+global\contentSystemAuthors::__form()

Complexity

Conditions	55
Paths	> 20000

Size

Total Lines	353
Code Lines	196

Duplication

Lines	0
Ratio	0 %

Importance

Changes	3
Bugs	0	Features	0

<?php
        public function __form()

__form uses the super-global variable $_POST which is generally not recommended.

        {
            // Handle unknown context
            if (!in_array($this->_context['action'], array('new', 'edit'))) {
                Administration::instance()->errorPageNotFound();
            }

            if ($this->_context['action'] === 'new' && !Symphony::Author()->isDeveloper() && !Symphony::Author()->isManager()) {
                Administration::instance()->throwCustomError(
                    __('You are not authorised to access this page.'),
                    __('Access Denied'),
                    Page::HTTP_STATUS_UNAUTHORIZED
                );
            }

            if (isset($this->_context['flag'])) {
                $time = Widget::Time();

                switch ($this->_context['flag']) {
                    case 'saved':
                        $message = __('Author updated at %s.', array($time->generate()));
                        break;
                    case 'created':
                        $message = __('Author created at %s.', array($time->generate()));
                }

                $this->pageAlert(
                    $message

The variable $message does not seem to be defined for all execution paths leading up to this point.

                    . ' <a href="' . SYMPHONY_URL . '/system/authors/new/" accesskey="c">'
                    . __('Create another?')
                    . '</a> <a href="' . SYMPHONY_URL . '/system/authors/" accesskey="a">'
                    . __('View all Authors')
                    . '</a>',
                    Alert::SUCCESS
                );
            }

            $this->setPageType('form');
            $isOwner = false;
            $isEditing = ($this->_context['action'] === 'edit');

            if (isset($_POST['fields'])) {
                $author = $this->_Author;
            } elseif ($isEditing) {
                if (!$author_id = $this->_context['id']) {
                    redirect(SYMPHONY_URL . '/system/authors/');
                }

                if (!$author = AuthorManager::fetchByID($author_id)) {
                    Administration::instance()->throwCustomError(
                        __('The author profile you requested does not exist.'),
                        __('Author not found'),
                        Page::HTTP_STATUS_NOT_FOUND
                    );
                }
            } else {
                $author = new Author;
            }

            if ($isEditing && $author->get('id') === Symphony::Author()->get('id')) {
                $isOwner = true;
            }

            if ($isEditing && !$isOwner && !Symphony::Author()->isDeveloper() && !Symphony::Author()->isManager()) {
                Administration::instance()->throwCustomError(
                    __('You are not authorised to edit other authors.'),
                    __('Access Denied'),
                    Page::HTTP_STATUS_FORBIDDEN
                );
            }

            $this->setTitle(__(($this->_context['action'] === 'new' ? '%2$s &ndash; %3$s' : '%1$s &ndash; %2$s &ndash; %3$s'),
                array($author->getFullName(), __('Authors'), __('Symphony'))));
            $this->appendSubheading(($this->_context['action'] === 'new' ? __('Untitled') : $author->getFullName()));
            $this->insertBreadcrumbs(array(
                Widget::Anchor(__('Authors'), SYMPHONY_URL . '/system/authors/'),
            ));

            // Essentials
            $group = new XMLElement('fieldset');
            $group->setAttribute('class', 'settings');
            $group->appendChild(new XMLElement('legend', __('Essentials')));

            $div = new XMLElement('div');
            $div->setAttribute('class', 'two columns');

            $label = Widget::Label(__('First Name'), null, 'column');
            $label->appendChild(Widget::Input('fields[first_name]', $author->get('first_name')));
            $div->appendChild((isset($this->_errors['first_name']) ? Widget::Error($label,
                $this->_errors['first_name']) : $label));


            $label = Widget::Label(__('Last Name'), null, 'column');
            $label->appendChild(Widget::Input('fields[last_name]', $author->get('last_name')));
            $div->appendChild((isset($this->_errors['last_name']) ? Widget::Error($label,
                $this->_errors['last_name']) : $label));

            $group->appendChild($div);

            $label = Widget::Label(__('Email Address'));
            $label->appendChild(Widget::Input('fields[email]', $author->get('email'), 'text',
                array('autocomplete' => 'off')));
            $group->appendChild((isset($this->_errors['email']) ? Widget::Error($label,
                $this->_errors['email']) : $label));

            $this->Form->appendChild($group);

            // Login Details
            $group = new XMLElement('fieldset');
            $group->setAttribute('class', 'settings');
            $group->appendChild(new XMLElement('legend', __('Login Details')));

            $div = new XMLElement('div');

            $label = Widget::Label(__('Username'));
            $label->appendChild(Widget::Input('fields[username]', $author->get('username'), 'text',
                array('autocomplete' => 'off')));
            $div->appendChild((isset($this->_errors['username']) ? Widget::Error($label,
                $this->_errors['username']) : $label));

            // Only developers can change the user type. Primary account should NOT be able to change this
            if ((Symphony::Author()->isDeveloper() || Symphony::Author()->isManager()) && !$author->isPrimaryAccount()) {

                // Create columns
                $div->setAttribute('class', 'two columns');
                $label->setAttribute('class', 'column');

                // User type
                $label = Widget::Label(__('User Type'), null, 'column');

                $options = array(
                    array('author', false, __('Author')),
                    array('manager', $author->isManager(), __('Manager'))
                );

                if (Symphony::Author()->isDeveloper()) {
                    $options[] = array('developer', $author->isDeveloper(), __('Developer'));
                }

                $label->appendChild(Widget::Select('fields[user_type]', $options));
                $div->appendChild($label);
            }

            $group->appendChild($div);

            // Password
            $fieldset = new XMLElement('fieldset', null, array('class' => 'two columns', 'id' => 'password'));
            $legend = new XMLElement('legend', __('Password'));
            $help = new XMLElement('i', __('Leave password fields blank to keep the current password'));
            $fieldset->appendChild($legend);
            $fieldset->appendChild($help);

            /*
                Password reset rules:
                - Primary account can edit all accounts.
                - Developers can edit all developers, managers and authors, and their own.
                - Managers can edit all Authors, and their own.
                - Authors can edit their own.
            */
            if ($isEditing && !(
                    // All accounts can edit their own
                    $isOwner
                    // Managers can edit all Authors, and their own.
                    || (Symphony::Author()->isManager() && $author->isAuthor())
                    // Primary account can edit all accounts.
                    || Symphony::Author()->isPrimaryAccount()
                    // Developers can edit all developers, managers and authors, and their own.
                    || Symphony::Author()->isDeveloper() && $author->isPrimaryAccount() === false
                )
            ) {
                $fieldset->setAttribute('class', 'three columns');

                $label = Widget::Label(null, null, 'column');
                $label->appendChild(Widget::Input('fields[old-password]', null, 'password',
                    array('placeholder' => __('Old Password'), 'autocomplete' => 'off')));
                $fieldset->appendChild((isset($this->_errors['old-password']) ? Widget::Error($label,
                    $this->_errors['old-password']) : $label));
            }

            // New password
            $placeholder = ($isEditing ? __('New Password') : __('Password'));
            $label = Widget::Label(null, null, 'column');
            $label->appendChild(Widget::Input('fields[password]', null, 'password',
                array('placeholder' => $placeholder, 'autocomplete' => 'off')));
            $fieldset->appendChild((isset($this->_errors['password']) ? Widget::Error($label,
                $this->_errors['password']) : $label));

            // Confirm password
            $label = Widget::Label(null, null, 'column');
            $label->appendChild(Widget::Input('fields[password-confirmation]', null, 'password',
                array('placeholder' => __('Confirm Password'), 'autocomplete' => 'off')));
            $fieldset->appendChild((isset($this->_errors['password-confirmation']) ? Widget::Error($label,
                $this->_errors['password']) : $label));

            $group->appendChild($fieldset);

            // Auth token
            if (Symphony::Author()->isDeveloper() || Symphony::Author()->isManager()) {
                $label = Widget::Label();
                $group->appendChild(Widget::Input('fields[auth_token_active]', 'no', 'hidden'));
                $input = Widget::Input('fields[auth_token_active]', 'yes', 'checkbox');

                if ($author->isTokenActive()) {
                    $input->setAttribute('checked', 'checked');
                }

                $temp = SYMPHONY_URL . '/login/' . $author->createAuthToken() . '/';
                $label->setValue(__('%s Allow remote login via',
                        array($input->generate())) . ' <a href="' . $temp . '">' . $temp . '</a>');
                $group->appendChild($label);
            }

            $label = Widget::Label(__('Default Area'));

            $sections = SectionManager::fetch(null, 'ASC', 'sortorder');

            $options = array();

            // If the Author is the Developer, allow them to set the Default Area to
            // be the Sections Index.
            if ($author->isDeveloper()) {
                $options[] = array(
                    '/blueprints/sections/',
                    $author->get('default_area') === '/blueprints/sections/',
                    __('Sections Index')
                );
            }

            if (is_array($sections) && !empty($sections)) {
                foreach ($sections as $s) {
                    $options[] = array($s->get('id'), $author->get('default_area') === $s->get('id'), $s->get('name'));
                }
            }

            /**
             * Allows injection or manipulation of the Default Area dropdown for an Author.
             * Take care with adding in options that are only valid for Developers, as if a
             * normal Author is set to that option, they will be redirected to their own
             * Author record.
             *
             *
             * @delegate AddDefaultAuthorAreas
             * @since Symphony 2.2
             * @param string $context
             * '/system/authors/'
             * @param array $options
             * An associative array of options, suitable for use for the Widget::Select
             * function. By default this will be an array of the Sections in the current
             * installation. New options should be the path to the page after the `SYMPHONY_URL`
             * constant.
             * @param string $default_area
             * The current `default_area` for this Author.
             */
            Symphony::ExtensionManager()->notifyMembers('AddDefaultAuthorAreas', '/system/authors/', array(
                'options' => &$options,
                'default_area' => $author->get('default_area')
            ));

            $label->appendChild(Widget::Select('fields[default_area]', $options));
            $group->appendChild($label);

            $this->Form->appendChild($group);

            // Custom Language Selection
            $languages = Lang::getAvailableLanguages();
            if (count($languages) > 1) {
                // Get language names
                asort($languages);

                $group = new XMLElement('fieldset');
                $group->setAttribute('class', 'settings');
                $group->appendChild(new XMLElement('legend', __('Custom Preferences')));

                $label = Widget::Label(__('Language'));

                $options = array(
                    array(null, is_null($author->get('language')), __('System Default'))
                );

                foreach ($languages as $code => $name) {
                    $options[] = array($code, $code === $author->get('language'), $name);
                }
                $select = Widget::Select('fields[language]', $options);
                $label->appendChild($select);
                $group->appendChild($label);

                $this->Form->appendChild($group);
            }

            // Administration password double check
            if ($isEditing && !$isOwner) {
                $group = new XMLElement('fieldset');
                $group->setAttribute('class', 'settings');
                $group->setAttribute('id', 'confirmation');
                $group->appendChild(new XMLElement('legend', __('Confirmation')));
                $group->appendChild(new XMLELement('p', __('Please confirm changes to this author with your password.'),
                    array('class' => 'help')));

                $label = Widget::Label(__('Password'));
                $label->appendChild(Widget::Input('fields[confirm-change-password]', null, 'password', array(
                    'autocomplete' => 'off',
                    'placeholder' => __('Your Password')
                )));
                $group->appendChild(
                    isset($this->_errors['confirm-change-password']) ? Widget::Error($label,
                        $this->_errors['confirm-change-password']) : $label
                );

                $this->Form->appendChild($group);
            }

            // Actions
            $div = new XMLElement('div');
            $div->setAttribute('class', 'actions');

            $div->appendChild(Widget::Input('action[save]',
                ($this->_context['action'] === 'edit' ? __('Save Changes') : __('Create Author')), 'submit',
                array('accesskey' => 's')));

            if ($isEditing && !$isOwner && !$author->isPrimaryAccount()) {
                $button = new XMLElement('button', __('Delete'));
                $button->setAttributeArray(array(
                    'name' => 'action[delete]',
                    'class' => 'button confirm delete',
                    'title' => __('Delete this author'),
                    'type' => 'submit',
                    'accesskey' => 'd',
                    'data-message' => __('Are you sure you want to delete this author?')
                ));
                $div->appendChild($button);
            }

            $this->Form->appendChild($div);

            /**
             * Allows the injection of custom form fields given the current `$this->Form`
             * object. Please note that this custom data should be saved in own extension
             * tables and that modifying `tbl_authors` to house your data is highly discouraged.
             *
             * @delegate AddElementstoAuthorForm
             * @since Symphony 2.2
             * @param string $context
             * '/system/authors/'
             * @param XMLElement $form
             * The contents of `$this->Form` after all the default form elements have been appended.
             * @param Author $author
             * The current Author object that is being edited
             */
            Symphony::ExtensionManager()->notifyMembers('AddElementstoAuthorForm', '/system/authors/', array(
                'form' => &$this->Form,
                'author' => $author
            ));
        }