beenull/OnlineNewsSite
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

style: Auth

Browse source
This commit is contained in:
Mobina 2022-10-24 11:18:53 -07:00
parent 3ceaf7de7b
commit 62b3f97bd3
1 changed files with 227 additions and 265 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

492
activities/Auth/Auth.php
View file

@ -6,299 +6,261 @@ use Database\Database;
use PHPMailer\PHPMailer\Exception;
use PHPMailer\PHPMailer\PHPMailer;
class Auth{
class Auth
{
protected function redirect($url)
{
header('Location: ' . trim(CURRENT_DOMAIN, '/ ') . '/' . trim($url, '/ '));
exit;
protected function redirect($url)
{
header('Location: ' . trim(CURRENT_DOMAIN, '/ ') . '/' . trim($url, '/ '));
exit;
}
protected function redirectBack()
{
header("Location: " . $_SERVER['HTTP_REFERER']);
exit;
}
private function hash($password)
{
$hashPassword = password_hash($password, PASSWORD_DEFAULT);
return $hashPassword;
}
private function random()
{
return bin2hex(openssl_random_pseudo_bytes(32));
}
// public function activationMessage($username, $verifyToken)
// {
// $message = '
// <h1>Account activation</h1>
// <p>' . $username . Dear, to activate your account, please click on the link below'</p>
// <div><a href="' . url('activation/' . $verifyToken) . '">Account activation</a></div>
// ';
// return $message;
// }
public function sendMail($emailAddress, $subject, $body)
{
//Create an instance; passing `true` enables exceptions
$mail = new PHPMailer(true);
try {
//Server settings
$mail->CharSet = "UTF-8";
$mail->isSMTP(); //Send using SMTP
$mail->Host = MAIL_HOST; //Set the SMTP server to send through
$mail->SMTPAuth = SMTP_AUTH; //Enable SMTP authentication
$mail->Username = MAIL_USERNAME; //SMTP username
$mail->Password = MAIL_PASSWORD; //SMTP password
$mail->SMTPSecure = 'tls';
$mail->Port = MAIL_PORT; //TCP port to connect to; use 587 if you have set `SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS`
//Recipients
$mail->setFrom(SENDER_MAIL, SENDER_NAME);
$mail->addAddress($emailAddress); //Add a recipient
//Content
$mail->isHTML(true); //Set email format to HTML
$mail->Subject = $subject;
$mail->Body = $body;
$mail->send();
echo 'Message has been sent';
return true;
} catch (Exception $e) {
echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
return false;
}
}
public function register()
{
require_once BASE_PATH . '/template/auth/register.php';
}
public function registerStore($request)
{
if (empty($request['email']) || empty($request['username']) || empty($request['password'])) {
flash('register_error', 'All fields are required');
$this->redirectBack();
} else if (strlen($request['password']) < 8) {
flash('register_error', 'Password must be at least 8 characters long');
$this->redirectBack();
} else if (!filter_var($request['email'], FILTER_VALIDATE_EMAIL)) {
flash('register_error', 'The email entered is not valid');
$this->redirectBack();
} else {
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE email = ?", [$request['email']])->fetch();
if ($user != null) {
flash('register_error', 'Email already exists');
$this->redirectBack();
} else {
$randomToken = $this->random();
// $activationMessage = $this->activationMessage($request['username'], $randomToken);
// $result = $this->sendMail($request['email'], 'Account activation', $activationMessage);
// if($result)
// {
$request['verify_token'] = $randomToken;
$request['password'] = $this->hash($request['password']);
$db->insert('users', array_keys($request), $request);
$this->redirect('login');
// }
}
// flash('register_error', 'The activation email was not sent');
$this->redirectBack();
protected function redirectBack()
{
header("Location: " . $_SERVER['HTTP_REFERER']);
exit;
}
}
private function hash($password)
{
$hashPassword = password_hash($password, PASSWORD_DEFAULT);
return $hashPassword;
public function activation($verifyToken)
{
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE verify_token = ? AND is_active = 0", [$verifyToken])->fetch();
if ($user == null) {
$this->redirect('login');
} else {
$result = $db->update('users', $user['id'], ['is_active'], [1]);
$this->redirect('login');
}
}
private function random(){
return bin2hex(openssl_random_pseudo_bytes(32));
}
public function login()
{
require_once BASE_PATH . '/template/auth/login.php';
}
// public function activationMessage($username, $verifyToken)
// {
// $message = '
// <h1>فعال سازی حساب کاربری</h1>
// <p>' . $username . 'عزیز برای فعال سازی حساب کاربری خود لطفا روی لینک زیر کلیک نمایید</p>
// <div><a href="'. url('activation/' . $verifyToken) .'">فعال سازی حساب کاربری</a></div>
// ';
// return $message;
// }
public function sendMail($emailAddress, $subject, $body)
{
//Create an instance; passing `true` enables exceptions
$mail = new PHPMailer(true);
try {
//Server settings
$mail->CharSet = "UTF-8";
$mail->isSMTP(); //Send using SMTP
$mail->Host = MAIL_HOST; //Set the SMTP server to send through
$mail->SMTPAuth = SMTP_AUTH; //Enable SMTP authentication
$mail->Username = MAIL_USERNAME; //SMTP username
$mail->Password = MAIL_PASSWORD; //SMTP password
$mail->SMTPSecure = 'tls';
$mail->Port = MAIL_PORT; //TCP port to connect to; use 587 if you have set `SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS`
//Recipients
$mail->setFrom(SENDER_MAIL, SENDER_NAME);
$mail->addAddress($emailAddress); //Add a recipient
//Content
$mail->isHTML(true); //Set email format to HTML
$mail->Subject = $subject;
$mail->Body = $body;
$mail->send();
echo 'Message has been sent';
return true;
} catch (Exception $e) {
echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
return false;
}
}
public function register(){
require_once(BASE_PATH .'/template/auth/register.php');
}
public function registerStore($request)
{
if(empty($request['email']) || empty($request['username']) || empty($request['password']))
{
flash('register_error', 'تمامی فیلد ها الزامی میباشند');
$this->redirectBack();
}
else if(strlen($request['password']) < 8 )
{
flash('register_error', 'رمز عبور باید حداقل ۸ کاراکتر باشد');
$this->redirectBack();
}
else if(!filter_var($request['email'], FILTER_VALIDATE_EMAIL))
{
flash('register_error', 'ایمیل وارد شده معتبر نمیباشد');
$this->redirectBack();
}
else{
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE email = ?", [$request['email']])->fetch();
if($user != null){
flash('register_error', 'ایمیل از قبل وجود دارد');
$this->redirectBack();
}
else{
$randomToken = $this->random();
// $activationMessage = $this->activationMessage($request['username'], $randomToken);
// $result = $this->sendMail($request['email'], 'فعال سازی حساب کاربری', $activationMessage);
// if($result)
// {
$request['verify_token'] = $randomToken;
$request['password'] = $this->hash($request['password']);
$db->insert('users', array_keys($request), $request);
$this->redirect('login');
// }
}
// flash('register_error', 'ایمیل فعال سازی ارسال نشد');
$this->redirectBack();
}
}
public function activation($verifyToken)
{
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE verify_token = ? AND is_active = 0", [$verifyToken])->fetch();
if($user == null){
$this->redirect('login');
}
else{
$result = $db->update('users', $user['id'], ['is_active'], [1]);
$this->redirect('login');
public function checkLogin($request)
{
if (empty($request['email']) || empty($request['password'])) {
flash('login_error', 'All fields are required');
$this->redirectBack();
} else {
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE email = ?", [$request['email']])->fetch();
if ($user != null) {
if (password_verify($request['password'], $user['password']) && $user['is_active'] == 1) {
$_SESSION['user'] = $user['id'];
$this->redirect('admin');
} else {
flash('login_error', 'The password is wrong');
$this->redirectBack();
}
} else {
flash('login_error', 'User not found');
$this->redirectBack();
}
}
}
public function login(){
require_once(BASE_PATH .'/template/auth/login.php');
}
public function checkLogin($request)
{
if(empty($request['email']) || empty($request['password']))
{
flash('login_error', 'تمامی فیلد ها الزامی میباشند');
$this->redirectBack();
}
else{
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE email = ?", [$request['email']])->fetch();
if($user != null){
if(password_verify($request['password'], $user['password']) && $user['is_active'] == 1)
{
$_SESSION['user'] = $user['id'];
$this->redirect('admin');
}
else{
flash('login_error', 'کلمه عبور اشتباه است');
$this->redirectBack();
}
}
else{
flash('login_error', 'کاربر یافت نشد');
$this->redirectBack();
}
public function checkAdmin()
{
if (isset($_SESSION['user'])) {
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE id = ?", [$_SESSION['user']])->fetch();
if ($user != null) {
if ($user['permission'] != 'admin') {
$this->redirect('home');
}
} else {
$this->redirect('home');
}
} else {
$this->redirect('home');
}
}
public function checkAdmin(){
if(isset($_SESSION['user']))
{
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE id = ?", [$_SESSION['user']])->fetch();
if($user != null){
if($user['permission'] != 'admin'){
$this->redirect('home');
}
}
else{
$this->redirect('home');
}
}
else{
$this->redirect('home');
}
public function logout()
{
if (isset($_SESSION['user'])) {
unset($_SESSION['user']);
session_destroy();
}
$this->redirect('login');
public function logout()
{
if(isset($_SESSION['user']))
{
unset($_SESSION['user']);
session_destroy();
}
$this->redirect('login');
}
}
public function forgot()
{
require_once BASE_PATH . '/template/auth/forgot-password.php';
}
public function forgot(){
require_once(BASE_PATH .'/template/auth/forgot-password.php');
}
public function forgotMessage($username, $forgotToken)
{
$message = '
<h1>بازیابی رمز عبور</h1>
<p>' . $username . 'عزیز برای بازیابی رمز عبور خود لطفا روی لینک زیر کلیک نمایید</p>
<div><a href="'. url('reset-password-form/' . $forgotToken) .'">فعال سازی حساب کاربری</a></div>
public function forgotMessage($username, $forgotToken)
{
$message = '
<h1>Password recovery</h1>
<p>' . $username . 'Dear, to recover your password, please click on the link below</p>
<div><a href="' . url('reset-password-form/' . $forgotToken) . '">Account activation</a></div>
';
return $message;
}
return $message;
}
public function forgotRequest($request)
{
if(empty($request['email']))
{
flash('forgot_error', ' فیلد ایمیل الزامی میباشد');
$this->redirectBack();
public function forgotRequest($request)
{
if (empty($request['email'])) {
flash('forgot_error', 'The email field is required');
$this->redirectBack();
} else if (!filter_var($request['email'], FILTER_VALIDATE_EMAIL)) {
flash('forgot_error', 'The entered email is not correct');
$this->redirectBack();
} else {
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE email = ?", [$request['email']])->fetch();
if ($user == null) {
flash('forgot_error', 'There is no email entered');
$this->redirectBack();
} else {
$randomToken = $this->random();
$forgotMessage = $this->forgotMessage($user['username'], $randomToken);
$result = $this->sendMail($request['email'], 'Password recovery', $forgotMessage);
if ($result) {
$db->update('users', $user['id'], ['forgot_token', 'forgot_token_expire'], [$randomToken, date("Y-m-d H:i:s", strtotime('+15 minutes'))]);
$this->redirect('login');
} else {
flash('forgot_error', 'Email could not be sent.');
$this->redirectBack();
}
else if(!filter_var($request['email'], FILTER_VALIDATE_EMAIL))
{
flash('forgot_error', ' ایمیل وارد شده صحیح نمیباشد');
$this->redirectBack();
}
else{
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE email = ?", [$request['email']])->fetch();
if($user == null)
{
flash('forgot_error', ' ایمیل وارد شده وجود ندارد');
$this->redirectBack();
}
else{
$randomToken = $this->random();
$forgotMessage = $this->forgotMessage($user['username'], $randomToken);
$result = $this->sendMail($request['email'], 'بازیابی رمز عبور', $forgotMessage);
if($result)
{
$db->update('users', $user['id'], ['forgot_token', 'forgot_token_expire'], [$randomToken, date("Y-m-d H:i:s", strtotime('+15 minutes'))]);
$this->redirect('login');
}
else{
flash('forgot_error', ' ایمیل ارسال نشد');
$this->redirectBack();
}
}
}
}
}
}
public function resetPasswordView($forgot_token){
require_once(BASE_PATH .'/template/auth/reset-password.php');
}
public function resetPasswordView($forgot_token)
{
require_once BASE_PATH . '/template/auth/reset-password.php';
}
public function resetPassword($request, $forgot_token)
{
if(!isset($request['password']) || strlen($request['password']) < 8)
{
flash('reset_error', 'یا رمز عبور نباید کمتر از ۸ کاراکتر باشد رمز عبور نباید خالی باشد');
$this->redirectBack();
public function resetPassword($request, $forgot_token)
{
if (!isset($request['password']) || strlen($request['password']) < 8) {
flash('reset_error', 'The password must not be less than 8 characters or the password must not be empty');
$this->redirectBack();
} else {
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE forgot_token = ?", [$forgot_token])->fetch();
if ($user == null) {
flash('reset_error', 'User with this profile was not found');
$this->redirectBack();
} else {
if ($user['forgot_token_expire'] < date('Y-m-d H:i:s')) {
flash('reset_error', 'This token has expired');
$this->redirectBack();
}
else{
$db = new Database();
$user = $db->select("SELECT * FROM users WHERE forgot_token = ?", [$forgot_token])->fetch();
if($user == null){
flash('reset_error', 'کاربری با این مشخصات یافت نشد');
$this->redirectBack();
}
else{
if($user['forgot_token_expire'] < date('Y-m-d H:i:s'))
{
flash('reset_error', 'مهلت استفاده از این توکن به پایان رسیده است');
$this->redirectBack();
}
if($user)
{
$db->update('users', $user['id'], ['password'], [$this->hash($request['password'])]);
$this->redirect('login');
}
else{
$this->redirectBack();
}
}
if ($user) {
$db->update('users', $user['id'], ['password'], [$this->hash($request['password'])]);
$this->redirect('login');
} else {
$this->redirectBack();
}
}
}
}
}
}