/** * Controller Action * This will be called validating the form * @param string $action */ public function controller($action) { $this->setAction($action); if ($this->isDeleting()) { $deleteViewFile = $this->_v('event.' . zbase_section() . '.delete.pre.view.file', false); if (!empty($deleteViewFile)) { $this->_viewParams['viewFile'] = $deleteViewFile; } } if ($this->hasEntity()) { if ($this->entity() instanceof \Zbase\Widgets\EntityInterface) { $page = []; if ($this->entity() instanceof \Zbase\Post\PostInterface) { $this->entity()->postPageProperties($this); } else { if (method_exists($this->entity(), 'pageProperty')) { $this->entity()->pageProperty($this); } else { $page['title'] = $this->entity()->title(); $page['headTitle'] = $this->entity()->title(); zbase_view_page_details(['page' => $page]); } } if ($this->entity()->hasSoftDelete()) { if ($this->entity()->trashed()) { $this->_mode = 'display'; } else { if ($action == 'restore' || $action == 'ddelete') { return zbase_redirect()->to(zbase_url_previous()); } } } $inputs = zbase_route_inputs(); if (zbase_request_method() == 'post') { $inputs = zbase_request_inputs(); } $ret = $this->entity()->widgetController(zbase_request_method(), $action, $inputs, $this); if ($this->entity() instanceof \Zbase\Post\PostInterface) { $actionMessages = $this->entity()->postMessages(); } else { $actionMessages = $this->entity()->getActionMessages($action); } if (!empty($actionMessages)) { foreach ($actionMessages as $alertType => $alertMessages) { if (is_array($alertMessages)) { foreach ($alertMessages as $alertMessage) { zbase_alert($alertType, $alertMessage); } } } } if ($this->isCreating()) { if (zbase_is_dev()) { if (method_exists($this->entity(), 'fakeValue')) { $entity = $this->_entity; $this->setValues($entity::fakeValue()); } } } if (zbase_request_method() == 'post') { if (!empty($this->isValueToSession())) { $sessionPrefix = $this->_v('values.session.prefix', null); foreach ($inputs as $k => $v) { if ($k == '_token') { continue; } zbase_session_set($sessionPrefix . $k, $v); } return $this->_postEvent($action); } } if (!empty($ret)) { if (zbase_request_method() == 'post') { if (is_bool($ret) && zbase_request_is_ajax()) { zbase()->json()->addVariable($action . '_sucess', 1); } if ($this->isCreating()) { if ($this->entity() instanceof \Zbase\Post\PostInterface) { zbase_session_flash($this->entity()->postTableName() . 'new', $this->entity()->postId()); } else { zbase_session_flash($this->entity()->entityName() . 'new', $this->entity()->id()); } } return $this->_postEvent($action); } if ($action == 'restore' || $action == 'ddelete') { return $this->_postEvent($action); } } } else { return zbase_abort(404); } } else { if ($this->hasDefaultValues()) { $this->setValues($this->defaultValues()); } } return false; }
/** * Make admin login like a user * Will set the needed session * * @param integer $userId The user Id * @return void */ function zbase_auth_duplex($userId) { zbase_session_set('_duplexSession', $userId); }
/** * Update email Address Request * Process the link that was sent into the email when * a user wanted to update his email address to a new email address * * routename: update-email-request, expect: email and token * @return */ public function emailUpdateRequestVerify() { $email = $this->getRouteParameter('email', false); $token = $this->getRouteParameter('token', false); if (!empty($email) && !empty($token)) { $user = zbase_user_by('email', $email); if ($user instanceof \Zbase\Entity\Laravel\User\User) { if (zbase_auth_has()) { $updated = $user->checkEmailRequestUpdate($token); if (!empty($updated)) { zbase_session_set('update-email-address', true); return redirect()->to(zbase_url_from_route('home')); } else { zbase_alert('error', 'There was an error updating your email address. Kindly try again.'); } } else { zbase_session_set('__loginRedirect', zbase_url_from_current()); return redirect()->to(zbase_url_from_route('login')); } } } return $this->notfound(); }
/** * Create a route * @param string $name The Route Name * @param array $route The Route configuration * @return Response */ function zbase_route_response($name, $route) { if (!empty(zbase_is_maintenance())) { return zbase_response(view(zbase_view_file('maintenance'))); } $redirect = zbase_value_get($route, 'redirect', false); if (!empty($redirect)) { return redirect()->to($redirect); } $response = zbase_value_get($route, 'response', false); if (!empty($response)) { return $response; } /** * If we are using username in routes, * we have to check if the username exists in DB. * This is checked in zbase_route_username_get() * if the zbase_route_username_get() returns false, means * that the route is not a username or username didn't exists. * Here we check against all other Routes if the prefix is in our * list of routes, if not found, throw NotFoundHttpException */ $useUsernameRoute = zbase_route_username(); $usernameRoute = zbase_route_username_get(); $usernameRouteCheck = zbase_data_get($route, 'usernameRouteCheck', true); if (empty($usernameRouteCheck)) { /** * Will not check for username route */ $useUsernameRoute = false; } //if($usernameRoute === false && !empty($useUsernameRoute)) if ($name == 'index' && zbase_auth_has() && !empty($useUsernameRoute)) { return redirect()->to('/' . zbase_auth_real()->username); } if ($usernameRoute === false && !empty($useUsernameRoute)) { $uri = zbase_url_uri(); $adminKey = zbase_admin_key(); if (!empty($uri)) { $uriEx = explode('/', $uri); if (!empty($uriEx)) { foreach ($uriEx as $uriV) { if (!empty($uriV)) { /** * If it isn't an admin key, check it against given Routes */ if ($uriV !== $adminKey) { $routes = zbase_config_get('routes', []); if (!empty($routes)) { foreach ($routes as $rName => $r) { if (!empty($r['enable']) && !empty($r['url'])) { $urlEx = explode('/', $r['url']); if (!empty($urlEx)) { foreach ($urlEx as $urlExV) { if (!empty($urlExV)) { if ($uriV == $urlExV) { /** * Found it, valid URL */ $validUrlPrefix = true; } /** * Will deal only with the first not empty value so break it. */ break; } } } } if (!empty($validUrlPrefix)) { /** * Found it, break it */ $name = $rName; $route = $r; break; } } } } else { return redirect(zbase_url_from_route('home')); } /** * Will deal only with the first not empty value so break it. */ break; } } if (empty($validUrlPrefix)) { /** * Only if routeName is not the index */ if ($name != 'index') { // $response = new \Zbase\Exceptions\NotFoundHttpException(); // return $response->render(zbase_request(), $response); } } } } } $usernameRoutePrefix = zbase_route_username_prefix(); $originalRouteName = str_replace($usernameRoutePrefix, '', $name); zbase()->setCurrentRouteName($name); $guest = true; $authed = false; $guestOnly = false; $middleware = !empty($route['middleware']) ? $route['middleware'] : false; $backend = !empty($route['backend']) ? $route['backend'] : false; if ($name == 'password-reset' && zbase_auth_has()) { \Auth::guard()->logout(); return redirect(zbase_url_from_current()); } if (!empty($backend)) { // zbase_in_back(); } if (preg_match('/\\?usernameroute/', zbase_url_uri()) > 0 && !empty($useUsernameRoute) && zbase_auth_has()) { return redirect()->to('/' . zbase_auth_user()->username() . '/home'); } if (!empty($useUsernameRoute) && zbase_auth_has() && $usernameRoute != zbase_auth_user()->username()) { return redirect(zbase_url_from_route($originalRouteName, [$usernameRoutePrefix => zbase_auth_user()->username()])); } if (!empty($middleware)) { if (is_array($middleware)) { $access = isset($middleware['access']) ? $middleware['access'] : false; if (!empty($access) && is_array($access)) { if (!zbase_auth_has()) { zbase_session_set('__loginRedirect', zbase_url_from_current()); return redirect(zbase_url_from_route('login')); } if (zbase_auth_has() && !zbase_auth_is($access)) { return zbase_abort(401, ucfirst($access) . ' is needed to access the page.'); } } else { $guest = isset($middleware['guest']) ? $middleware['guest'] : false; $authed = isset($middleware['auth']) ? $middleware['auth'] : false; $adminAuthed = isset($middleware['admin']) ? $middleware['admin'] : false; if ($adminAuthed) { $authed = true; } $guestOnly = isset($middleware['guestOnly']) ? $middleware['guestOnly'] : false; } } } if (empty($access)) { if (!empty($backend)) { if (!empty($usernameRoute)) { /** * If user is loggedIn and this is admin side and this is not logIn page, * redirect to users dashboard. * User can only access his own dashboard via /{usernameroute?}/admin */ if (zbase_auth_has() && zbase_auth_is(zbase_route_username_minimum_access()) && zbase_is_back() && $usernameRoute != zbase_auth_user()->username()) { return redirect(zbase_url_from_route('admin', [$usernameRoutePrefix => zbase_auth_user()->username])); } if ((empty(zbase_auth_has()) || !zbase_auth_is('user')) && $name != $usernameRoutePrefix . 'admin.login') { zbase_session_set('__loginRedirect', zbase_url_from_current()); return redirect(zbase_url_from_route('admin.login')); } } else { if ((empty(zbase_auth_has()) || !zbase_auth_is('admin')) && $name != 'admin.login') { zbase_session_set('__loginRedirect', zbase_url_from_current()); return redirect(zbase_url_from_route('admin.login')); } } } else { if (!empty($guestOnly) && zbase_auth_has()) { return redirect(zbase_url_from_route('home')); } if (!empty($usernameRoute)) { if (!empty($authed) && !zbase_auth_has() && $name != $usernameRoutePrefix . 'login') { zbase_session_set('__loginRedirect', zbase_url_from_current()); return redirect(zbase_url_from_route('login')); } } else { if (!empty($authed) && !zbase_auth_has() && $name != 'login') { zbase_session_set('__loginRedirect', zbase_url_from_current()); return redirect(zbase_url_from_route('login')); } } } } $params = zbase_route_inputs(); $requestMethod = zbase_request_method(); $controller = !empty($route['controller']) ? $route['controller'] : null; $command = !empty($route['command']) ? $route['command'] : false; if (!empty($command) && $command instanceof \Closure) { $command(); exit; } if (!empty($controller) && !empty($controller['name']) && !empty($route['controller']['enable'])) { $controllerName = !empty($route['controller']['name']) ? $route['controller']['name'] : null; $controllerMethod = !empty($route['controller']['method'][$requestMethod]) ? $route['controller']['method'][$requestMethod] : (!empty($route['controller']['method']) ? $route['controller']['method'] : 'index'); if (!empty($controllerName)) { $controllerConfig = zbase_config_get('controller.class.' . $controllerName, null); if (!empty($controllerConfig) && !empty($controllerConfig['enable'])) { $controllerClass = zbase_controller_create_name(zbase_config_get('controller.class.' . $controllerName . '.name', Zbase\Http\Controllers\__FRAMEWORK__\PageController::class)); $controllerObject = zbase_object_factory($controllerClass, !empty($route['controller']['params']) ? $route['controller']['params'] : []); zbase()->setController($controllerObject->setName($controllerName)->setActionName($controllerMethod)->setRouteParameters($params)); zbase_view_page_details($route); return zbase_response($controllerObject->{$controllerMethod}()); } } } $view = !empty($route['view']) ? $route['view'] : null; if (!empty($view) && !empty($view['name']) && !empty($route['view']['enable'])) { zbase_view_page_details($route); if (!empty($route['view']['content'])) { $params['content'] = zbase_data_get($route['view']['content'], null); } if ($view['name'] == 'type.js') { zbase_response_format_set('javascript'); } return zbase_response(zbase_view_render(zbase_view_file($view['name']), $params)); } }