This repository has been archived on 2024-06-26. You can view files and clone it, but cannot push or open issues or pull requests.
sakura/app/Controllers/Settings/AccountController.php

281 lines
9.4 KiB
PHP
Raw Normal View History

<?php
/**
* Holds the account section controller.
* @package Sakura
*/
namespace Sakura\Controllers\Settings;
use Phroute\Phroute\Exception\HttpMethodNotAllowedException;
2016-08-07 14:10:27 +00:00
use Sakura\CurrentSession;
2016-04-03 21:29:46 +00:00
use Sakura\DB;
use Sakura\Perms\Site;
/**
* Account settings.
* @package Sakura
* @author Julian van de Groep <me@flash.moe>
*/
class AccountController extends Controller
{
2016-08-05 02:35:37 +00:00
/**
* Renders the profile changing page.
* @return string
*/
2016-08-02 20:35:12 +00:00
public function profile()
{
// Check permission
2016-08-07 14:10:27 +00:00
if (!CurrentSession::$user->permission(Site::ALTER_PROFILE)) {
throw new HttpMethodNotAllowedException();
2016-08-02 20:35:12 +00:00
}
if (session_check()) {
$redirect = route('settings.account.profile');
$save = [];
$allowed = [
'website',
'twitter',
'github',
'skype',
'discord',
'youtube',
'steam',
'osu',
'lastfm',
];
foreach ($allowed as $field) {
$save["user_{$field}"] = $_POST["profile_{$field}"] ?? null;
}
DB::table('users')
2016-08-07 14:10:27 +00:00
->where('user_id', CurrentSession::$user->id)
2016-08-02 20:35:12 +00:00
->update($save);
// Birthdays
if (isset($_POST['birthday_day'], $_POST['birthday_month'], $_POST['birthday_year'])) {
$day = intval($_POST['birthday_day']);
$month = intval($_POST['birthday_month']);
$year = intval($_POST['birthday_year']);
if (!$day && !$month && !$year) {
$birthdate = null;
} else {
if (!checkdate($month, $day, $year ? $year : 1)
|| $year > date("Y")
|| ($year != 0 && $year < (date("Y") - 100))) {
$message = "Your birthdate was invalid, everything else was saved though!";
return view('global/information', compact('message', 'redirect'));
}
// Combine it into a YYYY-MM-DD format
$birthdate = implode('-', compact('year', 'month', 'day'));
}
DB::table('users')
2016-08-07 14:10:27 +00:00
->where('user_id', CurrentSession::$user->id)
2016-08-02 20:35:12 +00:00
->update([
'user_birthday' => $birthdate,
]);
}
header("Location: {$redirect}");
return;
2016-08-02 20:35:12 +00:00
}
return view('settings/account/profile');
}
2016-08-05 02:35:37 +00:00
/**
2016-09-08 21:32:33 +00:00
* Details such as email, username and password.
2016-08-05 02:35:37 +00:00
* @return string
*/
2016-09-08 21:32:33 +00:00
public function details()
{
2016-09-08 21:32:33 +00:00
$user = CurrentSession::$user;
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
// Check permissions
$edit_email = $user->permission(Site::CHANGE_EMAIL);
$edit_usern = $user->permission(Site::CHANGE_USERNAME);
$edit_title = $user->permission(Site::CHANGE_USERTITLE);
$edit_passw = $user->permission(Site::CHANGE_PASSWORD);
$last_name_change = 0;
2016-09-08 21:32:33 +00:00
if ($edit_usern) {
$last_name_change = $user->getUsernameHistory()[0]->change_time ?? 0;
2016-04-03 21:29:46 +00:00
}
2016-09-08 21:32:33 +00:00
// Check eligibility for username changes
$username_allow = $edit_usern && (time() - $last_name_change) > 2592000;
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
if (isset($_POST['session']) && session_check()) {
$redirect = route('settings.account.details');
$email = $_POST['email'] ?? null;
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
if ($email) {
// Validate e-mail address
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
$message = "The e-mail address you supplied is invalid!";
return view('global/information', compact('redirect', 'message'));
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
// Check the MX record of the email
if (!check_mx_record($email)) {
$message = 'No valid MX-Record found on the e-mail address you supplied.';
return view('global/information', compact('redirect', 'message'));
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
// Check if the e-mail has already been used
$emailCheck = DB::table('users')
->where('email', $email)
->count();
if ($emailCheck) {
$message = 'Someone already used this e-mail!';
return view('global/information', compact('redirect', 'message'));
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
$user->setMail($email);
2016-04-03 21:29:46 +00:00
}
2016-09-08 21:32:33 +00:00
$username = $_POST['username'] ?? null;
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
if ($username) {
$username_clean = clean_string($username, true);
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
// Check if the username is too short
if (strlen($username_clean) < config('user.name_min')) {
$message = "This username is too short!";
return view('global/information', compact('redirect', 'message'));
}
2016-09-08 21:32:33 +00:00
// Check if the username is too long
if (strlen($username_clean) > config('user.name_max')) {
$message = "This username is too long!";
return view('global/information', compact('redirect', 'message'));
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
// Check if this username hasn't been used in the last amount of days set in the config
$getOld = DB::table('username_history')
->where('username_old_clean', $username_clean)
->where('change_time', '>', (config('user.name_reserve') * 24 * 60 * 60))
->orderBy('change_id', 'desc')
->first();
// Check if anything was returned
if ($getOld && $getOld->user_id != $user->id) {
$message = "The username you tried to use is reserved, try again later!";
return view('global/information', compact('redirect', 'message'));
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
// Check if the username is already in use
$getInUse = DB::table('users')
->where('username_clean', $username_clean)
->count();
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
// Check if anything was returned
if ($getInUse) {
$message = "Someone is already using this name!";
return view('global/information', compact('redirect', 'message'));
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
$user->setUsername($username);
2016-04-03 21:29:46 +00:00
}
2016-09-08 21:32:33 +00:00
$title = $_POST['title'] ?? null;
2016-09-08 21:32:33 +00:00
if ($title) {
if (strlen($title) > 64) {
$message = "This title is too long!";
return view('global/information', compact('redirect', 'message'));
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
if ($title !== $user->title) {
// Update database
DB::table('users')
->where('user_id', $user->id)
->update([
'user_title' => $title,
]);
}
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
$password = $_POST['password'] ?? null;
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
if ($password) {
// Check password entropy
if (password_entropy($password) < config('user.pass_min_entropy')) {
$message = "Your password isn't strong enough!";
return view('global/information', compact('redirect', 'message'));
}
2016-04-03 21:29:46 +00:00
2016-09-08 21:32:33 +00:00
$user->setPassword($password);
2016-04-03 21:29:46 +00:00
}
header("Location: {$redirect}");
return;
2016-04-03 21:29:46 +00:00
}
2016-09-08 21:32:33 +00:00
return view('settings/account/details', compact(
'edit_email',
'edit_usern',
'edit_title',
'edit_passw',
'last_name_change',
'username_allow'
));
}
2016-08-05 02:35:37 +00:00
/**
* Renders the rank management page.
* @return string
*/
public function ranks()
{
2016-04-03 21:29:46 +00:00
// Check permission
2016-08-07 14:10:27 +00:00
if (!CurrentSession::$user->permission(Site::ALTER_RANKS)) {
throw new HttpMethodNotAllowedException();
2016-04-03 21:29:46 +00:00
}
$rank = $_POST['rank'] ?? null;
$mode = $_POST['mode'] ?? null;
$locked = [
2016-07-26 17:29:53 +00:00
config('rank.inactive'),
config('rank.regular'),
config('rank.premium'),
config('rank.alumni'),
config('rank.banned'),
2016-04-03 21:29:46 +00:00
];
2016-08-02 20:35:12 +00:00
if (session_check() && $rank && $mode) {
$redirect = route('settings.account.ranks');
2016-04-03 21:29:46 +00:00
// Check if user has this rank
2016-08-07 14:10:27 +00:00
if (!CurrentSession::$user->hasRanks([$rank])) {
2016-04-03 21:29:46 +00:00
$message = "You aren't a part of this rank!";
2016-08-02 20:35:12 +00:00
return view('global/information', compact('redirect', 'message'));
2016-04-03 21:29:46 +00:00
}
if ($mode == 'remove') {
if (in_array($rank, $locked)) {
$message = "You aren't allowed to remove this rank from your account!";
2016-08-02 20:35:12 +00:00
return view('global/information', compact('redirect', 'message'));
2016-04-03 21:29:46 +00:00
}
2016-08-07 14:10:27 +00:00
CurrentSession::$user->removeRanks([$rank]);
2016-04-03 21:29:46 +00:00
$message = "Removed the rank from your account!";
2016-08-02 20:35:12 +00:00
return view('global/information', compact('redirect', 'message'));
2016-04-03 21:29:46 +00:00
}
2016-08-07 14:10:27 +00:00
CurrentSession::$user->setMainRank($rank);
2016-04-03 21:29:46 +00:00
header("Location: {$redirect}");
return;
2016-04-03 21:29:46 +00:00
}
2016-08-02 20:35:12 +00:00
return view('settings/account/ranks', compact('locked'));
}
}