User management for the world wide web

User.php

<?php
session_start();

require_once("GenieGate/Controller.php");
require_once("GenieGate/UserAccount.php");
require_once("GenieGate/Groups.php");
require_once("GenieGate/Properties.php");
require_once("GenieGate/View/Mail.php");
require_once("GenieGate/View/Location.php");
require_once("GenieGate/Api/Login.php");


class GenieGate_Controller_User extends GenieGate_Controller {
    var $UA;
    var $GM;
    var $PM;
    
    var $APP_NAME = "User";

    var $DISPATCH = array(  DO_SHOW_SIGNUP_FORM     => "do_show_signup_form",
                            DO_CONFIRM_ACCOUNT      => "do_confirm_account",
                            DO_UPDATE_SETTINGS      => "do_update_settings",
                            DO_SHOW_PROPERTIES      => "do_show_properties",
                            DO_MAIN_PAGE            => "do_main_page",
                            DO_SHOW_FORGOT_PASSWORD => "do_show_forgot_password",
                            DO_CHANGE_PASSWORD      => "do_change_password",
                            DO_LOGOUT               => "do_logout",
                            DO_SHOW_PASSWORD_CHANGE => "do_show_password_change",
                            DO_SEND_PASSWORD        => "do_send_password",
                            DO_LOGIN                => "do_login",
                            DO_RESEND_CONFIRM       => "do_resend_confirm",
                            DO_SHOW_REMIND_FORM     => "do_show_remind_form",
                            DO_PROCESS_SIGNUP       => "do_process_signup");                            
    
    function GenieGate_Controller_User(&$conf){                     
        parent::GenieGate_Controller($conf);    // get $DBH set, do init.
        $this->GM = new GenieGate_Groups($this->DBH);
        $this->UA = new GenieGate_UserAccount($this->DBH,$this->GM);           
        $this->PM = new GenieGate_Properties($this->DBH);       
        $this->G = new GenieGate_Api_Login($this->DBH);

        //Whether or not to use HTTP based authentication.
        if(! $conf[ALLOW_HTTP_AUTH]){
            $this->G->USE_HTTP_AUTH=FALSE;
            $this->G->setPromptView($this->getView("new-user"));
        }
        $this->addPlugins();
    }
    function addListener(&$listener){ 
        parent::addListener($listener);
        $this->UA->addListener(&$listener);
        $this->GM->addListener(&$listener);
        $this->PM->addListener(&$listener);    
    }

    function getUrl($id) {
        if($this->CFG[Url][$id]){
            return($this->CFG[Url][$id]);
        }
        $dir = dirname($_SERVER[PHP_SELF]);
        return("http://" . $_SERVER[SERVER_NAME] . $dir . "/" . $id . ".php");
    }
    function getMailView($to,$id){
        $dir = $this->CFG[Views][$this->APP_NAME];
        $file = $dir . $id . ".php";
        $mview = new GenieGate_View_Mail($to, $file);
        return($mview);
    }
    function getRedirectView($location){
        return( new GenieGate_View_Location($location) );
    }
    function do_show_signup_form(){
        return($this->getView("user-signup"));
    }

    function do_show_password_change(){
        $user = $this->G->login();
        $view = $this->getView("change-password");
        $view->param("USER",$user);
        return($view);
    }
    function do_change_password(){      
        $user = $this->G->login();
        $uid = $user->getUserId();        
        $errors = array();
        $info = $this->UA->lookupUid($uid);
        if($info[password] != $_POST[PASSWORD]){
            array_push($errors,"Current password incorrect");
        }
        if($_POST[NEW_PASS] != $_POST[CONFIRM_PASS]){
            array_push($errors,"Passwords don't match");
        }       
        if(count($errors)){
            $ev = $this->getView("error-general");
            $ev->param("ERRORS",$errors);
            return($ev);
        }        
        $info[password] = $_POST[NEW_PASS];
        $errors = $this->UA->checkNewUserFields($info,FALSE);
        if(count($errors)){
            $ev = $this->getView("error-general");
            $ev->param("ERRORS",$errors);
            return($ev);
        }
        $this->UA->updateUserAccount($uid,$info);      
        if($_POST[LOCATION]){
            $view = $this->getRedirectView($_POST[LOCATION]);
        }else{
            $view = $this->getView("password-changed");
        }      
        return($view);
    }

    
    function do_show_remind_form(){
        return($this->getView("remind-confno"));
    }
    function do_resend_confirm(){
        $uid = $_REQUEST[UID];
        $email = $_REQUEST[EMAIL];
        $inf = $this->UA->lookupUid($uid);
        if(! $inf){
            $inf = $this->UA->lookupEmail($email);
        }
        if(! $inf){
            $view = $this->getView("error-general");
            $view->param("ERRORS",array("UserID or Email address not found"));
            return($view);
        }
        
        
        require_once("GenieGate/View/Ganged.php");
        $mview = $this->getMailView($inf[email],"mail-confirm-remind");
        $mview->param("CONF_NO",$inf[id]);
        $conf_url = $this->getUrl("confirm");
        $conf_url .= "?C=" . $inf[id] . "&U=" . $inf[uid];
        $mview->param("CONFIRM_URL",$conf_url);
        $mview->param("ACCOUNT",$inf);
        
        $gview = new GenieGate_View_Ganged();
        // Want to direct the user elsewhere.
        if($_REQUEST[LOCATION]){
            $view = $this->getRedirectView($_REQUEST[LOCATION]);
            $view->param("USERID",$inf[uid]);
            
            $gview->addView($view);
            $gview->addView($mview);
            return($gview);
        }else{
            $gview->addView($this->getView("check-email-remind"));
            $gview->addView($mview);
            return($gview);
        }
    } 
    function do_process_signup(){
    
        $fields = array();
        $fields[uid] = $_POST[USERID];
        $fields[name] = $_POST[NAME];
        $fields[email] = $_POST[EMAIL];
        if($_POST[PASSWORD] != $_POST[PASSWORDC]){
            $errors = array("Passwords do not match");
            $view = $this->getView("error-signup");
            $view->param("ERRORS",$errors);
            return($view);
        }
        $fields[password] = $_POST[PASSWORD];
        $mview = $this->getMailView($fields[email],"mail-confirm");
        $errors = $this->UA->createUserAccount($fields,$mview);
        if(count($errors) > 0){
            $view = $this->getView("error-signup");
            $view->param("ERRORS",$errors);
            return($view);
        }

        require_once("GenieGate/View/Ganged.php");
        // Returning a "ganged view" because the mail interferes
        // with the headers, and we don't want the caller to 
        // be required to use ob_start() for a few methods.
        // We also don't want to surprise anyone by sending
        // anything here, (such as skipping the view and
        // just doing the Location: ourselves, which would be easier...
        $gview = new GenieGate_View_Ganged();

        
        $conf_no = $mview->param("CONF_NO");
        $conf_url = $this->getUrl("confirm");
        $conf_url .= "?C=" . $conf_no . "&U=" . $fields[uid];
        $mview->param("CONFIRM_URL",$conf_url);
        
        // Want to direct the user elsewhere.
        if($_POST[LOCATION]){
            $view = $this->getRedirectView($_POST[LOCATION]);
            $view->param("USERID",$fields[uid]);
            $gview->addView($view);
            $gview->addView($mview);
            return($gview);
        }else{
            $gview->addView($this->getView("check-email"));
            $gview->addView($mview);
            return($gview);
        }
    }  
    function do_confirm_account(){
        $conf_no = $_REQUEST[C];
        $uid = $_REQUEST[U]; 
                      
        $errors = $this->UA->confirmUserAccount($uid,$conf_no);               
        if(count($errors) > 0){
            $view = $this->getView("error-confirm");
            $view->param("ERRORS",$errors);
            return($view);
        }
        $view = $this->getView("account-confirmed");
        $fields = $this->UA->lookupUid($uid);
        $view->param("GROUPS",$this->GM->getAllGroups(FALSE));
        $view->param("PROPS",$this->PM->getSectionProperties("genie.form.Public"));
        $view->param("ACCOUNT",$fields);
        $view->param("START_PAGE",$this->getUrl("StartPage"));        
        return($view);
    }    
    function do_show_forgot_password(){
        return($this->getView("show-email-password"));
    }
    function do_send_password(){
        $uid = $_POST[UID];
        $email = $_POST[EMAIL];       
        $inf = $this->UA->lookupUid($uid);
        if(! $inf){
            $inf = $this->UA->lookupEmail($email);
        }
        if(! $inf){
            $view = $this->getView("error-general");
            $view->param("ERRORS",array("UserID or Email address not found"));
            return($view);
        }

        // mail() and ob_* send headers.
        // Our returned view is a chain, to avoid this problem.
        require_once("GenieGate/View/Ganged.php");
        $gview = new GenieGate_View_Ganged();

        // Send the password.        
        $mv = $this->getMailView($inf[email],"mail-password");
        $mv->param("INFO",$inf);
        
        if($_POST[LOCATION]){
            $gview->addView($this->getRedirectView($_POST[LOCATION]));
            $gview->addView($mv);
            return($gview);
        }else{
            $gview->addView($this->getView("sent-password"));
            $gview->addView($mv);
            return($gview);
        }
    }
    function do_show_properties(){
        $user = $this->G->login();
        $view = $this->getView("show-properties");
        $view->param("USER",$user);
        $view->param("PUBLIC",$this->PM->getSectionProperties("genie.form.Public"));
        return($view);
    }
    function do_main_page(){
        $user = $this->G->passiveLogin(); // Make sure user is logged in.        
        if($user){
            $view = $this->getView("main");
            $view->param("USER",$user);
            $view->param("GROUPS",$this->GM->getAllGroups(FALSE));
            $view->param("PROPS",$this->PM->getSectionProperties("genie.form.Public"));
            return($view);
        }else{
            return($this->getView("new-user"));            
        }
    }
    function do_logout(){
        $user = $this->G->logout(); // Log the user out.
        if($_REQUEST[LOCATION]){
            return($this->getRedirectView($_REQUEST[LOCATION]));
        }
        return($this->getView("logged-out"));
    }
    function do_login(){
        $user = $this->G->login(); // Login, with failure page.
        if($_REQUEST[LOCATION]){
            return($this->getRedirectView($_POST[LOCATION]));
        }
        return($this->do_main_page());
    }
    
    
    function do_update_settings(){
        $user = $this->G->login(); // Make sure user is logged in.        
        $uid = $user->getUserId();        
        $cp = $this->PM->getSection("genie.form.Public",$uid);
        foreach($_POST as $k => $v) {
            list($c,$n) = explode(":",$k,2);
            if($c == "PROP"){
                if(strlen($v)){
                    if($cp->isProperty($n)){
                        $cp->setProperty($n,$v);
                    }
                }
            }
        }
        if($_POST[LOCATION]){
            return($this->getRedirectView($_POST[LOCATION]));
        }
        return($this->getView("set-properties"));
    }
    

}

?>

---

Documentation generated by DoxyGen