Prosellers Shell V2.0

Editing: SendpassController.php

Cancel

<?php 
/*
*   Send lost password
*
*
*     Author: Alex Scott
*      Email: alex@cgi-central.net
*        Web: http://www.cgi-central.net
*    Details: Send lost password page
*    FileName $RCSfile$
*    Release: 4.2.14.3b7ee0a ($Revision$)
*
* Please direct bug reports,suggestions or feedback to the cgi-central forums.
* http://www.cgi-central.net/forum/
*                                                                          
* aMember PRO is a commercial software. Any distribution is strictly prohibited.
*    
*/

class SendpassController extends Am_Controller {
    const EXPIRATION_PERIOD = 8; //hrs
    const CODE_STATUS_VALID = 1;
    const CODE_STATUS_EXPIRED = -1;
    const CODE_STATUS_INVALID = 0;
    const STORE_PREFIX = 'sendpass-';
    const SECURITY_VAR = '_s';
    
    /** @var User */
    protected $user;

public function preDispatch()
    {
        $s = $this->_request->getFiltered(self::SECURITY_VAR);
        if ($s) {
            switch ($this->checkCode($s)) 
            {
                case self::CODE_STATUS_VALID :
                    $this->output = $this->changePassAction();
                    break;
                case self::CODE_STATUS_EXPIRED :
                    $this->output = $this->errorAction(___('Security code is expired'));
                    break;
                case self::CODE_STATUS_INVALID :
                default :
                    $this->output = $this->errorAction(___('User is not found in database'));

}
        } else {
            $this->output = $this->sendAction();
        }

$this->setProcessed(true);
    }

public function errorAction($message=null)
    {
        $this->view->assign('message', $message);
        $this->view->assign('login_page', REL_ROOT_URL . "/member");
        $this->view->display('changepass_failed.phtml');
    }

public function sendAction()
    {
        do {
            $login = trim($this->_request->get('login'));
            $user = $this->getDi()->userTable->findFirstByLogin($login);

if (!$user)
                $user = $this->getDi()->userTable->findFirstByEmail($login);

if (!$user) {
                $title = ___('Lost Password Sending Error');
                $text = ___('The information you have entered is incorrect') . ".<br />\n" .
                    sprintf(___('Username [%s] does not exist in database', $this->_request->getEscaped('login'))
                );
                break;
            }

if ($error = $this->checkLimits($user)) {
                $title = ___('Lost Password Sending Error');
                $text = $error;
                break;
            }

$this->sendSecurityCode($user);
            $title = ___('Lost Password Sent');
            $text = ___('Your password has been e-mailed to you') . ".<br />\n" . ___('Please check your mailbox');

} while (false);

if ($this->isAjax())
        {
            return $this->ajaxResponse(array('ok'=>true, 'error'=>array($text)));
        }
        
        $this->view->title = $title;
        $this->view->text = $text;
        $this->view->display('sendpass.phtml');
    }

public function changePassAction()
    {
        
        $s = $this->_request->getFiltered(self::SECURITY_VAR);
        
        if (!$s || !$this->user) {
            throw new Am_Exception_FatalError('Trying to change User password without security code');
        }
        
        $form = $this->createForm();

if ($form->isSubmitted()) {
            $form->setDataSources(array(
                $this->_request,
                new HTML_QuickForm2_DataSource_Array(array('login'=>$user->login))
            ));
        } else {
            $form->setDataSources(array(
                new HTML_QuickForm2_DataSource_Array(array(
                        self::SECURITY_VAR=>$this->_request->get(self::SECURITY_VAR),
                        'login'=>$this->user->login
                    ))
            ));
        }

if ($form->isSubmitted() && $form->validate()) 
        {
            //allright let's change pass
            $this->user->setPass($this->_request->get('pass0'));
            $this->user->update();
            $this->getDi()->store->delete(self::STORE_PREFIX . 
                $this->_request->getFiltered(self::SECURITY_VAR));
            $this->getDi()->auth->setUser($user);
            $this->redirectLocation(
                REL_ROOT_URL . '/member',
                ___('You will be redirected to protected area'),
                'Redirect'
            );
        } else {
            $this->view->form = $form;
            $this->view->display('changepass.phtml');
        }

}

public function createForm()
    {
        $form = new Am_Form;
        $form->addElement('text', 'login', array('disabled'=>'disabled'))
                ->setLabel(___('Username'));

$pass0 = $form->addElement('password', 'pass0')
            ->setLabel(___('New Password'));
        $pass0->addRule('minlength',
                ___('The password should be at least %d characters long', $this->getDi()->config->get('pass_min_length', 4)),
                $this->getDi()->config->get('pass_min_length', 4));
        $pass0->addRule('maxlength',
                ___('Your password is too long'),
                $this->getDi()->config->get('pass_max_length', 32));
        $pass0->addRule('required', 'This field is required');

$pass1 = $form->addElement('password', 'pass1')
            ->setLabel(___('Confirm Password'));

$pass1->addRule('eq', ___('Passwords do not match'), $pass0);

$form->addElement('hidden', self::SECURITY_VAR);
        $form->addElement('submit', '', array('value'=>___('Save')));
        return $form;
    }

protected function checkLimits(User $user)
    {
        $attempt = $this->getDi()->store->get('remind-password_' . $user->email);
        if ($attempt>=2) {
            return ___('The message containing your password has already been sent to your inbox. Please wait 180 minutes for retrying');
        }
        $this->getDi()->store->set('remind-password_' . $user->email, ++$attempt, '+3 hours');
    }

private function checkCode($code)
    {
        $user_id = $this->getDi()->store->get(self::STORE_PREFIX . $code);
        if (!$user_id)
            return self::CODE_STATUS_EXPIRED;
        $this->user = $this->getDi()->userTable->load($user_id);
        return self::CODE_STATUS_VALID;
    }

private function sendSecurityCode(User $user)
    {
        $security_code = $this->getDi()->app->generateRandomString(16);

$et = Am_Mail_Template::load('send_security_code', $user->lang, true);
        $et->setUser($user);
        $et->setUrl(sprintf('%s/sendpass/?%s=%s',
                ROOT_SURL,
                self::SECURITY_VAR,
                $security_code)
        );
        $et->setHours(self::EXPIRATION_PERIOD);
        $et->send($user);
        
        $this->getDi()->store->set(self::STORE_PREFIX . $security_code,
            $user->pk(), '+'.self::EXPIRATION_PERIOD.' hours');
    }
}

Editing: SendpassController.php

Upload Files

Create New

Change Permissions

Change Date

Rename Item

Confirm Delete