public function blockedaccountAction()
{
if (strtolower(trim($this->session->accountStatus)) !== "blocked") {
$this->_helper->layout->disableLayout();
$this->_helper->viewRenderer->setNoRender();
header("Location: " . "https://" . $_SERVER['HTTP_HOST']);
return;
}
$this->_helper->layout->disableLayout();
//Store all useful session variables for displaying the view.
$this->view->userid = $this->session->userid;
$this->view->authSource = $this->session->authSource;
$this->view->fullName = $this->session->fullName;
$this->view->authUid = $this->session->authUid;
$this->view->returnUrl = $this->session->authreferer;
$this->session->accountStatus = "";
//Clear session
SamlAuth::logout($this->session);
}
public function indexAction()
{
trackPage('/');
if (isset($_COOKIE['rememberme']) && $this->session->userid === null) {
//save permaLink in order to handle it after login
if (array_key_exists('p', $_GET)) {
$this->session->permaLink = $_GET['p'];
}
if (APPLICATION_ENV == "production") {
header('Location: https://' . $_SERVER['HTTP_HOST'] . '/users/login');
} else {
header('Location: http://' . $_SERVER['HTTP_HOST'] . '/users/logindev2');
}
return;
}
/*
* Check if user is signed in from a different service or browser tab.
*/
if ($this->session->isLocked()) {
$this->session->unLock();
}
if ($this->session !== null && $this->session->developsession === true) {
//do nothing. It's local development instance where no SImpleSaml installed
} else {
$auth = SamlAuth::isAuthenticated();
if ($auth === false) {
//if logged in but not authdicated the clear session
if (isset($this->session->userid) && is_numeric($this->session->userid)) {
SamlAuth::logout($this->session);
$this->_helper->layout->disableLayout();
$this->_helper->viewRenderer->setNoRender();
header('Location: http://' . $_SERVER["HTTP_HOST"]);
return;
}
} else {
if (isset($this->session) === false || isset($this->session->userid) === false || is_numeric($this->session->userid) === false) {
//if authenticated but not logged in setup user session
$this->session = new Zend_Session_Namespace('default');
$attributes = $auth->getAttributes();
$uid = $attributes['idp:uid'][0];
$_SESSION['identity'] = $uid;
$_SESSION['logouturl'] = $auth->getLogoutURL();
$this->session->samlattrs = $attributes;
$this->session->samlauthsource = isset($attributes["idp:sourceIdentifier"]) ? $attributes["idp:sourceIdentifier"][0] : "";
SamlAuth::setupSamlAuth($this->session);
if ($this->session->isNewUser === true) {
header('Location: https://' . $_SERVER['HTTP_HOST'] . '/saml/newaccount');
return;
}
//Check and redirect if user account is blocked
if ($this->session->accountStatus === "blocked") {
header('Location: https://' . $_SERVER['HTTP_HOST'] . '/saml/blockedaccount');
return;
}
//Check and redirect if user is deleted
if ($this->session->userDeleted === true) {
header('Location: https://' . $_SERVER['HTTP_HOST'] . '/saml/deletedprofile');
return;
}
}
}
}
$this->session->appCriteria = null;
$this->session->pplCriteria = null;
$this->session->certLogin = false;
$this->view->username = $this->session->username;
if ($this->session->userid !== null) {
$ppl = new Default_Model_Researchers();
$ppl->filter->id->equals($this->session->userid);
$user = $ppl->items[0];
$this->view->user = $user;
/* Get count of user requests */
$urs = new Default_Model_UserRequests();
$s2 = new Default_Model_PermissionsFilter();
$s2->actor->equals($this->session->userguid);
$s3 = new Default_Model_UserRequestStatesFilter();
$s3->name->equals("submitted");
$urs->filter->chain($s2->chain($s3, "AND"), "AND");
$reqsitems = $urs->items;
$uritems = array_merge($reqsitems);
//Fetch user requests for NILs
if (userIsAdminOrManager($this->session->userid) === false && userIsNIL($this->session->userid) === true) {
$nilusers = new Default_Model_UserRequests();
$s1 = new Default_Model_UserRequestTypesFilter();
$s1->id->numequals(3);
$s2 = new Default_Model_ResearchersFilter();
$s2->countryid->equals($this->session->userCountryID);
$s3 = new Default_Model_UserRequestStatesFilter();
$s3->name->equals("submitted");
$s4 = new Default_Model_ActorGroupsFilter();
$s4->id->numequals(-3);
$nilusers->filter->chain($s1->chain($s2->chain($s3->chain($s4, "AND"), "AND"), "AND"), "AND");
if (count($nilusers->items) > 0) {
$uritems = array_merge($uritems, $nilusers->items);
$uritems = array_filter($uritems, 'uniqueDBObjectFilter');
}
}
$this->view->userRequests = count($uritems);
}
$p = '';
if ($this->session->permaLink != '') {
$p = $this->session->permaLink;
$this->session->permaLink = '';
} elseif (array_key_exists('p', $_GET)) {
$p = $_GET["p"];
} else {
//TODO : needs review
$p = $_SERVER["QUERY_STRING"];
$pos = strpos($p, "p=");
if ($pos === false) {
$p = '';
} else {
$p = substr($p, 2, strlen($p) - 2);
}
}
if ($p != "") {
if ($p == "reports") {
$this->view->permaLink = $p;
} elseif ($p == "brokenlinks") {
$this->view->permaLink = $p;
} elseif (substr($p, 0, 6) == "about:") {
$this->view->permaLink = $p;
} elseif (substr($p, 0, 5) == "apps:") {
$this->view->permaLink = $p;
} elseif (substr($p, 0, 7) == "people:") {
$this->view->permaLink = $p;
} else {
$pp = base64_decode($p);
$pp = mb_convert_encoding($pp, 'UTF-8');
$this->view->permaLink = $pp;
}
}
}
