requestData);
|
||||
|
||||
// Redirect back to the registration screen.
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=registration', false));
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
// Attempt to save the data.
|
||||
$return = $model->register($data);
|
||||
|
||||
// Check for errors.
|
||||
if ($return === false) {
|
||||
// Save the data in the session.
|
||||
$app->setUserState('com_users.registration.data', $data);
|
||||
|
||||
// Redirect back to the edit screen.
|
||||
$this->setMessage($model->getError(), 'error');
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=registration', false));
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
// Flush the data from the session.
|
||||
$app->setUserState('com_users.registration.data', null);
|
||||
|
||||
// Redirect to the profile screen.
|
||||
if ($return === 'adminactivate') {
|
||||
$this->setMessage(Text::_('COM_USERS_REGISTRATION_COMPLETE_VERIFY'));
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false));
|
||||
} elseif ($return === 'useractivate') {
|
||||
$this->setMessage(Text::_('COM_USERS_REGISTRATION_COMPLETE_ACTIVATE'));
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false));
|
||||
} else {
|
||||
$this->setMessage(Text::_('COM_USERS_REGISTRATION_SAVE_SUCCESS'));
|
||||
$this->setRedirect(Route::_('index.php?option=com_users&view=login', false));
|
||||
}
|
||||
|
||||
return true;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user