@@ -19,160 +19,160 @@ |
||
19 | 19 | |
20 | 20 | class PageDomainManagement extends InternalPageBase |
21 | 21 | { |
22 | - protected function main() |
|
23 | - { |
|
24 | - $this->setHtmlTitle('Domain Management'); |
|
25 | - |
|
26 | - $database = $this->getDatabase(); |
|
27 | - $currentUser = User::getCurrent($database); |
|
28 | - |
|
29 | - /** @var Domain[] $domains */ |
|
30 | - $domains = Domain::getAll($database); |
|
31 | - |
|
32 | - $templates = []; |
|
33 | - foreach ($domains as $domain) { |
|
34 | - if ($domain->getDefaultClose() !== null) { |
|
35 | - $templates[$domain->getDefaultClose()] = EmailTemplate::getById($domain->getDefaultClose(), $database); |
|
36 | - } |
|
37 | - } |
|
38 | - |
|
39 | - $canEdit = $this->barrierTest('edit', $currentUser); |
|
40 | - $canEditAll = $this->barrierTest('editAll', $currentUser); |
|
41 | - $canCreate = $this->barrierTest('create', $currentUser); |
|
42 | - $this->assign('canEdit', $canEdit); |
|
43 | - $this->assign('canEditAll', $canEditAll); |
|
44 | - $this->assign('canCreate', $canCreate); |
|
45 | - |
|
46 | - $this->assign('domains', $domains); |
|
47 | - $this->assign('closeTemplates', $templates); |
|
48 | - $this->assign('currentDomain', Domain::getCurrent($database)); |
|
49 | - $this->setTemplate('domain-management/main.tpl'); |
|
50 | - } |
|
51 | - |
|
52 | - protected function create() |
|
53 | - { |
|
54 | - $this->setHtmlTitle('Domain Management'); |
|
55 | - $database = $this->getDatabase(); |
|
56 | - $currentUser = User::getCurrent($database); |
|
57 | - |
|
58 | - // quickly check the user is allowed to edit all fields. If not, then they shouldn't be allowed to create |
|
59 | - // new domains either. With any luck, a competent developer would never grant create without editAll to a role |
|
60 | - // anyway, so this will never be hit. |
|
61 | - if (!$this->barrierTest('editAll', $currentUser)) { |
|
62 | - throw new AccessDeniedException($this->getSecurityManager(), $this->getDomainAccessManager()); |
|
63 | - } |
|
64 | - |
|
65 | - if (WebRequest::wasPosted()) { |
|
66 | - $this->validateCSRFToken(); |
|
67 | - |
|
68 | - $domain = new Domain(); |
|
69 | - $domain->setDatabase($database); |
|
70 | - |
|
71 | - $domain->setShortName(WebRequest::postString('shortName')); |
|
72 | - $domain->setLongName(WebRequest::postString('longName')); |
|
73 | - $domain->setWikiArticlePath(WebRequest::postString('articlePath')); |
|
74 | - $domain->setWikiApiPath(WebRequest::postString('apiPath')); |
|
75 | - $domain->setEnabled(WebRequest::postBoolean('enabled')); |
|
76 | - $domain->setDefaultLanguage(WebRequest::postString('defaultLanguage')); |
|
77 | - $domain->setDefaultClose(null); |
|
78 | - $domain->setEmailReplyAddress(WebRequest::postString('emailReplyTo')); |
|
79 | - $domain->setNotificationTarget(WebRequest::postString('notificationTarget')); |
|
80 | - $domain->setLocalDocumentation(WebRequest::postString('localDocumentation')); |
|
81 | - |
|
82 | - $domain->save(); |
|
83 | - |
|
84 | - Logger::domainCreated($database, $domain); |
|
85 | - $this->redirect('domainManagement'); |
|
86 | - } |
|
87 | - else { |
|
88 | - $this->assignCSRFToken(); |
|
89 | - |
|
90 | - $this->assign('shortName', ''); |
|
91 | - $this->assign('longName', ''); |
|
92 | - $this->assign('articlePath', ''); |
|
93 | - $this->assign('apiPath', ''); |
|
94 | - $this->assign('enabled', false); |
|
95 | - $this->assign('defaultLanguage', 'en'); |
|
96 | - $this->assign('emailReplyTo', ''); |
|
97 | - $this->assign('notificationTarget', ''); |
|
98 | - $this->assign('localDocumentation', ''); |
|
99 | - |
|
100 | - $this->assign('createMode', true); |
|
101 | - $this->assign('canEditAll', true); |
|
102 | - |
|
103 | - $this->setTemplate('domain-management/edit.tpl'); |
|
104 | - } |
|
105 | - } |
|
106 | - |
|
107 | - protected function edit() |
|
108 | - { |
|
109 | - $this->setHtmlTitle('Domain Management'); |
|
110 | - $database = $this->getDatabase(); |
|
111 | - $currentUser = User::getCurrent($database); |
|
112 | - |
|
113 | - $canEditAll = $this->barrierTest('editAll', $currentUser); |
|
114 | - |
|
115 | - /** @var Domain $domain */ |
|
116 | - $domain = Domain::getById(WebRequest::getInt('domain'), $database); |
|
117 | - |
|
118 | - if (WebRequest::wasPosted()) { |
|
119 | - $this->validateCSRFToken(); |
|
120 | - |
|
121 | - $domain->setLongName(WebRequest::postString('longName')); |
|
122 | - $domain->setDefaultLanguage(WebRequest::postString('defaultLanguage')); |
|
123 | - $domain->setLocalDocumentation(WebRequest::postString('localDocumentation')); |
|
124 | - |
|
125 | - /** @var EmailTemplate|false $template */ |
|
126 | - $template = EmailTemplate::getById(WebRequest::postInt('defaultClose'), $database); |
|
127 | - if ($template !== false |
|
128 | - && $template->getActive() |
|
129 | - && $template->getPreloadOnly() === false |
|
130 | - && $template->getDefaultAction() === EmailTemplate::ACTION_CREATED) { |
|
131 | - $domain->setDefaultClose(WebRequest::postInt('defaultClose')); |
|
132 | - } |
|
133 | - else { |
|
134 | - SessionAlert::warning("Chosen email template is not valid for use as the default creation template"); |
|
135 | - } |
|
136 | - |
|
137 | - if ($canEditAll) { |
|
138 | - $domain->setWikiArticlePath(WebRequest::postString('articlePath')); |
|
139 | - $domain->setWikiApiPath(WebRequest::postString('apiPath')); |
|
140 | - $domain->setEnabled(WebRequest::postBoolean('enabled')); |
|
141 | - $domain->setEmailReplyAddress(WebRequest::postString('emailReplyTo')); |
|
142 | - $domain->setNotificationTarget(WebRequest::postString('notificationTarget')); |
|
143 | - } |
|
144 | - |
|
145 | - $domain->save(); |
|
146 | - |
|
147 | - Logger::domainEdited($database, $domain); |
|
148 | - $this->redirect('domainManagement'); |
|
149 | - } |
|
150 | - else { |
|
151 | - $this->assignCSRFToken(); |
|
152 | - |
|
153 | - $templates = EmailTemplate::getActiveNonpreloadTemplates( |
|
154 | - EmailTemplate::ACTION_CREATED, |
|
155 | - $database, |
|
156 | - $domain->getId()); |
|
157 | - |
|
158 | - $this->assign('closeTemplates', $templates); |
|
159 | - |
|
160 | - $this->assign('shortName', $domain->getShortName()); |
|
161 | - $this->assign('longName', $domain->getLongName()); |
|
162 | - $this->assign('articlePath', $domain->getWikiArticlePath()); |
|
163 | - $this->assign('apiPath', $domain->getWikiApiPath()); |
|
164 | - $this->assign('enabled', $domain->isEnabled()); |
|
165 | - $this->assign('defaultClose', $domain->getDefaultClose()); |
|
166 | - $this->assign('defaultLanguage', $domain->getDefaultLanguage()); |
|
167 | - $this->assign('emailReplyTo', $domain->getEmailReplyAddress()); |
|
168 | - $this->assign('notificationTarget', $domain->getNotificationTarget()); |
|
169 | - $this->assign('localDocumentation', $domain->getLocalDocumentation()); |
|
170 | - |
|
171 | - |
|
172 | - $this->assign('createMode', false); |
|
173 | - $this->assign('canEditAll', $canEditAll); |
|
174 | - |
|
175 | - $this->setTemplate('domain-management/edit.tpl'); |
|
176 | - } |
|
177 | - } |
|
22 | + protected function main() |
|
23 | + { |
|
24 | + $this->setHtmlTitle('Domain Management'); |
|
25 | + |
|
26 | + $database = $this->getDatabase(); |
|
27 | + $currentUser = User::getCurrent($database); |
|
28 | + |
|
29 | + /** @var Domain[] $domains */ |
|
30 | + $domains = Domain::getAll($database); |
|
31 | + |
|
32 | + $templates = []; |
|
33 | + foreach ($domains as $domain) { |
|
34 | + if ($domain->getDefaultClose() !== null) { |
|
35 | + $templates[$domain->getDefaultClose()] = EmailTemplate::getById($domain->getDefaultClose(), $database); |
|
36 | + } |
|
37 | + } |
|
38 | + |
|
39 | + $canEdit = $this->barrierTest('edit', $currentUser); |
|
40 | + $canEditAll = $this->barrierTest('editAll', $currentUser); |
|
41 | + $canCreate = $this->barrierTest('create', $currentUser); |
|
42 | + $this->assign('canEdit', $canEdit); |
|
43 | + $this->assign('canEditAll', $canEditAll); |
|
44 | + $this->assign('canCreate', $canCreate); |
|
45 | + |
|
46 | + $this->assign('domains', $domains); |
|
47 | + $this->assign('closeTemplates', $templates); |
|
48 | + $this->assign('currentDomain', Domain::getCurrent($database)); |
|
49 | + $this->setTemplate('domain-management/main.tpl'); |
|
50 | + } |
|
51 | + |
|
52 | + protected function create() |
|
53 | + { |
|
54 | + $this->setHtmlTitle('Domain Management'); |
|
55 | + $database = $this->getDatabase(); |
|
56 | + $currentUser = User::getCurrent($database); |
|
57 | + |
|
58 | + // quickly check the user is allowed to edit all fields. If not, then they shouldn't be allowed to create |
|
59 | + // new domains either. With any luck, a competent developer would never grant create without editAll to a role |
|
60 | + // anyway, so this will never be hit. |
|
61 | + if (!$this->barrierTest('editAll', $currentUser)) { |
|
62 | + throw new AccessDeniedException($this->getSecurityManager(), $this->getDomainAccessManager()); |
|
63 | + } |
|
64 | + |
|
65 | + if (WebRequest::wasPosted()) { |
|
66 | + $this->validateCSRFToken(); |
|
67 | + |
|
68 | + $domain = new Domain(); |
|
69 | + $domain->setDatabase($database); |
|
70 | + |
|
71 | + $domain->setShortName(WebRequest::postString('shortName')); |
|
72 | + $domain->setLongName(WebRequest::postString('longName')); |
|
73 | + $domain->setWikiArticlePath(WebRequest::postString('articlePath')); |
|
74 | + $domain->setWikiApiPath(WebRequest::postString('apiPath')); |
|
75 | + $domain->setEnabled(WebRequest::postBoolean('enabled')); |
|
76 | + $domain->setDefaultLanguage(WebRequest::postString('defaultLanguage')); |
|
77 | + $domain->setDefaultClose(null); |
|
78 | + $domain->setEmailReplyAddress(WebRequest::postString('emailReplyTo')); |
|
79 | + $domain->setNotificationTarget(WebRequest::postString('notificationTarget')); |
|
80 | + $domain->setLocalDocumentation(WebRequest::postString('localDocumentation')); |
|
81 | + |
|
82 | + $domain->save(); |
|
83 | + |
|
84 | + Logger::domainCreated($database, $domain); |
|
85 | + $this->redirect('domainManagement'); |
|
86 | + } |
|
87 | + else { |
|
88 | + $this->assignCSRFToken(); |
|
89 | + |
|
90 | + $this->assign('shortName', ''); |
|
91 | + $this->assign('longName', ''); |
|
92 | + $this->assign('articlePath', ''); |
|
93 | + $this->assign('apiPath', ''); |
|
94 | + $this->assign('enabled', false); |
|
95 | + $this->assign('defaultLanguage', 'en'); |
|
96 | + $this->assign('emailReplyTo', ''); |
|
97 | + $this->assign('notificationTarget', ''); |
|
98 | + $this->assign('localDocumentation', ''); |
|
99 | + |
|
100 | + $this->assign('createMode', true); |
|
101 | + $this->assign('canEditAll', true); |
|
102 | + |
|
103 | + $this->setTemplate('domain-management/edit.tpl'); |
|
104 | + } |
|
105 | + } |
|
106 | + |
|
107 | + protected function edit() |
|
108 | + { |
|
109 | + $this->setHtmlTitle('Domain Management'); |
|
110 | + $database = $this->getDatabase(); |
|
111 | + $currentUser = User::getCurrent($database); |
|
112 | + |
|
113 | + $canEditAll = $this->barrierTest('editAll', $currentUser); |
|
114 | + |
|
115 | + /** @var Domain $domain */ |
|
116 | + $domain = Domain::getById(WebRequest::getInt('domain'), $database); |
|
117 | + |
|
118 | + if (WebRequest::wasPosted()) { |
|
119 | + $this->validateCSRFToken(); |
|
120 | + |
|
121 | + $domain->setLongName(WebRequest::postString('longName')); |
|
122 | + $domain->setDefaultLanguage(WebRequest::postString('defaultLanguage')); |
|
123 | + $domain->setLocalDocumentation(WebRequest::postString('localDocumentation')); |
|
124 | + |
|
125 | + /** @var EmailTemplate|false $template */ |
|
126 | + $template = EmailTemplate::getById(WebRequest::postInt('defaultClose'), $database); |
|
127 | + if ($template !== false |
|
128 | + && $template->getActive() |
|
129 | + && $template->getPreloadOnly() === false |
|
130 | + && $template->getDefaultAction() === EmailTemplate::ACTION_CREATED) { |
|
131 | + $domain->setDefaultClose(WebRequest::postInt('defaultClose')); |
|
132 | + } |
|
133 | + else { |
|
134 | + SessionAlert::warning("Chosen email template is not valid for use as the default creation template"); |
|
135 | + } |
|
136 | + |
|
137 | + if ($canEditAll) { |
|
138 | + $domain->setWikiArticlePath(WebRequest::postString('articlePath')); |
|
139 | + $domain->setWikiApiPath(WebRequest::postString('apiPath')); |
|
140 | + $domain->setEnabled(WebRequest::postBoolean('enabled')); |
|
141 | + $domain->setEmailReplyAddress(WebRequest::postString('emailReplyTo')); |
|
142 | + $domain->setNotificationTarget(WebRequest::postString('notificationTarget')); |
|
143 | + } |
|
144 | + |
|
145 | + $domain->save(); |
|
146 | + |
|
147 | + Logger::domainEdited($database, $domain); |
|
148 | + $this->redirect('domainManagement'); |
|
149 | + } |
|
150 | + else { |
|
151 | + $this->assignCSRFToken(); |
|
152 | + |
|
153 | + $templates = EmailTemplate::getActiveNonpreloadTemplates( |
|
154 | + EmailTemplate::ACTION_CREATED, |
|
155 | + $database, |
|
156 | + $domain->getId()); |
|
157 | + |
|
158 | + $this->assign('closeTemplates', $templates); |
|
159 | + |
|
160 | + $this->assign('shortName', $domain->getShortName()); |
|
161 | + $this->assign('longName', $domain->getLongName()); |
|
162 | + $this->assign('articlePath', $domain->getWikiArticlePath()); |
|
163 | + $this->assign('apiPath', $domain->getWikiApiPath()); |
|
164 | + $this->assign('enabled', $domain->isEnabled()); |
|
165 | + $this->assign('defaultClose', $domain->getDefaultClose()); |
|
166 | + $this->assign('defaultLanguage', $domain->getDefaultLanguage()); |
|
167 | + $this->assign('emailReplyTo', $domain->getEmailReplyAddress()); |
|
168 | + $this->assign('notificationTarget', $domain->getNotificationTarget()); |
|
169 | + $this->assign('localDocumentation', $domain->getLocalDocumentation()); |
|
170 | + |
|
171 | + |
|
172 | + $this->assign('createMode', false); |
|
173 | + $this->assign('canEditAll', $canEditAll); |
|
174 | + |
|
175 | + $this->setTemplate('domain-management/edit.tpl'); |
|
176 | + } |
|
177 | + } |
|
178 | 178 | } |
@@ -83,8 +83,7 @@ discard block |
||
83 | 83 | |
84 | 84 | Logger::domainCreated($database, $domain); |
85 | 85 | $this->redirect('domainManagement'); |
86 | - } |
|
87 | - else { |
|
86 | + } else { |
|
88 | 87 | $this->assignCSRFToken(); |
89 | 88 | |
90 | 89 | $this->assign('shortName', ''); |
@@ -129,8 +128,7 @@ discard block |
||
129 | 128 | && $template->getPreloadOnly() === false |
130 | 129 | && $template->getDefaultAction() === EmailTemplate::ACTION_CREATED) { |
131 | 130 | $domain->setDefaultClose(WebRequest::postInt('defaultClose')); |
132 | - } |
|
133 | - else { |
|
131 | + } else { |
|
134 | 132 | SessionAlert::warning("Chosen email template is not valid for use as the default creation template"); |
135 | 133 | } |
136 | 134 | |
@@ -146,8 +144,7 @@ discard block |
||
146 | 144 | |
147 | 145 | Logger::domainEdited($database, $domain); |
148 | 146 | $this->redirect('domainManagement'); |
149 | - } |
|
150 | - else { |
|
147 | + } else { |
|
151 | 148 | $this->assignCSRFToken(); |
152 | 149 | |
153 | 150 | $templates = EmailTemplate::getActiveNonpreloadTemplates( |
@@ -16,43 +16,43 @@ |
||
16 | 16 | |
17 | 17 | class PageDomainSwitch extends InternalPageBase |
18 | 18 | { |
19 | - /** |
|
20 | - * @inheritDoc |
|
21 | - */ |
|
22 | - protected function main() |
|
23 | - { |
|
24 | - if (!WebRequest::wasPosted()) { |
|
25 | - $this->redirect('/'); |
|
19 | + /** |
|
20 | + * @inheritDoc |
|
21 | + */ |
|
22 | + protected function main() |
|
23 | + { |
|
24 | + if (!WebRequest::wasPosted()) { |
|
25 | + $this->redirect('/'); |
|
26 | 26 | |
27 | - return; |
|
28 | - } |
|
27 | + return; |
|
28 | + } |
|
29 | 29 | |
30 | - $database = $this->getDatabase(); |
|
31 | - $currentUser = User::getCurrent($database); |
|
30 | + $database = $this->getDatabase(); |
|
31 | + $currentUser = User::getCurrent($database); |
|
32 | 32 | |
33 | - /** @var Domain|false $newDomain */ |
|
34 | - $newDomain = Domain::getById(WebRequest::postInt('newdomain'), $database); |
|
33 | + /** @var Domain|false $newDomain */ |
|
34 | + $newDomain = Domain::getById(WebRequest::postInt('newdomain'), $database); |
|
35 | 35 | |
36 | - if ($newDomain === false) { |
|
37 | - $this->redirect('/'); |
|
36 | + if ($newDomain === false) { |
|
37 | + $this->redirect('/'); |
|
38 | 38 | |
39 | - return; |
|
40 | - } |
|
39 | + return; |
|
40 | + } |
|
41 | 41 | |
42 | - $this->getDomainAccessManager()->switchDomain($currentUser, $newDomain); |
|
42 | + $this->getDomainAccessManager()->switchDomain($currentUser, $newDomain); |
|
43 | 43 | |
44 | - // try to stay on the same page if possible. |
|
45 | - // This only checks basic ACLs and not domain privileges, so this may still result in a 403. |
|
44 | + // try to stay on the same page if possible. |
|
45 | + // This only checks basic ACLs and not domain privileges, so this may still result in a 403. |
|
46 | 46 | |
47 | - $referrer = WebRequest::postString('referrer'); |
|
48 | - $priorPath = explode('/', $referrer); |
|
49 | - $router = new RequestRouter(); |
|
50 | - $route = $router->getRouteFromPath($priorPath); |
|
47 | + $referrer = WebRequest::postString('referrer'); |
|
48 | + $priorPath = explode('/', $referrer); |
|
49 | + $router = new RequestRouter(); |
|
50 | + $route = $router->getRouteFromPath($priorPath); |
|
51 | 51 | |
52 | - if ($this->barrierTest($route[1], $currentUser, $route[0])) { |
|
53 | - $this->redirect('/' . $referrer); |
|
54 | - } else { |
|
55 | - $this->redirect('/'); |
|
56 | - } |
|
57 | - } |
|
52 | + if ($this->barrierTest($route[1], $currentUser, $route[0])) { |
|
53 | + $this->redirect('/' . $referrer); |
|
54 | + } else { |
|
55 | + $this->redirect('/'); |
|
56 | + } |
|
57 | + } |
|
58 | 58 | } |
59 | 59 | \ No newline at end of file |
@@ -20,199 +20,199 @@ |
||
20 | 20 | |
21 | 21 | class PageSearch extends PagedInternalPageBase |
22 | 22 | { |
23 | - use RequestListData; |
|
24 | - |
|
25 | - /** |
|
26 | - * Main function for this page, when no specific actions are called. |
|
27 | - */ |
|
28 | - protected function main() |
|
29 | - { |
|
30 | - $this->setHtmlTitle('Search'); |
|
31 | - |
|
32 | - $database = $this->getDatabase(); |
|
33 | - $currentUser = User::getCurrent($database); |
|
34 | - |
|
35 | - $this->assign('canSearchByComment', $this->barrierTest('byComment', $currentUser)); |
|
36 | - $this->assign('canSearchByEmail', $this->barrierTest('byEmail', $currentUser)); |
|
37 | - $this->assign('canSearchByIp', $this->barrierTest('byIp', $currentUser)); |
|
38 | - $this->assign('canSearchByName', $this->barrierTest('byName', $currentUser)); |
|
39 | - $this->assign('canSeeNonConfirmed', $this->barrierTest('allowNonConfirmed', $currentUser)); |
|
40 | - |
|
41 | - $this->setTemplate('search/main.tpl'); |
|
42 | - |
|
43 | - // Dual-mode page |
|
44 | - if (WebRequest::getString('type') !== null) { |
|
45 | - $searchType = WebRequest::getString('type'); |
|
46 | - $searchTerm = WebRequest::getString('term'); |
|
47 | - |
|
48 | - $excludeNonConfirmed = true; |
|
49 | - if ($this->barrierTest('allowNonConfirmed', $currentUser)) { |
|
50 | - $excludeNonConfirmed = WebRequest::getBoolean('excludeNonConfirmed'); |
|
51 | - } |
|
52 | - |
|
53 | - $formParameters = [ |
|
54 | - 'term' => $searchTerm, |
|
55 | - 'type' => $searchType, |
|
56 | - ]; |
|
57 | - |
|
58 | - if ($excludeNonConfirmed) { |
|
59 | - $formParameters['excludeNonConfirmed'] = true; |
|
60 | - } |
|
61 | - |
|
62 | - // FIXME: domains |
|
63 | - $requestSearch = RequestSearchHelper::get($database, 1); |
|
64 | - $this->setSearchHelper($requestSearch); |
|
65 | - $this->setupLimits(); |
|
66 | - |
|
67 | - $validationError = ""; |
|
68 | - if (!$this->validateSearchParameters($searchType, $searchTerm, $validationError)) { |
|
69 | - SessionAlert::error($validationError, "Search error"); |
|
70 | - |
|
71 | - $this->setupPageData(0, $formParameters); |
|
72 | - $this->assign('hasResultset', false); |
|
73 | - |
|
74 | - return; |
|
75 | - } |
|
76 | - |
|
77 | - // searchType known to be sane from the validate step above |
|
78 | - if (!$this->barrierTest('by' . ucfirst($searchType), User::getCurrent($this->getDatabase()))) { |
|
79 | - // only accessible by url munging, don't care about the UX |
|
80 | - throw new AccessDeniedException($this->getSecurityManager(), $this->getDomainAccessManager()); |
|
81 | - } |
|
82 | - |
|
83 | - if ($excludeNonConfirmed) { |
|
84 | - $requestSearch->withConfirmedEmail(); |
|
85 | - } |
|
86 | - |
|
87 | - switch ($searchType) { |
|
88 | - case 'name': |
|
89 | - $this->getNameSearchResults($requestSearch, $searchTerm); |
|
90 | - break; |
|
91 | - case 'email': |
|
92 | - $this->getEmailSearchResults($requestSearch, $searchTerm); |
|
93 | - break; |
|
94 | - case 'ip': |
|
95 | - $this->getIpSearchResults($requestSearch, $searchTerm); |
|
96 | - break; |
|
97 | - case 'comment': |
|
98 | - $this->getCommentSearchResults($requestSearch, $searchTerm); |
|
99 | - break; |
|
100 | - } |
|
101 | - |
|
102 | - /** @var Request[] $results */ |
|
103 | - $results = $requestSearch->getRecordCount($count)->fetch(); |
|
104 | - $this->setupPageData($count, $formParameters); |
|
105 | - |
|
106 | - // deal with results |
|
107 | - $this->assign('requests', $this->prepareRequestData($results)); |
|
108 | - $this->assign('resultCount', count($results)); |
|
109 | - $this->assign('hasResultset', true); |
|
110 | - |
|
111 | - list($defaultSort, $defaultSortDirection) = WebRequest::requestListDefaultSort(); |
|
112 | - $this->assign('defaultSort', $defaultSort); |
|
113 | - $this->assign('defaultSortDirection', $defaultSortDirection); |
|
114 | - } |
|
115 | - else { |
|
116 | - $this->assign('type', 'name'); |
|
117 | - $this->assign('hasResultset', false); |
|
118 | - $this->assign('limit', 50); |
|
119 | - $this->assign('excludeNonConfirmed', true); |
|
120 | - } |
|
121 | - } |
|
122 | - |
|
123 | - /** |
|
124 | - * Gets search results by name |
|
125 | - * |
|
126 | - * @param RequestSearchHelper $searchHelper |
|
127 | - * @param string $searchTerm |
|
128 | - */ |
|
129 | - private function getNameSearchResults(RequestSearchHelper $searchHelper, string $searchTerm) |
|
130 | - { |
|
131 | - $padded = '%' . $searchTerm . '%'; |
|
132 | - $searchHelper->byName($padded); |
|
133 | - } |
|
134 | - |
|
135 | - /** |
|
136 | - * Gets search results by comment |
|
137 | - * |
|
138 | - * @param RequestSearchHelper $searchHelper |
|
139 | - * @param string $searchTerm |
|
140 | - */ |
|
141 | - private function getCommentSearchResults(RequestSearchHelper $searchHelper, string $searchTerm) |
|
142 | - { |
|
143 | - $padded = '%' . $searchTerm . '%'; |
|
144 | - $searchHelper->byComment($padded); |
|
145 | - |
|
146 | - $currentUser = User::getCurrent($this->getDatabase()); |
|
147 | - $commentSecurity = ['requester', 'user']; |
|
148 | - |
|
149 | - if ($this->barrierTest('seeRestrictedComments', $currentUser, 'RequestData')) { |
|
150 | - $commentSecurity[] = 'admin'; |
|
151 | - } |
|
152 | - |
|
153 | - if ($this->barrierTest('seeCheckuserComments', $currentUser, 'RequestData')) { |
|
154 | - $commentSecurity[] = 'checkuser'; |
|
155 | - } |
|
156 | - |
|
157 | - $searchHelper->byCommentSecurity($commentSecurity); |
|
158 | - } |
|
159 | - |
|
160 | - /** |
|
161 | - * Gets search results by email |
|
162 | - * |
|
163 | - * @param RequestSearchHelper $searchHelper |
|
164 | - * @param string $searchTerm |
|
165 | - * |
|
166 | - * @throws ApplicationLogicException |
|
167 | - */ |
|
168 | - private function getEmailSearchResults(RequestSearchHelper $searchHelper, string $searchTerm) |
|
169 | - { |
|
170 | - if ($searchTerm === "@") { |
|
171 | - throw new ApplicationLogicException('The search term "@" is not valid for email address searches!'); |
|
172 | - } |
|
173 | - |
|
174 | - $padded = '%' . $searchTerm . '%'; |
|
175 | - |
|
176 | - $searchHelper->byEmailAddress($padded)->excludingPurgedData($this->getSiteConfiguration()); |
|
177 | - } |
|
178 | - |
|
179 | - /** |
|
180 | - * Gets search results by IP address or XFF IP address |
|
181 | - * |
|
182 | - * @param RequestSearchHelper $searchHelper |
|
183 | - * @param string $searchTerm |
|
184 | - */ |
|
185 | - private function getIpSearchResults(RequestSearchHelper $searchHelper, string $searchTerm) |
|
186 | - { |
|
187 | - $searchHelper |
|
188 | - ->byIp($searchTerm) |
|
189 | - ->excludingPurgedData($this->getSiteConfiguration()); |
|
190 | - } |
|
191 | - |
|
192 | - /** |
|
193 | - * @param string $searchType |
|
194 | - * @param string $searchTerm |
|
195 | - * |
|
196 | - * @param string $errorMessage |
|
197 | - * |
|
198 | - * @return bool true if parameters are valid |
|
199 | - */ |
|
200 | - protected function validateSearchParameters($searchType, $searchTerm, &$errorMessage) |
|
201 | - { |
|
202 | - if (!in_array($searchType, array('name', 'email', 'ip', 'comment'))) { |
|
203 | - $errorMessage = 'Unknown search type'; |
|
204 | - |
|
205 | - return false; |
|
206 | - } |
|
207 | - |
|
208 | - if ($searchTerm === '%' || $searchTerm === '' || $searchTerm === null) { |
|
209 | - $errorMessage = 'No search term specified entered'; |
|
210 | - |
|
211 | - return false; |
|
212 | - } |
|
213 | - |
|
214 | - $errorMessage = ""; |
|
215 | - |
|
216 | - return true; |
|
217 | - } |
|
23 | + use RequestListData; |
|
24 | + |
|
25 | + /** |
|
26 | + * Main function for this page, when no specific actions are called. |
|
27 | + */ |
|
28 | + protected function main() |
|
29 | + { |
|
30 | + $this->setHtmlTitle('Search'); |
|
31 | + |
|
32 | + $database = $this->getDatabase(); |
|
33 | + $currentUser = User::getCurrent($database); |
|
34 | + |
|
35 | + $this->assign('canSearchByComment', $this->barrierTest('byComment', $currentUser)); |
|
36 | + $this->assign('canSearchByEmail', $this->barrierTest('byEmail', $currentUser)); |
|
37 | + $this->assign('canSearchByIp', $this->barrierTest('byIp', $currentUser)); |
|
38 | + $this->assign('canSearchByName', $this->barrierTest('byName', $currentUser)); |
|
39 | + $this->assign('canSeeNonConfirmed', $this->barrierTest('allowNonConfirmed', $currentUser)); |
|
40 | + |
|
41 | + $this->setTemplate('search/main.tpl'); |
|
42 | + |
|
43 | + // Dual-mode page |
|
44 | + if (WebRequest::getString('type') !== null) { |
|
45 | + $searchType = WebRequest::getString('type'); |
|
46 | + $searchTerm = WebRequest::getString('term'); |
|
47 | + |
|
48 | + $excludeNonConfirmed = true; |
|
49 | + if ($this->barrierTest('allowNonConfirmed', $currentUser)) { |
|
50 | + $excludeNonConfirmed = WebRequest::getBoolean('excludeNonConfirmed'); |
|
51 | + } |
|
52 | + |
|
53 | + $formParameters = [ |
|
54 | + 'term' => $searchTerm, |
|
55 | + 'type' => $searchType, |
|
56 | + ]; |
|
57 | + |
|
58 | + if ($excludeNonConfirmed) { |
|
59 | + $formParameters['excludeNonConfirmed'] = true; |
|
60 | + } |
|
61 | + |
|
62 | + // FIXME: domains |
|
63 | + $requestSearch = RequestSearchHelper::get($database, 1); |
|
64 | + $this->setSearchHelper($requestSearch); |
|
65 | + $this->setupLimits(); |
|
66 | + |
|
67 | + $validationError = ""; |
|
68 | + if (!$this->validateSearchParameters($searchType, $searchTerm, $validationError)) { |
|
69 | + SessionAlert::error($validationError, "Search error"); |
|
70 | + |
|
71 | + $this->setupPageData(0, $formParameters); |
|
72 | + $this->assign('hasResultset', false); |
|
73 | + |
|
74 | + return; |
|
75 | + } |
|
76 | + |
|
77 | + // searchType known to be sane from the validate step above |
|
78 | + if (!$this->barrierTest('by' . ucfirst($searchType), User::getCurrent($this->getDatabase()))) { |
|
79 | + // only accessible by url munging, don't care about the UX |
|
80 | + throw new AccessDeniedException($this->getSecurityManager(), $this->getDomainAccessManager()); |
|
81 | + } |
|
82 | + |
|
83 | + if ($excludeNonConfirmed) { |
|
84 | + $requestSearch->withConfirmedEmail(); |
|
85 | + } |
|
86 | + |
|
87 | + switch ($searchType) { |
|
88 | + case 'name': |
|
89 | + $this->getNameSearchResults($requestSearch, $searchTerm); |
|
90 | + break; |
|
91 | + case 'email': |
|
92 | + $this->getEmailSearchResults($requestSearch, $searchTerm); |
|
93 | + break; |
|
94 | + case 'ip': |
|
95 | + $this->getIpSearchResults($requestSearch, $searchTerm); |
|
96 | + break; |
|
97 | + case 'comment': |
|
98 | + $this->getCommentSearchResults($requestSearch, $searchTerm); |
|
99 | + break; |
|
100 | + } |
|
101 | + |
|
102 | + /** @var Request[] $results */ |
|
103 | + $results = $requestSearch->getRecordCount($count)->fetch(); |
|
104 | + $this->setupPageData($count, $formParameters); |
|
105 | + |
|
106 | + // deal with results |
|
107 | + $this->assign('requests', $this->prepareRequestData($results)); |
|
108 | + $this->assign('resultCount', count($results)); |
|
109 | + $this->assign('hasResultset', true); |
|
110 | + |
|
111 | + list($defaultSort, $defaultSortDirection) = WebRequest::requestListDefaultSort(); |
|
112 | + $this->assign('defaultSort', $defaultSort); |
|
113 | + $this->assign('defaultSortDirection', $defaultSortDirection); |
|
114 | + } |
|
115 | + else { |
|
116 | + $this->assign('type', 'name'); |
|
117 | + $this->assign('hasResultset', false); |
|
118 | + $this->assign('limit', 50); |
|
119 | + $this->assign('excludeNonConfirmed', true); |
|
120 | + } |
|
121 | + } |
|
122 | + |
|
123 | + /** |
|
124 | + * Gets search results by name |
|
125 | + * |
|
126 | + * @param RequestSearchHelper $searchHelper |
|
127 | + * @param string $searchTerm |
|
128 | + */ |
|
129 | + private function getNameSearchResults(RequestSearchHelper $searchHelper, string $searchTerm) |
|
130 | + { |
|
131 | + $padded = '%' . $searchTerm . '%'; |
|
132 | + $searchHelper->byName($padded); |
|
133 | + } |
|
134 | + |
|
135 | + /** |
|
136 | + * Gets search results by comment |
|
137 | + * |
|
138 | + * @param RequestSearchHelper $searchHelper |
|
139 | + * @param string $searchTerm |
|
140 | + */ |
|
141 | + private function getCommentSearchResults(RequestSearchHelper $searchHelper, string $searchTerm) |
|
142 | + { |
|
143 | + $padded = '%' . $searchTerm . '%'; |
|
144 | + $searchHelper->byComment($padded); |
|
145 | + |
|
146 | + $currentUser = User::getCurrent($this->getDatabase()); |
|
147 | + $commentSecurity = ['requester', 'user']; |
|
148 | + |
|
149 | + if ($this->barrierTest('seeRestrictedComments', $currentUser, 'RequestData')) { |
|
150 | + $commentSecurity[] = 'admin'; |
|
151 | + } |
|
152 | + |
|
153 | + if ($this->barrierTest('seeCheckuserComments', $currentUser, 'RequestData')) { |
|
154 | + $commentSecurity[] = 'checkuser'; |
|
155 | + } |
|
156 | + |
|
157 | + $searchHelper->byCommentSecurity($commentSecurity); |
|
158 | + } |
|
159 | + |
|
160 | + /** |
|
161 | + * Gets search results by email |
|
162 | + * |
|
163 | + * @param RequestSearchHelper $searchHelper |
|
164 | + * @param string $searchTerm |
|
165 | + * |
|
166 | + * @throws ApplicationLogicException |
|
167 | + */ |
|
168 | + private function getEmailSearchResults(RequestSearchHelper $searchHelper, string $searchTerm) |
|
169 | + { |
|
170 | + if ($searchTerm === "@") { |
|
171 | + throw new ApplicationLogicException('The search term "@" is not valid for email address searches!'); |
|
172 | + } |
|
173 | + |
|
174 | + $padded = '%' . $searchTerm . '%'; |
|
175 | + |
|
176 | + $searchHelper->byEmailAddress($padded)->excludingPurgedData($this->getSiteConfiguration()); |
|
177 | + } |
|
178 | + |
|
179 | + /** |
|
180 | + * Gets search results by IP address or XFF IP address |
|
181 | + * |
|
182 | + * @param RequestSearchHelper $searchHelper |
|
183 | + * @param string $searchTerm |
|
184 | + */ |
|
185 | + private function getIpSearchResults(RequestSearchHelper $searchHelper, string $searchTerm) |
|
186 | + { |
|
187 | + $searchHelper |
|
188 | + ->byIp($searchTerm) |
|
189 | + ->excludingPurgedData($this->getSiteConfiguration()); |
|
190 | + } |
|
191 | + |
|
192 | + /** |
|
193 | + * @param string $searchType |
|
194 | + * @param string $searchTerm |
|
195 | + * |
|
196 | + * @param string $errorMessage |
|
197 | + * |
|
198 | + * @return bool true if parameters are valid |
|
199 | + */ |
|
200 | + protected function validateSearchParameters($searchType, $searchTerm, &$errorMessage) |
|
201 | + { |
|
202 | + if (!in_array($searchType, array('name', 'email', 'ip', 'comment'))) { |
|
203 | + $errorMessage = 'Unknown search type'; |
|
204 | + |
|
205 | + return false; |
|
206 | + } |
|
207 | + |
|
208 | + if ($searchTerm === '%' || $searchTerm === '' || $searchTerm === null) { |
|
209 | + $errorMessage = 'No search term specified entered'; |
|
210 | + |
|
211 | + return false; |
|
212 | + } |
|
213 | + |
|
214 | + $errorMessage = ""; |
|
215 | + |
|
216 | + return true; |
|
217 | + } |
|
218 | 218 | } |
@@ -111,8 +111,7 @@ |
||
111 | 111 | list($defaultSort, $defaultSortDirection) = WebRequest::requestListDefaultSort(); |
112 | 112 | $this->assign('defaultSort', $defaultSort); |
113 | 113 | $this->assign('defaultSortDirection', $defaultSortDirection); |
114 | - } |
|
115 | - else { |
|
114 | + } else { |
|
116 | 115 | $this->assign('type', 'name'); |
117 | 116 | $this->assign('hasResultset', false); |
118 | 117 | $this->assign('limit', 50); |
@@ -21,206 +21,206 @@ |
||
21 | 21 | |
22 | 22 | class PageEmailManagement extends InternalPageBase |
23 | 23 | { |
24 | - /** |
|
25 | - * Main function for this page, when no specific actions are called. |
|
26 | - * @return void |
|
27 | - */ |
|
28 | - protected function main() |
|
29 | - { |
|
30 | - $this->setHtmlTitle('Close Emails'); |
|
31 | - |
|
32 | - // Get all active email templates |
|
33 | - // FIXME: domains! |
|
34 | - $activeTemplates = EmailTemplate::getAllActiveTemplates(null, $this->getDatabase(), 1); |
|
35 | - $inactiveTemplates = EmailTemplate::getAllInactiveTemplates($this->getDatabase(), 1); |
|
36 | - |
|
37 | - $this->assign('activeTemplates', $activeTemplates); |
|
38 | - $this->assign('inactiveTemplates', $inactiveTemplates); |
|
39 | - |
|
40 | - $user = User::getCurrent($this->getDatabase()); |
|
41 | - $this->assign('canCreate', $this->barrierTest('create', $user)); |
|
42 | - $this->assign('canEdit', $this->barrierTest('edit', $user)); |
|
43 | - |
|
44 | - $this->setTemplate('email-management/main.tpl'); |
|
45 | - } |
|
46 | - |
|
47 | - protected function view() |
|
48 | - { |
|
49 | - $this->setHtmlTitle('Close Emails'); |
|
50 | - |
|
51 | - $database = $this->getDatabase(); |
|
52 | - $template = $this->getTemplate($database); |
|
53 | - |
|
54 | - // FIXME: domains! |
|
55 | - /** @var Domain $domain */ |
|
56 | - $domain = Domain::getById(1, $database); |
|
57 | - |
|
58 | - $this->assign('id', $template->getId()); |
|
59 | - $this->assign('emailTemplate', $template); |
|
60 | - $this->assign('createdid', $domain->getDefaultClose()); |
|
61 | - |
|
62 | - $this->setTemplate('email-management/view.tpl'); |
|
63 | - } |
|
64 | - |
|
65 | - /** |
|
66 | - * @param PdoDatabase $database |
|
67 | - * |
|
68 | - * @return EmailTemplate |
|
69 | - * @throws ApplicationLogicException |
|
70 | - */ |
|
71 | - protected function getTemplate(PdoDatabase $database) |
|
72 | - { |
|
73 | - $templateId = WebRequest::getInt('id'); |
|
74 | - if ($templateId === null) { |
|
75 | - throw new ApplicationLogicException('Template not specified'); |
|
76 | - } |
|
77 | - $template = EmailTemplate::getById($templateId, $database); |
|
78 | - if ($template === false || !is_a($template, EmailTemplate::class)) { |
|
79 | - throw new ApplicationLogicException('Template not found'); |
|
80 | - } |
|
81 | - |
|
82 | - return $template; |
|
83 | - } |
|
84 | - |
|
85 | - protected function edit() |
|
86 | - { |
|
87 | - $this->setHtmlTitle('Close Emails'); |
|
88 | - |
|
89 | - $database = $this->getDatabase(); |
|
90 | - $template = $this->getTemplate($database); |
|
91 | - |
|
92 | - // FIXME: domains! |
|
93 | - /** @var Domain $domain */ |
|
94 | - $domain = Domain::getById(1, $database); |
|
95 | - |
|
96 | - $createdId = $domain->getDefaultClose(); |
|
97 | - |
|
98 | - $requestQueues = RequestQueue::getEnabledQueues($database); |
|
99 | - |
|
100 | - if (WebRequest::wasPosted()) { |
|
101 | - $this->validateCSRFToken(); |
|
102 | - |
|
103 | - $this->modifyTemplateData($template, $template->getId() === $createdId); |
|
104 | - |
|
105 | - $other = EmailTemplate::getByName($template->getName(), $database, $domain->getId()); |
|
106 | - if ($other !== false && $other->getId() !== $template->getId()) { |
|
107 | - throw new ApplicationLogicException('A template with this name already exists'); |
|
108 | - } |
|
109 | - |
|
110 | - // optimistically lock on load of edit form |
|
111 | - $updateVersion = WebRequest::postInt('updateversion'); |
|
112 | - $template->setUpdateVersion($updateVersion); |
|
113 | - |
|
114 | - $template->save(); |
|
115 | - Logger::editedEmail($database, $template); |
|
116 | - $this->getNotificationHelper()->emailEdited($template); |
|
117 | - SessionAlert::success("Email template has been saved successfully."); |
|
118 | - |
|
119 | - $this->redirect('emailManagement'); |
|
120 | - } |
|
121 | - else { |
|
122 | - $this->assignCSRFToken(); |
|
123 | - $this->assign('id', $template->getId()); |
|
124 | - $this->assign('emailTemplate', $template); |
|
125 | - $this->assign('createdid', $createdId); |
|
126 | - $this->assign('requestQueues', $requestQueues); |
|
127 | - |
|
128 | - $this->setTemplate('email-management/edit.tpl'); |
|
129 | - } |
|
130 | - } |
|
131 | - |
|
132 | - /** |
|
133 | - * @throws ApplicationLogicException |
|
134 | - */ |
|
135 | - private function modifyTemplateData(EmailTemplate $template, bool $isDefaultTemplate): void |
|
136 | - { |
|
137 | - $name = WebRequest::postString('name'); |
|
138 | - if ($name === null || $name === '') { |
|
139 | - throw new ApplicationLogicException('Name not specified'); |
|
140 | - } |
|
141 | - |
|
142 | - $template->setName($name); |
|
143 | - |
|
144 | - $text = WebRequest::postString('text'); |
|
145 | - if ($text === null || $text === '') { |
|
146 | - throw new ApplicationLogicException('Text not specified'); |
|
147 | - } |
|
148 | - |
|
149 | - $template->setText($text); |
|
150 | - |
|
151 | - $jsquestion = WebRequest::postString('jsquestion'); |
|
152 | - if ($jsquestion === null || $jsquestion === '') { |
|
153 | - throw new ApplicationLogicException('JS question not specified'); |
|
154 | - } |
|
155 | - $template->setJsquestion($jsquestion); |
|
156 | - |
|
157 | - if ($isDefaultTemplate) { |
|
158 | - $template->setDefaultAction(EmailTemplate::ACTION_CREATED); |
|
159 | - $template->setActive(true); |
|
160 | - $template->setPreloadOnly(false); |
|
161 | - } |
|
162 | - else { |
|
163 | - $defaultAction = WebRequest::postString('defaultaction'); |
|
164 | - switch ($defaultAction) { |
|
165 | - case EmailTemplate::ACTION_NONE: |
|
166 | - case EmailTemplate::ACTION_CREATED: |
|
167 | - case EmailTemplate::ACTION_NOT_CREATED: |
|
168 | - $template->setDefaultAction($defaultAction); |
|
169 | - $template->setQueue(null); |
|
170 | - break; |
|
171 | - default: |
|
172 | - $template->setDefaultAction(EmailTemplate::ACTION_DEFER); |
|
173 | - // FIXME: domains! |
|
174 | - $queue = RequestQueue::getByApiName($this->getDatabase(), $defaultAction, 1); |
|
175 | - $template->setQueue($queue->getId()); |
|
176 | - break; |
|
177 | - } |
|
178 | - |
|
179 | - $template->setActive(WebRequest::postBoolean('active')); |
|
180 | - $template->setPreloadOnly(WebRequest::postBoolean('preloadonly')); |
|
181 | - } |
|
182 | - } |
|
183 | - |
|
184 | - protected function create() |
|
185 | - { |
|
186 | - $this->setHtmlTitle('Close Emails'); |
|
187 | - |
|
188 | - $database = $this->getDatabase(); |
|
189 | - |
|
190 | - $requestQueues = RequestQueue::getEnabledQueues($database); |
|
191 | - |
|
192 | - if (WebRequest::wasPosted()) { |
|
193 | - $this->validateCSRFToken(); |
|
194 | - $template = new EmailTemplate(); |
|
195 | - $template->setDatabase($database); |
|
196 | - |
|
197 | - // FIXME: domains! |
|
198 | - $template->setDomain(1); |
|
199 | - |
|
200 | - $this->modifyTemplateData($template, false); |
|
201 | - |
|
202 | - $other = EmailTemplate::getByName($template->getName(), $database, $template->getDomain()); |
|
203 | - if ($other !== false) { |
|
204 | - throw new ApplicationLogicException('A template with this name already exists'); |
|
205 | - } |
|
206 | - |
|
207 | - $template->save(); |
|
208 | - |
|
209 | - Logger::createEmail($database, $template); |
|
210 | - $this->getNotificationHelper()->emailCreated($template); |
|
211 | - |
|
212 | - SessionAlert::success("Email template has been saved successfully."); |
|
213 | - |
|
214 | - $this->redirect('emailManagement'); |
|
215 | - } |
|
216 | - else { |
|
217 | - $this->assignCSRFToken(); |
|
218 | - $this->assign('id', -1); |
|
219 | - $this->assign('emailTemplate', new EmailTemplate()); |
|
220 | - $this->assign('createdid', -2); |
|
221 | - |
|
222 | - $this->assign('requestQueues', $requestQueues); |
|
223 | - $this->setTemplate('email-management/edit.tpl'); |
|
224 | - } |
|
225 | - } |
|
24 | + /** |
|
25 | + * Main function for this page, when no specific actions are called. |
|
26 | + * @return void |
|
27 | + */ |
|
28 | + protected function main() |
|
29 | + { |
|
30 | + $this->setHtmlTitle('Close Emails'); |
|
31 | + |
|
32 | + // Get all active email templates |
|
33 | + // FIXME: domains! |
|
34 | + $activeTemplates = EmailTemplate::getAllActiveTemplates(null, $this->getDatabase(), 1); |
|
35 | + $inactiveTemplates = EmailTemplate::getAllInactiveTemplates($this->getDatabase(), 1); |
|
36 | + |
|
37 | + $this->assign('activeTemplates', $activeTemplates); |
|
38 | + $this->assign('inactiveTemplates', $inactiveTemplates); |
|
39 | + |
|
40 | + $user = User::getCurrent($this->getDatabase()); |
|
41 | + $this->assign('canCreate', $this->barrierTest('create', $user)); |
|
42 | + $this->assign('canEdit', $this->barrierTest('edit', $user)); |
|
43 | + |
|
44 | + $this->setTemplate('email-management/main.tpl'); |
|
45 | + } |
|
46 | + |
|
47 | + protected function view() |
|
48 | + { |
|
49 | + $this->setHtmlTitle('Close Emails'); |
|
50 | + |
|
51 | + $database = $this->getDatabase(); |
|
52 | + $template = $this->getTemplate($database); |
|
53 | + |
|
54 | + // FIXME: domains! |
|
55 | + /** @var Domain $domain */ |
|
56 | + $domain = Domain::getById(1, $database); |
|
57 | + |
|
58 | + $this->assign('id', $template->getId()); |
|
59 | + $this->assign('emailTemplate', $template); |
|
60 | + $this->assign('createdid', $domain->getDefaultClose()); |
|
61 | + |
|
62 | + $this->setTemplate('email-management/view.tpl'); |
|
63 | + } |
|
64 | + |
|
65 | + /** |
|
66 | + * @param PdoDatabase $database |
|
67 | + * |
|
68 | + * @return EmailTemplate |
|
69 | + * @throws ApplicationLogicException |
|
70 | + */ |
|
71 | + protected function getTemplate(PdoDatabase $database) |
|
72 | + { |
|
73 | + $templateId = WebRequest::getInt('id'); |
|
74 | + if ($templateId === null) { |
|
75 | + throw new ApplicationLogicException('Template not specified'); |
|
76 | + } |
|
77 | + $template = EmailTemplate::getById($templateId, $database); |
|
78 | + if ($template === false || !is_a($template, EmailTemplate::class)) { |
|
79 | + throw new ApplicationLogicException('Template not found'); |
|
80 | + } |
|
81 | + |
|
82 | + return $template; |
|
83 | + } |
|
84 | + |
|
85 | + protected function edit() |
|
86 | + { |
|
87 | + $this->setHtmlTitle('Close Emails'); |
|
88 | + |
|
89 | + $database = $this->getDatabase(); |
|
90 | + $template = $this->getTemplate($database); |
|
91 | + |
|
92 | + // FIXME: domains! |
|
93 | + /** @var Domain $domain */ |
|
94 | + $domain = Domain::getById(1, $database); |
|
95 | + |
|
96 | + $createdId = $domain->getDefaultClose(); |
|
97 | + |
|
98 | + $requestQueues = RequestQueue::getEnabledQueues($database); |
|
99 | + |
|
100 | + if (WebRequest::wasPosted()) { |
|
101 | + $this->validateCSRFToken(); |
|
102 | + |
|
103 | + $this->modifyTemplateData($template, $template->getId() === $createdId); |
|
104 | + |
|
105 | + $other = EmailTemplate::getByName($template->getName(), $database, $domain->getId()); |
|
106 | + if ($other !== false && $other->getId() !== $template->getId()) { |
|
107 | + throw new ApplicationLogicException('A template with this name already exists'); |
|
108 | + } |
|
109 | + |
|
110 | + // optimistically lock on load of edit form |
|
111 | + $updateVersion = WebRequest::postInt('updateversion'); |
|
112 | + $template->setUpdateVersion($updateVersion); |
|
113 | + |
|
114 | + $template->save(); |
|
115 | + Logger::editedEmail($database, $template); |
|
116 | + $this->getNotificationHelper()->emailEdited($template); |
|
117 | + SessionAlert::success("Email template has been saved successfully."); |
|
118 | + |
|
119 | + $this->redirect('emailManagement'); |
|
120 | + } |
|
121 | + else { |
|
122 | + $this->assignCSRFToken(); |
|
123 | + $this->assign('id', $template->getId()); |
|
124 | + $this->assign('emailTemplate', $template); |
|
125 | + $this->assign('createdid', $createdId); |
|
126 | + $this->assign('requestQueues', $requestQueues); |
|
127 | + |
|
128 | + $this->setTemplate('email-management/edit.tpl'); |
|
129 | + } |
|
130 | + } |
|
131 | + |
|
132 | + /** |
|
133 | + * @throws ApplicationLogicException |
|
134 | + */ |
|
135 | + private function modifyTemplateData(EmailTemplate $template, bool $isDefaultTemplate): void |
|
136 | + { |
|
137 | + $name = WebRequest::postString('name'); |
|
138 | + if ($name === null || $name === '') { |
|
139 | + throw new ApplicationLogicException('Name not specified'); |
|
140 | + } |
|
141 | + |
|
142 | + $template->setName($name); |
|
143 | + |
|
144 | + $text = WebRequest::postString('text'); |
|
145 | + if ($text === null || $text === '') { |
|
146 | + throw new ApplicationLogicException('Text not specified'); |
|
147 | + } |
|
148 | + |
|
149 | + $template->setText($text); |
|
150 | + |
|
151 | + $jsquestion = WebRequest::postString('jsquestion'); |
|
152 | + if ($jsquestion === null || $jsquestion === '') { |
|
153 | + throw new ApplicationLogicException('JS question not specified'); |
|
154 | + } |
|
155 | + $template->setJsquestion($jsquestion); |
|
156 | + |
|
157 | + if ($isDefaultTemplate) { |
|
158 | + $template->setDefaultAction(EmailTemplate::ACTION_CREATED); |
|
159 | + $template->setActive(true); |
|
160 | + $template->setPreloadOnly(false); |
|
161 | + } |
|
162 | + else { |
|
163 | + $defaultAction = WebRequest::postString('defaultaction'); |
|
164 | + switch ($defaultAction) { |
|
165 | + case EmailTemplate::ACTION_NONE: |
|
166 | + case EmailTemplate::ACTION_CREATED: |
|
167 | + case EmailTemplate::ACTION_NOT_CREATED: |
|
168 | + $template->setDefaultAction($defaultAction); |
|
169 | + $template->setQueue(null); |
|
170 | + break; |
|
171 | + default: |
|
172 | + $template->setDefaultAction(EmailTemplate::ACTION_DEFER); |
|
173 | + // FIXME: domains! |
|
174 | + $queue = RequestQueue::getByApiName($this->getDatabase(), $defaultAction, 1); |
|
175 | + $template->setQueue($queue->getId()); |
|
176 | + break; |
|
177 | + } |
|
178 | + |
|
179 | + $template->setActive(WebRequest::postBoolean('active')); |
|
180 | + $template->setPreloadOnly(WebRequest::postBoolean('preloadonly')); |
|
181 | + } |
|
182 | + } |
|
183 | + |
|
184 | + protected function create() |
|
185 | + { |
|
186 | + $this->setHtmlTitle('Close Emails'); |
|
187 | + |
|
188 | + $database = $this->getDatabase(); |
|
189 | + |
|
190 | + $requestQueues = RequestQueue::getEnabledQueues($database); |
|
191 | + |
|
192 | + if (WebRequest::wasPosted()) { |
|
193 | + $this->validateCSRFToken(); |
|
194 | + $template = new EmailTemplate(); |
|
195 | + $template->setDatabase($database); |
|
196 | + |
|
197 | + // FIXME: domains! |
|
198 | + $template->setDomain(1); |
|
199 | + |
|
200 | + $this->modifyTemplateData($template, false); |
|
201 | + |
|
202 | + $other = EmailTemplate::getByName($template->getName(), $database, $template->getDomain()); |
|
203 | + if ($other !== false) { |
|
204 | + throw new ApplicationLogicException('A template with this name already exists'); |
|
205 | + } |
|
206 | + |
|
207 | + $template->save(); |
|
208 | + |
|
209 | + Logger::createEmail($database, $template); |
|
210 | + $this->getNotificationHelper()->emailCreated($template); |
|
211 | + |
|
212 | + SessionAlert::success("Email template has been saved successfully."); |
|
213 | + |
|
214 | + $this->redirect('emailManagement'); |
|
215 | + } |
|
216 | + else { |
|
217 | + $this->assignCSRFToken(); |
|
218 | + $this->assign('id', -1); |
|
219 | + $this->assign('emailTemplate', new EmailTemplate()); |
|
220 | + $this->assign('createdid', -2); |
|
221 | + |
|
222 | + $this->assign('requestQueues', $requestQueues); |
|
223 | + $this->setTemplate('email-management/edit.tpl'); |
|
224 | + } |
|
225 | + } |
|
226 | 226 | } |
@@ -117,8 +117,7 @@ discard block |
||
117 | 117 | SessionAlert::success("Email template has been saved successfully."); |
118 | 118 | |
119 | 119 | $this->redirect('emailManagement'); |
120 | - } |
|
121 | - else { |
|
120 | + } else { |
|
122 | 121 | $this->assignCSRFToken(); |
123 | 122 | $this->assign('id', $template->getId()); |
124 | 123 | $this->assign('emailTemplate', $template); |
@@ -158,8 +157,7 @@ discard block |
||
158 | 157 | $template->setDefaultAction(EmailTemplate::ACTION_CREATED); |
159 | 158 | $template->setActive(true); |
160 | 159 | $template->setPreloadOnly(false); |
161 | - } |
|
162 | - else { |
|
160 | + } else { |
|
163 | 161 | $defaultAction = WebRequest::postString('defaultaction'); |
164 | 162 | switch ($defaultAction) { |
165 | 163 | case EmailTemplate::ACTION_NONE: |
@@ -212,8 +210,7 @@ discard block |
||
212 | 210 | SessionAlert::success("Email template has been saved successfully."); |
213 | 211 | |
214 | 212 | $this->redirect('emailManagement'); |
215 | - } |
|
216 | - else { |
|
213 | + } else { |
|
217 | 214 | $this->assignCSRFToken(); |
218 | 215 | $this->assign('id', -1); |
219 | 216 | $this->assign('emailTemplate', new EmailTemplate()); |
@@ -18,191 +18,191 @@ |
||
18 | 18 | |
19 | 19 | class PageQueueManagement extends InternalPageBase |
20 | 20 | { |
21 | - /** @var RequestQueueHelper */ |
|
22 | - private $helper; |
|
23 | - |
|
24 | - public function __construct() |
|
25 | - { |
|
26 | - $this->helper = new RequestQueueHelper(); |
|
27 | - } |
|
28 | - |
|
29 | - protected function main() |
|
30 | - { |
|
31 | - $this->setHtmlTitle('Request Queue Management'); |
|
32 | - |
|
33 | - $database = $this->getDatabase(); |
|
34 | - $queues = RequestQueue::getAllQueues($database); |
|
35 | - |
|
36 | - $this->assign('queues', $queues); |
|
37 | - |
|
38 | - $user = User::getCurrent($database); |
|
39 | - $this->assign('canCreate', $this->barrierTest('create', $user)); |
|
40 | - $this->assign('canEdit', $this->barrierTest('edit', $user)); |
|
41 | - |
|
42 | - $this->setTemplate('queue-management/main.tpl'); |
|
43 | - } |
|
44 | - |
|
45 | - protected function create() |
|
46 | - { |
|
47 | - if (WebRequest::wasPosted()) { |
|
48 | - $this->validateCSRFToken(); |
|
49 | - $database = $this->getDatabase(); |
|
50 | - |
|
51 | - $queue = new RequestQueue(); |
|
52 | - |
|
53 | - $queue->setDatabase($database); |
|
54 | - $queue->setDomain(1); // FIXME: domain |
|
55 | - |
|
56 | - $queue->setHeader(WebRequest::postString('header')); |
|
57 | - $queue->setDisplayName(WebRequest::postString('displayName')); |
|
58 | - $queue->setApiName(WebRequest::postString('apiName')); |
|
59 | - $queue->setEnabled(WebRequest::postBoolean('enabled')); |
|
60 | - $queue->setDefault(WebRequest::postBoolean('default') && WebRequest::postBoolean('enabled')); |
|
61 | - $queue->setDefaultAntispoof(WebRequest::postBoolean('antispoof') && WebRequest::postBoolean('enabled')); |
|
62 | - $queue->setDefaultTitleBlacklist(WebRequest::postBoolean('titleblacklist') && WebRequest::postBoolean('enabled')); |
|
63 | - $queue->setHelp(WebRequest::postString('help')); |
|
64 | - $queue->setLogName(WebRequest::postString('logName')); |
|
65 | - |
|
66 | - $proceed = true; |
|
67 | - |
|
68 | - if (RequestQueue::getByApiName($database, $queue->getApiName(), 1) !== false) { |
|
69 | - // FIXME: domain |
|
70 | - SessionAlert::error("The chosen API name is already in use. Please choose another."); |
|
71 | - $proceed = false; |
|
72 | - } |
|
73 | - |
|
74 | - if (preg_match('/^[A-Za-z][a-zA-Z0-9_-]*$/', $queue->getApiName()) !== 1) { |
|
75 | - SessionAlert::error("The chosen API name contains invalid characters"); |
|
76 | - $proceed = false; |
|
77 | - } |
|
78 | - |
|
79 | - if (RequestQueue::getByDisplayName($database, $queue->getDisplayName(), 1) !== false) { |
|
80 | - // FIXME: domain |
|
81 | - SessionAlert::error("The chosen target display name is already in use. Please choose another."); |
|
82 | - $proceed = false; |
|
83 | - } |
|
84 | - |
|
85 | - if (RequestQueue::getByHeader($database, $queue->getHeader(), 1) !== false) { |
|
86 | - // FIXME: domain |
|
87 | - SessionAlert::error("The chosen header is already in use. Please choose another."); |
|
88 | - $proceed = false; |
|
89 | - } |
|
90 | - |
|
91 | - if ($proceed) { |
|
92 | - $queue->save(); |
|
93 | - Logger::requestQueueCreated($database, $queue); |
|
94 | - $this->redirect('queueManagement'); |
|
95 | - } |
|
96 | - else { |
|
97 | - $this->populateFromObject($queue); |
|
98 | - |
|
99 | - $this->assign('createMode', true); |
|
100 | - $this->setTemplate('queue-management/edit.tpl'); |
|
101 | - } |
|
102 | - } |
|
103 | - else { |
|
104 | - $this->assign('header', null); |
|
105 | - $this->assign('displayName', null); |
|
106 | - $this->assign('apiName', null); |
|
107 | - $this->assign('enabled', false); |
|
108 | - $this->assign('antispoof', false); |
|
109 | - $this->assign('isTarget', false); |
|
110 | - $this->assign('titleblacklist', false); |
|
111 | - $this->assign('default', false); |
|
112 | - $this->assign('help', null); |
|
113 | - $this->assign('logName', null); |
|
114 | - |
|
115 | - $this->assignCSRFToken(); |
|
116 | - $this->assign('createMode', true); |
|
117 | - $this->setTemplate('queue-management/edit.tpl'); |
|
118 | - } |
|
119 | - } |
|
120 | - |
|
121 | - protected function edit() |
|
122 | - { |
|
123 | - $database = $this->getDatabase(); |
|
124 | - |
|
125 | - $id = WebRequest::getInt('queue'); |
|
126 | - if ($id === null) { |
|
127 | - $this->redirect('queueManagement'); |
|
128 | - |
|
129 | - return; |
|
130 | - } |
|
131 | - |
|
132 | - /** @var RequestQueue $queue */ |
|
133 | - $queue = RequestQueue::getById($id, $database); |
|
134 | - |
|
135 | - if (WebRequest::wasPosted()) { |
|
136 | - $this->validateCSRFToken(); |
|
137 | - |
|
138 | - $this->helper->configureDefaults( |
|
139 | - $queue, |
|
140 | - WebRequest::postBoolean('enabled'), |
|
141 | - WebRequest::postBoolean('default'), |
|
142 | - WebRequest::postBoolean('antispoof'), |
|
143 | - WebRequest::postBoolean('titleblacklist'), |
|
144 | - $this->helper->isEmailTemplateTarget($queue, $this->getDatabase()) || $this->helper->isRequestFormTarget($queue, $this->getDatabase())); |
|
145 | - |
|
146 | - $queue->setHeader(WebRequest::postString('header')); |
|
147 | - $queue->setDisplayName(WebRequest::postString('displayName')); |
|
148 | - $queue->setHelp(WebRequest::postString('help')); |
|
149 | - |
|
150 | - $proceed = true; |
|
151 | - |
|
152 | - $foundRequestQueue = RequestQueue::getByDisplayName($database, $queue->getDisplayName(), 1); |
|
153 | - if ($foundRequestQueue !== false && $foundRequestQueue->getId() !== $queue->getId()) { |
|
154 | - // FIXME: domain |
|
155 | - SessionAlert::error("The chosen target display name is already in use. Please choose another."); |
|
156 | - $proceed = false; |
|
157 | - } |
|
158 | - |
|
159 | - $foundRequestQueue = RequestQueue::getByHeader($database, $queue->getHeader(), 1); |
|
160 | - if ($foundRequestQueue !== false && $foundRequestQueue->getId() !== $queue->getId()) { |
|
161 | - // FIXME: domain |
|
162 | - SessionAlert::error("The chosen header is already in use. Please choose another."); |
|
163 | - $proceed = false; |
|
164 | - } |
|
165 | - |
|
166 | - if ($proceed) { |
|
167 | - Logger::requestQueueEdited($database, $queue); |
|
168 | - $queue->save(); |
|
169 | - $this->redirect('queueManagement'); |
|
170 | - } |
|
171 | - else { |
|
172 | - $this->populateFromObject($queue); |
|
173 | - |
|
174 | - $this->assign('createMode', false); |
|
175 | - $this->setTemplate('queue-management/edit.tpl'); |
|
176 | - } |
|
177 | - } |
|
178 | - else { |
|
179 | - $this->populateFromObject($queue); |
|
180 | - |
|
181 | - $this->assign('createMode', false); |
|
182 | - $this->setTemplate('queue-management/edit.tpl'); |
|
183 | - } |
|
184 | - } |
|
185 | - |
|
186 | - /** |
|
187 | - * @param RequestQueue $queue |
|
188 | - */ |
|
189 | - protected function populateFromObject(RequestQueue $queue): void |
|
190 | - { |
|
191 | - $this->assignCSRFToken(); |
|
192 | - |
|
193 | - $this->assign('header', $queue->getHeader()); |
|
194 | - $this->assign('displayName', $queue->getDisplayName()); |
|
195 | - $this->assign('apiName', $queue->getApiName()); |
|
196 | - $this->assign('enabled', $queue->isEnabled()); |
|
197 | - $this->assign('default', $queue->isDefault()); |
|
198 | - $this->assign('antispoof', $queue->isDefaultAntispoof()); |
|
199 | - $this->assign('titleblacklist', $queue->isDefaultTitleBlacklist()); |
|
200 | - $this->assign('help', $queue->getHelp()); |
|
201 | - $this->assign('logName', $queue->getLogName()); |
|
202 | - |
|
203 | - $isQueueTarget = $this->helper->isEmailTemplateTarget($queue, $this->getDatabase()); |
|
204 | - $isFormTarget = $this->helper->isRequestFormTarget($queue, $this->getDatabase()); |
|
205 | - $this->assign('isTarget', $isQueueTarget); |
|
206 | - $this->assign('isFormTarget', $isFormTarget); |
|
207 | - } |
|
21 | + /** @var RequestQueueHelper */ |
|
22 | + private $helper; |
|
23 | + |
|
24 | + public function __construct() |
|
25 | + { |
|
26 | + $this->helper = new RequestQueueHelper(); |
|
27 | + } |
|
28 | + |
|
29 | + protected function main() |
|
30 | + { |
|
31 | + $this->setHtmlTitle('Request Queue Management'); |
|
32 | + |
|
33 | + $database = $this->getDatabase(); |
|
34 | + $queues = RequestQueue::getAllQueues($database); |
|
35 | + |
|
36 | + $this->assign('queues', $queues); |
|
37 | + |
|
38 | + $user = User::getCurrent($database); |
|
39 | + $this->assign('canCreate', $this->barrierTest('create', $user)); |
|
40 | + $this->assign('canEdit', $this->barrierTest('edit', $user)); |
|
41 | + |
|
42 | + $this->setTemplate('queue-management/main.tpl'); |
|
43 | + } |
|
44 | + |
|
45 | + protected function create() |
|
46 | + { |
|
47 | + if (WebRequest::wasPosted()) { |
|
48 | + $this->validateCSRFToken(); |
|
49 | + $database = $this->getDatabase(); |
|
50 | + |
|
51 | + $queue = new RequestQueue(); |
|
52 | + |
|
53 | + $queue->setDatabase($database); |
|
54 | + $queue->setDomain(1); // FIXME: domain |
|
55 | + |
|
56 | + $queue->setHeader(WebRequest::postString('header')); |
|
57 | + $queue->setDisplayName(WebRequest::postString('displayName')); |
|
58 | + $queue->setApiName(WebRequest::postString('apiName')); |
|
59 | + $queue->setEnabled(WebRequest::postBoolean('enabled')); |
|
60 | + $queue->setDefault(WebRequest::postBoolean('default') && WebRequest::postBoolean('enabled')); |
|
61 | + $queue->setDefaultAntispoof(WebRequest::postBoolean('antispoof') && WebRequest::postBoolean('enabled')); |
|
62 | + $queue->setDefaultTitleBlacklist(WebRequest::postBoolean('titleblacklist') && WebRequest::postBoolean('enabled')); |
|
63 | + $queue->setHelp(WebRequest::postString('help')); |
|
64 | + $queue->setLogName(WebRequest::postString('logName')); |
|
65 | + |
|
66 | + $proceed = true; |
|
67 | + |
|
68 | + if (RequestQueue::getByApiName($database, $queue->getApiName(), 1) !== false) { |
|
69 | + // FIXME: domain |
|
70 | + SessionAlert::error("The chosen API name is already in use. Please choose another."); |
|
71 | + $proceed = false; |
|
72 | + } |
|
73 | + |
|
74 | + if (preg_match('/^[A-Za-z][a-zA-Z0-9_-]*$/', $queue->getApiName()) !== 1) { |
|
75 | + SessionAlert::error("The chosen API name contains invalid characters"); |
|
76 | + $proceed = false; |
|
77 | + } |
|
78 | + |
|
79 | + if (RequestQueue::getByDisplayName($database, $queue->getDisplayName(), 1) !== false) { |
|
80 | + // FIXME: domain |
|
81 | + SessionAlert::error("The chosen target display name is already in use. Please choose another."); |
|
82 | + $proceed = false; |
|
83 | + } |
|
84 | + |
|
85 | + if (RequestQueue::getByHeader($database, $queue->getHeader(), 1) !== false) { |
|
86 | + // FIXME: domain |
|
87 | + SessionAlert::error("The chosen header is already in use. Please choose another."); |
|
88 | + $proceed = false; |
|
89 | + } |
|
90 | + |
|
91 | + if ($proceed) { |
|
92 | + $queue->save(); |
|
93 | + Logger::requestQueueCreated($database, $queue); |
|
94 | + $this->redirect('queueManagement'); |
|
95 | + } |
|
96 | + else { |
|
97 | + $this->populateFromObject($queue); |
|
98 | + |
|
99 | + $this->assign('createMode', true); |
|
100 | + $this->setTemplate('queue-management/edit.tpl'); |
|
101 | + } |
|
102 | + } |
|
103 | + else { |
|
104 | + $this->assign('header', null); |
|
105 | + $this->assign('displayName', null); |
|
106 | + $this->assign('apiName', null); |
|
107 | + $this->assign('enabled', false); |
|
108 | + $this->assign('antispoof', false); |
|
109 | + $this->assign('isTarget', false); |
|
110 | + $this->assign('titleblacklist', false); |
|
111 | + $this->assign('default', false); |
|
112 | + $this->assign('help', null); |
|
113 | + $this->assign('logName', null); |
|
114 | + |
|
115 | + $this->assignCSRFToken(); |
|
116 | + $this->assign('createMode', true); |
|
117 | + $this->setTemplate('queue-management/edit.tpl'); |
|
118 | + } |
|
119 | + } |
|
120 | + |
|
121 | + protected function edit() |
|
122 | + { |
|
123 | + $database = $this->getDatabase(); |
|
124 | + |
|
125 | + $id = WebRequest::getInt('queue'); |
|
126 | + if ($id === null) { |
|
127 | + $this->redirect('queueManagement'); |
|
128 | + |
|
129 | + return; |
|
130 | + } |
|
131 | + |
|
132 | + /** @var RequestQueue $queue */ |
|
133 | + $queue = RequestQueue::getById($id, $database); |
|
134 | + |
|
135 | + if (WebRequest::wasPosted()) { |
|
136 | + $this->validateCSRFToken(); |
|
137 | + |
|
138 | + $this->helper->configureDefaults( |
|
139 | + $queue, |
|
140 | + WebRequest::postBoolean('enabled'), |
|
141 | + WebRequest::postBoolean('default'), |
|
142 | + WebRequest::postBoolean('antispoof'), |
|
143 | + WebRequest::postBoolean('titleblacklist'), |
|
144 | + $this->helper->isEmailTemplateTarget($queue, $this->getDatabase()) || $this->helper->isRequestFormTarget($queue, $this->getDatabase())); |
|
145 | + |
|
146 | + $queue->setHeader(WebRequest::postString('header')); |
|
147 | + $queue->setDisplayName(WebRequest::postString('displayName')); |
|
148 | + $queue->setHelp(WebRequest::postString('help')); |
|
149 | + |
|
150 | + $proceed = true; |
|
151 | + |
|
152 | + $foundRequestQueue = RequestQueue::getByDisplayName($database, $queue->getDisplayName(), 1); |
|
153 | + if ($foundRequestQueue !== false && $foundRequestQueue->getId() !== $queue->getId()) { |
|
154 | + // FIXME: domain |
|
155 | + SessionAlert::error("The chosen target display name is already in use. Please choose another."); |
|
156 | + $proceed = false; |
|
157 | + } |
|
158 | + |
|
159 | + $foundRequestQueue = RequestQueue::getByHeader($database, $queue->getHeader(), 1); |
|
160 | + if ($foundRequestQueue !== false && $foundRequestQueue->getId() !== $queue->getId()) { |
|
161 | + // FIXME: domain |
|
162 | + SessionAlert::error("The chosen header is already in use. Please choose another."); |
|
163 | + $proceed = false; |
|
164 | + } |
|
165 | + |
|
166 | + if ($proceed) { |
|
167 | + Logger::requestQueueEdited($database, $queue); |
|
168 | + $queue->save(); |
|
169 | + $this->redirect('queueManagement'); |
|
170 | + } |
|
171 | + else { |
|
172 | + $this->populateFromObject($queue); |
|
173 | + |
|
174 | + $this->assign('createMode', false); |
|
175 | + $this->setTemplate('queue-management/edit.tpl'); |
|
176 | + } |
|
177 | + } |
|
178 | + else { |
|
179 | + $this->populateFromObject($queue); |
|
180 | + |
|
181 | + $this->assign('createMode', false); |
|
182 | + $this->setTemplate('queue-management/edit.tpl'); |
|
183 | + } |
|
184 | + } |
|
185 | + |
|
186 | + /** |
|
187 | + * @param RequestQueue $queue |
|
188 | + */ |
|
189 | + protected function populateFromObject(RequestQueue $queue): void |
|
190 | + { |
|
191 | + $this->assignCSRFToken(); |
|
192 | + |
|
193 | + $this->assign('header', $queue->getHeader()); |
|
194 | + $this->assign('displayName', $queue->getDisplayName()); |
|
195 | + $this->assign('apiName', $queue->getApiName()); |
|
196 | + $this->assign('enabled', $queue->isEnabled()); |
|
197 | + $this->assign('default', $queue->isDefault()); |
|
198 | + $this->assign('antispoof', $queue->isDefaultAntispoof()); |
|
199 | + $this->assign('titleblacklist', $queue->isDefaultTitleBlacklist()); |
|
200 | + $this->assign('help', $queue->getHelp()); |
|
201 | + $this->assign('logName', $queue->getLogName()); |
|
202 | + |
|
203 | + $isQueueTarget = $this->helper->isEmailTemplateTarget($queue, $this->getDatabase()); |
|
204 | + $isFormTarget = $this->helper->isRequestFormTarget($queue, $this->getDatabase()); |
|
205 | + $this->assign('isTarget', $isQueueTarget); |
|
206 | + $this->assign('isFormTarget', $isFormTarget); |
|
207 | + } |
|
208 | 208 | } |
209 | 209 | \ No newline at end of file |
@@ -92,15 +92,13 @@ discard block |
||
92 | 92 | $queue->save(); |
93 | 93 | Logger::requestQueueCreated($database, $queue); |
94 | 94 | $this->redirect('queueManagement'); |
95 | - } |
|
96 | - else { |
|
95 | + } else { |
|
97 | 96 | $this->populateFromObject($queue); |
98 | 97 | |
99 | 98 | $this->assign('createMode', true); |
100 | 99 | $this->setTemplate('queue-management/edit.tpl'); |
101 | 100 | } |
102 | - } |
|
103 | - else { |
|
101 | + } else { |
|
104 | 102 | $this->assign('header', null); |
105 | 103 | $this->assign('displayName', null); |
106 | 104 | $this->assign('apiName', null); |
@@ -167,15 +165,13 @@ discard block |
||
167 | 165 | Logger::requestQueueEdited($database, $queue); |
168 | 166 | $queue->save(); |
169 | 167 | $this->redirect('queueManagement'); |
170 | - } |
|
171 | - else { |
|
168 | + } else { |
|
172 | 169 | $this->populateFromObject($queue); |
173 | 170 | |
174 | 171 | $this->assign('createMode', false); |
175 | 172 | $this->setTemplate('queue-management/edit.tpl'); |
176 | 173 | } |
177 | - } |
|
178 | - else { |
|
174 | + } else { |
|
179 | 175 | $this->populateFromObject($queue); |
180 | 176 | |
181 | 177 | $this->assign('createMode', false); |
@@ -13,19 +13,19 @@ |
||
13 | 13 | |
14 | 14 | class PageRegisterOption extends InternalPageBase |
15 | 15 | { |
16 | - /** |
|
17 | - * Main function for this page, when no specific actions are called. |
|
18 | - * @return void |
|
19 | - */ |
|
20 | - protected function main() |
|
21 | - { |
|
22 | - $this->assign('allowRegistration', $this->getSiteConfiguration()->isRegistrationAllowed()); |
|
23 | - $this->assign('domains', Domain::getAll($this->getDatabase())); |
|
24 | - $this->setTemplate('registration/option.tpl'); |
|
25 | - } |
|
16 | + /** |
|
17 | + * Main function for this page, when no specific actions are called. |
|
18 | + * @return void |
|
19 | + */ |
|
20 | + protected function main() |
|
21 | + { |
|
22 | + $this->assign('allowRegistration', $this->getSiteConfiguration()->isRegistrationAllowed()); |
|
23 | + $this->assign('domains', Domain::getAll($this->getDatabase())); |
|
24 | + $this->setTemplate('registration/option.tpl'); |
|
25 | + } |
|
26 | 26 | |
27 | - protected function isProtectedPage() |
|
28 | - { |
|
29 | - return false; |
|
30 | - } |
|
27 | + protected function isProtectedPage() |
|
28 | + { |
|
29 | + return false; |
|
30 | + } |
|
31 | 31 | } |
@@ -24,255 +24,255 @@ |
||
24 | 24 | |
25 | 25 | abstract class PageRegisterBase extends InternalPageBase |
26 | 26 | { |
27 | - /** |
|
28 | - * Main function for this page, when no specific actions are called. |
|
29 | - * @throws AccessDeniedException |
|
30 | - * @throws ApplicationLogicException |
|
31 | - * @throws Exception |
|
32 | - */ |
|
33 | - protected function main() |
|
34 | - { |
|
35 | - $useOAuthSignup = $this->getSiteConfiguration()->getUseOAuthSignup(); |
|
36 | - if (!$this->getSiteConfiguration()->isRegistrationAllowed()) { |
|
37 | - throw new AccessDeniedException($this->getSecurityManager(), $this->getDomainAccessManager()); |
|
38 | - } |
|
39 | - |
|
40 | - // Dual-mode page |
|
41 | - if (WebRequest::wasPosted()) { |
|
42 | - $this->validateCSRFToken(); |
|
43 | - |
|
44 | - try { |
|
45 | - $this->handlePost($useOAuthSignup); |
|
46 | - } |
|
47 | - catch (ApplicationLogicException $ex) { |
|
48 | - SessionAlert::error($ex->getMessage()); |
|
49 | - |
|
50 | - $this->getDatabase()->rollBack(); |
|
51 | - |
|
52 | - $this->assignCSRFToken(); |
|
53 | - $this->assign("useOAuthSignup", $useOAuthSignup); |
|
54 | - $this->applyErrorValues(); |
|
55 | - $this->setTemplate($this->getRegistrationTemplate()); |
|
56 | - $this->addJs("/vendor/dropbox/zxcvbn/dist/zxcvbn.js"); |
|
57 | - } |
|
58 | - } |
|
59 | - else { |
|
60 | - $domain = WebRequest::getString('d'); |
|
61 | - if ($domain === null) { |
|
62 | - throw new ApplicationLogicException("No domain specified."); |
|
63 | - } |
|
64 | - |
|
65 | - /** @var Domain|false $domainObject */ |
|
66 | - $domainObject = Domain::getByShortName($domain, $this->getDatabase()); |
|
67 | - if ($domainObject === false || !$domainObject->isEnabled()) { |
|
68 | - throw new ApplicationLogicException("Unknown domain or domain not enabled."); |
|
69 | - } |
|
70 | - |
|
71 | - $this->assign('localDocumentation', $domainObject->getLocalDocumentation()); |
|
72 | - |
|
73 | - $this->assignCSRFToken(); |
|
74 | - $this->assign("useOAuthSignup", $useOAuthSignup); |
|
75 | - $this->setTemplate($this->getRegistrationTemplate()); |
|
76 | - $this->addJs("/vendor/dropbox/zxcvbn/dist/zxcvbn.js"); |
|
77 | - } |
|
78 | - } |
|
79 | - |
|
80 | - protected abstract function getRegistrationTemplate(); |
|
81 | - |
|
82 | - protected function isProtectedPage() |
|
83 | - { |
|
84 | - return false; |
|
85 | - } |
|
86 | - |
|
87 | - /** |
|
88 | - * @param string $emailAddress |
|
89 | - * |
|
90 | - * @throws ApplicationLogicException |
|
91 | - */ |
|
92 | - protected function validateUniqueEmail($emailAddress) |
|
93 | - { |
|
94 | - $query = 'SELECT COUNT(id) FROM user WHERE email = :email'; |
|
95 | - $statement = $this->getDatabase()->prepare($query); |
|
96 | - $statement->execute(array(':email' => $emailAddress)); |
|
97 | - |
|
98 | - if ($statement->fetchColumn() > 0) { |
|
99 | - throw new ApplicationLogicException('That email address is already in use on this system.'); |
|
100 | - } |
|
101 | - |
|
102 | - $statement->closeCursor(); |
|
103 | - } |
|
104 | - |
|
105 | - /** |
|
106 | - * @param $emailAddress |
|
107 | - * @param $password |
|
108 | - * @param $username |
|
109 | - * @param $useOAuthSignup |
|
110 | - * @param $confirmationId |
|
111 | - * @param $onwikiUsername |
|
112 | - * @param Domain|false $domainObject |
|
113 | - * |
|
114 | - * @throws ApplicationLogicException |
|
115 | - */ |
|
116 | - protected function validateRequest( |
|
117 | - $emailAddress, |
|
118 | - $password, |
|
119 | - $username, |
|
120 | - $useOAuthSignup, |
|
121 | - $confirmationId, |
|
122 | - $onwikiUsername, |
|
123 | - $domainObject |
|
124 | - ) { |
|
125 | - if (!WebRequest::postBoolean('guidelines')) { |
|
126 | - throw new ApplicationLogicException('You must read the interface guidelines before your request may be submitted.'); |
|
127 | - } |
|
128 | - |
|
129 | - if ($domainObject === false) { |
|
130 | - throw new ApplicationLogicException('The chosen wiki does not exist on this tool.'); |
|
131 | - } |
|
132 | - |
|
133 | - if (!$domainObject->isEnabled()) { |
|
134 | - throw new ApplicationLogicException('The chosen wiki is not currently enabled on this tool.'); |
|
135 | - } |
|
136 | - |
|
137 | - $this->validateGeneralInformation($emailAddress, $password, $username); |
|
138 | - $this->validateUniqueEmail($emailAddress); |
|
139 | - $this->validateNonOAuthFields($useOAuthSignup, $confirmationId, $onwikiUsername); |
|
140 | - } |
|
141 | - |
|
142 | - /** |
|
143 | - * @param $useOAuthSignup |
|
144 | - * @param $confirmationId |
|
145 | - * @param $onwikiUsername |
|
146 | - * |
|
147 | - * @throws ApplicationLogicException |
|
148 | - */ |
|
149 | - protected function validateNonOAuthFields($useOAuthSignup, $confirmationId, $onwikiUsername) |
|
150 | - { |
|
151 | - if (!$useOAuthSignup) { |
|
152 | - if ($confirmationId === null || $confirmationId <= 0) { |
|
153 | - throw new ApplicationLogicException('Please enter the revision id of your confirmation edit.'); |
|
154 | - } |
|
155 | - |
|
156 | - if ($onwikiUsername === null) { |
|
157 | - throw new ApplicationLogicException('Please specify your on-wiki username.'); |
|
158 | - } |
|
159 | - } |
|
160 | - } |
|
161 | - |
|
162 | - /** |
|
163 | - * @param $emailAddress |
|
164 | - * @param $password |
|
165 | - * @param $username |
|
166 | - * |
|
167 | - * @throws ApplicationLogicException |
|
168 | - */ |
|
169 | - protected function validateGeneralInformation($emailAddress, $password, $username) |
|
170 | - { |
|
171 | - if ($emailAddress === null) { |
|
172 | - throw new ApplicationLogicException('Your email address appears to be invalid!'); |
|
173 | - } |
|
174 | - |
|
175 | - if ($password !== WebRequest::postString('newpasswordconfirm')) { |
|
176 | - throw new ApplicationLogicException('Your passwords did not match, please try again.'); |
|
177 | - } |
|
178 | - |
|
179 | - if (User::getByUsername($username, $this->getDatabase()) !== false) { |
|
180 | - throw new ApplicationLogicException('That username is already in use on this system.'); |
|
181 | - } |
|
182 | - } |
|
183 | - |
|
184 | - /** |
|
185 | - * @param $useOAuthSignup |
|
186 | - * |
|
187 | - * @throws ApplicationLogicException |
|
188 | - * @throws Exception |
|
189 | - */ |
|
190 | - protected function handlePost($useOAuthSignup) |
|
191 | - { |
|
192 | - // Get the data |
|
193 | - $emailAddress = WebRequest::postEmail('email'); |
|
194 | - $password = WebRequest::postString('newpassword'); |
|
195 | - $username = WebRequest::postString('name'); |
|
196 | - |
|
197 | - // Only set if OAuth is disabled |
|
198 | - $confirmationId = WebRequest::postInt('conf_revid'); |
|
199 | - $onwikiUsername = WebRequest::postString('wname'); |
|
200 | - |
|
201 | - $database = $this->getDatabase(); |
|
202 | - $domain = WebRequest::getString('d'); |
|
203 | - $domainObject = Domain::getByShortName($domain, $database); |
|
204 | - |
|
205 | - // Do some validation |
|
206 | - $this->validateRequest($emailAddress, $password, $username, $useOAuthSignup, $confirmationId, |
|
207 | - $onwikiUsername, $domainObject); |
|
208 | - |
|
209 | - $user = new User(); |
|
210 | - $user->setDatabase($database); |
|
211 | - |
|
212 | - $user->setUsername($username); |
|
213 | - $user->setEmail($emailAddress); |
|
214 | - |
|
215 | - if (!$useOAuthSignup) { |
|
216 | - $user->setOnWikiName($onwikiUsername); |
|
217 | - $user->setConfirmationDiff($confirmationId); |
|
218 | - } |
|
219 | - |
|
220 | - $user->save(); |
|
221 | - |
|
222 | - $passwordCredentialProvider = new PasswordCredentialProvider($database, $this->getSiteConfiguration()); |
|
223 | - $passwordCredentialProvider->setCredential($user, 1, $password); |
|
224 | - |
|
225 | - $defaultRole = $this->getDefaultRole(); |
|
226 | - |
|
227 | - $role = new UserRole(); |
|
228 | - $role->setDatabase($database); |
|
229 | - $role->setUser($user->getId()); |
|
230 | - $role->setRole($defaultRole); |
|
231 | - $role->setDomain($domainObject->getId()); // FIXME: domains |
|
232 | - $role->save(); |
|
233 | - |
|
234 | - // Log now to get the signup date. |
|
235 | - Logger::newUser($database, $user); |
|
236 | - Logger::userRolesEdited($database, $user, 'Registration', array($defaultRole), array(), $domainObject->getId()); |
|
237 | - |
|
238 | - $userDomain = new UserDomain(); |
|
239 | - $userDomain->setDatabase($database); |
|
240 | - $userDomain->setUser($user->getId()); |
|
241 | - $userDomain->setDomain($domainObject->getId()); |
|
242 | - $userDomain->save(); |
|
243 | - |
|
244 | - if ($useOAuthSignup) { |
|
245 | - $oauthProtocolHelper = $this->getOAuthProtocolHelper(); |
|
246 | - $oauth = new OAuthUserHelper($user, $database, $oauthProtocolHelper, $this->getSiteConfiguration()); |
|
247 | - |
|
248 | - $authoriseUrl = $oauth->getRequestToken(); |
|
249 | - WebRequest::setOAuthPartialLogin($user); |
|
250 | - $this->redirectUrl($authoriseUrl); |
|
251 | - } |
|
252 | - else { |
|
253 | - // only notify if we're not using the oauth signup. |
|
254 | - $this->getNotificationHelper()->userNew($user); |
|
255 | - WebRequest::setLoggedInUser($user); |
|
256 | - $this->getDomainAccessManager()->switchToDefaultDomain($user); |
|
257 | - $this->redirect('preferences'); |
|
258 | - } |
|
259 | - } |
|
260 | - |
|
261 | - protected abstract function getDefaultRole(); |
|
262 | - |
|
263 | - /** |
|
264 | - * Entry point for registration complete |
|
265 | - * @throws Exception |
|
266 | - */ |
|
267 | - protected function done() |
|
268 | - { |
|
269 | - $this->setTemplate('registration/alert-registrationcomplete.tpl'); |
|
270 | - } |
|
271 | - |
|
272 | - protected function applyErrorValues() |
|
273 | - { |
|
274 | - $this->assign('tplUsername', WebRequest::postString('name')); |
|
275 | - $this->assign('tplEmail', WebRequest::postString('email')); |
|
276 | - $this->assign('tplWikipediaUsername', WebRequest::postString('wname')); |
|
277 | - $this->assign('tplConfRevId', WebRequest::postInt('conf_revid')); |
|
278 | - }} |
|
27 | + /** |
|
28 | + * Main function for this page, when no specific actions are called. |
|
29 | + * @throws AccessDeniedException |
|
30 | + * @throws ApplicationLogicException |
|
31 | + * @throws Exception |
|
32 | + */ |
|
33 | + protected function main() |
|
34 | + { |
|
35 | + $useOAuthSignup = $this->getSiteConfiguration()->getUseOAuthSignup(); |
|
36 | + if (!$this->getSiteConfiguration()->isRegistrationAllowed()) { |
|
37 | + throw new AccessDeniedException($this->getSecurityManager(), $this->getDomainAccessManager()); |
|
38 | + } |
|
39 | + |
|
40 | + // Dual-mode page |
|
41 | + if (WebRequest::wasPosted()) { |
|
42 | + $this->validateCSRFToken(); |
|
43 | + |
|
44 | + try { |
|
45 | + $this->handlePost($useOAuthSignup); |
|
46 | + } |
|
47 | + catch (ApplicationLogicException $ex) { |
|
48 | + SessionAlert::error($ex->getMessage()); |
|
49 | + |
|
50 | + $this->getDatabase()->rollBack(); |
|
51 | + |
|
52 | + $this->assignCSRFToken(); |
|
53 | + $this->assign("useOAuthSignup", $useOAuthSignup); |
|
54 | + $this->applyErrorValues(); |
|
55 | + $this->setTemplate($this->getRegistrationTemplate()); |
|
56 | + $this->addJs("/vendor/dropbox/zxcvbn/dist/zxcvbn.js"); |
|
57 | + } |
|
58 | + } |
|
59 | + else { |
|
60 | + $domain = WebRequest::getString('d'); |
|
61 | + if ($domain === null) { |
|
62 | + throw new ApplicationLogicException("No domain specified."); |
|
63 | + } |
|
64 | + |
|
65 | + /** @var Domain|false $domainObject */ |
|
66 | + $domainObject = Domain::getByShortName($domain, $this->getDatabase()); |
|
67 | + if ($domainObject === false || !$domainObject->isEnabled()) { |
|
68 | + throw new ApplicationLogicException("Unknown domain or domain not enabled."); |
|
69 | + } |
|
70 | + |
|
71 | + $this->assign('localDocumentation', $domainObject->getLocalDocumentation()); |
|
72 | + |
|
73 | + $this->assignCSRFToken(); |
|
74 | + $this->assign("useOAuthSignup", $useOAuthSignup); |
|
75 | + $this->setTemplate($this->getRegistrationTemplate()); |
|
76 | + $this->addJs("/vendor/dropbox/zxcvbn/dist/zxcvbn.js"); |
|
77 | + } |
|
78 | + } |
|
79 | + |
|
80 | + protected abstract function getRegistrationTemplate(); |
|
81 | + |
|
82 | + protected function isProtectedPage() |
|
83 | + { |
|
84 | + return false; |
|
85 | + } |
|
86 | + |
|
87 | + /** |
|
88 | + * @param string $emailAddress |
|
89 | + * |
|
90 | + * @throws ApplicationLogicException |
|
91 | + */ |
|
92 | + protected function validateUniqueEmail($emailAddress) |
|
93 | + { |
|
94 | + $query = 'SELECT COUNT(id) FROM user WHERE email = :email'; |
|
95 | + $statement = $this->getDatabase()->prepare($query); |
|
96 | + $statement->execute(array(':email' => $emailAddress)); |
|
97 | + |
|
98 | + if ($statement->fetchColumn() > 0) { |
|
99 | + throw new ApplicationLogicException('That email address is already in use on this system.'); |
|
100 | + } |
|
101 | + |
|
102 | + $statement->closeCursor(); |
|
103 | + } |
|
104 | + |
|
105 | + /** |
|
106 | + * @param $emailAddress |
|
107 | + * @param $password |
|
108 | + * @param $username |
|
109 | + * @param $useOAuthSignup |
|
110 | + * @param $confirmationId |
|
111 | + * @param $onwikiUsername |
|
112 | + * @param Domain|false $domainObject |
|
113 | + * |
|
114 | + * @throws ApplicationLogicException |
|
115 | + */ |
|
116 | + protected function validateRequest( |
|
117 | + $emailAddress, |
|
118 | + $password, |
|
119 | + $username, |
|
120 | + $useOAuthSignup, |
|
121 | + $confirmationId, |
|
122 | + $onwikiUsername, |
|
123 | + $domainObject |
|
124 | + ) { |
|
125 | + if (!WebRequest::postBoolean('guidelines')) { |
|
126 | + throw new ApplicationLogicException('You must read the interface guidelines before your request may be submitted.'); |
|
127 | + } |
|
128 | + |
|
129 | + if ($domainObject === false) { |
|
130 | + throw new ApplicationLogicException('The chosen wiki does not exist on this tool.'); |
|
131 | + } |
|
132 | + |
|
133 | + if (!$domainObject->isEnabled()) { |
|
134 | + throw new ApplicationLogicException('The chosen wiki is not currently enabled on this tool.'); |
|
135 | + } |
|
136 | + |
|
137 | + $this->validateGeneralInformation($emailAddress, $password, $username); |
|
138 | + $this->validateUniqueEmail($emailAddress); |
|
139 | + $this->validateNonOAuthFields($useOAuthSignup, $confirmationId, $onwikiUsername); |
|
140 | + } |
|
141 | + |
|
142 | + /** |
|
143 | + * @param $useOAuthSignup |
|
144 | + * @param $confirmationId |
|
145 | + * @param $onwikiUsername |
|
146 | + * |
|
147 | + * @throws ApplicationLogicException |
|
148 | + */ |
|
149 | + protected function validateNonOAuthFields($useOAuthSignup, $confirmationId, $onwikiUsername) |
|
150 | + { |
|
151 | + if (!$useOAuthSignup) { |
|
152 | + if ($confirmationId === null || $confirmationId <= 0) { |
|
153 | + throw new ApplicationLogicException('Please enter the revision id of your confirmation edit.'); |
|
154 | + } |
|
155 | + |
|
156 | + if ($onwikiUsername === null) { |
|
157 | + throw new ApplicationLogicException('Please specify your on-wiki username.'); |
|
158 | + } |
|
159 | + } |
|
160 | + } |
|
161 | + |
|
162 | + /** |
|
163 | + * @param $emailAddress |
|
164 | + * @param $password |
|
165 | + * @param $username |
|
166 | + * |
|
167 | + * @throws ApplicationLogicException |
|
168 | + */ |
|
169 | + protected function validateGeneralInformation($emailAddress, $password, $username) |
|
170 | + { |
|
171 | + if ($emailAddress === null) { |
|
172 | + throw new ApplicationLogicException('Your email address appears to be invalid!'); |
|
173 | + } |
|
174 | + |
|
175 | + if ($password !== WebRequest::postString('newpasswordconfirm')) { |
|
176 | + throw new ApplicationLogicException('Your passwords did not match, please try again.'); |
|
177 | + } |
|
178 | + |
|
179 | + if (User::getByUsername($username, $this->getDatabase()) !== false) { |
|
180 | + throw new ApplicationLogicException('That username is already in use on this system.'); |
|
181 | + } |
|
182 | + } |
|
183 | + |
|
184 | + /** |
|
185 | + * @param $useOAuthSignup |
|
186 | + * |
|
187 | + * @throws ApplicationLogicException |
|
188 | + * @throws Exception |
|
189 | + */ |
|
190 | + protected function handlePost($useOAuthSignup) |
|
191 | + { |
|
192 | + // Get the data |
|
193 | + $emailAddress = WebRequest::postEmail('email'); |
|
194 | + $password = WebRequest::postString('newpassword'); |
|
195 | + $username = WebRequest::postString('name'); |
|
196 | + |
|
197 | + // Only set if OAuth is disabled |
|
198 | + $confirmationId = WebRequest::postInt('conf_revid'); |
|
199 | + $onwikiUsername = WebRequest::postString('wname'); |
|
200 | + |
|
201 | + $database = $this->getDatabase(); |
|
202 | + $domain = WebRequest::getString('d'); |
|
203 | + $domainObject = Domain::getByShortName($domain, $database); |
|
204 | + |
|
205 | + // Do some validation |
|
206 | + $this->validateRequest($emailAddress, $password, $username, $useOAuthSignup, $confirmationId, |
|
207 | + $onwikiUsername, $domainObject); |
|
208 | + |
|
209 | + $user = new User(); |
|
210 | + $user->setDatabase($database); |
|
211 | + |
|
212 | + $user->setUsername($username); |
|
213 | + $user->setEmail($emailAddress); |
|
214 | + |
|
215 | + if (!$useOAuthSignup) { |
|
216 | + $user->setOnWikiName($onwikiUsername); |
|
217 | + $user->setConfirmationDiff($confirmationId); |
|
218 | + } |
|
219 | + |
|
220 | + $user->save(); |
|
221 | + |
|
222 | + $passwordCredentialProvider = new PasswordCredentialProvider($database, $this->getSiteConfiguration()); |
|
223 | + $passwordCredentialProvider->setCredential($user, 1, $password); |
|
224 | + |
|
225 | + $defaultRole = $this->getDefaultRole(); |
|
226 | + |
|
227 | + $role = new UserRole(); |
|
228 | + $role->setDatabase($database); |
|
229 | + $role->setUser($user->getId()); |
|
230 | + $role->setRole($defaultRole); |
|
231 | + $role->setDomain($domainObject->getId()); // FIXME: domains |
|
232 | + $role->save(); |
|
233 | + |
|
234 | + // Log now to get the signup date. |
|
235 | + Logger::newUser($database, $user); |
|
236 | + Logger::userRolesEdited($database, $user, 'Registration', array($defaultRole), array(), $domainObject->getId()); |
|
237 | + |
|
238 | + $userDomain = new UserDomain(); |
|
239 | + $userDomain->setDatabase($database); |
|
240 | + $userDomain->setUser($user->getId()); |
|
241 | + $userDomain->setDomain($domainObject->getId()); |
|
242 | + $userDomain->save(); |
|
243 | + |
|
244 | + if ($useOAuthSignup) { |
|
245 | + $oauthProtocolHelper = $this->getOAuthProtocolHelper(); |
|
246 | + $oauth = new OAuthUserHelper($user, $database, $oauthProtocolHelper, $this->getSiteConfiguration()); |
|
247 | + |
|
248 | + $authoriseUrl = $oauth->getRequestToken(); |
|
249 | + WebRequest::setOAuthPartialLogin($user); |
|
250 | + $this->redirectUrl($authoriseUrl); |
|
251 | + } |
|
252 | + else { |
|
253 | + // only notify if we're not using the oauth signup. |
|
254 | + $this->getNotificationHelper()->userNew($user); |
|
255 | + WebRequest::setLoggedInUser($user); |
|
256 | + $this->getDomainAccessManager()->switchToDefaultDomain($user); |
|
257 | + $this->redirect('preferences'); |
|
258 | + } |
|
259 | + } |
|
260 | + |
|
261 | + protected abstract function getDefaultRole(); |
|
262 | + |
|
263 | + /** |
|
264 | + * Entry point for registration complete |
|
265 | + * @throws Exception |
|
266 | + */ |
|
267 | + protected function done() |
|
268 | + { |
|
269 | + $this->setTemplate('registration/alert-registrationcomplete.tpl'); |
|
270 | + } |
|
271 | + |
|
272 | + protected function applyErrorValues() |
|
273 | + { |
|
274 | + $this->assign('tplUsername', WebRequest::postString('name')); |
|
275 | + $this->assign('tplEmail', WebRequest::postString('email')); |
|
276 | + $this->assign('tplWikipediaUsername', WebRequest::postString('wname')); |
|
277 | + $this->assign('tplConfRevId', WebRequest::postInt('conf_revid')); |
|
278 | + }} |
@@ -55,8 +55,7 @@ discard block |
||
55 | 55 | $this->setTemplate($this->getRegistrationTemplate()); |
56 | 56 | $this->addJs("/vendor/dropbox/zxcvbn/dist/zxcvbn.js"); |
57 | 57 | } |
58 | - } |
|
59 | - else { |
|
58 | + } else { |
|
60 | 59 | $domain = WebRequest::getString('d'); |
61 | 60 | if ($domain === null) { |
62 | 61 | throw new ApplicationLogicException("No domain specified."); |
@@ -248,8 +247,7 @@ discard block |
||
248 | 247 | $authoriseUrl = $oauth->getRequestToken(); |
249 | 248 | WebRequest::setOAuthPartialLogin($user); |
250 | 249 | $this->redirectUrl($authoriseUrl); |
251 | - } |
|
252 | - else { |
|
250 | + } else { |
|
253 | 251 | // only notify if we're not using the oauth signup. |
254 | 252 | $this->getNotificationHelper()->userNew($user); |
255 | 253 | WebRequest::setLoggedInUser($user); |
@@ -12,17 +12,17 @@ |
||
12 | 12 | |
13 | 13 | class PageRequestSubmitted extends PublicInterfacePageBase |
14 | 14 | { |
15 | - /** |
|
16 | - * Main function for this page, when no specific actions are called. |
|
17 | - * @return void |
|
18 | - */ |
|
19 | - protected function main() |
|
20 | - { |
|
21 | - // clear any requests for client hints. Should have been done already prior to |
|
22 | - // email confirmation, but this catches the case where email confirmation is |
|
23 | - // disabled. |
|
24 | - $this->headerQueue[] = "Accept-CH:"; |
|
15 | + /** |
|
16 | + * Main function for this page, when no specific actions are called. |
|
17 | + * @return void |
|
18 | + */ |
|
19 | + protected function main() |
|
20 | + { |
|
21 | + // clear any requests for client hints. Should have been done already prior to |
|
22 | + // email confirmation, but this catches the case where email confirmation is |
|
23 | + // disabled. |
|
24 | + $this->headerQueue[] = "Accept-CH:"; |
|
25 | 25 | |
26 | - $this->setTemplate('request/email-confirmed.tpl'); |
|
27 | - } |
|
26 | + $this->setTemplate('request/email-confirmed.tpl'); |
|
27 | + } |
|
28 | 28 | } |
29 | 29 | \ No newline at end of file |
@@ -27,316 +27,316 @@ |
||
27 | 27 | |
28 | 28 | class PageRequestAccount extends PublicInterfacePageBase |
29 | 29 | { |
30 | - /** @var RequestValidationHelper do not use directly. */ |
|
31 | - private $validationHelper; |
|
32 | - |
|
33 | - /** |
|
34 | - * Main function for this page, when no specific actions are called. |
|
35 | - * @return void |
|
36 | - * @throws OptimisticLockFailedException |
|
37 | - * @throws Exception |
|
38 | - */ |
|
39 | - protected function main() |
|
40 | - { |
|
41 | - // dual mode page |
|
42 | - if (WebRequest::wasPosted()) { |
|
43 | - $request = $this->createNewRequest(null); |
|
44 | - $this->handleFormPost($request); |
|
45 | - } |
|
46 | - else { |
|
47 | - $this->requestClientHints(); |
|
48 | - $this->handleFormRefilling(); |
|
49 | - |
|
50 | - $this->setTemplate('request/request-form.tpl'); |
|
51 | - } |
|
52 | - } |
|
53 | - |
|
54 | - /** |
|
55 | - * Handles dynamic request forms. |
|
56 | - * @return void |
|
57 | - * @throws OptimisticLockFailedException |
|
58 | - * @throws Exception |
|
59 | - */ |
|
60 | - protected function dynamic() |
|
61 | - { |
|
62 | - $database = $this->getDatabase(); |
|
63 | - |
|
64 | - $pathInfo = WebRequest::pathInfo(); |
|
65 | - $domain = Domain::getByShortName($pathInfo[1], $database); |
|
66 | - if ($domain === false || !$domain->isEnabled()) { |
|
67 | - throw new ApplicationLogicException("This form is not available at this time."); |
|
68 | - } |
|
69 | - |
|
70 | - $form = RequestForm::getByPublicEndpoint($database, $pathInfo[2], $domain->getId()); |
|
71 | - |
|
72 | - if ($form === false || !$form->isEnabled()) { |
|
73 | - throw new ApplicationLogicException("This form is not available at this time."); |
|
74 | - } |
|
75 | - |
|
76 | - // dual mode page |
|
77 | - if (WebRequest::wasPosted()) { |
|
78 | - $request = $this->createNewRequest($form); |
|
79 | - $this->handleFormPost($request); |
|
80 | - } |
|
81 | - else { |
|
82 | - $this->requestClientHints(); |
|
83 | - $this->handleFormRefilling(); |
|
84 | - |
|
85 | - $renderer = new MarkdownRenderingHelper(); |
|
86 | - $this->assign('formPreamble', $renderer->doRender($form->getFormContent())); |
|
87 | - $this->assign('formUsernameHelp', $renderer->doRenderInline($form->getUsernameHelp())); |
|
88 | - $this->assign('formEmailHelp', $renderer->doRenderInline($form->getEmailHelp())); |
|
89 | - $this->assign('formCommentsHelp', $renderer->doRenderInline($form->getCommentHelp())); |
|
90 | - |
|
91 | - $this->setTemplate('request/request-form-dynamic.tpl'); |
|
92 | - } |
|
93 | - } |
|
94 | - |
|
95 | - /** |
|
96 | - * @param RequestForm|null $form |
|
97 | - * |
|
98 | - * @return Request |
|
99 | - * @throws ApplicationLogicException |
|
100 | - */ |
|
101 | - protected function createNewRequest(?RequestForm $form): Request |
|
102 | - { |
|
103 | - $database = $this->getDatabase(); |
|
104 | - |
|
105 | - $request = new Request(); |
|
106 | - |
|
107 | - if ($form === null) { |
|
108 | - $domain = 1; |
|
109 | - } |
|
110 | - else { |
|
111 | - $domain = $form->getDomain(); |
|
112 | - $request->setOriginForm($form->getId()); |
|
113 | - } |
|
114 | - |
|
115 | - $request->setQueue(RequestQueue::getDefaultQueue($database, $domain)->getId()); |
|
116 | - $request->setDatabase($database); |
|
117 | - $request->setDomain($domain); |
|
118 | - |
|
119 | - $request->setName(trim(WebRequest::postString('name'))); |
|
120 | - $request->setEmail(WebRequest::postEmail('email')); |
|
121 | - |
|
122 | - $request->setIp(WebRequest::remoteAddress()); |
|
123 | - $request->setForwardedIp(WebRequest::forwardedAddress()); |
|
124 | - |
|
125 | - $request->setUserAgent(WebRequest::userAgent()); |
|
126 | - |
|
127 | - return $request; |
|
128 | - } |
|
129 | - |
|
130 | - /** |
|
131 | - * @return Comment|null |
|
132 | - */ |
|
133 | - private function createComment() |
|
134 | - { |
|
135 | - $commentText = WebRequest::postString('comments'); |
|
136 | - if ($commentText === null || trim($commentText) === '') { |
|
137 | - return null; |
|
138 | - } |
|
139 | - |
|
140 | - $comment = new Comment(); |
|
141 | - $comment->setDatabase($this->getDatabase()); |
|
142 | - |
|
143 | - $comment->setVisibility('requester'); |
|
144 | - $comment->setUser(null); |
|
145 | - $comment->setComment($commentText); |
|
146 | - |
|
147 | - return $comment; |
|
148 | - } |
|
149 | - |
|
150 | - /** |
|
151 | - * @param Request $request |
|
152 | - * |
|
153 | - * @return ValidationError[] |
|
154 | - */ |
|
155 | - protected function validateRequest($request) |
|
156 | - { |
|
157 | - $validationHelper = $this->getRequestValidationHelper(); |
|
158 | - |
|
159 | - // These are arrays of ValidationError. |
|
160 | - $nameValidation = $validationHelper->validateName($request); |
|
161 | - $emailValidation = $validationHelper->validateEmail($request, WebRequest::postEmail('emailconfirm')); |
|
162 | - $otherValidation = $validationHelper->validateOther($request); |
|
163 | - |
|
164 | - $validationErrors = array_merge($nameValidation, $emailValidation, $otherValidation); |
|
165 | - |
|
166 | - return $validationErrors; |
|
167 | - } |
|
168 | - |
|
169 | - /** |
|
170 | - * @param Request $request |
|
171 | - * |
|
172 | - * @param Comment|null $comment |
|
173 | - * |
|
174 | - * @throws OptimisticLockFailedException |
|
175 | - * @throws Exception |
|
176 | - */ |
|
177 | - protected function saveAsEmailConfirmation(Request $request, $comment) |
|
178 | - { |
|
179 | - $request->generateEmailConfirmationHash(); |
|
180 | - $request->save(); |
|
181 | - |
|
182 | - if ($comment !== null) { |
|
183 | - $comment->setRequest($request->getId()); |
|
184 | - $comment->save(); |
|
185 | - } |
|
186 | - |
|
187 | - $trustedIp = $this->getXffTrustProvider()->getTrustedClientIp( |
|
188 | - $request->getIp(), |
|
189 | - $request->getForwardedIp()); |
|
190 | - |
|
191 | - $this->assign("ip", $trustedIp); |
|
192 | - $this->assign("id", $request->getId()); |
|
193 | - $this->assign("hash", $request->getEmailConfirm()); |
|
194 | - |
|
195 | - // Sends the confirmation email to the user. |
|
196 | - // FIXME: domains |
|
197 | - /** @var Domain $domain */ |
|
198 | - $domain = Domain::getById(1, $this->getDatabase()); |
|
199 | - $this->getEmailHelper()->sendMail( |
|
200 | - $domain->getEmailReplyAddress(), |
|
201 | - $request->getEmail(), |
|
202 | - "[ACC #{$request->getId()}] English Wikipedia Account Request", |
|
203 | - $this->fetchTemplate('request/confirmation-mail.tpl')); |
|
204 | - |
|
205 | - $this->redirect('emailConfirmationRequired'); |
|
206 | - } |
|
207 | - |
|
208 | - /** |
|
209 | - * @param Request $request |
|
210 | - * |
|
211 | - * @param Comment|null $comment |
|
212 | - * |
|
213 | - * @throws OptimisticLockFailedException |
|
214 | - * @throws Exception |
|
215 | - */ |
|
216 | - protected function saveWithoutEmailConfirmation(Request $request, $comment) |
|
217 | - { |
|
218 | - $request->setEmailConfirm(0); // fixme Since it can't be null |
|
219 | - $request->save(); |
|
220 | - |
|
221 | - if ($comment !== null) { |
|
222 | - $comment->setRequest($request->getId()); |
|
223 | - $comment->save(); |
|
224 | - } |
|
225 | - |
|
226 | - $this->getNotificationHelper()->requestReceived($request); |
|
227 | - |
|
228 | - $this->redirect('requestSubmitted'); |
|
229 | - } |
|
230 | - |
|
231 | - /** |
|
232 | - * @return RequestValidationHelper |
|
233 | - */ |
|
234 | - protected function getRequestValidationHelper(): RequestValidationHelper |
|
235 | - { |
|
236 | - $banHelper = new BanHelper($this->getDatabase(), $this->getXffTrustProvider(), null); |
|
237 | - |
|
238 | - if ($this->validationHelper === null) { |
|
239 | - $this->validationHelper = new RequestValidationHelper( |
|
240 | - $banHelper, |
|
241 | - $this->getDatabase(), |
|
242 | - $this->getAntiSpoofProvider(), |
|
243 | - $this->getXffTrustProvider(), |
|
244 | - $this->getHttpHelper(), |
|
245 | - $this->getTorExitProvider(), |
|
246 | - $this->getSiteConfiguration()); |
|
247 | - } |
|
248 | - |
|
249 | - return $this->validationHelper; |
|
30 | + /** @var RequestValidationHelper do not use directly. */ |
|
31 | + private $validationHelper; |
|
32 | + |
|
33 | + /** |
|
34 | + * Main function for this page, when no specific actions are called. |
|
35 | + * @return void |
|
36 | + * @throws OptimisticLockFailedException |
|
37 | + * @throws Exception |
|
38 | + */ |
|
39 | + protected function main() |
|
40 | + { |
|
41 | + // dual mode page |
|
42 | + if (WebRequest::wasPosted()) { |
|
43 | + $request = $this->createNewRequest(null); |
|
44 | + $this->handleFormPost($request); |
|
45 | + } |
|
46 | + else { |
|
47 | + $this->requestClientHints(); |
|
48 | + $this->handleFormRefilling(); |
|
49 | + |
|
50 | + $this->setTemplate('request/request-form.tpl'); |
|
51 | + } |
|
52 | + } |
|
53 | + |
|
54 | + /** |
|
55 | + * Handles dynamic request forms. |
|
56 | + * @return void |
|
57 | + * @throws OptimisticLockFailedException |
|
58 | + * @throws Exception |
|
59 | + */ |
|
60 | + protected function dynamic() |
|
61 | + { |
|
62 | + $database = $this->getDatabase(); |
|
63 | + |
|
64 | + $pathInfo = WebRequest::pathInfo(); |
|
65 | + $domain = Domain::getByShortName($pathInfo[1], $database); |
|
66 | + if ($domain === false || !$domain->isEnabled()) { |
|
67 | + throw new ApplicationLogicException("This form is not available at this time."); |
|
68 | + } |
|
69 | + |
|
70 | + $form = RequestForm::getByPublicEndpoint($database, $pathInfo[2], $domain->getId()); |
|
71 | + |
|
72 | + if ($form === false || !$form->isEnabled()) { |
|
73 | + throw new ApplicationLogicException("This form is not available at this time."); |
|
74 | + } |
|
75 | + |
|
76 | + // dual mode page |
|
77 | + if (WebRequest::wasPosted()) { |
|
78 | + $request = $this->createNewRequest($form); |
|
79 | + $this->handleFormPost($request); |
|
80 | + } |
|
81 | + else { |
|
82 | + $this->requestClientHints(); |
|
83 | + $this->handleFormRefilling(); |
|
84 | + |
|
85 | + $renderer = new MarkdownRenderingHelper(); |
|
86 | + $this->assign('formPreamble', $renderer->doRender($form->getFormContent())); |
|
87 | + $this->assign('formUsernameHelp', $renderer->doRenderInline($form->getUsernameHelp())); |
|
88 | + $this->assign('formEmailHelp', $renderer->doRenderInline($form->getEmailHelp())); |
|
89 | + $this->assign('formCommentsHelp', $renderer->doRenderInline($form->getCommentHelp())); |
|
90 | + |
|
91 | + $this->setTemplate('request/request-form-dynamic.tpl'); |
|
92 | + } |
|
93 | + } |
|
94 | + |
|
95 | + /** |
|
96 | + * @param RequestForm|null $form |
|
97 | + * |
|
98 | + * @return Request |
|
99 | + * @throws ApplicationLogicException |
|
100 | + */ |
|
101 | + protected function createNewRequest(?RequestForm $form): Request |
|
102 | + { |
|
103 | + $database = $this->getDatabase(); |
|
104 | + |
|
105 | + $request = new Request(); |
|
106 | + |
|
107 | + if ($form === null) { |
|
108 | + $domain = 1; |
|
109 | + } |
|
110 | + else { |
|
111 | + $domain = $form->getDomain(); |
|
112 | + $request->setOriginForm($form->getId()); |
|
113 | + } |
|
114 | + |
|
115 | + $request->setQueue(RequestQueue::getDefaultQueue($database, $domain)->getId()); |
|
116 | + $request->setDatabase($database); |
|
117 | + $request->setDomain($domain); |
|
118 | + |
|
119 | + $request->setName(trim(WebRequest::postString('name'))); |
|
120 | + $request->setEmail(WebRequest::postEmail('email')); |
|
121 | + |
|
122 | + $request->setIp(WebRequest::remoteAddress()); |
|
123 | + $request->setForwardedIp(WebRequest::forwardedAddress()); |
|
124 | + |
|
125 | + $request->setUserAgent(WebRequest::userAgent()); |
|
126 | + |
|
127 | + return $request; |
|
128 | + } |
|
129 | + |
|
130 | + /** |
|
131 | + * @return Comment|null |
|
132 | + */ |
|
133 | + private function createComment() |
|
134 | + { |
|
135 | + $commentText = WebRequest::postString('comments'); |
|
136 | + if ($commentText === null || trim($commentText) === '') { |
|
137 | + return null; |
|
138 | + } |
|
139 | + |
|
140 | + $comment = new Comment(); |
|
141 | + $comment->setDatabase($this->getDatabase()); |
|
142 | + |
|
143 | + $comment->setVisibility('requester'); |
|
144 | + $comment->setUser(null); |
|
145 | + $comment->setComment($commentText); |
|
146 | + |
|
147 | + return $comment; |
|
148 | + } |
|
149 | + |
|
150 | + /** |
|
151 | + * @param Request $request |
|
152 | + * |
|
153 | + * @return ValidationError[] |
|
154 | + */ |
|
155 | + protected function validateRequest($request) |
|
156 | + { |
|
157 | + $validationHelper = $this->getRequestValidationHelper(); |
|
158 | + |
|
159 | + // These are arrays of ValidationError. |
|
160 | + $nameValidation = $validationHelper->validateName($request); |
|
161 | + $emailValidation = $validationHelper->validateEmail($request, WebRequest::postEmail('emailconfirm')); |
|
162 | + $otherValidation = $validationHelper->validateOther($request); |
|
163 | + |
|
164 | + $validationErrors = array_merge($nameValidation, $emailValidation, $otherValidation); |
|
165 | + |
|
166 | + return $validationErrors; |
|
167 | + } |
|
168 | + |
|
169 | + /** |
|
170 | + * @param Request $request |
|
171 | + * |
|
172 | + * @param Comment|null $comment |
|
173 | + * |
|
174 | + * @throws OptimisticLockFailedException |
|
175 | + * @throws Exception |
|
176 | + */ |
|
177 | + protected function saveAsEmailConfirmation(Request $request, $comment) |
|
178 | + { |
|
179 | + $request->generateEmailConfirmationHash(); |
|
180 | + $request->save(); |
|
181 | + |
|
182 | + if ($comment !== null) { |
|
183 | + $comment->setRequest($request->getId()); |
|
184 | + $comment->save(); |
|
185 | + } |
|
186 | + |
|
187 | + $trustedIp = $this->getXffTrustProvider()->getTrustedClientIp( |
|
188 | + $request->getIp(), |
|
189 | + $request->getForwardedIp()); |
|
190 | + |
|
191 | + $this->assign("ip", $trustedIp); |
|
192 | + $this->assign("id", $request->getId()); |
|
193 | + $this->assign("hash", $request->getEmailConfirm()); |
|
194 | + |
|
195 | + // Sends the confirmation email to the user. |
|
196 | + // FIXME: domains |
|
197 | + /** @var Domain $domain */ |
|
198 | + $domain = Domain::getById(1, $this->getDatabase()); |
|
199 | + $this->getEmailHelper()->sendMail( |
|
200 | + $domain->getEmailReplyAddress(), |
|
201 | + $request->getEmail(), |
|
202 | + "[ACC #{$request->getId()}] English Wikipedia Account Request", |
|
203 | + $this->fetchTemplate('request/confirmation-mail.tpl')); |
|
204 | + |
|
205 | + $this->redirect('emailConfirmationRequired'); |
|
206 | + } |
|
207 | + |
|
208 | + /** |
|
209 | + * @param Request $request |
|
210 | + * |
|
211 | + * @param Comment|null $comment |
|
212 | + * |
|
213 | + * @throws OptimisticLockFailedException |
|
214 | + * @throws Exception |
|
215 | + */ |
|
216 | + protected function saveWithoutEmailConfirmation(Request $request, $comment) |
|
217 | + { |
|
218 | + $request->setEmailConfirm(0); // fixme Since it can't be null |
|
219 | + $request->save(); |
|
220 | + |
|
221 | + if ($comment !== null) { |
|
222 | + $comment->setRequest($request->getId()); |
|
223 | + $comment->save(); |
|
224 | + } |
|
225 | + |
|
226 | + $this->getNotificationHelper()->requestReceived($request); |
|
227 | + |
|
228 | + $this->redirect('requestSubmitted'); |
|
229 | + } |
|
230 | + |
|
231 | + /** |
|
232 | + * @return RequestValidationHelper |
|
233 | + */ |
|
234 | + protected function getRequestValidationHelper(): RequestValidationHelper |
|
235 | + { |
|
236 | + $banHelper = new BanHelper($this->getDatabase(), $this->getXffTrustProvider(), null); |
|
237 | + |
|
238 | + if ($this->validationHelper === null) { |
|
239 | + $this->validationHelper = new RequestValidationHelper( |
|
240 | + $banHelper, |
|
241 | + $this->getDatabase(), |
|
242 | + $this->getAntiSpoofProvider(), |
|
243 | + $this->getXffTrustProvider(), |
|
244 | + $this->getHttpHelper(), |
|
245 | + $this->getTorExitProvider(), |
|
246 | + $this->getSiteConfiguration()); |
|
247 | + } |
|
248 | + |
|
249 | + return $this->validationHelper; |
|
250 | 250 | } |
251 | 251 | |
252 | - /** |
|
253 | - * @param Request $request |
|
254 | - * |
|
255 | - * @return void |
|
256 | - * @throws OptimisticLockFailedException |
|
257 | - */ |
|
258 | - protected function handleFormPost(Request $request): void |
|
259 | - { |
|
260 | - $comment = $this->createComment(); |
|
261 | - |
|
262 | - $validationErrors = $this->validateRequest($request); |
|
263 | - |
|
264 | - if (count($validationErrors) > 0) { |
|
265 | - foreach ($validationErrors as $validationError) { |
|
266 | - SessionAlert::error($validationError->getErrorMessage()); |
|
267 | - } |
|
268 | - |
|
269 | - // Preserve the data after an error |
|
270 | - WebRequest::setSessionContext('accountReq', |
|
271 | - array( |
|
272 | - 'username' => WebRequest::postString('name'), |
|
273 | - 'email' => WebRequest::postEmail('email'), |
|
274 | - 'comments' => WebRequest::postString('comments'), |
|
275 | - ) |
|
276 | - ); |
|
277 | - |
|
278 | - // Validation error, bomb out early. |
|
279 | - $this->redirect(); |
|
280 | - |
|
281 | - return; |
|
282 | - } |
|
283 | - |
|
284 | - // actually save the request to the database |
|
285 | - if ($this->getSiteConfiguration()->getEmailConfirmationEnabled()) { |
|
286 | - $this->saveAsEmailConfirmation($request, $comment); |
|
287 | - $this->savePrivateData($request); |
|
288 | - } |
|
289 | - else { |
|
290 | - $this->saveWithoutEmailConfirmation($request, $comment); |
|
291 | - $this->savePrivateData($request); |
|
292 | - } |
|
293 | - |
|
294 | - $this->getRequestValidationHelper()->postSaveValidations($request); |
|
295 | - } |
|
296 | - |
|
297 | - /** |
|
298 | - * @return void |
|
299 | - */ |
|
300 | - protected function handleFormRefilling(): void |
|
301 | - { |
|
302 | - // set the form values from the session context |
|
303 | - $context = WebRequest::getSessionContext('accountReq'); |
|
304 | - if ($context !== null && is_array($context)) { |
|
305 | - $this->assign('username', $context['username']); |
|
306 | - $this->assign('email', $context['email']); |
|
307 | - $this->assign('comments', $context['comments']); |
|
308 | - } |
|
309 | - |
|
310 | - // Clear it for a refresh |
|
311 | - WebRequest::setSessionContext('accountReq', null); |
|
312 | - } |
|
313 | - |
|
314 | - private function requestClientHints() |
|
315 | - { |
|
316 | - $hints = $this->getSiteConfiguration()->getAcceptClientHints(); |
|
317 | - |
|
318 | - $this->headerQueue[] = "Accept-CH: " . implode(', ', $hints); |
|
319 | - } |
|
320 | - |
|
321 | - private function savePrivateData(Request $request) |
|
322 | - { |
|
323 | - foreach ($this->getSiteConfiguration()->getAcceptClientHints() as $header) |
|
324 | - { |
|
325 | - $value = WebRequest::httpHeader($header); |
|
326 | - |
|
327 | - if($value === null){ |
|
328 | - continue; |
|
329 | - } |
|
330 | - |
|
331 | - $d = new RequestData(); |
|
332 | - $d->setDatabase($request->getDatabase()); |
|
333 | - $d->setRequest($request->getId()); |
|
334 | - |
|
335 | - $d->setType(RequestData::TYPE_CLIENTHINT); |
|
336 | - $d->setName($header); |
|
337 | - $d->setValue(WebRequest::httpHeader($header)); |
|
338 | - |
|
339 | - $d->save(); |
|
340 | - } |
|
341 | - } |
|
252 | + /** |
|
253 | + * @param Request $request |
|
254 | + * |
|
255 | + * @return void |
|
256 | + * @throws OptimisticLockFailedException |
|
257 | + */ |
|
258 | + protected function handleFormPost(Request $request): void |
|
259 | + { |
|
260 | + $comment = $this->createComment(); |
|
261 | + |
|
262 | + $validationErrors = $this->validateRequest($request); |
|
263 | + |
|
264 | + if (count($validationErrors) > 0) { |
|
265 | + foreach ($validationErrors as $validationError) { |
|
266 | + SessionAlert::error($validationError->getErrorMessage()); |
|
267 | + } |
|
268 | + |
|
269 | + // Preserve the data after an error |
|
270 | + WebRequest::setSessionContext('accountReq', |
|
271 | + array( |
|
272 | + 'username' => WebRequest::postString('name'), |
|
273 | + 'email' => WebRequest::postEmail('email'), |
|
274 | + 'comments' => WebRequest::postString('comments'), |
|
275 | + ) |
|
276 | + ); |
|
277 | + |
|
278 | + // Validation error, bomb out early. |
|
279 | + $this->redirect(); |
|
280 | + |
|
281 | + return; |
|
282 | + } |
|
283 | + |
|
284 | + // actually save the request to the database |
|
285 | + if ($this->getSiteConfiguration()->getEmailConfirmationEnabled()) { |
|
286 | + $this->saveAsEmailConfirmation($request, $comment); |
|
287 | + $this->savePrivateData($request); |
|
288 | + } |
|
289 | + else { |
|
290 | + $this->saveWithoutEmailConfirmation($request, $comment); |
|
291 | + $this->savePrivateData($request); |
|
292 | + } |
|
293 | + |
|
294 | + $this->getRequestValidationHelper()->postSaveValidations($request); |
|
295 | + } |
|
296 | + |
|
297 | + /** |
|
298 | + * @return void |
|
299 | + */ |
|
300 | + protected function handleFormRefilling(): void |
|
301 | + { |
|
302 | + // set the form values from the session context |
|
303 | + $context = WebRequest::getSessionContext('accountReq'); |
|
304 | + if ($context !== null && is_array($context)) { |
|
305 | + $this->assign('username', $context['username']); |
|
306 | + $this->assign('email', $context['email']); |
|
307 | + $this->assign('comments', $context['comments']); |
|
308 | + } |
|
309 | + |
|
310 | + // Clear it for a refresh |
|
311 | + WebRequest::setSessionContext('accountReq', null); |
|
312 | + } |
|
313 | + |
|
314 | + private function requestClientHints() |
|
315 | + { |
|
316 | + $hints = $this->getSiteConfiguration()->getAcceptClientHints(); |
|
317 | + |
|
318 | + $this->headerQueue[] = "Accept-CH: " . implode(', ', $hints); |
|
319 | + } |
|
320 | + |
|
321 | + private function savePrivateData(Request $request) |
|
322 | + { |
|
323 | + foreach ($this->getSiteConfiguration()->getAcceptClientHints() as $header) |
|
324 | + { |
|
325 | + $value = WebRequest::httpHeader($header); |
|
326 | + |
|
327 | + if($value === null){ |
|
328 | + continue; |
|
329 | + } |
|
330 | + |
|
331 | + $d = new RequestData(); |
|
332 | + $d->setDatabase($request->getDatabase()); |
|
333 | + $d->setRequest($request->getId()); |
|
334 | + |
|
335 | + $d->setType(RequestData::TYPE_CLIENTHINT); |
|
336 | + $d->setName($header); |
|
337 | + $d->setValue(WebRequest::httpHeader($header)); |
|
338 | + |
|
339 | + $d->save(); |
|
340 | + } |
|
341 | + } |
|
342 | 342 | } |
343 | 343 | \ No newline at end of file |
@@ -324,7 +324,7 @@ |
||
324 | 324 | { |
325 | 325 | $value = WebRequest::httpHeader($header); |
326 | 326 | |
327 | - if($value === null){ |
|
327 | + if ($value === null) { |
|
328 | 328 | continue; |
329 | 329 | } |
330 | 330 |
@@ -42,8 +42,7 @@ discard block |
||
42 | 42 | if (WebRequest::wasPosted()) { |
43 | 43 | $request = $this->createNewRequest(null); |
44 | 44 | $this->handleFormPost($request); |
45 | - } |
|
46 | - else { |
|
45 | + } else { |
|
47 | 46 | $this->requestClientHints(); |
48 | 47 | $this->handleFormRefilling(); |
49 | 48 | |
@@ -77,8 +76,7 @@ discard block |
||
77 | 76 | if (WebRequest::wasPosted()) { |
78 | 77 | $request = $this->createNewRequest($form); |
79 | 78 | $this->handleFormPost($request); |
80 | - } |
|
81 | - else { |
|
79 | + } else { |
|
82 | 80 | $this->requestClientHints(); |
83 | 81 | $this->handleFormRefilling(); |
84 | 82 | |
@@ -106,8 +104,7 @@ discard block |
||
106 | 104 | |
107 | 105 | if ($form === null) { |
108 | 106 | $domain = 1; |
109 | - } |
|
110 | - else { |
|
107 | + } else { |
|
111 | 108 | $domain = $form->getDomain(); |
112 | 109 | $request->setOriginForm($form->getId()); |
113 | 110 | } |
@@ -285,8 +282,7 @@ discard block |
||
285 | 282 | if ($this->getSiteConfiguration()->getEmailConfirmationEnabled()) { |
286 | 283 | $this->saveAsEmailConfirmation($request, $comment); |
287 | 284 | $this->savePrivateData($request); |
288 | - } |
|
289 | - else { |
|
285 | + } else { |
|
290 | 286 | $this->saveWithoutEmailConfirmation($request, $comment); |
291 | 287 | $this->savePrivateData($request); |
292 | 288 | } |
@@ -320,11 +316,10 @@ discard block |
||
320 | 316 | |
321 | 317 | private function savePrivateData(Request $request) |
322 | 318 | { |
323 | - foreach ($this->getSiteConfiguration()->getAcceptClientHints() as $header) |
|
324 | - { |
|
319 | + foreach ($this->getSiteConfiguration()->getAcceptClientHints() as $header) { |
|
325 | 320 | $value = WebRequest::httpHeader($header); |
326 | 321 | |
327 | - if($value === null){ |
|
322 | + if($value === null) { |
|
328 | 323 | continue; |
329 | 324 | } |
330 | 325 |