Apps\Controller\Front\User\ActionApprove::approve()

Complexity

Conditions	5
Paths	3

Size

Total Lines	26
Code Lines	12

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function approve($email, $token)
    {
        // validate token length and email format
        if (App::$User->isAuth() || Str::length($token) < 32 || !Str::isEmail($email)) {
            throw new ForbiddenException(__('Wrong recovery data'));
        }

        // lets find token&email
        /** @var User $user */
        $user = App::$User->where('approve_token', $token)
            ->where('email', '=', $email)
            ->first();

        // check if record is exist by token and email
        if (!$user) {

$user is of type Apps\ActiveRecord\User, thus it always evaluated to true.

            throw new ForbiddenException();
        }

        // update approve_token value to confirmed
        $user->approve_token = null;
        $user->save();

        // open session and redirect to main
        $loginModel = new FormLogin();
        $loginModel->openSession($user);
        $this->response->redirect('/'); // session is opened, refresh page
    }