public function authControl()
{
Session::logout();
$controller = new DashboardController(true);
$controller->addSuccessMessage("You have successfully logged out.");
return $controller->go();
}
private function _defineTplInformation()
{
$tplFile = array();
$tplVars = array();
if (\Session::isLogged()) {
$this->wallabag->action($this->action, $this->url, $this->id, FALSE, $this->autoclose);
$tplFile = Tools::getTplFile($this->view);
$tplVars = array_merge($this->vars, $this->wallabag->displayView($this->view, $this->id));
} elseif (ALLOW_REGISTER && isset($_GET['registerform'])) {
Tools::logm('register');
$tplFile = Tools::getTplFile('register');
} elseif (ALLOW_REGISTER && isset($_GET['register'])) {
$this->wallabag->createNewUser($_POST['newusername'], $_POST['password4newuser'], $_POST['newuseremail']);
Tools::redirect();
} elseif (isset($_SERVER['REMOTE_USER'])) {
if ($this->wallabag->store->userExists($_SERVER['REMOTE_USER'])) {
$this->wallabag->login($this->referer);
} else {
$this->wallabag->messages->add('e', _('login failed: user doesn\'t exist'));
Tools::logm('user doesn\'t exist');
$tplFile = Tools::getTplFile('login');
$tplVars['http_auth'] = 1;
}
} else {
$tplFile = Tools::getTplFile('login');
$tplVars['http_auth'] = 0;
\Session::logout();
}
$this->file = $tplFile;
$this->vars = array_merge($this->defaultVars, $tplVars);
}
/**
* Attempt to log in user via private API key and redirect to specified success or failure URLs based on result
* with msg parameter set.
* Expected $_GET parameters:
* u: email address
* k: private API key
* failure_redir: failure redirect URL
* success_redir: success redirect URL
*/
public function control()
{
$this->disableCaching();
if (!isset($_GET['success_redir']) || !isset($_GET['failure_redir']) || $_GET['success_redir'] == "" || $_GET['failure_redir'] == "") {
if (!isset($_GET['success_redir']) || $_GET['success_redir'] == "") {
$controller = new LoginController(true);
$controller->addErrorMessage('No success redirect specified');
return $controller->go();
}
if (!isset($_GET['failure_redir']) || $_GET['failure_redir'] == "") {
$controller = new LoginController(true);
$controller->addErrorMessage('No failure redirect specified');
return $controller->go();
}
} else {
$this->success_redir = $_GET['success_redir'];
$this->failure_redir = $_GET['failure_redir'];
if (!isset($_GET['u'])) {
$this->fail('User is not set.');
}
if (!isset($_GET['k'])) {
$this->fail('API key is not set.');
}
if ($this->isLoggedIn()) {
Session::logout();
}
$owner_dao = DAOFactory::getDAO('OwnerDAO');
if ($_GET['u'] == '' || $_GET['k'] == '') {
if ($_GET['u'] == '') {
$this->fail("Email must not be empty.");
} else {
$this->fail("API key must not be empty.");
}
} else {
$user_email = $_GET['u'];
if (get_magic_quotes_gpc()) {
$user_email = stripslashes($user_email);
}
$owner = $owner_dao->getByEmail($user_email);
if (!$owner) {
$this->fail("Invalid email.");
} elseif (!$owner->is_activated) {
$error_msg = 'Inactive account.';
$this->fail($error_msg);
// If the credentials supplied by the user are incorrect
} elseif (!$owner_dao->isOwnerAuthorizedViaPrivateAPIKey($user_email, $_GET['k'])) {
$error_msg = 'Invalid API key.';
$this->fail($error_msg);
} else {
// user has logged in sucessfully this sets variables in the session
Session::completeLogin($owner);
$owner_dao->updateLastLogin($user_email);
$owner_dao->resetFailedLogins($user_email);
$owner_dao->clearAccountStatus($user_email);
$this->succeed("Logged in successfully.");
}
}
}
}
public function testIsLogged()
{
$this->assertFalse($this->object->isLogged());
$this->object->setCurrentUser(1, 'test', array('admin'));
$this->assertTrue($this->object->isLogged());
$this->object->logout();
$this->assertFalse($this->object->isLogged());
}
public function authControl()
{
Session::logout();
if (!$this->redirectToThinkUpLLCEndpoint('logout.php')) {
$controller = new InsightStreamController(true);
$controller->addSuccessMessage("You have successfully logged out.");
return $controller->go();
}
}
public function authControl()
{
$user_logon = DAOFactory::getDAO('UserLogonDAO');
if (isset($_GET['reason'])) {
$reason = 2;
} else {
$reason = 1;
}
$user_logon->userLogoutUpdate($reason);
Session::logout();
if (!$this->redirectToSternIndiaEndpoint('logout.php')) {
$controller = new LoginController(true);
if ($reason) {
$controller->reason = $reason;
}
$controller->addSuccessMessage("You have successfully logged out.");
return $controller->go();
}
}
/**
* Test Crawler->crawl
*/
public function testCrawl()
{
$crawler = Crawler::getInstance();
// $crawler->registerPlugin('nonexistent', 'TestFauxPluginOne');
// $crawler->registerCrawlerPlugin('TestFauxPluginOne');
// $this->expectException( new Exception("The TestFauxPluginOne object does not have a crawl method.") );
// $crawler->crawl();
$crawler->registerPlugin('hellothinkup', 'HelloThinkUpPlugin');
$crawler->registerCrawlerPlugin('HelloThinkUpPlugin');
$this->assertEqual($crawler->getPluginObject("hellothinkup"), "HelloThinkUpPlugin");
$builders = $this->buildData();
$this->simulateLogin('*****@*****.**', true);
$crawler->crawl();
$this->simulateLogin('*****@*****.**');
$crawler->crawl();
Session::logout();
$this->expectException(new UnauthorizedUserException('You need a valid session to launch the crawler.'));
$crawler->crawl();
}
public function testControl()
{
$builders = $this->buildData();
$config = Config::getInstance();
$escaped_site_root_path = str_replace('/', '\\/', $config->getValue('site_root_path'));
$controller = new TestAuthAPIController(true);
// No username, no API secret provided
// This isn't an API call, so present HTML error output
$results = $controller->go();
$this->assertPattern('/You must <a href="' . $escaped_site_root_path . 'session\\/login.php">log in<\\/a> to do this./', $results);
// No API secret provided
// This isn't an API call, so present HTML error output
$_GET['un'] = '*****@*****.**';
$results = $controller->go();
$this->assertPattern('/You must <a href="' . $escaped_site_root_path . 'session\\/login.php">log in<\\/a> to do this./', $results);
// Wrong API secret provided
$_GET['as'] = 'fail_me';
$results = $controller->go();
$this->assertPattern("/UnauthorizedUserException: Unauthorized API call/", $results);
$controller = new TestAuthAPIController(true);
// Wrong username provided
$_GET['as'] = 'c9089f3c9adaf0186f6ffb1ee8d6501c';
$_GET['un'] = 'fail_me';
$results = $controller->go();
$this->assertPattern("/UnauthorizedUserException: Unauthorized API call/", $results);
// Working request
$_GET['un'] = '*****@*****.**';
$_GET['as'] = 'c9089f3c9adaf0186f6ffb1ee8d6501c';
$results = $controller->go();
$this->assertPattern('/{"result":"success"}/', $results);
$config = Config::getInstance();
$this->assertEqual(SessionCache::get('user'), '*****@*****.**');
// Now that _SESSION['user'] is set, we shouldn't need to provide un/as to use this controller
// Also, the result will be returned as HTML, not JSON
unset($_GET['as']);
$results = $controller->go();
$this->assertPattern('/<html><body>Success<\\/body><\\/html>/', $results);
// And just to make sure, if we 'logout', we should be denied access now
Session::logout();
$results = $controller->go();
$this->assertPattern('/You must <a href="' . $escaped_site_root_path . 'session\\/login.php">log in<\\/a> to do this./', $results);
}
public function testControl()
{
$builders = $this->buildData();
$controller = new TestAuthAPIController(true);
// No username, no API secret provided
$results = $controller->go();
$this->assertPattern("/UnauthorizedUserException: Unauthorized API call/", $results);
// No API secret provided
$_GET['un'] = '*****@*****.**';
$results = $controller->go();
$this->assertPattern("/UnauthorizedUserException: Unauthorized API call/", $results);
// Wrong API secret provided
$_GET['as'] = 'fail_me';
$results = $controller->go();
$this->assertPattern("/UnauthorizedUserException: Unauthorized API call/", $results);
// Wrong username provided
$_GET['as'] = Session::getAPISecretFromPassword('XXX');
$_GET['un'] = 'fail_me';
$results = $controller->go();
$this->assertPattern("/UnauthorizedUserException: Unauthorized API call/", $results);
// Working request
$_GET['un'] = '*****@*****.**';
$_GET['as'] = Session::getAPISecretFromPassword('XXX');
$results = $controller->go();
$this->assertPattern('/{"result":"success"}/', $results);
$config = Config::getInstance();
$this->assertEqual($_SESSION[$config->getValue('source_root_path')]['user'], '*****@*****.**');
// Now that _SESSION['user'] is set, we shouldn't need to provide un/as to use this controller
// Also, the result will be returned as HTML, not JSON
unset($_GET['as']);
$results = $controller->go();
$this->assertPattern('/<html/', $results);
// And just to make sure, if we 'logout', we should be denied access now
Session::logout();
$results = $controller->go();
$this->assertPattern("/UnauthorizedUserException: Unauthorized API call/", $results);
}
public function __construct($route)
{
if (!isset($_SESSION)) {
//buscar opciones en el PHP.INI
session_start(['use_only_cookies' => 1, 'auto_start' => 1]);
}
if (!isset($_SESSION['status'])) {
$_SESSION['status'] = false;
}
if ($_SESSION['status']) {
$this->route = !isset($_GET['r']) ? 'home' : $route;
switch ($this->route) {
case 'home':
$controller = new HomeController();
$controller->load_view('home');
break;
case 'usuarios':
$controller = new HomeController();
if (!isset($_POST['r'])) {
$controller->load_view('users');
} else {
if ($_POST['r'] == 'user-add') {
$controller->load_view('user-add');
} else {
if ($_POST['r'] == 'user-edit') {
$controller->load_view('user-edit');
} else {
if ($_POST['r'] == 'user-delete') {
$controller->load_view('user-delete');
}
}
}
}
break;
case 'generos':
$controller = new HomeController();
if (!isset($_POST['r'])) {
$controller->load_view('genres');
} else {
if ($_POST['r'] == 'genre-add') {
$controller->load_view('genre-add');
} else {
if ($_POST['r'] == 'genre-edit') {
$controller->load_view('genre-edit');
} else {
if ($_POST['r'] == 'genre-delete') {
$controller->load_view('genre-delete');
}
}
}
}
break;
case 'peliculas':
$controller = new HomeController();
$controller->load_view('movies');
break;
case 'salir':
$controller = new Session();
$controller->logout();
break;
default:
$controller = new Error404Controller();
break;
}
} else {
if (!isset($_POST['user']) && !isset($_POST['pass'])) {
$controller = new HomeController();
$controller->load_view('login');
} else {
$controller = new Session();
$session = $controller->login($_POST['user'], $_POST['pass']);
if (is_array($session)) {
$_SESSION['status'] = true;
foreach ($session as $row) {
$_SESSION['user'] = $row['user'];
$_SESSION['email'] = $row['email'];
$_SESSION['name'] = $row['name'];
$_SESSION['birthday'] = $row['birthday'];
$_SESSION['pass'] = $row['pass'];
$_SESSION['role'] = $row['role'];
}
header('Location: ./');
} else {
$controller = new HomeController();
$controller->load_view('login');
header("Location: ./?error={$session}");
}
}
}
}
private function logout()
{
$session = new Session($this->plugins, $this->settings);
echo $session->logout();
}
/**
* User log out
*/
private function logout()
{
Base::requireLogged();
// Deletes session, thus logging the user out
Session::logout();
// Redirects to home page
Base::redirect('', 'Successfully logged out');
}
public function go()
{
Session::logout();
header('Location:' . SOURCE_ROOT_PATH);
}
private static function processLogOut()
{
if (isset($_POST['ACTION']) && $_POST['ACTION'] == 'LOGOUT') {
Session::logout();
}
}
function index()
{
Session::logout();
Tools::redirect('login');
}
/**
*
* function: logout
* Controller for logout behavior
* @access public
* @return string
*/
function logout()
{
Session::logout();
header('Location: /');
}
$_action = isset($_POST['action']) ? $_POST['action'] : 'none';
//
// Create the session PHP object and pass a reference to $communicator.
//
$session = new Session($communicator);
//
// Process the action.
//
switch ($_action) {
case 'login':
$userName = stripslashes(isset($_POST['username']) ? $_POST['username'] : '******');
$userPassword = stripslashes(isset($_POST['password']) ? $_POST['password'] : '******');
printJson($session->login($userName, $userPassword));
break;
case 'logout':
printJson($session->logout());
break;
case 'send':
$message = stripslashes(isset($_POST['message']) ? $_POST['message'] : '');
printJson($session->send($message));
break;
case 'getUpdates':
printJson($session->getUpdates());
break;
case 'getInitialUsers':
printJson($session->getInitialUsers());
break;
default:
printJson("InvalidActionException");
break;
}
/**
* @author FreelaPHP schuindt
* @version 1.0
* @todo metodo que realiza a alteração e persistencia de senha do usuario no banco de dados
*
*
* */
public function alterarSenha()
{
try {
$senha = null;
$view = null;
$senha = Authentication::password($_POST[$this->User->name]['senha']);
$_POST[$this->User->name]['id'] = Session::read('Usuario.usuarios_id');
$_POST = Utils::sanitazeArray($_POST);
if (isset($_POST[$this->User->name]['view'])) {
$view = $_POST[$this->User->name]['view'];
unset($_POST[$this->User->name]['view']);
}
$this->User->data = $_POST[$this->User->name];
$this->User->validate = $this->User->validate_alteraSenha;
if ($this->User->validates()) {
if (isset($_POST[$this->User->name]['senha'])) {
$emailSenha = $_POST[$this->User->name]['confirm_senha'];
unset($_POST[$this->User->name]['confirm_senha']);
$_POST[$this->User->name]['senha'] = $senha;
}
if ($this->User->genericUpdate($_POST[$this->User->name])) {
if (Session::read('Usuario.email')) {
$email = new Email();
$email->useTable = 'emails_sistema';
$registro = $email->find('first', array('tag' => 'senha_recuperada'));
#faço a troca de siglas para personalizar o email
$array = array('__SENHA__' => $emailSenha, '__DATE__' => date('d/m/Y h:i:s'), '__URL__' => Router::url(array('Pages', 'login')));
#envio o email de confirmação para o meu cliente cadastrado
$objeto = new MailPHPMailer();
$objeto->setAssunto('Senha Alterada com sucesso!');
$objeto->setRemetente();
$objeto->setDestinatario(Session::read('Usuario.email'), Session::read('Usuario.nome'));
$objeto->setBody(str_replace(array_keys($array), array_values($array), $registro[0]['Email']['corpo_mail']));
$objeto->sendMail();
}
Session::logout();
$url = Router::url();
echo json_encode(array('funcao' => "sucessoForm( 'Alteração de senha foi efetuada com sucesso, por favor logar-se novamente!', '#UsuarioEditForm' ); redirect('{$url}');"));
}
} else {
echo json_encode(array('erros' => $this->User->validateErros, 'form' => 'UsuarioEditForm'));
}
} catch (Exception $ex) {
echo json_encode(array('erros' => array($ex->getMessage()), 'form' => 'UsuarioEditForm'));
}
}
public function logout()
{
//session_destroy();
//session_write_close();
Session::logout();
}
$app->stop();
});
$app->get('/login', function () use($app, $db, $session) {
$code = $app->request->get('code');
$redirect_uri = $app->request->get('redirect_uri');
$client = Config::oauth();
$api = new Kneu\Api();
$token = $api->oauthToken($client['id'], $client['secret'], $code, $redirect_uri);
$session->init($token, $api);
Helpers::sendJson(array('token' => $session->getKey(), 'user_type' => $session->getUserType(), 'timeout' => $session->getTimeout(), 'is_test_completed' => $session->getUser()->getIsTestCompleted()));
});
$app->get('/logout', function () use($session) {
if (!checkAuth()) {
return;
}
$status = $session->logout();
Helpers::sendJson(array('status' => $status));
});
$app->get('/answers', function () use($session) {
if (!checkAuth()) {
return;
}
Helpers::sendJson($session->getUser()->getAnswers());
});
$app->post('/answers', function () use($session) {
if (!checkAuth()) {
return;
}
$answers = Helpers::getRequestJson();
$response = $session->getUser()->saveAnswers($answers);
Helpers::sendJson($response);
/**
* log out the poche user. It cleans the session.
* @todo add the return value
* @return boolean
*/
public function logout()
{
$this->user = array();
Session::logout();
Tools::logm('logout');
Tools::redirect();
}
<?php
// FUNCTIONS BEGIN
require_once dirname(__FILE__) . '/inc/includes.php';
/*
TODO: penser a ajouter la gestion des utilisateurs et des fichiers sauvegarder via XML:
http://php.net/manual/en/function.simplexml-load-string.php
*/
if (isset($_GET['logout'])) {
Session::logout();
header('Location: index.php');
die;
} else {
if (isset($_POST['login']) && isset($_POST['password'])) {
$user = User::getUser('./conf/', $_POST['login']);
if ($user && $user->getPassword() != null && Session::login($_POST['login'], User::getHashPassword($_POST['password']), $user->getLogin(), $user->getPassword())) {
if (Session::isLogged() && $_SESSION['username'] != null && !is_dir('./' . SAVED_PATH . '/' . $_SESSION['username'])) {
mkdir('./' . SAVED_PATH . '/' . $_SESSION['username'], 0705);
}
header('Location: index.php');
die;
}
}
}
raintpl::$tpl_dir = './tpl/';
// template directory
raintpl::$cache_dir = "./cache/";
// cache directory
raintpl::$base_url = url();
// base URL of blog
raintpl::configure('path_replace', false);
private function logout()
{
global $dbName;
$session = new Session($this->database, $dbName, $this->plugins, $this->settings);
echo $session->logout();
}
<?php
// Basic setup :
session_start();
require_once "engine/config.php";
// Database library :
require_once "engine/database.engine.php";
require_once "engine/logout/sql.php";
$database = new Sql();
// Form library :
require_once "engine/form.engine.php";
$form = new Form();
// Session library :
require_once "engine/session.engine.php";
$session = new Session();
$session->logout();
header("Location: login.php");
?>
}
});
//=============================================================================
//Session
//=============================================================================
Flight::route('POST /v1/session/login', function () {
try {
$object = Session::login();
Flight::ok($object);
} catch (Exception $exception) {
Flight::error($exception);
}
});
Flight::route('POST /v1/session/logout', function () {
try {
$object = Session::logout();
Flight::ok($object);
} catch (Exception $exception) {
Flight::error($exception);
}
});
//=============================================================================
//UnitData
//=============================================================================
Flight::route('GET /v1/data/unitdata/@id', function ($id) {
try {
$object = UnitData::select($id);
Flight::ok($object);
} catch (Exception $exception) {
Flight::error($exception);
}
public function control()
{
Session::logout();
$this->redirectToThinkUpLLCEndpoint();
}
function logout()
{
Session::logout();
}
