Nickbur / Sunrise-CMS

engine/library/Customer.php

<?php
/* 	Divine CMS - Open source CMS for widespread use.
    Copyright (c) 2019 Mykola Burakov (burakov.work@gmail.com)

    See SOURCE.txt for other and additional information.

    This file is part of Divine CMS.

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program. If not, see <http://www.gnu.org/licenses/>. */

namespace Divine\Engine\Library;

class Customer
{
    private $customer_id;
    private $firstname;
    private $lastname;
    private $customer_group_id;
    private $email;
    private $telephone;
    private $fax;
    private $newsletter;
    private $address_id;

    public function __construct($registry)

Expected 2 blank lines before function; 1 found

    {
        $this->config = $registry->get('config');

The property config does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        $this->db = $registry->get('db');

The property db does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        $this->request = $registry->get('request');

The property request does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        $this->session = $registry->get('session');

The property session does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        if (isset($this->session->data['customer_id'])) {
            $customer_query = $this->db->query("
                SELECT * 
                FROM customer 
                WHERE customer_id = '" . (int) $this->session->data['customer_id'] . "' 
                    AND status = '1'
            ");

            if ($customer_query->num_rows) {
                $this->customer_id = $customer_query->row['customer_id'];
                $this->firstname = $customer_query->row['firstname'];
                $this->lastname = $customer_query->row['lastname'];
                $this->customer_group_id = $customer_query->row['customer_group_id'];
                $this->email = $customer_query->row['email'];
                $this->telephone = $customer_query->row['telephone'];
                $this->fax = $customer_query->row['fax'];
                $this->newsletter = $customer_query->row['newsletter'];
                $this->address_id = $customer_query->row['address_id'];

                $this->db->query("
                    UPDATE customer 
                    SET language_id = '" . (int) $this->config->get('config_language_id') . "', 
                        ip = '" . $this->db->escape($this->request->server['REMOTE_ADDR']) . "' 
                    WHERE customer_id = '" . (int) $this->customer_id . "'
                ");

                $query = $this->db->query("
                    SELECT * 
                    FROM customer_ip 
                    WHERE customer_id = '" . (int) $this->session->data['customer_id'] . "' 
                        AND ip = '" . $this->db->escape($this->request->server['REMOTE_ADDR']) . "'
                ");

                if (!$query->num_rows) {
                    $this->db->query("
                        INSERT INTO customer_ip 
                        SET customer_id = '" . (int) $this->session->data['customer_id'] . "', 
                            ip = '" . $this->db->escape($this->request->server['REMOTE_ADDR']) . "', 
                            date_added = NOW()
                    ");
                }
            } else {
                $this->logout();
            }
        }
    }

    public function login($email, $password, $override = false)
    {
        if ($override) {
            $customer_query = $this->db->query("
                SELECT * 
                FROM customer 
                WHERE LOWER(email) = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "' 
                    AND status = '1'
            ");
        } else {
            $customer_query = $this->db->query("
                SELECT * 
                FROM customer 
                WHERE LOWER(email) = '" . $this->db->escape(\voku\helper\UTF8::strtolower($email)) . "' 
                    AND (password = SHA1(CONCAT(salt, SHA1(CONCAT(salt, SHA1('" . $this->db->escape($password) . "'))))) OR password = '" . $this->db->escape(md5($password)) . "') 
                    AND status = '1' 
                    AND approved = '1'
            ");
        }

        if ($customer_query->num_rows) {
            $this->session->data['customer_id'] = $customer_query->row['customer_id'];

            $this->customer_id = $customer_query->row['customer_id'];
            $this->firstname = $customer_query->row['firstname'];
            $this->lastname = $customer_query->row['lastname'];
            $this->customer_group_id = $customer_query->row['customer_group_id'];
            $this->email = $customer_query->row['email'];
            $this->telephone = $customer_query->row['telephone'];
            $this->fax = $customer_query->row['fax'];
            $this->newsletter = $customer_query->row['newsletter'];
            $this->address_id = $customer_query->row['address_id'];

            $this->db->query("
                UPDATE customer 
                SET language_id = '" . (int) $this->config->get('config_language_id') . "', 
                    ip = '" . $this->db->escape($this->request->server['REMOTE_ADDR']) . "' 
                WHERE customer_id = '" . (int) $this->customer_id . "'
            ");

            return true;
        } else {
            return false;
        }
    }

    public function logout()
    {
        unset($this->session->data['customer_id']);

        $this->customer_id = '';
        $this->firstname = '';
        $this->lastname = '';
        $this->customer_group_id = '';
        $this->email = '';
        $this->telephone = '';
        $this->fax = '';
        $this->newsletter = '';
        $this->address_id = '';
    }

    public function isLogged()
    {
        return $this->customer_id;
    }

    public function getId()
    {
        return $this->customer_id;
    }

    public function getFirstName()
    {
        return $this->firstname;
    }

    public function getLastName()
    {
        return $this->lastname;
    }

    public function getGroupId()
    {
        return $this->customer_group_id;
    }

    public function getEmail()
    {
        return $this->email;
    }

    public function getTelephone()
    {
        return $this->telephone;
    }

    public function getFax()
    {
        return $this->fax;
    }

    public function getNewsletter()
    {
        return $this->newsletter;
    }

    public function getAddressId()
    {
        return $this->address_id;
    }

    public function getBalance()
    {
        $query = $this->db->query("
            SELECT SUM(amount) AS total 
            FROM customer_transaction 
            WHERE customer_id = '" . (int) $this->customer_id . "'
        ");

        return $query->row['total'];
    }

    public function getRewardPoints()
    {
        $query = $this->db->query("
            SELECT SUM(points) AS total 
            FROM customer_reward 
            WHERE customer_id = '" . (int) $this->customer_id . "'
        ");

        return $query->row['total'];
    }
}