+global\session::checksecurity()

Complexity

Conditions	13
Paths	45

Size

Total Lines

90

Duplication

Lines	44
Ratio	48.89 %

Importance

Changes

0

<?php
	public function checksecurity()
	{
		global $secure, $smarty;

		// CommunityUser has no database row, and we really don't want CommunityUser to have oauth credentials...
		if (!User::getCurrent()->isCommunityUser()) {
			if (User::getCurrent()->getStoredOnWikiName() == "##OAUTH##"
				&& User::getCurrent()->getOAuthAccessToken() == null
			) {
				reattachOAuthAccount(User::getCurrent());
			}

			if (User::getCurrent()->isOAuthLinked()) {
				try {
					// test retrieval of the identity
					User::getCurrent()->getOAuthIdentity();
				}
				catch (TransactionException $ex) {
					User::getCurrent()->setOAuthAccessToken(null);
					User::getCurrent()->setOAuthAccessSecret(null);
					User::getCurrent()->save();

					reattachOAuthAccount(User::getCurrent());
				}
			}
			else {
				global $enforceOAuth;

				if ($enforceOAuth) {
					reattachOAuthAccount(User::getCurrent());
				}
			}
		}
        
		if (User::getCurrent()->isNew()) {
			BootstrapSkin::displayAlertBox("I'm sorry, but, your account has not been approved by a site administrator yet. Please stand by.", "alert-error", "New account", true, false);
			BootstrapSkin::displayInternalFooter();
			die();

Using exit here is not recommended.

		}
		elseif (User::getCurrent()->isSuspended()) {
			$database = gGetDb();
			$suspendstatement = $database->prepare(<<<SQL
SELECT comment 
FROM log 
WHERE action = 'Suspended' AND objectid = :userid and objecttype = 'User' 
ORDER BY timestamp DESC
LIMIT 1;
SQL
			);
            
			$suspendstatement->bindValue(":userid", User::getCurrent()->getId());
			$suspendstatement->execute();
            
			$suspendreason = $suspendstatement->fetchColumn();
			$suspendstatement->closeCursor();
            
			$smarty->assign("suspendreason", $suspendreason);
			$smarty->display("login/suspended.tpl");
			BootstrapSkin::displayInternalFooter();
			die();

Using exit here is not recommended.

		}
		elseif (User::getCurrent()->isDeclined()) {
			$database = gGetDb();
			$suspendstatement = $database->prepare(<<<SQL
SELECT comment
FROM log
WHERE action = 'Declined' AND objectid = :userid and objecttype = 'User'
ORDER BY timestamp DESC
LIMIT 1;
SQL
			);
            
			$suspendstatement->bindValue(":userid", User::getCurrent()->getId());
			$suspendstatement->execute();
                
			$suspendreason = $suspendstatement->fetchColumn();
			$suspendstatement->closeCursor();
                
			$smarty->assign("suspendreason", $suspendreason);
			$smarty->display("login/declined.tpl");
			BootstrapSkin::displayInternalFooter();
			die();

Using exit here is not recommended.

		}
		elseif ((!User::getCurrent()->isCommunityUser()) && (User::getCurrent()->isUser() || User::getCurrent()->isAdmin())) {
			$secure = 1;
		}
		else {
			//die("Not logged in!");
		}
	}
}