Nickbur / Sunrise-CMS

application/model/account/customer.php

<?php

/* 	Divine CMS - Open source CMS for widespread use.
    Copyright (c) 2019 Mykola Burakov (burakov.work@gmail.com)

    See SOURCE.txt for other and additional information.

    This file is part of Divine CMS.

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program. If not, see <http://www.gnu.org/licenses/>. */

class ModelAccountCustomer extends \Divine\Engine\Core\Model

PSR1 recommends that each class must be in a namespace of at least one level to avoid collisions.

{
    public function addCustomer($data)

Expected 2 blank lines before function; 0 found

    {
        if (isset($data['customer_group_id']) && is_array($this->config->get('config_customer_group_display')) && in_array($data['customer_group_id'], $this->config->get('config_customer_group_display'))) {
            $customer_group_id = $data['customer_group_id'];
        } else {
            $customer_group_id = $this->config->get('config_customer_group_id');
        }

        $this->load->model('account/customer_group');

        $customer_group_info = $this->model_account_customer_group->getCustomerGroup($customer_group_id);

        $this->db->query("
			INSERT INTO customer 
			SET customer_group_id = '" . (int)$customer_group_id . "', 
				language_id = '" . (int)$this->config->get('config_language_id') . "', 
				firstname = '" . $this->db->escape($data['firstname']) . "', 
				lastname = '" . $this->db->escape($data['lastname']) . "', 
				email = '" . $this->db->escape($data['email']) . "', 
				telephone = '" . $this->db->escape($data['telephone']) . "', 
				fax = '" . $this->db->escape($data['fax']) . "', 
				custom_field = '" . $this->db->escape(isset($data['custom_field']['account']) ? json_encode($data['custom_field']['account']) : '') . "', 
				salt = '" . $this->db->escape($salt = (new \Tokenly\TokenGenerator\TokenGenerator())->generateToken(9, 'SR')) . "', 
				password = '" . $this->db->escape(sha1($salt . sha1($salt . sha1($data['password'])))) . "', 
				newsletter = '" . (isset($data['newsletter']) ? (int)$data['newsletter'] : 0) . "', ip = '" . $this->db->escape($this->request->server['REMOTE_ADDR']) . "', 
				status = '1', 
				approved = '" . (int)!$customer_group_info['approval'] . "', 
				date_added = NOW()
		");

        $customer_id = $this->db->getLastId();

        $this->db->query("
			INSERT INTO address 
			SET customer_id = '" . (int)$customer_id . "', 
				firstname = '" . $this->db->escape($data['firstname']) . "', 
				lastname = '" . $this->db->escape($data['lastname']) . "', 
				company = '" . $this->db->escape($data['company']) . "', 
				address_1 = '" . $this->db->escape($data['address_1']) . "', 
				address_2 = '" . $this->db->escape($data['address_2']) . "', 
				city = '" . $this->db->escape($data['city']) . "', 
				postcode = '" . $this->db->escape($data['postcode']) . "', 
				country_id = '" . (int)$data['country_id'] . "', 
				zone_id = '" . (int)$data['zone_id'] . "', 
				custom_field = '" . $this->db->escape(isset($data['custom_field']['address']) ? json_encode($data['custom_field']['address']) : '') . "'
		");

        $address_id = $this->db->getLastId();

        $this->db->query("
			UPDATE customer 
			SET address_id = '" . (int)$address_id . "' 
			WHERE customer_id = '" . (int)$customer_id . "'
		");

        $this->load->language('mail/customer');

        $subject = sprintf($this->language->get('text_subject'), html_entity_decode($this->config->get('config_name'), ENT_QUOTES, 'UTF-8'));

        $message = sprintf($this->language->get('text_welcome'), html_entity_decode($this->config->get('config_name'), ENT_QUOTES, 'UTF-8')) . "\n\n";

        if (!$customer_group_info['approval']) {
            $message .= $this->language->get('text_login') . "\n";
        } else {
            $message .= $this->language->get('text_approval') . "\n";
        }

        $message .= $this->url->link('account/login', '', true) . "\n\n";
        $message .= $this->language->get('text_services') . "\n\n";
        $message .= $this->language->get('text_thanks') . "\n";
        $message .= html_entity_decode($this->config->get('config_name'), ENT_QUOTES, 'UTF-8');

        $mail = new \Divine\Engine\Library\Mail();
        $mail->protocol = $this->config->get('config_mail_protocol');
        $mail->parameter = $this->config->get('config_mail_parameter');
        $mail->smtp_hostname = $this->config->get('config_mail_smtp_hostname');
        $mail->smtp_username = $this->config->get('config_mail_smtp_username');
        $mail->smtp_password = html_entity_decode($this->config->get('config_mail_smtp_password'), ENT_QUOTES, 'UTF-8');
        $mail->smtp_port = $this->config->get('config_mail_smtp_port');
        $mail->smtp_timeout = $this->config->get('config_mail_smtp_timeout');

        $mail->setTo($data['email']);
        $mail->setFrom($this->config->get('config_email'));
        $mail->setSender(html_entity_decode($this->config->get('config_name'), ENT_QUOTES, 'UTF-8'));
        $mail->setSubject($subject);
        $mail->setText($message);
        $mail->send();

        // Send to main admin email if new account email is enabled
        if (in_array('account', (array)$this->config->get('config_mail_alert'))) {
            $message  = $this->language->get('text_signup') . "\n\n";
            $message .= $this->language->get('text_website') . ' ' . html_entity_decode($this->config->get('config_name'), ENT_QUOTES, 'UTF-8') . "\n";
            $message .= $this->language->get('text_firstname') . ' ' . $data['firstname'] . "\n";
            $message .= $this->language->get('text_lastname') . ' ' . $data['lastname'] . "\n";
            $message .= $this->language->get('text_customer_group') . ' ' . $customer_group_info['name'] . "\n";
            $message .= $this->language->get('text_email') . ' '  .  $data['email'] . "\n";
            $message .= $this->language->get('text_telephone') . ' ' . $data['telephone'] . "\n";

            $mail = new \Divine\Engine\Library\Mail();
            $mail->protocol = $this->config->get('config_mail_protocol');
            $mail->parameter = $this->config->get('config_mail_parameter');
            $mail->smtp_hostname = $this->config->get('config_mail_smtp_hostname');
            $mail->smtp_username = $this->config->get('config_mail_smtp_username');
            $mail->smtp_password = html_entity_decode($this->config->get('config_mail_smtp_password'), ENT_QUOTES, 'UTF-8');
            $mail->smtp_port = $this->config->get('config_mail_smtp_port');
            $mail->smtp_timeout = $this->config->get('config_mail_smtp_timeout');

            $mail->setTo($this->config->get('config_email'));
            $mail->setFrom($this->config->get('config_email'));
            $mail->setSender(html_entity_decode($this->config->get('config_name'), ENT_QUOTES, 'UTF-8'));
            $mail->setSubject(html_entity_decode($this->language->get('text_new_customer'), ENT_QUOTES, 'UTF-8'));
            $mail->setText($message);
            $mail->send();

            // Send to additional alert emails if new account email is enabled
            $emails = explode(',', $this->config->get('config_alert_email'));

            foreach ($emails as $email) {
                if (\voku\helper\UTF8::strlen($email) > 0 && filter_var($email, FILTER_VALIDATE_EMAIL)) {
                    $mail->setTo($email);
                    $mail->send();
                }
            }
        }

        return $customer_id;
    }

    public function editCustomer($data)
    {
        $customer_id = $this->customer->getId();

        $this->db->query("
            UPDATE customer 
            SET firstname = '" . $this->db->escape($data['firstname']) . "', 
                lastname = '" . $this->db->escape($data['lastname']) . "', 
                email = '" . $this->db->escape($data['email']) . "', 
                telephone = '" . $this->db->escape($data['telephone']) . "', 
                fax = '" . $this->db->escape($data['fax']) . "', 
                custom_field = '" . $this->db->escape(isset($data['custom_field']) ? json_encode($data['custom_field']) : '') . "' 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");
    }

    public function editPassword($email, $password)
    {
        $this->db->query("
            UPDATE customer 
            SET salt = '" . $this->db->escape($salt = (new \Tokenly\TokenGenerator\TokenGenerator())->generateToken(9, 'SR')) . "', 
                password = '" . $this->db->escape(sha1($salt . sha1($salt . sha1($password)))) . "', 
                code = '' WHERE LOWER(email) = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "'
        ");
    }

    public function editCode($email, $code)
    {
        $this->db->query("
            UPDATE `customer` 
            SET code = '" . $this->db->escape($code) . "' 
            WHERE LCASE(email) = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "'
        ");
    }

    public function editNewsletter($newsletter)
    {
        $this->db->query("
            UPDATE customer 
            SET newsletter = '" . (int)$newsletter . "' 
            WHERE customer_id = '" . (int)$this->customer->getId() . "'
        ");
    }

    public function getCustomer($customer_id)
    {
        $query = $this->db->query("
            SELECT * 
            FROM customer 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row;
    }

    public function getCustomerByEmail($email)
    {
        $query = $this->db->query("
            SELECT * 
            FROM customer 
            WHERE LOWER(email) = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "'
        ");

        return $query->row;
    }

    public function getCustomerByCode($code)
    {
        $query = $this->db->query("
            SELECT customer_id, firstname, lastname, email 
            FROM `customer` 
            WHERE code = '" . $this->db->escape($code) . "' AND code != ''
        ");

        return $query->row;
    }

    public function getCustomerByToken($token)
    {
        $query = $this->db->query("
            SELECT * 
            FROM customer 
            WHERE token = '" . $this->db->escape($token) . "' 
                AND token != ''
        ");

        $this->db->query("UPDATE customer SET token = ''");

        return $query->row;
    }

    public function getTotalCustomersByEmail($email)
    {
        $query = $this->db->query("
            SELECT COUNT(*) AS total 
            FROM customer 
            WHERE LOWER(email) = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "'
        ");

        return $query->row['total'];
    }

    public function getRewardTotal($customer_id)
    {
        $query = $this->db->query("
            SELECT SUM(points) AS total 
            FROM customer_reward 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->row['total'];
    }

    public function getIps($customer_id)
    {
        $query = $this->db->query("
            SELECT * 
            FROM `customer_ip` 
            WHERE customer_id = '" . (int)$customer_id . "'
        ");

        return $query->rows;
    }

    public function addLoginAttempt($email)
    {
        $query = $this->db->query("
            SELECT * 
            FROM customer_login 
            WHERE email = '" . $this->db->escape(\voku\helper\UTF8::strtolower((string)$email)) . "' 
                AND ip = '" . $this->db->escape($this->request->server['REMOTE_ADDR']) . "'
        ");

        if (!$query->num_rows) {
            $this->db->query("
                INSERT INTO customer_login 
                SET email = '" . $this->db->escape(\voku\helper\UTF8::strtolower((string)$email)) . "', 
                    ip = '" . $this->db->escape($this->request->server['REMOTE_ADDR']) . "', 
                    total = 1, date_added = '" . $this->db->escape(date('Y-m-d H:i:s')) . "', 
                    date_modified = '" . $this->db->escape(date('Y-m-d H:i:s')) . "'
                ");
        } else {
            $this->db->query("
                UPDATE customer_login 
                SET total = (total + 1), 
                    date_modified = '" . $this->db->escape(date('Y-m-d H:i:s')) . "' 
                WHERE customer_login_id = '" . (int)$query->row['customer_login_id'] . "'
            ");
        }
    }

    public function getLoginAttempts($email)
    {
        $query = $this->db->query("
            SELECT * 
            FROM `customer_login` 
            WHERE email = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "'
        ");

        return $query->row;
    }

    public function deleteLoginAttempts($email)
    {
        $this->db->query("
            DELETE 
			FROM `customer_login` 
            WHERE email = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "'
        ");
    }
}