BxBaseFormAccount.php 4.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146
  1. <?php defined('BX_DOL') or die('hack attempt');
  2. /**
  3. * Copyright (c) UNA, Inc - https://una.io
  4. * MIT License - https://opensource.org/licenses/MIT
  5. *
  6. * @defgroup UnaCoreBaseRepresentation UNA Core Base Representation Classes
  7. * @{
  8. */
  9. class BxFormAccountCheckerHelper extends BxDolFormCheckerHelper
  10. {
  11. /**
  12. * Password confirmation check.
  13. */
  14. function checkPasswordConfirm ($s)
  15. {
  16. return $s == bx_process_input(bx_get(BxTemplFormAccount::$FIELD_PASSWORD));
  17. }
  18. /**
  19. * Password confirmation check.
  20. */
  21. function checkPasswordCurrent ($s)
  22. {
  23. $oAccount = BxDolAccount::getInstance();
  24. if (!$oAccount)
  25. return false;
  26. $aInfo = $oAccount->getInfo();
  27. return $aInfo['password'] == encryptUserPwd($s, $aInfo['salt']);
  28. }
  29. /**
  30. * Check if email is uniq.
  31. */
  32. function checkEmailUniq ($s)
  33. {
  34. $s = trim($s);
  35. if (!$this->checkEmail($s))
  36. return false;
  37. $oAccount = BxDolAccount::getInstance();
  38. if ($oAccount) { // user is logged in
  39. $aAccountInfo = $oAccount->getInfo();
  40. if ($s == $aAccountInfo['email']) // don't check email for uniq, if it wasn't changed
  41. return true;
  42. return BxDolAccountQuery::getInstance()->getIdByEmail($s) ? _t('_sys_form_account_input_email_uniq_error_loggedin') : true;
  43. }
  44. return BxDolAccountQuery::getInstance()->getIdByEmail($s) ? _t('_sys_form_account_input_email_uniq_error', BX_DOL_URL_ROOT . BxDolPermalinks::getInstance()->permalink('page.php?i=forgot-password')) : true;
  45. }
  46. }
  47. /**
  48. * Create/Edit Account Form.
  49. */
  50. class BxBaseFormAccount extends BxTemplFormView
  51. {
  52. static $FIELD_EMAIL = 'email';
  53. static $FIELD_PASSWORD = 'password';
  54. static $FIELD_SALT = 'salt';
  55. static $FIELD_ADDED = 'added';
  56. static $FIELD_CHANGED = 'changed';
  57. protected $_bSetPendingApproval = false;
  58. public function __construct($aInfo, $oTemplate)
  59. {
  60. parent::__construct($aInfo, $oTemplate);
  61. $this->_bSetPendingApproval = !(bool)getParam('sys_account_autoapproval');
  62. }
  63. function isValid ()
  64. {
  65. if (!parent::isValid ())
  66. return false;
  67. $sErrorMsg = '';
  68. bx_alert('account', 'check_join', 0, false, array('error_msg' => &$sErrorMsg, 'email' => $this->getCleanValue('email'), 'approve' => &$this->_bSetPendingApproval));
  69. if ($sErrorMsg)
  70. $this->_setCustomError ($sErrorMsg);
  71. return $sErrorMsg ? false : true;
  72. }
  73. public function isSetPendingApproval()
  74. {
  75. return $this->_bSetPendingApproval;
  76. }
  77. public function setPendingApproval($b)
  78. {
  79. return ($this->_bSetPendingApproval = $b);
  80. }
  81. public function insert ($aValsToAdd = array(), $isIgnore = false)
  82. {
  83. $sEmail = isset($aValsToAdd[self::$FIELD_EMAIL]) ? $aValsToAdd[self::$FIELD_EMAIL] : $this->getCleanValue(self::$FIELD_EMAIL);
  84. $sEmail = trim(strtolower($sEmail));
  85. $sPwd = isset($aValsToAdd[self::$FIELD_PASSWORD]) ? $aValsToAdd[self::$FIELD_PASSWORD] : $this->getCleanValue(self::$FIELD_PASSWORD);
  86. $sSalt = genRndSalt();
  87. $sPasswordHash = encryptUserPwd($sPwd, $sSalt);
  88. $aValsToAdd = array_merge($aValsToAdd, array (
  89. self::$FIELD_EMAIL => $sEmail,
  90. self::$FIELD_PASSWORD => $sPasswordHash,
  91. self::$FIELD_SALT => $sSalt,
  92. self::$FIELD_ADDED => time(),
  93. self::$FIELD_CHANGED => time(),
  94. ));
  95. return parent::insert ($aValsToAdd, $isIgnore);
  96. }
  97. function update ($val, $aValsToAdd = array(), &$aTrackTextFieldsChanges = null)
  98. {
  99. $sPwd = $this->getCleanValue(self::$FIELD_PASSWORD);
  100. if ($sPwd) {
  101. $sSalt = genRndSalt();
  102. $sPasswordHash = encryptUserPwd($sPwd, $sSalt);
  103. }
  104. $aValsToAdd = array_merge(
  105. $aValsToAdd,
  106. array (self::$FIELD_CHANGED => time()),
  107. $sPwd ? array (self::$FIELD_PASSWORD => $sPasswordHash, self::$FIELD_SALT => $sSalt) : array()
  108. );
  109. return parent::update ($val, $aValsToAdd, $aTrackTextFieldsChanges);
  110. }
  111. protected function genCustomInputAgreement ($aInput)
  112. {
  113. $oPermalink = BxDolPermalinks::getInstance();
  114. return '<div>' . _t('_sys_form_account_input_agreement_value', BX_DOL_URL_ROOT . $oPermalink->permalink('page.php?i=terms'), BX_DOL_URL_ROOT . $oPermalink->permalink('page.php?i=privacy')) . '</div>';
  115. }
  116. protected function _setCustomError ($s)
  117. {
  118. $this->aInputs['do_submit']['error'] = $s;
  119. }
  120. }
  121. /** @} */