PowerKiKi / mqueue

application/controllers/UserController.php

<?php

use mQueue\Form\Login;
use mQueue\Model\StatusMapper;
use mQueue\Model\User;
use mQueue\Model\UserMapper;

class UserController extends Zend_Controller_Action
{
    public function init(): void
    {
        // Initialize action controller here
    }

    public function indexAction(): void
    {
        $this->view->users = UserMapper::fetchAll();
    }

    public function newAction()
    {
        $request = $this->getRequest();
        $form = new \mQueue\Form\User();

        if ($this->getRequest()->isPost()) {

The method isPost() does not exist on Zend_Controller_Request_Abstract. It seems like you code against a sub-type of Zend_Controller_Request_Abstract such as Zend_Controller_Request_Http.

            if ($form->isValid($request->getPost())) {

The method getPost() does not exist on Zend_Controller_Request_Abstract. It seems like you code against a sub-type of Zend_Controller_Request_Abstract such as Zend_Controller_Request_Http.

                $values = $form->getValues();
                $user = UserMapper::insertUser($values);

                User::setCurrent($user);

                $this->_helper->FlashMessenger('Subscription complete.');

                return $this->_helper->redirector('index', 'movie');
            }
        }

        $this->view->form = $form;
    }

    public function loginAction()
    {
        $request = $this->getRequest();
        $form = new Login();

        if ($this->getRequest()->isPost()) {
            if ($form->isValid($request->getPost())) {
                $values = $form->getValues();

                $user = UserMapper::findEmailPassword($values['email'], $values['password']);
                if ($user) {

$user is of type mQueue\Model\User, thus it always evaluated to true.

                    User::setCurrent($user);

                    $this->_helper->FlashMessenger('Logged in.');

                    $referrer = $values['referrer'];

                    // If we have a valid referer to one page of ours (except login or logout), redirect to it
                    if (mb_strpos($referrer, $this->view->serverUrl() . $this->view->baseUrl()) === 0
                        && mb_strpos($referrer, $this->view->serverUrl() . $this->view->url(['controller' => 'user', 'action' => 'login'])) !== 0
                        && mb_strpos($referrer, $this->view->serverUrl() . $this->view->url(['controller' => 'user', 'action' => 'logout'])) !== 0) {
                        return $this->redirect($values['referrer']);

Are you sure the usage of $this->redirect($values['referrer']) targeting Zend_Controller_Action::redirect() seems to always return null.

                    }

                    return $this->_helper->redirector('index', 'movie');
                }
                $this->_helper->FlashMessenger(['error' => 'Login failed.']);
            }
        } else {
            $form->setDefaults([
                'referrer' => $this->getRequest()->getServer('HTTP_REFERER'),

The method getServer() does not exist on Zend_Controller_Request_Abstract. It seems like you code against a sub-type of Zend_Controller_Request_Abstract such as Zend_Controller_Request_Http.

            ]);
        }

        $this->view->form = $form;
    }

    public function logoutAction(): void
    {
        User::setCurrent(null);
    }

    public function viewAction(): void
    {
        if ($this->getRequest()->getParam('id')) {
            $this->view->user = UserMapper::find($this->getRequest()->getParam('id'));
        } else {
            $this->view->user = User::getCurrent();
        }

        if (!$this->view->user) {

Accessing user on the interface Zend_View_Interface suggest that you code against a concrete implementation. How about adding an instanceof check?

            throw new Exception($this->view->translate('User not found'));
        }

        $this->view->userActivity = $this->_helper->createPaginator(StatusMapper::getActivityQuery($this->view->user));
    }
}