axyr / silverstripe-adminlogin

code/AdminSecurity.php

Indentation +86 added lines, -86 removed lines

@@ -6,101 +6,101 @@
  */
 class AdminSecurity extends Security
 {
-    /**
-     * @var array
-     */
-    private static $allowed_actions = array(
-        'passwordsent',
-        'ChangePasswordForm'
-    );
+	/**
+	 * @var array
+	 */
+	private static $allowed_actions = array(
+		'passwordsent',
+		'ChangePasswordForm'
+	);
 
-    /**
-     * Template thats used to render the pages.
-     *
-     * @config
-     * @var string
-     */
-    private static $template_main = 'AdminLogin';
+	/**
+	 * Template thats used to render the pages.
+	 *
+	 * @config
+	 * @var string
+	 */
+	private static $template_main = 'AdminLogin';
 
-    /**
-     * @return void
-     */
-    public function init()
-    {
-        parent::init();
+	/**
+	 * @return void
+	 */
+	public function init()
+	{
+		parent::init();
 
-        $access = new IpAccess($this->getRequest()->getIP());
-        if (!$access->hasAccess()) {
-            $access->respondNoAccess($this);
-        }
+		$access = new IpAccess($this->getRequest()->getIP());
+		if (!$access->hasAccess()) {
+			$access->respondNoAccess($this);
+		}
 
-        if (Config::inst()->get('AdminLogin', 'UseTheme') !== true) {
-            // this prevents loading frontend css and javscript files
-            Object::useCustomClass('Page_Controller', 'AdminLoginPage_Controller');
-            Requirements::css('adminlogin/css/style.css');
-        }
+		if (Config::inst()->get('AdminLogin', 'UseTheme') !== true) {
+			// this prevents loading frontend css and javscript files
+			Object::useCustomClass('Page_Controller', 'AdminLoginPage_Controller');
+			Requirements::css('adminlogin/css/style.css');
+		}
 
-        Object::useCustomClass('MemberLoginForm', 'AdminLoginForm');
-    }
+		Object::useCustomClass('MemberLoginForm', 'AdminLoginForm');
+	}
 
-    /**
-     * @param null $action
-     * @return string
-     */
-    public function Link($action = null)
-    {
-        return "AdminSecurity/$action";
-    }
+	/**
+	 * @param null $action
+	 * @return string
+	 */
+	public function Link($action = null)
+	{
+		return "AdminSecurity/$action";
+	}
 
-    /**
-     * @return string
-     */
-    public static function isAdminLogin()
-    {
-        return strstr(self::getBackUrl(), '/admin/');
-    }
+	/**
+	 * @return string
+	 */
+	public static function isAdminLogin()
+	{
+		return strstr(self::getBackUrl(), '/admin/');
+	}
 
-    /**
-     * @return string
-     */
-    public static function getBackUrl()
-    {
-        $request = Controller::curr()->getRequest();
-        if ($url = $request->requestVar('BackURL')) {
-            return $url;
-        }
-        return '';
-    }
+	/**
+	 * @return string
+	 */
+	public static function getBackUrl()
+	{
+		$request = Controller::curr()->getRequest();
+		if ($url = $request->requestVar('BackURL')) {
+			return $url;
+		}
+		return '';
+	}
 
-    /**
-     * @param SS_HTTPRequest $request
-     * @return SS_HTTPResponse|HTMLText
-     */
-    public function passwordsent($request)
-    {
-        return parent::passwordsent($request);
-    }
+	/**
+	 * @param SS_HTTPRequest $request
+	 * @return SS_HTTPResponse|HTMLText
+	 */
+	public function passwordsent($request)
+	{
+		return parent::passwordsent($request);
+	}
 
-    /**
-     * @see Security::getPasswordResetLink()
-     * We overload this, so we can add the BackURL to the password resetlink
-     * @param Member $member
-     * @param string $autologinToken
-     * @return string
-     */
-    public static function getPasswordResetLink($member, $autologinToken)
-    {
-        $autologinToken      = urldecode($autologinToken);
-        $selfControllerClass = __CLASS__;
-        $selfController      = new $selfControllerClass();
-        return $selfController->Link('changepassword') . "?m={$member->ID}&t=$autologinToken";
-    }
+	/**
+	 * @see Security::getPasswordResetLink()
+	 * We overload this, so we can add the BackURL to the password resetlink
+	 * @param Member $member
+	 * @param string $autologinToken
+	 * @return string
+	 */
+	public static function getPasswordResetLink($member, $autologinToken)
+	{
+		$autologinToken      = urldecode($autologinToken);
+		$selfControllerClass = __CLASS__;
+		$selfController      = new $selfControllerClass();
+		return $selfController->Link('changepassword') . "?m={$member->ID}&t=$autologinToken";
+	}
 
-    /**
-     * @return ChangePasswordForm
-     */
-    public function ChangePasswordForm()
-    {
-        return new ChangePasswordForm($this, 'ChangePasswordForm');
-    }
+	/**
+	 * @return ChangePasswordForm
+	 */
+	public function ChangePasswordForm()
+	{
+		return new ChangePasswordForm($this, 'ChangePasswordForm');
+	}
 }

code/model/IpAccess.php

Indentation +148 added lines, -148 removed lines

@@ -13,166 +13,166 @@
  */
 class IpAccess extends Object
 {
-    /**
-     * @var array
-     */
-    public $allowedIps = array();
+	/**
+	 * @var array
+	 */
+	public $allowedIps = array();
 
-    /**
-     * @config
-     * @var array
-     */
-    private static $allowed_ips = array();
+	/**
+	 * @config
+	 * @var array
+	 */
+	private static $allowed_ips = array();
 
-    /**
-     * @var string
-     */
-    private $ip = '';
+	/**
+	 * @var string
+	 */
+	private $ip = '';
 
-    /**
-     * IpAccess constructor.
-     *
-     * @param string $ip
-     * @param array $allowedIps
-     */
-    public function __construct($ip = '', $allowedIps = array())
-    {
-        parent::__construct();
-        $this->ip = $ip;
+	/**
+	 * IpAccess constructor.
+	 *
+	 * @param string $ip
+	 * @param array $allowedIps
+	 */
+	public function __construct($ip = '', $allowedIps = array())
+	{
+		parent::__construct();
+		$this->ip = $ip;
 
-        self::config()->allowed_ips = $allowedIps;
-    }
+		self::config()->allowed_ips = $allowedIps;
+	}
 
-    /**
-     * @param $ip
-     */
-    public function setIp($ip)
-    {
-        $this->ip = $ip;
-    }
+	/**
+	 * @param $ip
+	 */
+	public function setIp($ip)
+	{
+		$this->ip = $ip;
+	}
 
-    /**
-     * @return array
-     */
-    public function getAllowedIps()
-    {
-        if ($this->allowedIps) {
-            Deprecation::notice('1.1', 'Use the "IpAccess.allowed_ips" config setting instead');
-            self::config()->allowed_ips = $this->allowedIps;
-        }
-        return (array)self::config()->allowed_ips;
-    }
+	/**
+	 * @return array
+	 */
+	public function getAllowedIps()
+	{
+		if ($this->allowedIps) {
+			Deprecation::notice('1.1', 'Use the "IpAccess.allowed_ips" config setting instead');
+			self::config()->allowed_ips = $this->allowedIps;
+		}
+		return (array)self::config()->allowed_ips;
+	}
 
-    /**
-     * @return bool
-     */
-    public function hasAccess()
-    {
-        if (!(bool)Config::inst()->get('IpAccess', 'enabled')
-            || empty($this->getAllowedIps())
-            || $this->matchExact()
-            || $this->matchRange()
-            || $this->matchCIDR()
-            || $this->matchWildCard())
-        {
-            return true;
-        }
+	/**
+	 * @return bool
+	 */
+	public function hasAccess()
+	{
+		if (!(bool)Config::inst()->get('IpAccess', 'enabled')
+			|| empty($this->getAllowedIps())
+			|| $this->matchExact()
+			|| $this->matchRange()
+			|| $this->matchCIDR()
+			|| $this->matchWildCard())
+		{
+			return true;
+		}
 
-        return false;
-    }
+		return false;
+	}
 
-    /**
-     * @param Controller $controller
-     * @throws SS_HTTPResponse_Exception
-     */
-    public function respondNoAccess(Controller $controller)
-    {
-        $response = null;
-        if (class_exists('ErrorPage', true)) {
-            $response = ErrorPage::response_for(403);
-        }
-        $controller->httpError(403, $response ? $response : 'The requested page could not be found.');
-    }
+	/**
+	 * @param Controller $controller
+	 * @throws SS_HTTPResponse_Exception
+	 */
+	public function respondNoAccess(Controller $controller)
+	{
+		$response = null;
+		if (class_exists('ErrorPage', true)) {
+			$response = ErrorPage::response_for(403);
+		}
+		$controller->httpError(403, $response ? $response : 'The requested page could not be found.');
+	}
 
-    /**
-     * @return string
-     */
-    public function matchExact()
-    {
-        return in_array($this->ip, $this->getAllowedIps()) ? $this->ip : '';
-    }
+	/**
+	 * @return string
+	 */
+	public function matchExact()
+	{
+		return in_array($this->ip, $this->getAllowedIps()) ? $this->ip : '';
+	}
 
-    /**
-     * Try to match against a ip range
-     *
-     * Example : 192.168.1.50-100
-     *
-     * @return string
-     */
-    public function matchRange()
-    {
-        if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
-            return strstr($ip, '-');
-        })
-        ) {
-            foreach ($ranges as $range) {
-                $first = substr($range, 0, strrpos($range, '.') + 1);
-                $last  = substr(strrchr($range, '.'), 1);
-                list ($start, $end) = explode('-', $last);
-                for ($i = $start; $i <= $end; $i++) {
-                    if ($this->ip === $first . $i) {
-                        return $range;
-                    }
-                }
-            }
-        }
-        return '';
-    }
+	/**
+	 * Try to match against a ip range
+	 *
+	 * Example : 192.168.1.50-100
+	 *
+	 * @return string
+	 */
+	public function matchRange()
+	{
+		if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
+			return strstr($ip, '-');
+		})
+		) {
+			foreach ($ranges as $range) {
+				$first = substr($range, 0, strrpos($range, '.') + 1);
+				$last  = substr(strrchr($range, '.'), 1);
+				list ($start, $end) = explode('-', $last);
+				for ($i = $start; $i <= $end; $i++) {
+					if ($this->ip === $first . $i) {
+						return $range;
+					}
+				}
+			}
+		}
+		return '';
+	}
 
-    /**
-     * Try to match cidr range
-     *
-     * Example : 192.168.1.0/24
-     *
-     * @return string
-     */
-    public function matchCIDR()
-    {
-        if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
-            return strstr($ip, '/');
-        })
-        ) {
-            foreach ($ranges as $cidr) {
-                list ($net, $mask) = explode('/', $cidr);
-                if ((ip2long($this->ip) & ~((1 << (32 - $mask)) - 1)) == ip2long($net)) {
-                    return $cidr;
-                }
-            }
-        }
-        return '';
-    }
+	/**
+	 * Try to match cidr range
+	 *
+	 * Example : 192.168.1.0/24
+	 *
+	 * @return string
+	 */
+	public function matchCIDR()
+	{
+		if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
+			return strstr($ip, '/');
+		})
+		) {
+			foreach ($ranges as $cidr) {
+				list ($net, $mask) = explode('/', $cidr);
+				if ((ip2long($this->ip) & ~((1 << (32 - $mask)) - 1)) == ip2long($net)) {
+					return $cidr;
+				}
+			}
+		}
+		return '';
+	}
 
-    /**
-     * Try to match against a range that ends with a wildcard *
-     *
-     * Example : 192.168.1.*
-     * Example : 192.168.*
-     *
-     * @return string
-     */
-    public function matchWildCard()
-    {
-        if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
-            return substr($ip, -1) === '*';
-        })
-        ) {
-            foreach ($ranges as $range) {
-                if (substr($this->ip, 0, strlen(substr($range, 0, -1))) === substr($range, 0, -1)) {
-                    return $range;
-                }
-            }
-        }
-        return '';
-    }
+	/**
+	 * Try to match against a range that ends with a wildcard *
+	 *
+	 * Example : 192.168.1.*
+	 * Example : 192.168.*
+	 *
+	 * @return string
+	 */
+	public function matchWildCard()
+	{
+		if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
+			return substr($ip, -1) === '*';
+		})
+		) {
+			foreach ($ranges as $range) {
+				if (substr($this->ip, 0, strlen(substr($range, 0, -1))) === substr($range, 0, -1)) {
+					return $range;
+				}
+			}
+		}
+		return '';
+	}
 
 }

Spacing +5 added lines, -5 removed lines

@@ -60,7 +60,7 @@ 
             Deprecation::notice('1.1', 'Use the "IpAccess.allowed_ips" config setting instead');
             self::config()->allowed_ips = $this->allowedIps;
         }
-        return (array)self::config()->allowed_ips;
+        return (array) self::config()->allowed_ips;
     }
 
     /**
@@ -68,7 +68,7 @@ 
      */
     public function hasAccess()
     {
-        if (!(bool)Config::inst()->get('IpAccess', 'enabled')
+        if (!(bool) Config::inst()->get('IpAccess', 'enabled')
             || empty($this->getAllowedIps())
             || $this->matchExact()
             || $this->matchRange()
@@ -111,7 +111,7 @@ 
      */
     public function matchRange()
     {
-        if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
+        if ($ranges = array_filter($this->getAllowedIps(), function($ip) {
             return strstr($ip, '-');
         })
         ) {
@@ -138,7 +138,7 @@ 
      */
     public function matchCIDR()
     {
-        if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
+        if ($ranges = array_filter($this->getAllowedIps(), function($ip) {
             return strstr($ip, '/');
         })
         ) {
@@ -162,7 +162,7 @@ 
      */
     public function matchWildCard()
     {
-        if ($ranges = array_filter($this->getAllowedIps(), function ($ip) {
+        if ($ranges = array_filter($this->getAllowedIps(), function($ip) {
             return substr($ip, -1) === '*';
         })
         ) {

code/LimitAdminAccessExtension.php

Indentation +10 added lines, -10 removed lines

@@ -7,14 +7,14 @@
  */
 class LimitAdminAccessExtension extends Extension
 {
-    /**
-     * @return mixed
-     */
-    public function onBeforeInit()
-    {
-        $access = new IpAccess($this->owner->getRequest()->getIP());
-        if (!$access->hasAccess()) {
-            $access->respondNoAccess($this->owner);
-        }
-    }
+	/**
+	 * @return mixed
+	 */
+	public function onBeforeInit()
+	{
+		$access = new IpAccess($this->owner->getRequest()->getIP());
+		if (!$access->hasAccess()) {
+			$access->respondNoAccess($this->owner);
+		}
+	}
 }