axyr / silverstripe-adminlogin

code/AdminLoginForm.php

Indentation +51 added lines, -51 removed lines

@@ -3,69 +3,69 @@
 class AdminLoginForm extends MemberLoginForm
 {
 
-    public function __construct($controller, $name, $fields = null, $actions = null, $checkCurrentUser = true)
-    {
-        parent::__construct($controller, $name, $fields, $actions, $checkCurrentUser);
+	public function __construct($controller, $name, $fields = null, $actions = null, $checkCurrentUser = true)
+	{
+		parent::__construct($controller, $name, $fields, $actions, $checkCurrentUser);
 
-        if ($field = $this->Actions()->fieldByName('forgotPassword')) {
-            // replaceField won't work, since it's a dataless field
-            $this->Actions()->removeByName('forgotPassword');
-            $this->Actions()->push(new LiteralField(
-                'forgotPassword',
-                '<p id="ForgotPassword"><a href="AdminSecurity/lostpassword">'
-                . _t('Member.BUTTONLOSTPASSWORD', "I've lost my password") . '</a></p>'
-            ));
-        }
+		if ($field = $this->Actions()->fieldByName('forgotPassword')) {
+			// replaceField won't work, since it's a dataless field
+			$this->Actions()->removeByName('forgotPassword');
+			$this->Actions()->push(new LiteralField(
+				'forgotPassword',
+				'<p id="ForgotPassword"><a href="AdminSecurity/lostpassword">'
+				. _t('Member.BUTTONLOSTPASSWORD', "I've lost my password") . '</a></p>'
+			));
+		}
 
-        Requirements::customScript(<<<JS
+		Requirements::customScript(<<<JS
 			(function() {
 				var el = document.getElementById("AdminLoginForm_LoginForm_Email");
 				if(el && el.focus) el.focus();
 			})();
 JS
-        );
-    }
+		);
+	}
 
-    /**
-     *
-     */
-    public function forgotPassword($data)
-    {
-        $SQL_data  = Convert::raw2sql($data);
-        $SQL_email = $SQL_data['Email'];
+	/**
+	 *
+	 */
+	public function forgotPassword($data)
+	{
+		$SQL_data  = Convert::raw2sql($data);
+		$SQL_email = $SQL_data['Email'];
 
-        /* @var $member Member */
-        $member = DataObject::get_one('Member', "\"Email\" = '{$SQL_email}'");
+		/* @var $member Member */
+		$member = DataObject::get_one('Member', "\"Email\" = '{$SQL_email}'");
 
-        $backUrlString = '';
-        if (isset($data['BackURL']) && $backURL = $data['BackURL']) {
-            $backUrlString = '?BackURL=' . $backURL;
-        }
+		$backUrlString = '';
+		if (isset($data['BackURL']) && $backURL = $data['BackURL']) {
+			$backUrlString = '?BackURL=' . $backURL;
+		}
 
-        if ($member) {
-            $token = $member->generateAutologinTokenAndStoreHash();
+		if ($member) {
+			$token = $member->generateAutologinTokenAndStoreHash();
 
-            /* @var $e Member_ForgotPasswordEmail */
-            $e = Member_ForgotPasswordEmail::create();
-            $e->populateTemplate($member);
-            $e->populateTemplate(array(
-                'PasswordResetLink' => AdminSecurity::getPasswordResetLink($member, $token)
-            ));
-            $e->setTo($member->Email);
-            $e->send();
+			/* @var $e Member_ForgotPasswordEmail */
+			$e = Member_ForgotPasswordEmail::create();
+			$e->populateTemplate($member);
+			$e->populateTemplate(array(
+				'PasswordResetLink' => AdminSecurity::getPasswordResetLink($member, $token)
+			));
+			$e->setTo($member->Email);
+			$e->send();
 
-            $this->controller->redirect('AdminSecurity/passwordsent/' . urlencode($data['Email']));
-        } elseif ($data['Email']) {
-            // Avoid information disclosure by displaying the same status,
-            // regardless wether the email address actually exists
-            $this->controller->redirect('AdminSecurity/passwordsent/' . urlencode($data['Email']));
-        } else {
-            $this->sessionMessage(
-                _t('Member.ENTEREMAIL', 'Please enter an email address to get a password reset link.'),
-                'bad'
-            );
+			$this->controller->redirect('AdminSecurity/passwordsent/' . urlencode($data['Email']));
+		} elseif ($data['Email']) {
+			// Avoid information disclosure by displaying the same status,
+			// regardless wether the email address actually exists
+			$this->controller->redirect('AdminSecurity/passwordsent/' . urlencode($data['Email']));
+		} else {
+			$this->sessionMessage(
+				_t('Member.ENTEREMAIL', 'Please enter an email address to get a password reset link.'),
+				'bad'
+			);
 
-            $this->controller->redirect('AdminSecurity/lostpassword');
-        }
-    }
+			$this->controller->redirect('AdminSecurity/lostpassword');
+		}
+	}
 }

code/model/IpAccess.php

Indentation +110 added lines, -110 removed lines

@@ -13,123 +13,123 @@
  */
 class IpAccess
 {
-    /**
-     * @var array
-     */
-    public $allowedIps = array();
+	/**
+	 * @var array
+	 */
+	public $allowedIps = array();
 
-    /**
-     * @var string
-     */
-    private $ip = '';
+	/**
+	 * @var string
+	 */
+	private $ip = '';
 
-    /**
-     * IpAccess constructor.
-     *
-     * @param string $ip
-     * @param array $allowedIps
-     */
-    public function __construct($ip = '', $allowedIps = array())
-    {
-        $this->ip         = $ip;
-        $this->allowedIps = $allowedIps;
-    }
+	/**
+	 * IpAccess constructor.
+	 *
+	 * @param string $ip
+	 * @param array $allowedIps
+	 */
+	public function __construct($ip = '', $allowedIps = array())
+	{
+		$this->ip         = $ip;
+		$this->allowedIps = $allowedIps;
+	}
 
-    /**
-     * @param $ip
-     */
-    public function setIp($ip)
-    {
-        $this->ip = $ip;
-    }
+	/**
+	 * @param $ip
+	 */
+	public function setIp($ip)
+	{
+		$this->ip = $ip;
+	}
 
-    /**
-     * @return string
-     */
-    public function hasAccess()
-    {
-        if (!$this->allowedIps) {
-            return 'allowed';
-        } elseif ($match = $this->matchExact()) {
-            return $match;
-        } elseif ($match = $this->matchRange()) {
-            return $match;
-        } elseif ($match = $this->matchCIDR()) {
-            return $match;
-        } elseif ($match = $this->matchWildCard()) {
-            return $match;
-        }
-    }
+	/**
+	 * @return string
+	 */
+	public function hasAccess()
+	{
+		if (!$this->allowedIps) {
+			return 'allowed';
+		} elseif ($match = $this->matchExact()) {
+			return $match;
+		} elseif ($match = $this->matchRange()) {
+			return $match;
+		} elseif ($match = $this->matchCIDR()) {
+			return $match;
+		} elseif ($match = $this->matchWildCard()) {
+			return $match;
+		}
+	}
 
-    /**
-     * @return string
-     */
-    public function matchExact()
-    {
-        if (in_array($this->ip, $this->allowedIps)) {
-            return $this->ip;
-        }
-    }
+	/**
+	 * @return string
+	 */
+	public function matchExact()
+	{
+		if (in_array($this->ip, $this->allowedIps)) {
+			return $this->ip;
+		}
+	}
 
-    /**
-     * try to match against a ip range
-     * Example : 192.168.1.50-100
-     */
-    public function matchRange()
-    {
-        if ($ranges = array_filter($this->allowedIps, function ($ip) {
-            return strstr($ip, '-');
-        })
-        ) {
-            foreach ($ranges as $range) {
-                $first = substr($range, 0, strrpos($range, '.') + 1);
-                $last  = substr(strrchr($range, '.'), 1);
-                list ($start, $end) = explode('-', $last);
-                for ($i = $start; $i <= $end; $i++) {
-                    if ($this->ip === $first . $i) {
-                        return $range;
-                    }
-                }
-            }
-        }
-    }
+	/**
+	 * try to match against a ip range
+	 * Example : 192.168.1.50-100
+	 */
+	public function matchRange()
+	{
+		if ($ranges = array_filter($this->allowedIps, function ($ip) {
+			return strstr($ip, '-');
+		})
+		) {
+			foreach ($ranges as $range) {
+				$first = substr($range, 0, strrpos($range, '.') + 1);
+				$last  = substr(strrchr($range, '.'), 1);
+				list ($start, $end) = explode('-', $last);
+				for ($i = $start; $i <= $end; $i++) {
+					if ($this->ip === $first . $i) {
+						return $range;
+					}
+				}
+			}
+		}
+	}
 
-    /**
-     * try to match cidr range
-     * Example : 192.168.1.0/24
-     */
-    public function matchCIDR()
-    {
-        if ($ranges = array_filter($this->allowedIps, function ($ip) {
-            return strstr($ip, '/');
-        })
-        ) {
-            foreach ($ranges as $cidr) {
-                list ($net, $mask) = explode('/', $cidr);
-                if ((ip2long($this->ip) & ~((1 << (32 - $mask)) - 1)) == ip2long($net)) {
-                    return $cidr;
-                }
-            }
-        }
-    }
+	/**
+	 * try to match cidr range
+	 * Example : 192.168.1.0/24
+	 */
+	public function matchCIDR()
+	{
+		if ($ranges = array_filter($this->allowedIps, function ($ip) {
+			return strstr($ip, '/');
+		})
+		) {
+			foreach ($ranges as $cidr) {
+				list ($net, $mask) = explode('/', $cidr);
+				if ((ip2long($this->ip) & ~((1 << (32 - $mask)) - 1)) == ip2long($net)) {
+					return $cidr;
+				}
+			}
+		}
+	}
 
-    /**
-     * try to match against a range that ends with a wildcard *
-     * Example : 192.168.1.*
-     * Example : 192.168.*
-     */
-    public function matchWildCard()
-    {
-        if ($ranges = array_filter($this->allowedIps, function ($ip) {
-            return substr($ip, -1) === '*';
-        })
-        ) {
-            foreach ($ranges as $range) {
-                if (substr($this->ip, 0, strlen(substr($range, 0, -1))) === substr($range, 0, -1)) {
-                    return $range;
-                }
-            }
-        }
-    }
+	/**
+	 * try to match against a range that ends with a wildcard *
+	 * Example : 192.168.1.*
+	 * Example : 192.168.*
+	 */
+	public function matchWildCard()
+	{
+		if ($ranges = array_filter($this->allowedIps, function ($ip) {
+			return substr($ip, -1) === '*';
+		})
+		) {
+			foreach ($ranges as $range) {
+				if (substr($this->ip, 0, strlen(substr($range, 0, -1))) === substr($range, 0, -1)) {
+					return $range;
+				}
+			}
+		}
+	}
 
 }

Spacing +3 added lines, -3 removed lines

@@ -77,7 +77,7 @@ 
      */
     public function matchRange()
     {
-        if ($ranges = array_filter($this->allowedIps, function ($ip) {
+        if ($ranges = array_filter($this->allowedIps, function($ip) {
             return strstr($ip, '-');
         })
         ) {
@@ -100,7 +100,7 @@ 
      */
     public function matchCIDR()
     {
-        if ($ranges = array_filter($this->allowedIps, function ($ip) {
+        if ($ranges = array_filter($this->allowedIps, function($ip) {
             return strstr($ip, '/');
         })
         ) {
@@ -120,7 +120,7 @@ 
      */
     public function matchWildCard()
     {
-        if ($ranges = array_filter($this->allowedIps, function ($ip) {
+        if ($ranges = array_filter($this->allowedIps, function($ip) {
             return substr($ip, -1) === '*';
         })
         ) {

code/AdminSecurity.php

Indentation +87 added lines, -87 removed lines

@@ -6,102 +6,102 @@
  */
 class AdminSecurity extends Security
 {
-    private static $allowed_actions = array(
-        'passwordsent',
-        'ChangePasswordForm'
-    );
+	private static $allowed_actions = array(
+		'passwordsent',
+		'ChangePasswordForm'
+	);
 
-    /**
-     * Template thats used to render the pages.
-     *
-     * @config
-     * @var string
-     */
-    private static $template_main = 'AdminLogin';
+	/**
+	 * Template thats used to render the pages.
+	 *
+	 * @config
+	 * @var string
+	 */
+	private static $template_main = 'AdminLogin';
 
-    /**
-     * @return mixed
-     */
-    public function init()
-    {
-        parent::init();
+	/**
+	 * @return mixed
+	 */
+	public function init()
+	{
+		parent::init();
 
-        if (Config::inst()->get('IpAccess', 'enabled')) {
-            $ipAccess = new IpAccess($this->owner->getRequest()->getIP(),
-                Config::inst()->get('IpAccess', 'allowed_ips'));
-            if (!$ipAccess->hasAccess()) {
-                $reponse = '';
-                if (class_exists('ErrorPage', true)) {
-                    $response = ErrorPage::response_for(404);
-                }
-                return $this->owner->httpError(404, $response ? $response : 'The requested page could not be found.');
-            }
-        }
+		if (Config::inst()->get('IpAccess', 'enabled')) {
+			$ipAccess = new IpAccess($this->owner->getRequest()->getIP(),
+				Config::inst()->get('IpAccess', 'allowed_ips'));
+			if (!$ipAccess->hasAccess()) {
+				$reponse = '';
+				if (class_exists('ErrorPage', true)) {
+					$response = ErrorPage::response_for(404);
+				}
+				return $this->owner->httpError(404, $response ? $response : 'The requested page could not be found.');
+			}
+		}
 
-        if (Config::inst()->get('AdminLogin', 'UseTheme') !== true) {
-            // this prevents loading frontend css and javscript files
-            Object::useCustomClass('Page_Controller', 'AdminLoginPage_Controller');
-            Requirements::css('adminlogin/css/style.css');
-        }
+		if (Config::inst()->get('AdminLogin', 'UseTheme') !== true) {
+			// this prevents loading frontend css and javscript files
+			Object::useCustomClass('Page_Controller', 'AdminLoginPage_Controller');
+			Requirements::css('adminlogin/css/style.css');
+		}
 
-        Object::useCustomClass('MemberLoginForm', 'AdminLoginForm');
-    }
+		Object::useCustomClass('MemberLoginForm', 'AdminLoginForm');
+	}
 
-    /**
-     * @param null $action
-     * @return string
-     */
-    public function Link($action = null)
-    {
-        return "AdminSecurity/$action";
-    }
+	/**
+	 * @param null $action
+	 * @return string
+	 */
+	public function Link($action = null)
+	{
+		return "AdminSecurity/$action";
+	}
 
-    /**
-     * @return string
-     */
-    public static function isAdminLogin()
-    {
-        return strstr(self::getBackUrl(), '/admin/');
-    }
+	/**
+	 * @return string
+	 */
+	public static function isAdminLogin()
+	{
+		return strstr(self::getBackUrl(), '/admin/');
+	}
 
-    /**
-     * @return mixed
-     */
-    public static function getBackUrl()
-    {
-        if (isset($_REQUEST['BackURL'])) {
-            return $_REQUEST['BackURL'];
-        } elseif (isset($_SESSION['BackURL'])) {
-            return $_SESSION['BackURL'];
-        }
-    }
+	/**
+	 * @return mixed
+	 */
+	public static function getBackUrl()
+	{
+		if (isset($_REQUEST['BackURL'])) {
+			return $_REQUEST['BackURL'];
+		} elseif (isset($_SESSION['BackURL'])) {
+			return $_SESSION['BackURL'];
+		}
+	}
 
-    /**
-     * @param SS_HTTPRequest $request
-     * @return string
-     */
-    public function passwordsent($request)
-    {
-        return parent::passwordsent($request);
-    }
+	/**
+	 * @param SS_HTTPRequest $request
+	 * @return string
+	 */
+	public function passwordsent($request)
+	{
+		return parent::passwordsent($request);
+	}
 
-    /**
-     * @see Security::getPasswordResetLink()
-     * We overload this, so we can add the BackURL to the password resetlink
-     */
-    public static function getPasswordResetLink($member, $autologinToken)
-    {
-        $autologinToken      = urldecode($autologinToken);
-        $selfControllerClass = __CLASS__;
-        $selfController      = new $selfControllerClass();
-        return $selfController->Link('changepassword') . "?m={$member->ID}&t=$autologinToken";
-    }
+	/**
+	 * @see Security::getPasswordResetLink()
+	 * We overload this, so we can add the BackURL to the password resetlink
+	 */
+	public static function getPasswordResetLink($member, $autologinToken)
+	{
+		$autologinToken      = urldecode($autologinToken);
+		$selfControllerClass = __CLASS__;
+		$selfController      = new $selfControllerClass();
+		return $selfController->Link('changepassword') . "?m={$member->ID}&t=$autologinToken";
+	}
 
-    /**
-     * @return ChangePasswordForm
-     */
-    public function ChangePasswordForm()
-    {
-        return new ChangePasswordForm($this, 'ChangePasswordForm');
-    }
+	/**
+	 * @return ChangePasswordForm
+	 */
+	public function ChangePasswordForm()
+	{
+		return new ChangePasswordForm($this, 'ChangePasswordForm');
+	}
 }

code/AdminLoginExtension.php

Indentation +10 added lines, -10 removed lines

@@ -7,14 +7,14 @@
 class AdminLoginExtension extends Extension
 {
 
-    // redirect to AdminSecurity, when we are coming from /admin/*
-    public function onBeforeSecurityLogin()
-    {
-        if (isset($_GET['BackURL']) && strstr($_GET['BackURL'], '/admin/')) {
-            if (Controller::curr()->class != 'AdminSecurity') {
-                $link = 'AdminSecurity/login' . '?BackURL=' . urlencode($_GET['BackURL']);
-                return $this->owner->redirect($link);
-            }
-        }
-    }
+	// redirect to AdminSecurity, when we are coming from /admin/*
+	public function onBeforeSecurityLogin()
+	{
+		if (isset($_GET['BackURL']) && strstr($_GET['BackURL'], '/admin/')) {
+			if (Controller::curr()->class != 'AdminSecurity') {
+				$link = 'AdminSecurity/login' . '?BackURL=' . urlencode($_GET['BackURL']);
+				return $this->owner->redirect($link);
+			}
+		}
+	}
 }

code/LimitAdminAccessExtension.php

Indentation +17 added lines, -17 removed lines

@@ -5,24 +5,24 @@
  */
 class LimitAdminAccessExtension extends Extension
 {
-    /**
-     * @return mixed
-     */
-    public function onBeforeInit()
-    {
-        if (Config::inst()->get('IpAccess', 'enabled')) {
-            $ipAccess = new IpAccess($this->owner->getRequest()->getIP(),
-                Config::inst()->get('IpAccess', 'allowed_ips'));
+	/**
+	 * @return mixed
+	 */
+	public function onBeforeInit()
+	{
+		if (Config::inst()->get('IpAccess', 'enabled')) {
+			$ipAccess = new IpAccess($this->owner->getRequest()->getIP(),
+				Config::inst()->get('IpAccess', 'allowed_ips'));
 
-            if (!$ipAccess->hasAccess()) {
-                if (class_exists('ErrorPage', true)) {
-                    $response = ErrorPage::response_for(403);
-                }
+			if (!$ipAccess->hasAccess()) {
+				if (class_exists('ErrorPage', true)) {
+					$response = ErrorPage::response_for(403);
+				}
 
-                $response = ($response) ? $response : 'The requested page could not be found.';
+				$response = ($response) ? $response : 'The requested page could not be found.';
 
-                return $this->owner->httpError(403, $response);
-            }
-        }
-    }
+				return $this->owner->httpError(403, $response);
+			}
+		}
+	}
 }