THEUSER::confirm_email()

Complexity

Conditions	16
Paths	44

Size

Total Lines	84
Code Lines	50

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	8
CRAP Score	151.7971

Importance

Changes	2
Bugs	0	Features	0

<?php
    public function confirm_email($token, $redirect = true) {
        $arg = '';
        if (strstr($token, '::')) {
            $arg = '::';
        }
        if (strstr($token, '-')) {
            $arg = '-';
        }
        [$user_id, $registrationtoken] = explode($arg, $token);

        if (!is_numeric($user_id) || $registrationtoken == '') {
            return false;
        }
        $q = $this->db->query("SELECT expires, data
            FROM    tokens
            WHERE   token = :token
            AND   type = 'E'
        ", [':token' => $registrationtoken])->first();

        if ($q) {
            $expires = $q['expires'];
            $expire_time = strtotime($expires);
            if ($expire_time < time()) {
                global $PAGE;
                if ($PAGE && $redirect) {
                    $PAGE->error_message("Sorry, that token seems to have expired");
                }

                return false;
            }

            [$user_id, $email] = explode('::', $q['data']);

            // if we are logged in as someone else don't change the email
            if ($this->user_id() != 0 && $this->user_id() != $user_id) {
                return false;
            }

            // if the user isn't logged in then try and load the
            // details
            if ($this->user_id() == 0 && !$this->init($user_id)) {
                return false;
            }

            $details = [
                'email' => $email,
                'firstname' => $this->firstname(),
                'lastname' => $this->lastname(),
                'postcode' => $this->postcode(),
                'url' => $this->url(),
                'optin' => $this->optin(),
                'user_id' => $user_id,
            ];
            $ret = $this->_update($details);

            if ($ret) {
                // and remove the token to be tidy
                $this->db->query("DELETE
                    FROM    tokens
                    WHERE   token = :token
                    AND   type = 'E'
                ", [':token' => $registrationtoken]);

                $this->email = $email;

                # Check Stripe email
                $subscription = new MySociety\TheyWorkForYou\Subscription($this);
                if ($subscription->stripe) {
                    $subscription->update_email($email);
                }

                $URL = new \MySociety\TheyWorkForYou\Url('userconfirmed');
                $URL->insert(['email' => 't']);
                $redirecturl = $URL->generate();
                if ($redirect) {
                    $this->login($redirecturl, 'session');
                } else {
                    return true;
                }
            } else {
                return false;
            }
        } else {
            return false;
        }