/**
* Get the login/profile status for the given e-mail and password.
*
* @return string One of the FrontendProfilesAuthentication::LOGIN_* constants.
* @param string $email Profile email address.
* @param string $password Profile password.
*/
public static function getLoginStatus($email, $password)
{
// redefine
$email = (string) $email;
$password = (string) $password;
// get profile id
$profileId = FrontendProfilesModel::getIdByEmail($email);
// encrypt password
$encryptedPassword = FrontendProfilesModel::getEncryptedString($password, FrontendProfilesModel::getSetting($profileId, 'salt'));
// get the status
$loginStatus = FrontendModel::getDB()->getVar('SELECT p.status FROM profiles AS p WHERE p.email = ? AND p.password = ?', array($email, $encryptedPassword));
// return
return empty($loginStatus) ? self::LOGIN_INVALID : $loginStatus;
}
/**
* Validate the form
*/
private function validateForm()
{
// is the form submitted
if ($this->frm->isSubmitted()) {
// get field
$txtEmail = $this->frm->getField('email');
// field is filled in?
if ($txtEmail->isFilled(FL::getError('EmailIsRequired'))) {
// valid email?
if ($txtEmail->isEmail(FL::getError('EmailIsInvalid'))) {
// email exists?
if (FrontendProfilesModel::existsByEmail($txtEmail->getValue())) {
// get profile id using the filled in email
$profileId = FrontendProfilesModel::getIdByEmail($txtEmail->getValue());
// get profile
$profile = FrontendProfilesModel::get($profileId);
// must be inactive
if ($profile->getStatus() != FrontendProfilesAuthentication::LOGIN_INACTIVE) {
$txtEmail->addError(FL::getError('ProfileIsActive'));
}
} else {
$txtEmail->addError(FL::getError('EmailIsInvalid'));
}
}
}
// valid login
if ($this->frm->isCorrect()) {
// activation URL
$mailValues['activationUrl'] = SITE_URL . FrontendNavigation::getURLForBlock('profiles', 'activate') . '/' . $profile->getSetting('activation_key');
// trigger event
FrontendModel::triggerEvent('profiles', 'after_resend_activation', array('id' => $profileId));
// send email
FrontendMailer::addEmail(FL::getMessage('RegisterSubject'), FRONTEND_MODULES_PATH . '/profiles/layout/templates/mails/register.tpl', $mailValues, $profile->getEmail(), '');
// redirect
$this->redirect(SELF . '?sent=true');
} else {
$this->tpl->assign('resendActivationHasError', true);
}
}
}
/**
* Validate the form
*/
private function validateForm()
{
// is the form submitted
if ($this->frm->isSubmitted()) {
// get field
$txtEmail = $this->frm->getField('email');
// field is filled in?
if ($txtEmail->isFilled(FL::getError('EmailIsRequired'))) {
// valid email?
if ($txtEmail->isEmail(FL::getError('EmailIsInvalid'))) {
// email exists?
if (!FrontendProfilesModel::existsByEmail($txtEmail->getValue())) {
$txtEmail->addError(FL::getError('EmailIsUnknown'));
}
}
}
// valid login
if ($this->frm->isCorrect()) {
// get profile id
$profileId = FrontendProfilesModel::getIdByEmail($txtEmail->getValue());
// generate forgot password key
$key = FrontendProfilesModel::getEncryptedString($profileId . microtime(), FrontendProfilesModel::getRandomString());
// insert forgot password key
FrontendProfilesModel::setSetting($profileId, 'forgot_password_key', $key);
// reset url
$mailValues['resetUrl'] = SITE_URL . FrontendNavigation::getURLForBlock('profiles', 'reset_password') . '/' . $key;
$mailValues['firstName'] = FrontendProfilesModel::getSetting($profileId, 'first_name');
$mailValues['lastName'] = FrontendProfilesModel::getSetting($profileId, 'last_name');
// trigger event
FrontendModel::triggerEvent('profiles', 'after_forgot_password', array('id' => $profileId));
// send email
FrontendMailer::addEmail(FL::getMessage('ForgotPasswordSubject'), FRONTEND_MODULES_PATH . '/profiles/layout/templates/mails/forgot_password.tpl', $mailValues, $txtEmail->getValue(), '');
// redirect
$this->redirect(SELF . '?sent=true');
} else {
$this->tpl->assign('forgotPasswordHasError', true);
}
}
}
/**
* Validate the form.
*/
private function validateForm()
{
// is the form submitted
if ($this->frm->isSubmitted()) {
// get fields
$txtEmail = $this->frm->getField('email');
$txtPassword = $this->frm->getField('password');
$chkRemember = $this->frm->getField('remember');
// required fields
$txtEmail->isFilled(FL::getError('EmailIsRequired'));
$txtPassword->isFilled(FL::getError('PasswordIsRequired'));
// both fields filled in
if ($txtEmail->isFilled() && $txtPassword->isFilled()) {
// valid email?
if ($txtEmail->isEmail(FL::getError('EmailIsInvalid'))) {
// get the status for the given login
$loginStatus = FrontendProfilesAuthentication::getLoginStatus($txtEmail->getValue(), $txtPassword->getValue());
// valid login?
if ($loginStatus !== FrontendProfilesAuthentication::LOGIN_ACTIVE) {
// get the error string to use
$errorString = sprintf(FL::getError('Profiles' . SpoonFilter::toCamelCase($loginStatus) . 'Login'), FrontendNavigation::getURLForBlock('profiles', 'resend_activation'));
// add the error to stack
$this->frm->addError($errorString);
// add the error to the template variables
$this->tpl->assign('loginError', $errorString);
}
}
}
// valid login
if ($this->frm->isCorrect()) {
// get profile id
$profileId = FrontendProfilesModel::getIdByEmail($txtEmail->getValue());
// login
FrontendProfilesAuthentication::login($profileId, $chkRemember->getChecked());
// update salt and password for Dieter's security features
FrontendProfilesAuthentication::updatePassword($profileId, $txtPassword->getValue());
// trigger event
FrontendModel::triggerEvent('profiles', 'after_logged_in', array('id' => $profileId));
// querystring
$queryString = urldecode(SpoonFilter::getGetValue('queryString', null, SITE_URL));
// redirect
$this->redirect($queryString);
}
}
}
