ElkArte\Controller\Notify::_validateUnsubscribeToken()

Complexity

Conditions	8
Paths	13

Size

Total Lines	56
Code Lines	27

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	72

Importance

Changes

0

<?php
	private function _validateUnsubscribeToken(&$member, &$area, &$extra)
	{
		// Token was passed and matches our expected pattern
		$token = $this->_req->getQuery('token', 'trim', '');
		$token = urldecode($token);
		if (empty($token) || preg_match('~^(\d+_[a-zA-Z0-9./]{32,44}_[^)]*)~m', $token, $match) !== 1)
		{
			return false;
		}

		// Load all notification types in the system e.g.buddy, likemsg, etc
		require_once(SUBSDIR . '/ManageFeatures.subs.php');
		$potentialAreas = [];
		$notification_classes = getAvailableNotifications();
		foreach ($notification_classes as $class)
		{
			if ($class::canUse() === false)
			{
				continue;
			}

			$potentialAreas[] = strtolower($class::getType());
		}

		$potentialAreas = array_merge($potentialAreas, ['topic', 'board']);

		// Expand the token
		[$id_member, $hash, $area, $extra, $time] = explode('_', $match[1]);

		// The area is a known one
		if (!in_array($area, $potentialAreas, true))
		{
			return false;
		}

		// Not so old, 2 weeks is plenty
		if (time() - $time > (60 * 60 * 24 * 14))
		{
			return false;
		}

		// Find the claimed member
		require_once(SUBSDIR . '/Members.subs.php');
		$member = getBasicMemberData((int) $id_member, array('authentication' => true));
		if (empty($member))
		{
			return false;
		}

		// Validate the token belongs to this member
		require_once(SUBSDIR . '/Notification.subs.php');
		return validateNotifierToken(
			$member['email_address'],
			$member['password_salt'],
			$area . $extra . $time,
			$hash
		);