*/
/**
* @class memberController
* @author NAVER (developers@xpressengine.com)
* Controller class of member module
*/
class MemberController extends Member
{
/**
* Initialization
*
* @return void
*/
function init()
{
}
/**
* Log-in by checking user_id and password
*
* @param string $user_id
* @param string $password
* @param string $keep_signed
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberLogin($user_id = null, $password = null, $keep_signed = null)
{
if(!$user_id && !$password && Context::getRequestMethod() == 'GET')
{
$this->setRedirectUrl(getNotEncodedUrl(''));
throw new Rhymix\Framework\Exception('null_user_id');
}
$config = MemberModel::getMemberConfig();
// User ID, email address or phone number
if (!$user_id)
{
$user_id = (string)Context::get('user_id');
}
if (!$user_id && $config->identifiers && in_array('email_address', $config->identifiers))
{
$user_id = (string)Context::get('email_address');
}
if (!$user_id && $config->identifiers && in_array('phone_number', $config->identifiers))
{
$user_id = (string)Context::get('phone_number');
}
if (!$user_id)
{
throw new Rhymix\Framework\Exception('null_user_id');
}
// Password
if (!$password)
{
$password = (string)Context::get('password');
}
if (!$password)
{
throw new Rhymix\Framework\Exception('null_password');
}
// Autologin option
if (!$keep_signed)
{
$keep_signed = Context::get('keep_signed');
}
// Attempt login
$output = $this->doLogin($user_id, $password, $keep_signed === 'Y' ? true : false);
if (!$output->toBool())
{
return $output;
}
// Get info of member who just logged in
$member_info = Context::get('logged_info');
// Check change_password_date
$limit_date = $config->change_password_date;
// Check if change_password_date is set
if($limit_date > 0)
{
if($member_info->change_password_date < date ('YmdHis', strtotime ('-' . $limit_date . ' day')))
{
$msg = sprintf(lang('msg_change_password_date'), $limit_date);
$change_password_url = getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyPassword');
return $this->setRedirectUrl($change_password_url, new BaseObject(-1, $msg));
}
}
// Delete all previous authmail if login is successful
$args = new stdClass();
$args->member_srl = $member_info->member_srl;
executeQuery('member.deleteAuthMail', $args);
// If a device token is supplied, attempt to register it.
Rhymix\Modules\Member\Controllers\Device::getInstance()->autoRegisterDevice($member_info->member_srl);
if(!$config->after_login_url)
{
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', '');
}
else
{
$returnUrl = $config->after_login_url;
}
return $this->setRedirectUrl($returnUrl, $output);
}
/**
* Log-out
*
* @return Object
*/
function procMemberLogout()
{
// Call a trigger before log-out (before)
$logged_info = Context::get('logged_info');
$trigger_output = ModuleHandler::triggerCall('member.doLogout', 'before', $logged_info);
if(!$trigger_output->toBool()) return $trigger_output;
// Destroy session information
Rhymix\Framework\Session::logout();
self::clearMemberCache($logged_info->member_srl);
// Call a trigger after log-out (after)
ModuleHandler::triggerCall('member.doLogout', 'after', $logged_info);
// If a device key is present, unregister it.
Rhymix\Modules\Member\Controllers\Device::getInstance()->autoUnregisterDevice($logged_info->member_srl);
if (isset($_COOKIE['device_key']))
{
Rhymix\Framework\Cookie::remove('device_key');
}
// Set redirect URL.
$output = new BaseObject();
$redirect_url = Context::get('redirect_url');
if ($redirect_url && Rhymix\Framework\URL::isInternalURL($redirect_url))
{
$output->redirect_url = $redirect_url;
}
else
{
$config = ModuleModel::getModuleConfig('member');
if($config->after_logout_url)
{
$output->redirect_url = $config->after_logout_url;
}
}
return $output;
}
/**
* Scrap document
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberScrapDocument()
{
$document_srl = intval(Context::get('document_srl') ?: Context::get('target_srl'));
if(!$document_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
$oDocument = DocumentModel::getDocument($document_srl);
// Check document
if(!$oDocument->isAccessible())
{
throw new Rhymix\Framework\Exception('msg_is_secret');
}
$module_info = ModuleModel::getModuleInfoByModuleSrl($oDocument->get('module_srl'));
$logged_info = Context::get('logged_info');
$grant = ModuleModel::getGrant($module_info, $logged_info);
// Check access to module of the document
if(!$grant->access)
{
throw new Rhymix\Framework\Exceptions\NotPermitted;
}
// Check grant to module of the document
if(isset($grant->list) && isset($grant->view) && (!$grant->list || !$grant->view))
{
throw new Rhymix\Framework\Exceptions\NotPermitted;
}
// Check consultation option
if(isset($grant->consultation_read) && $module_info->consultation == 'Y' && !$grant->consultation_read && !$oDocument->isGranted())
{
throw new Rhymix\Framework\Exceptions\NotPermitted;
}
// Find default scrap folder
$args = new stdClass();
$args->member_srl = $logged_info->member_srl;
$args->name = '/DEFAULT/';
$output = executeQuery('member.getScrapFolderList', $args);
if($output->toBool() && is_object($output->data) && $output->data->folder_srl)
{
$default_folder_srl = $output->data->folder_srl;
}
else
{
$output = $this->migrateMemberScrappedDocuments($logged_info->member_srl);
if ($output instanceof BaseObject)
{
return $output;
}
else
{
$default_folder_srl = $output;
}
}
// Variables
$args = new stdClass();
$args->document_srl = intval($document_srl);
$args->member_srl = intval($logged_info->member_srl);
$args->folder_srl = intval($default_folder_srl);
$args->user_id = $oDocument->get('user_id');
$args->user_name = $oDocument->get('user_name');
$args->nick_name = $oDocument->get('nick_name');
$args->target_member_srl = $oDocument->get('member_srl');
$args->title = $oDocument->get('title');
// Check if already scrapped
$output = executeQuery('member.getScrapDocument', $args);
if($output->data->count)
{
throw new Rhymix\Framework\Exception('msg_alreay_scrapped');
}
// Call trigger (before)
$trigger_output = ModuleHandler::triggerCall('member.procMemberScrapDocument', 'before', $args);
if (!$trigger_output->toBool())
{
return $trigger_output;
}
// Insert
$output = executeQuery('member.addScrapDocument', $args);
if(!$output->toBool())
{
return $output;
}
// Call trigger (after)
ModuleHandler::triggerCall('member.procMemberScrapDocument', 'after', $args);
//$this->setError(-1);
$this->setMessage('success_registed');
}
/**
* Delete a scrap
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberDeleteScrap()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
$document_srl = intval(Context::get('document_srl') ?: Context::get('target_srl'));
if(!$document_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Variables
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->document_srl = $document_srl;
// Call trigger (before)
$trigger_output = ModuleHandler::triggerCall('member.deleteScrapDocument', 'before', $args);
if (!$trigger_output->toBool())
{
return $trigger_output;
}
// Delete
$output = executeQuery('member.deleteScrapDocument', $args);
if (!$output->toBool())
{
return $output;
}
// Call trigger (after)
ModuleHandler::triggerCall('member.deleteScrapDocument', 'after', $args);
}
/**
* Move a scrap to another folder
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberMoveScrapFolder()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
$document_srl = intval(Context::get('document_srl') ?: Context::get('target_srl'));
$folder_srl = intval(Context::get('folder_srl'));
if(!$document_srl || !$folder_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check that the target folder exists and belongs to member
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $folder_srl;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(!count($output->data))
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Move
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->document_srl = $document_srl;
$args->folder_srl = $folder_srl;
return executeQuery('member.updateScrapDocumentFolder', $args);
}
/**
* Create a scrap folder
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsertScrapFolder()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
// Get new folder name
$folder_name = Context::get('name');
$folder_name = escape(trim(utf8_normalize_spaces($folder_name)));
if(!$folder_name)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check existing folder with same name
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->name = $folder_name;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(count($output->data) || $folder_name === lang('default_folder'))
{
throw new Rhymix\Framework\Exception('msg_folder_alreay_exists');
}
// Create folder
$args = new stdClass;
$args->folder_srl = getNextSequence();
$args->member_srl = $logged_info->member_srl;
$args->name = $folder_name;
$args->list_order = $args->folder_srl;
$this->add('folder_srl', $args->folder_srl);
return executeQuery('member.insertScrapFolder', $args);
}
/**
* Rename a scrap folder
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberRenameScrapFolder()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
// Get new folder name
$folder_srl = intval(Context::get('folder_srl'));
$folder_name = Context::get('name');
$folder_name = escape(trim(utf8_normalize_spaces($folder_name)));
if(!$folder_srl || !$folder_name)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check that the original folder exists and belongs to member
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $folder_srl;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(!count($output->data))
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
if(array_first($output->data)->name === '/DEFAULT/')
{
throw new Rhymix\Framework\Exception('msg_folder_is_default');
}
// Check existing folder with same name
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->not_folder_srl = $folder_srl;
$args->name = $folder_name;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(count($output->data) || $folder_name === lang('default_folder'))
{
throw new Rhymix\Framework\Exception('msg_folder_alreay_exists');
}
// Rename folder
$args = new stdClass;
$args->folder_srl = $folder_srl;
$args->name = $folder_name;
return executeQuery('member.updateScrapFolder', $args);
}
/**
* Delete a scrap folder
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberDeleteScrapFolder()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
// Get folder_srl to delete
$folder_srl = intval(Context::get('folder_srl'));
if(!$folder_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check that the folder exists and belongs to member
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $folder_srl;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(!count($output->data))
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
if(array_first($output->data)->name === '/DEFAULT/')
{
throw new Rhymix\Framework\Exception('msg_folder_is_default');
}
// Check that the folder is empty
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $folder_srl;
$output = executeQueryArray('member.getScrapDocumentList', $args);
if(count($output->data))
{
throw new Rhymix\Framework\Exception('msg_folder_not_empty');
}
// Delete folder
$args = new stdClass;
$args->folder_srl = $folder_srl;
return executeQuery('member.deleteScrapFolder', $args);
}
/**
* Migrate a member's scrapped documents to the new folder system.
*
* @param int $member_srl
* @return int|BaseObject
*/
function migrateMemberScrappedDocuments($member_srl)
{
$args = new stdClass;
$args->folder_srl = getNextSequence();
$args->member_srl = $member_srl;
$args->name = '/DEFAULT/';
$args->list_order = $args->folder_srl;
$output = executeQuery('member.insertScrapFolder', $args);
if(!$output->toBool())
{
return $output;
}
$output = executeQuery('member.updateScrapFolderFromNull', $args);
if(!$output->toBool())
{
return $output;
}
return $args->folder_srl;
}
/**
* Save posts
* @deprecated - instead Document Controller - procDocumentTempSave method use
* @return Object
*/
function procMemberSaveDocument()
{
return new BaseObject(0, 'Deprecated method');
}
/**
* Delete the post
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberDeleteSavedDocument()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
$document_srl = intval(Context::get('document_srl') ?: Context::get('target_srl'));
if(!$document_srl) throw new Rhymix\Framework\Exceptions\InvalidRequest;
$oDocument = DocumentModel::getDocument($document_srl);
if ($oDocument->get('member_srl') != $logged_info->member_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
$configStatusList = DocumentModel::getStatusList();
if ($oDocument->get('status') != $configStatusList['temp'])
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Variables
$oDocumentController = getController('document');
$oDocumentController->deleteDocument($document_srl);
}
/**
* Delete an autologin
*/
function procMemberDeleteAutologin()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
$autologin_id = intval(Context::get('autologin_id'));
$autologin_key = Context::get('autologin_key');
if (!$autologin_id || !$autologin_key)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
$args = new stdClass;
$args->autologin_id = $autologin_id;
$args->autologin_key = $autologin_key;
$output = executeQueryArray('member.getAutologin', $args);
if ($output->toBool() && $output->data)
{
$autologin_info = array_first($output->data);
if ($autologin_info->member_srl == $logged_info->member_srl)
{
$output = executeQuery('member.deleteAutologin', $args);
if ($output->toBool())
{
$this->add('deleted', 'Y');
}
else
{
$this->add('deleted', 'N');
}
}
else
{
$this->add('deleted', 'N');
}
}
else
{
$this->add('deleted', 'N');
}
}
/**
* Check values when member joining
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberCheckValue()
{
$name = Context::get('name');
$value = Context::get('value');
if(!$value) return;
$config = MemberModel::getMemberConfig();
// Check if logged-in
$logged_info = Context::get('logged_info');
switch($name)
{
case 'user_id' :
// Check denied ID
if(MemberModel::isDeniedID($value)) return new BaseObject(0,'denied_user_id');
// Check if duplicated
$member_srl = MemberModel::getMemberSrlByUserID($value);
if($member_srl && $logged_info->member_srl != $member_srl ) return new BaseObject(0,'msg_exists_user_id');
break;
case 'nick_name' :
// Check denied ID
if(MemberModel::isDeniedNickName($value))
{
return new BaseObject(0,'denied_nick_name');
}
// Check if duplicated
if($config->allow_duplicate_nickname !== 'Y')
{
$member_srl = MemberModel::getMemberSrlByNickName($value);
if($member_srl && $logged_info->member_srl != $member_srl ) return new BaseObject(0,'msg_exists_nick_name');
}
break;
case 'email_address' :
// Check managed Email Host
if(MemberModel::isDeniedEmailHost($value))
{
$emailhost_check = $config->emailhost_check;
$managed_email_host = lang('managed_email_host');
$email_hosts = MemberModel::getManagedEmailHosts();
foreach ($email_hosts as $host)
{
$hosts[] = $host->email_host;
}
$message = sprintf($managed_email_host[$emailhost_check],implode(', ',$hosts),'id@'.implode(', id@',$hosts));
return new BaseObject(0,$message);
}
// Check if duplicated
$member_srl = MemberModel::getMemberSrlByEmailAddress($value);
if($member_srl && $logged_info->member_srl != $member_srl ) return new BaseObject(0,'msg_exists_email_address');
break;
}
}
/**
* Join Membership
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsert()
{
if (Context::getRequestMethod() == 'GET')
{
throw new Rhymix\Framework\Exceptions\SecurityViolation;
}
$config = MemberModel::getMemberConfig();
// call a trigger (before)
$trigger_output = ModuleHandler::triggerCall('member.procMemberInsert', 'before', $config);
if(!$trigger_output->toBool ()) return $trigger_output;
// Check if an administrator allows a membership
if ($config->enable_join !== 'Y' || !$config->signupForm)
{
if (empty($config->enable_join_key) || !isset($_SESSION['signup_allowed']) || !$_SESSION['signup_allowed'])
{
throw new Rhymix\Framework\Exceptions\FeatureDisabled('msg_signup_disabled');
}
}
// Check if the user accept the license terms (only if terms exist)
$accept_agreement = Context::get('accept_agreement');
if(!is_array($accept_agreement))
{
$accept_agreement = array_fill(0, count($config->agreements), $accept_agreement);
}
$accept_agreement_rearranged = array();
foreach($config->agreements as $i => $agreement)
{
if($agreement->type === 'disabled')
{
continue;
}
if($agreement->type === 'required' && $accept_agreement[$i] !== 'Y')
{
throw new Rhymix\Framework\Exception('msg_accept_agreement');
}
$accept_agreement_rearranged[$i] = $accept_agreement[$i] === 'Y' ? 'Y' : 'N';
}
// Extract the necessary information in advance
$getVars = array();
$use_phone = false;
if($config->signupForm)
{
foreach($config->signupForm as $formInfo)
{
if($formInfo->name === 'phone_number' && $formInfo->isUse)
{
$use_phone = true;
}
if($formInfo->isUse || $formInfo->required || $formInfo->mustRequired)
{
$getVars[] = $formInfo->name;
}
}
}
$args = new stdClass;
foreach($getVars as $val)
{
$args->{$val} = Context::get($val);
if ($val === 'birthday')
{
$args->birthday_ui = Context::get('birthday_ui');
}
if ($val === 'phone_number')
{
$args->phone_country = preg_replace('/[^A-Z]/', '', Context::get('phone_country'));
}
}
// mobile input date format can be different
if($args->birthday)
{
if($args->birthday !== intval($args->birthday))
{
$args->birthday = date('Ymd', strtotime($args->birthday));
}
else
{
$args->birthday = intval($args->birthday);
}
}
if(!$args->birthday && $args->birthday_ui)
{
$args->birthday = intval(strtr($args->birthday_ui, array('-'=>'', '/'=>'', '.'=>'', ' '=>'')));
}
$args->allow_mailing = Context::get('allow_mailing');
$args->allow_message = Context::get('allow_message');
if($args->password1) $args->password = $args->password1;
// Check all required fields
$output = $this->_checkSignUpFields($config, $args, 'insert');
if (!$output->toBool())
{
return $output;
}
// Check phone number
if ($use_phone)
{
$output = $this->_checkPhoneNumber($config, $args, 'insert');
if (!$output->toBool())
{
return $output;
}
}
// check password strength
if(!MemberModel::checkPasswordStrength($args->password, $config->password_strength))
{
$message = lang('about_password_strength');
throw new Rhymix\Framework\Exception($message[$config->password_strength]);
}
// Get list of extra vars
$all_args = Context::getRequestVars();
$extra_vars = new stdClass;
foreach($config->signupForm as $formInfo)
{
if (!$formInfo->isDefaultForm)
{
$extra_vars->{$formInfo->name} = $all_args->{$formInfo->name};
}
}
$args->extra_vars = serialize($extra_vars);
// Set the user state as "denied" when using mail authentication
if($config->enable_confirm == 'Y')
{
$args->denied = 'Y';
$args->status = 'UNAUTHED';
}
// remove whitespace
foreach(['user_id', 'nick_name', 'email_address'] as $val)
{
if(isset($args->{$val}))
{
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->{$val})));
}
}
foreach(['user_name'] as $val)
{
if(isset($args->{$val}))
{
$args->{$val} = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->{$val})));
}
}
// Check symbols in nickname
if($config->nickname_symbols === 'N')
{
if(preg_match('/[^\pL\d]/u', $args->nick_name, $matches))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
}
}
elseif($config->nickname_symbols === 'LIST')
{
$list = preg_quote($config->nickname_symbols_allowed_list, '/');
if(preg_match('/[^\pL\d' . $list . ']/u', $args->nick_name, $matches))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
}
}
// Insert member info
$output = $this->insertMember($args);
if($output instanceof BaseObject && !$output->toBool())
{
return $output;
}
// Insert agreement info
foreach($accept_agreement_rearranged as $agreement_sequence => $agreed)
{
$ag_args = new stdClass;
$ag_args->member_srl = $args->member_srl;
$ag_args->agreement_sequence = $agreement_sequence;
$ag_args->agreed = $agreed;
$output = executeQuery('member.insertAgreed', $ag_args);
if($output instanceof BaseObject && !$output->toBool())
{
return $output;
}
}
// insert ProfileImage, ImageName, ImageMark
$profile_image = Context::get('profile_image');
if(is_uploaded_file($profile_image['tmp_name']))
{
$this->insertProfileImage($args->member_srl, $profile_image['tmp_name']);
}
$image_mark = Context::get('image_mark');
if(is_uploaded_file($image_mark['tmp_name']))
{
$this->insertImageMark($args->member_srl, $image_mark['tmp_name']);
}
$image_name = Context::get('image_name');
if(is_uploaded_file($image_name['tmp_name']))
{
$this->insertImageName($args->member_srl, $image_name['tmp_name']);
}
// Save Signature
$signature = Context::get('signature');
$this->putSignature($args->member_srl, $signature);
// Log-in
if ($config->enable_confirm != 'Y')
{
if (isset($config->identifiers) && is_array($config->identifiers))
{
$identifier = array_first($config->identifiers);
}
else
{
$identifier = $config->identifier ?? 'user_id';
}
$output = $this->doLogin($args->{$identifier});
if (!$output->toBool())
{
if ($output->error == -9)
{
$output->error = -11;
}
return $this->setRedirectUrl(getUrl('', 'act', 'dispMemberLoginForm'), $output);
}
}
// Register device
Rhymix\Modules\Member\Controllers\Device::getInstance()->autoRegisterDevice($args->member_srl, false);
// Call a trigger (after)
$this->add('member_srl', $args->member_srl);
ModuleHandler::triggerCall('member.procMemberInsert', 'after', $config);
self::clearMemberCache($args->member_srl);
// Redirect
if($config->redirect_url)
{
$this->setRedirectUrl($config->redirect_url);
if ($config->enable_confirm === 'Y')
{
$this->setMessage(sprintf(lang('msg_confirm_mail_sent'), $args->email_address));
}
}
elseif($config->enable_confirm === 'Y')
{
$this->setRedirectUrl(getNotEncodedUrl('', 'act', 'dispMemberLoginForm'));
$this->setMessage(sprintf(lang('msg_confirm_mail_sent'), $args->email_address));
}
else
{
$this->setMessage('success_registed');
if (Context::get('success_return_url'))
{
$this->setRedirectUrl(Context::get('success_return_url'));
}
elseif (isset($_SESSION['member_auth_referer']))
{
$redirect_url = $_SESSION['member_auth_referer'];
unset($_SESSION['member_auth_referer']);
$this->setRedirectUrl($redirect_url);
}
else
{
$this->setRedirectUrl(getNotEncodedUrl(''));
}
}
}
function procMemberModifyInfoBefore()
{
if (!isset($_SESSION['rechecked_password_step']) || $_SESSION['rechecked_password_step'] !== 'INPUT_PASSWORD')
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
if(!Context::get('is_logged'))
{
throw new Rhymix\Framework\Exceptions\MustLogin;
}
$password = Context::get('password');
if(!$password)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Get information of logged-in user
$logged_info = Context::get('logged_info');
$member_srl = $logged_info->member_srl;
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl);
// Verify the current password
if(!MemberModel::isValidPassword($member_info->password, $password))
{
throw new Rhymix\Framework\Exception('invalid_password');
}
$_SESSION['rechecked_password_step'] = 'VALIDATE_PASSWORD';
if(Context::get('success_return_url'))
{
$redirectUrl = Context::get('success_return_url');
}
else
{
$redirectUrl = getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyInfo');
}
$this->setRedirectUrl($redirectUrl);
}
/**
* Edit member profile
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberModifyInfo()
{
if(!Context::get('is_logged'))
{
throw new Rhymix\Framework\Exceptions\MustLogin;
}
if (!isset($_SESSION['rechecked_password_step']) || $_SESSION['rechecked_password_step'] !== 'INPUT_DATA')
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Get current module config and user info
$config = MemberModel::getMemberConfig();
$logged_info = Context::get('logged_info');
// Extract the necessary information in advance
$getVars = array('allow_mailing','allow_message');
$use_phone = false;
foreach($config->signupForm as $formInfo)
{
if($formInfo->name === 'phone_number' && $formInfo->isUse)
{
$use_phone = true;
}
if($formInfo->isUse || $formInfo->required || $formInfo->mustRequired)
{
$getVars[] = $formInfo->name;
}
}
$args = new stdClass;
foreach($getVars as $val)
{
$args->{$val} = Context::get($val);
if($val === 'birthday')
{
$args->birthday_ui = Context::get('birthday_ui');
}
if ($val === 'phone_number')
{
$args->phone_country = preg_replace('/[^A-Z]/', '', Context::get('phone_country'));
}
}
// mobile input date format can be different
if($args->birthday)
{
if($args->birthday !== intval($args->birthday))
{
$args->birthday = date('Ymd', strtotime($args->birthday));
}
else
{
$args->birthday = intval($args->birthday);
}
}
if(!$args->birthday && $args->birthday_ui)
{
$args->birthday = intval(strtr($args->birthday_ui, array('-'=>'', '/'=>'', '.'=>'', ' '=>'')));
}
// Check all required fields
$skip = [];
foreach (['profile_image', 'image_name', 'image_mark'] as $key)
{
if (!empty($logged_info->{$key}))
{
$skip[] = $key;
}
}
$output = $this->_checkSignUpFields($config, $args, 'update', $skip);
if (!$output->toBool())
{
return $output;
}
// Check phone number
if ($use_phone)
{
$output = $this->_checkPhoneNumber($config, $args, 'update', $logged_info);
if (!$output->toBool())
{
return $output;
}
}
// Fill in member_srl
$args->member_srl = $logged_info->member_srl;
// Get existing extra vars
$output = executeQuery('member.getMemberInfoByMemberSrl', ['member_srl' => $args->member_srl], ['extra_vars']);
$extra_vars = ($output->data && $output->data->extra_vars) ? unserialize($output->data->extra_vars) : new stdClass;
foreach(self::NOUSE_EXTRA_VARS as $key)
{
unset($extra_vars->$key);
}
// Update extra vars
$all_args = Context::getRequestVars();
foreach($config->signupForm as $formInfo)
{
if (!$formInfo->isDefaultForm)
{
$extra_vars->{$formInfo->name} = $all_args->{$formInfo->name};
}
}
$args->extra_vars = serialize($extra_vars);
// remove whitespace
foreach(['user_id', 'nick_name', 'email_address'] as $val)
{
if(isset($args->{$val}))
{
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->{$val})));
}
}
foreach(['user_name'] as $val)
{
if(isset($args->{$val}))
{
$args->{$val} = utf8_normalize_spaces(utf8_clean(html_entity_decode($args->{$val})));
}
}
// Check if nickname change is allowed
if(isset($config->allow_nickname_change) && $config->allow_nickname_change === 'N')
{
if (!empty($args->nick_name) && $args->nick_name !== $logged_info->nick_name)
{
return new BaseObject(-1, 'msg_nickname_not_changeable');
}
}
// Check if email address change is allowed
if(isset($config->enable_confirm) && $config->enable_confirm === 'Y')
{
if (!empty($args->email_address) && $args->email_address !== $logged_info->email_address)
{
return new BaseObject(-1, 'msg_email_address_not_changeable');
}
}
// Check symbols in nickname
if($config->nickname_symbols === 'N')
{
if(preg_match('/[^\pL\d]/u', $args->nick_name, $matches))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
}
}
elseif($config->nickname_symbols === 'LIST')
{
$list = preg_quote($config->nickname_symbols_allowed_list, '/');
if(preg_match('/[^\pL\d' . $list . ']/u', $args->nick_name, $matches))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
}
}
// Execute insert or update depending on the value of member_srl
$output = $this->updateMember($args);
if(!$output->toBool()) return $output;
$profile_image = Context::get('profile_image');
if(is_uploaded_file($profile_image['tmp_name']))
{
$this->insertProfileImage($args->member_srl, $profile_image['tmp_name']);
}
$image_mark = Context::get('image_mark');
if(is_uploaded_file($image_mark['tmp_name']))
{
$this->insertImageMark($args->member_srl, $image_mark['tmp_name']);
}
$image_name = Context::get('image_name');
if(is_uploaded_file($image_name['tmp_name']))
{
$this->insertImageName($args->member_srl, $image_name['tmp_name']);
}
// Save Signature
$signature = Context::get('signature');
$this->putSignature($args->member_srl, $signature);
if($config->member_allow_fileupload === 'Y')
{
getController('file')->setFilesValid($args->member_srl, 'sig');
}
// Get user_id information
$member_info = MemberModel::getMemberInfoByMemberSrl($args->member_srl);
// Call a trigger after successfully modified (after)
ModuleHandler::triggerCall('member.procMemberModifyInfo', 'after', $member_info);
unset($_SESSION['rechecked_password_step']);
$this->setSessionInfo();
// Return result
$this->add('member_srl', $args->member_srl);
$this->setMessage('success_updated');
self::clearMemberCache($args->member_srl);
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Change the user password
*
* @return void|Object (void : success, Object : fail)
*/
public function procMemberModifyPassword()
{
$config = MemberModel::getMemberConfig();
$vars = Context::getRequestVars();
if (!$this->user->member_srl)
{
throw new Rhymix\Framework\Exceptions\MustLogin;
}
// Extract the necessary information in advance
$current_password = trim($vars->current_password);
$password = trim($vars->password1);
// Get information of logged-in user
$member_srl = $this->user->member_srl;
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl);
// Verify the current password
if (!MemberModel::isValidPassword($member_info->password, $current_password, $member_srl))
{
throw new Rhymix\Framework\Exception('invalid_current_password');
}
// Check if a new password is as same as the previous password
if ($current_password === $password)
{
throw new Rhymix\Framework\Exception('invalid_new_password');
}
// Execute insert or update depending on the value of member_srl
$args = new stdClass;
$args->member_srl = $member_srl;
$args->password = $password;
$output = $this->updateMemberPassword($args);
if (!$output->toBool())
{
return $output;
}
// Log out all other sessions.
if ($config->password_change_invalidate_other_sessions === 'Y')
{
Rhymix\Framework\Session::destroyOtherSessions($member_srl);
}
$this->add('member_srl', $member_srl);
$this->setMessage('member.msg_password_changed');
if (Context::get('success_return_url'))
{
$returnUrl = Context::get('success_return_url');
}
else
{
$returnUrl = getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberInfo');
}
$this->setRedirectUrl($returnUrl);
}
/**
* Change password using auth_key instead of current password
*/
public function procMemberResetPassword()
{
$config = MemberModel::getMemberConfig();
$vars = Context::getRequestVars();
if ($this->user->member_srl)
{
throw new Rhymix\Framework\Exception('already_logged');
}
// Check auth_key
if (empty($vars->auth_key))
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
$output = executeQuery('member.getAuthMail', ['auth_key' => $vars->auth_key]);
if(!$output->toBool() || $output->data->auth_key !== $vars->auth_key)
{
executeQuery('member.deleteAuthMail', ['auth_key' => $vars->auth_key]);
throw new Rhymix\Framework\Exception('msg_invalid_auth_key');
}
$member_srl = $output->data->member_srl;
if (!$member_srl || $output->data->auth_type !== 'password_v2')
{
executeQuery('member.deleteAuthMail', ['auth_key' => $vars->auth_key]);
throw new Rhymix\Framework\Exception('msg_invalid_auth_key');
}
$expires = (intval($config->authmail_expires) * intval($config->authmail_expires_unit)) ?: 86400;
if(ztime($output->data->regdate) < time() - $expires)
{
executeQuery('member.deleteAuthMail', ['auth_key' => $vars->auth_key]);
throw new Rhymix\Framework\Exception('msg_expired_auth_key');
}
// Update the password
$args = new stdClass;
$args->member_srl = $member_srl;
$args->password = trim($vars->password1);
$output = $this->updateMemberPassword($args);
if (!$output->toBool())
{
return $output;
}
// Log out all other sessions.
if ($config->password_change_invalidate_other_sessions === 'Y')
{
Rhymix\Framework\Session::destroyOtherSessions($member_srl);
}
$this->add('member_srl', $member_srl);
$this->setMessage('member.msg_password_changed');
if (Context::get('success_return_url'))
{
$returnUrl = Context::get('success_return_url');
}
else
{
$returnUrl = getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberLoginForm');
}
$this->setRedirectUrl($returnUrl);
}
/**
* Membership withdrawal
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberLeave()
{
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
// Extract the necessary information in advance
$password = (string)Context::get('password');
// Get information of logged-in user
$logged_info = Context::get('logged_info');
$member_srl = $logged_info->member_srl;
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl);
// Verify the cuttent password
if (!MemberModel::isValidPassword($member_info->password, $password))
{
throw new Rhymix\Framework\Exception('invalid_password');
}
$output = $this->deleteMember($member_srl);
if(!$output->toBool()) return $output;
// Destroy all session information
executeQuery('member.deleteAutologin', (object)array('member_srl' => $member_srl));
Rhymix\Framework\Session::logout();
// Return success message
$this->setMessage('success_leaved');
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', '');
$this->setRedirectUrl($returnUrl);
}
/**
* Add a profile image
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsertProfileImage()
{
// Check if the file is successfully uploaded
$file = Context::get('profile_image');
if(!is_uploaded_file($file['tmp_name'])) throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
// Ignore if member_srl is invalid or doesn't exist.
$member_srl = Context::get('member_srl');
if(!$member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
$logged_info = Context::get('logged_info');
if($logged_info->is_admin != 'Y' && $logged_info->member_srl != $member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
// Return if member module is set not to use an image name or the user is not an administrator ;
$config = MemberModel::getMemberConfig();
if($logged_info->is_admin != 'Y' && $config->profile_image != 'Y') throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
$output = $this->insertProfileImage($member_srl, $file['tmp_name']);
if(!$output->toBool()) return $output;
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Insert a profile image
*
* @param int $member_srl
* @param string $target_file
*
* @return void
*/
function insertProfileImage($member_srl, $target_file)
{
$config = MemberModel::getMemberConfig();
// Get an image size
$max_width = $config->profile_image_max_width;
$max_height = $config->profile_image_max_height;
$max_filesize = $config->profile_image_max_filesize;
Context::loadLang(RX_BASEDIR . 'modules/file/lang');
// Get file information
clearstatcache($target_file);
list($width, $height, $type) = @getimagesize($target_file);
if(IMAGETYPE_PNG == $type) $ext = 'png';
elseif(IMAGETYPE_JPEG == $type) $ext = 'jpg';
elseif(IMAGETYPE_GIF == $type) $ext = 'gif';
else
{
throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
}
$target_path = sprintf('files/member_extra_info/profile_image/%s', getNumberingPath($member_srl));
$target_filename = sprintf('%s%d.%s', $target_path, $member_srl, $ext);
FileHandler::makeDir($target_path);
// Convert if the image size is larger than a given size
if ($width > $max_width || $height > $max_height)
{
$resize = true;
}
elseif ($config->profile_image_force_ratio !== 'N' && ($width / $height !== $max_width / $max_height))
{
$resize = true;
}
else
{
$resize = false;
}
// Check image rotation
$rotate = $ext === 'jpg' ? FileHandler::checkImageRotation($target_file) : 0;
// Resize or rotate if necessary
if ($resize || $rotate)
{
$temp_filename = sprintf('files/cache/tmp/profile_image_%d.%s', $member_srl, $ext);
FileHandler::createImageFile($target_file, $temp_filename, $max_width, $max_height, $ext, 'fill', 75, $rotate);
// 파일 용량 제한
clearstatcache($temp_filename);
$filesize = filesize($temp_filename);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
FileHandler::removeFile($temp_filename);
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_profile_image'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
FileHandler::moveFile($temp_filename, $target_filename);
}
else
{
// 파일 용량 제한
$filesize = filesize($target_file);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_profile_image'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
@copy($target_file, $target_filename);
}
// Clear cache
foreach (['jpg', 'jpeg', 'gif', 'png'] as $ext)
{
clearstatcache(true, \RX_BASEDIR . sprintf('files/member_extra_info/profile_image/%s%d.%s', getNumberingPath($member_srl), $member_srl, $ext));
}
self::clearMemberCache($member_srl);
return new BaseObject(0, 'success');
}
/**
* Add an image name
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsertImageName()
{
// Check if the file is successfully uploaded
$file = Context::get('image_name');
if(!is_uploaded_file($file['tmp_name'])) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_name');
// Ignore if member_srl is invalid or doesn't exist.
$member_srl = Context::get('member_srl');
if(!$member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_name');
$logged_info = Context::get('logged_info');
if($logged_info->is_admin != 'Y' && $logged_info->member_srl != $member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_name');
// Return if member module is set not to use an image name or the user is not an administrator ;
$config = MemberModel::getMemberConfig();
if($logged_info->is_admin != 'Y' && $config->image_name != 'Y') throw new Rhymix\Framework\Exception('msg_not_uploaded_image_name');
$output = $this->insertImageName($member_srl, $file['tmp_name']);
if(!$output->toBool()) return $output;
// Page refresh
//$this->setRefreshPage();
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Insert a image name
*
* @param int $member_srl
* @param object $target_file
*
* @return void
*/
function insertImageName($member_srl, $target_file)
{
$config = MemberModel::getMemberConfig();
// Get an image size
$max_width = $config->image_name_max_width;
$max_height = $config->image_name_max_height;
$max_filesize = $config->image_name_max_filesize;
Context::loadLang(RX_BASEDIR . 'modules/file/lang');
// Get a target path to save
$target_path = sprintf('files/member_extra_info/image_name/%s/', getNumberingPath($member_srl));
FileHandler::makeDir($target_path);
$target_filename = sprintf('%s%d.gif', $target_path, $member_srl);
// Get file information
list($width, $height, $type) = @getimagesize($target_file);
// Convert if the image size is larger than a given size or if the format is not a gif
if($width > $max_width || $height > $max_height || $type!=1)
{
$temp_filename = sprintf('files/cache/tmp/image_name_%d.gif', $member_srl, $ext);
FileHandler::createImageFile($target_file, $temp_filename, $max_width, $max_height, 'gif');
// 파일 용량 제한
FileHandler::clearStatCache($temp_filename);
$filesize = filesize($temp_filename);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
FileHandler::removeFile($temp_filename);
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_image_name'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
FileHandler::moveFile($temp_filename, $target_filename);
}
else
{
// 파일 용량 제한
$filesize = filesize($target_file);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_image_name'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
@copy($target_file, $target_filename);
}
clearstatcache(true, $target_filename);
self::clearMemberCache($member_srl);
return new BaseObject(0, 'success');
}
/**
* Delete profile image
*
* @return Object
*/
function procMemberDeleteProfileImage($_memberSrl = 0)
{
$member_srl = ($_memberSrl) ? $_memberSrl : Context::get('member_srl');
if(!$member_srl)
{
return new BaseObject(0,'success');
}
$logged_info = Context::get('logged_info');
if($logged_info && ($logged_info->is_admin == 'Y' || $logged_info->member_srl == $member_srl))
{
$profile_image = MemberModel::getProfileImage($member_srl);
if(!empty($profile_image->file))
{
FileHandler::removeFile($profile_image->file);
Rhymix\Framework\Storage::deleteEmptyDirectory(dirname(FileHandler::getRealPath($profile_image->file)), true);
FileHandler::clearStatCache($profile_image->file);
self::clearMemberCache($member_srl);
}
}
return new BaseObject(0,'success');
}
/**
* Delete Image name
*
* @return void
*/
function procMemberDeleteImageName($_memberSrl = 0)
{
$member_srl = ($_memberSrl) ? $_memberSrl : Context::get('member_srl');
if(!$member_srl)
{
return new BaseObject(0,'success');
}
$logged_info = Context::get('logged_info');
if($logged_info && ($logged_info->is_admin == 'Y' || $logged_info->member_srl == $member_srl))
{
$image_name = MemberModel::getImageName($member_srl);
if(!empty($image_name->file))
{
FileHandler::removeFile($image_name->file);
Rhymix\Framework\Storage::deleteEmptyDirectory(dirname(FileHandler::getRealPath($image_name->file)), true);
FileHandler::clearStatCache($profile_image->file);
self::clearMemberCache($member_srl);
}
}
return new BaseObject(0,'success');
}
/**
* Add an image to mark
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsertImageMark()
{
// Check if the file is successfully uploaded
$file = Context::get('image_mark');
if(!is_uploaded_file($file['tmp_name'])) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_mark');
// Ignore if member_srl is invalid or doesn't exist.
$member_srl = Context::get('member_srl');
if(!$member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_mark');
$logged_info = Context::get('logged_info');
if($logged_info->is_admin != 'Y' && $logged_info->member_srl != $member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_mark');
// Membership in the images mark the module using the ban was set by an administrator or return;
$config = MemberModel::getMemberConfig();
if($logged_info->is_admin != 'Y' && $config->image_mark != 'Y') throw new Rhymix\Framework\Exception('msg_not_uploaded_image_mark');
$this->insertImageMark($member_srl, $file['tmp_name']);
if(!$output->toBool()) return $output;
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Insert a image mark
*
* @param int $member_srl
* @param object $target_file
*
* @return void
*/
function insertImageMark($member_srl, $target_file)
{
$config = MemberModel::getMemberConfig();
// Get an image size
$max_width = $config->image_mark_max_width;
$max_height = $config->image_mark_max_height;
$max_filesize = $config->image_mark_max_filesize;
Context::loadLang(RX_BASEDIR . 'modules/file/lang');
$target_path = sprintf('files/member_extra_info/image_mark/%s/', getNumberingPath($member_srl));
FileHandler::makeDir($target_path);
$target_filename = sprintf('%s%d.gif', $target_path, $member_srl);
// Get file information
list($width, $height, $type, $attrs) = @getimagesize($target_file);
if($width > $max_width || $height > $max_height || $type!=1)
{
$temp_filename = sprintf('files/cache/tmp/image_mark_%d.gif', $member_srl);
FileHandler::createImageFile($target_file, $temp_filename, $max_width, $max_height, 'gif');
// 파일 용량 제한
FileHandler::clearStatCache($temp_filename);
$filesize = filesize($temp_filename);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
FileHandler::removeFile($temp_filename);
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_group_image_mark'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
FileHandler::moveFile($temp_filename, $target_filename);
}
else
{
$filesize = filesize($target_file);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
FileHandler::removeFile($target_file);
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_group_image_mark'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
@copy($target_file, $target_filename);
}
clearstatcache(true, $target_filename);
self::clearMemberCache($member_srl);
return new BaseObject(0, 'success');
}
/**
* Delete Image Mark
*
* @return Object
*/
function procMemberDeleteImageMark($_memberSrl = 0)
{
$member_srl = ($_memberSrl) ? $_memberSrl : Context::get('member_srl');
if(!$member_srl)
{
return new BaseObject(0,'success');
}
$logged_info = Context::get('logged_info');
if($logged_info && ($logged_info->is_admin == 'Y' || $logged_info->member_srl == $member_srl))
{
$image_mark = MemberModel::getImageMark($member_srl);
if(!empty($image_mark->file))
{
FileHandler::removeFile($image_mark->file);
Rhymix\Framework\Storage::deleteEmptyDirectory(dirname(FileHandler::getRealPath($image_mark->file)), true);
FileHandler::clearStatCache($profile_image->file);
self::clearMemberCache($member_srl);
}
}
return new BaseObject(0,'success');
}
/**
* Find ID/Password
*
* @return Object
*/
function procMemberFindAccount()
{
$email_address = Context::get('email_address');
if(!$email_address) throw new Rhymix\Framework\Exceptions\InvalidRequest;
// Check if a member having the same email address exists
$member_srl = MemberModel::getMemberSrlByEmailAddress($email_address);
if(!$member_srl) throw new Rhymix\Framework\Exception('msg_not_exists_member');
// Get information of the member
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl);
if(!$member_info || !$member_info->member_srl)
{
throw new Rhymix\Framework\Exception('msg_not_exists_member');
}
// Check if possible to find member's ID and password
if($member_info->denied == 'Y')
{
$chk_args = new stdClass;
$chk_args->member_srl = $member_info->member_srl;
$output = executeQuery('member.chkAuthMail', $chk_args);
if ($output->toBool() && $output->data->count > 0)
{
throw new Rhymix\Framework\Exception(sprintf('msg_user_not_confirmed', $member_info->email_address));
}
}
// Get password reset method
$member_config = ModuleModel::getModuleConfig('member');
$password_reset_method = intval($member_config->password_reset_method ?? 1);
// Insert data into the authentication DB
$args = new stdClass();
$args->user_id = $member_info->user_id;
$args->member_srl = $member_info->member_srl;
$args->new_password = $password_reset_method == 2 ? '' : Rhymix\Framework\Password::getRandomPassword(8);
$args->auth_key = Rhymix\Framework\Security::getRandom(40, 'hex');
$args->auth_type = 'password_v' . $password_reset_method;
$args->is_register = 'N';
$output = executeQuery('member.insertAuthMail', $args);
if(!$output->toBool()) return $output;
// Get content of the email to send a member
global $lang;
if ($password_reset_method == 2)
{
$args->new_password = lang('member.msg_change_after_click');
$lang->set('msg_find_account_comment', lang('member.msg_find_account_comment_v2'));
}
Context::set('auth_args', $args);
$memberInfo = array();
if (in_array('user_id', $member_config->identifiers))
{
$memberInfo[$lang->user_id] = $member_info->user_id;
}
if (in_array('email_address', $member_config->identifiers))
{
$memberInfo[$lang->email_address] = $member_info->email_address;
}
Context::set('memberInfo', $memberInfo);
if(!$member_config->skin) $member_config->skin = "default";
if(!$member_config->colorset) $member_config->colorset = "white";
Context::set('member_config', $member_config);
$tpl_path = sprintf('%sskins/%s', $this->module_path, $member_config->skin);
if(!is_dir($tpl_path)) $tpl_path = sprintf('%sskins/%s', $this->module_path, 'default');
$find_url = getFullUrl ('', 'module', 'member', 'act', 'procMemberAuthAccount', 'member_srl', $member_info->member_srl, 'auth_key', $args->auth_key);
Context::set('find_url', $find_url);
$oTemplate = new Rhymix\Framework\Template($tpl_path, 'find_member_account_mail');
$content = $oTemplate->compile();
// Get information of the Webmaster
$member_config = ModuleModel::getModuleConfig('member');
// Send a mail
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject(lang('msg_find_account_title'));
$oMail->setBody($content);
$oMail->addTo($member_info->email_address, $member_info->nick_name);
$oMail->send();
// Return message
$msg = sprintf(lang('msg_auth_mail_sent'), $member_info->email_address);
if(!in_array(Context::getRequestMethod(),array('XMLRPC','JSON')))
{
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberFindAccount');
$this->setRedirectUrl($returnUrl);
}
return new BaseObject(0,$msg);
}
/**
* Generate a temp password by answering to the pre-determined question
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberFindAccountByQuestion()
{
throw new Rhymix\Framework\Exception('msg_question_not_allowed');
}
/**
* Execute finding ID/Passoword
* When clicking the link in the verification email, a method is called to change the old password and to authenticate it
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberAuthAccount()
{
$config = MemberModel::getMemberConfig();
// Test user_id and authkey
$member_srl = Context::get('member_srl');
$auth_key = Context::get('auth_key');
if(!$member_srl || !$auth_key)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Call a trigger (before)
$trigger_obj = new stdClass;
$trigger_obj->member_srl = $member_srl;
$trigger_obj->auth_key = $auth_key;
$trigger_output = ModuleHandler::triggerCall('member.procMemberAuthAccount', 'before', $trigger_obj);
if(!$trigger_output->toBool())
{
return $trigger_output;
}
// Test logs for finding password by user_id and authkey
$output = executeQuery('member.getAuthMail', ['auth_key' => $auth_key]);
if(!$output->data || $output->data->auth_key !== $auth_key || $output->data->member_srl != $member_srl)
{
executeQuery('member.deleteAuthMail', ['member_srl' => $member_srl]);
throw new Rhymix\Framework\Exception('msg_invalid_auth_key');
}
$expires = (intval($config->authmail_expires) * intval($config->authmail_expires_unit)) ?: 86400;
if(ztime($output->data->regdate) < time() - $expires)
{
executeQuery('member.deleteAuthMail', ['auth_key' => $auth_key]);
throw new Rhymix\Framework\Exception('msg_expired_auth_key');
}
// Back up the value of $output->data->is_register
$is_register = $output->data->is_register;
$password_reset_method = $output->data->auth_type === 'password_v2' ? 2 : 1;
// If credentials are correct, change the password to a new one
if($is_register === 'Y')
{
$query_id = 'member.updateMemberStatus';
$args = [
'member_srl' => $member_srl,
'denied' => 'N',
'status' => 'APPROVED',
];
}
elseif ($password_reset_method == 1)
{
$query_id = 'member.updateMemberPassword';
$args = [
'member_srl' => $member_srl,
'password' => MemberModel::hashPassword($output->data->new_password),
];
}
else
{
$this->setLayoutAndTemplatePaths(Context::get('m') ? 'M' : 'P', $config);
$tpl_file = sprintf('%s%s', $this->getTemplatePath(), 'reset_password.html');
if (!Rhymix\Framework\Storage::exists($tpl_file))
{
$tpl_file = sprintf('%s%s', $this->getTemplatePath(), 'reset_password.blade.php');
if (!Rhymix\Framework\Storage::exists($tpl_file))
{
$this->setTemplatePath(sprintf('%sskins/%s', $this->module_path, 'default'));
}
}
$this->setTemplateFile('reset_password');
Context::set('member_config', $config ?? '');
return;
}
$output = executeQuery($query_id, $args);
if(!$output->toBool())
{
return $output;
}
// 인증 정보를 여기서 삭제하지 않고 로그인 시점에 삭제되도록 함
// https://github.com/rhymix/rhymix/issues/1232
// executeQuery('member.deleteAuthMail', $args);
// Clear login failure log
// https://github.com/rhymix/rhymix/issues/1429
executeQuery('member.deleteLoginCountByIp', ['ipaddress' => \RX_CLIENT_IP]);
// Clear member cache
self::clearMemberCache($member_srl);
// Call a trigger (after)
$trigger_obj->is_register = $is_register;
ModuleHandler::triggerCall('member.procMemberAuthAccount', 'after', $trigger_obj);
// Notify the result
$message = $is_register === 'Y' ? lang('msg_success_confirmed') : lang('msg_success_authed');
Context::setValidatorMessage('modules/member/skins', $message);
$this->setRedirectUrl(getNotEncodedUrl('', 'act', 'dispMemberLoginForm'));
}
/**
* Request to re-send the authentication mail
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberResendAuthMail()
{
// Get an email_address
$email_address = Context::get('email_address');
if(!$email_address) throw new Rhymix\Framework\Exceptions\InvalidRequest;
// Log test by using email_address
$args = new stdClass;
$args->email_address = $email_address;
$member_srl = MemberModel::getMemberSrlByEmailAddress($email_address);
if(!$member_srl)
{
throw new Rhymix\Framework\Exception('msg_not_exists_member');
}
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl);
if(!$member_info || !$member_info->member_srl)
{
throw new Rhymix\Framework\Exception('msg_not_exists_member');
}
if($member_info->status !== 'UNAUTHED')
{
throw new Rhymix\Framework\Exception('msg_activation_not_needed');
}
$member_config = ModuleModel::getModuleConfig('member');
if(!$member_config->skin) $member_config->skin = "default";
if(!$member_config->colorset) $member_config->colorset = "white";
// Check if a authentication mail has been sent previously
$chk_args = new stdClass;
$chk_args->member_srl = $member_info->member_srl;
$output = executeQuery('member.chkAuthMail', $chk_args);
if($output->toBool() && $output->data->count == '0')
{
throw new Rhymix\Framework\Exception('msg_activation_key_not_found');
}
$auth_args = new stdClass;
$auth_args->member_srl = $member_info->member_srl;
$output = executeQueryArray('member.getAuthMailInfo', $auth_args);
if(!$output->data || !$output->data[0]->auth_key)
{
throw new Rhymix\Framework\Exception('msg_activation_key_not_found');
}
$auth_info = $output->data[0];
// Update the regdate of authmail entry
$renewal_args = new stdClass;
$renewal_args->member_srl = $member_info->member_srl;
$renewal_args->auth_key = $auth_info->auth_key;
$output = executeQuery('member.updateAuthMail', $renewal_args);
$memberInfo = array();
global $lang;
if(is_array($member_config->signupForm))
{
$exceptForm=array('password', 'find_account_question');
foreach($member_config->signupForm as $form)
{
if(!in_array($form->name, $exceptForm) && $form->isDefaultForm && ($form->required || $form->mustRequired))
{
$memberInfo[$lang->{$form->name}] = $member_info->{$form->name};
}
}
}
else
{
$memberInfo[$lang->user_id] = $member_info->user_id;
$memberInfo[$lang->user_name] = $member_info->user_name;
$memberInfo[$lang->nick_name] = $member_info->nick_name;
$memberInfo[$lang->email_address] = $member_info->email_address;
}
// Get content of the email to send a member
Context::set('memberInfo', $memberInfo);
Context::set('member_config', $member_config);
$tpl_path = sprintf('%sskins/%s', $this->module_path, $member_config->skin);
if(!is_dir($tpl_path)) $tpl_path = sprintf('%sskins/%s', $this->module_path, 'default');
$auth_url = getFullUrl('','module','member','act','procMemberAuthAccount','member_srl',$member_info->member_srl, 'auth_key',$auth_info->auth_key);
Context::set('auth_url', $auth_url);
$oTemplate = new Rhymix\Framework\Template($tpl_path, 'confirm_member_account_mail');
$content = $oTemplate->compile();
// Send a mail
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject(lang('msg_confirm_account_title'));
$oMail->setBody($content);
$oMail->addTo($member_info->email_address, $member_info->nick_name);
$oMail->send();
$msg = sprintf(lang('msg_confirm_mail_sent'), $args->email_address);
$this->setMessage($msg);
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', '');
$this->setRedirectUrl($returnUrl);
}
function _sendAuthMail($auth_args, $member_info)
{
$member_config = MemberModel::getMemberConfig();
// Get content of the email to send a member
Context::set('auth_args', $auth_args);
$memberInfo = array();
global $lang;
if(is_array($member_config->signupForm))
{
$exceptForm=array('password', 'find_account_question');
foreach($member_config->signupForm as $form)
{
if(!in_array($form->name, $exceptForm) && $form->isDefaultForm && ($form->required || $form->mustRequired))
{
$memberInfo[$lang->{$form->name}] = $member_info->{$form->name};
}
}
}
else
{
$memberInfo[$lang->user_id] = $member_info->user_id;
$memberInfo[$lang->user_name] = $member_info->user_name;
$memberInfo[$lang->nick_name] = $member_info->nick_name;
$memberInfo[$lang->email_address] = $member_info->email_address;
}
Context::set('memberInfo', $memberInfo);
if(!$member_config->skin) $member_config->skin = "default";
if(!$member_config->colorset) $member_config->colorset = "white";
Context::set('member_config', $member_config);
$tpl_path = sprintf('%sskins/%s', $this->module_path, $member_config->skin);
if(!is_dir($tpl_path)) $tpl_path = sprintf('%sskins/%s', $this->module_path, 'default');
$auth_url = getFullUrl('','module','member','act','procMemberAuthAccount','member_srl',$member_info->member_srl, 'auth_key',$auth_args->auth_key);
Context::set('auth_url', $auth_url);
$oTemplate = new Rhymix\Framework\Template($tpl_path, 'confirm_member_account_mail');
$content = $oTemplate->compile();
// Send a mail
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject(lang('msg_confirm_account_title'));
$oMail->setBody($content);
$oMail->addTo($member_info->email_address, $member_info->nick_name);
$oMail->send();
}
/**
* Join a virtual site
*
* @deprecated
* @return void
*/
function procMemberSiteSignUp()
{
}
/**
* Leave the virtual site
*
* @deprecated
* @return void
*/
function procMemberSiteLeave()
{
}
/**
* Save the member configurations
*
* @deprecated
* @return void
*/
function setMemberConfig($args)
{
return getController('module')->updateModuleConfig('member', $args);
}
/**
* Save the signature as a file
*
* @param int $member_srl
* @param string $signature
*
* @return void
*/
public static function putSignature($member_srl, $signature)
{
if((!$signature = utf8_trim(removeHackTag($signature))) || is_empty_html_content($signature))
{
getController('member')->delSignature($member_srl);
return;
}
// Editor converter
$obj = new stdClass;
$config = MemberModel::getMemberConfig();
if($config->signature_html == 'N')
{
$obj->converter = 'text';
}
$obj->content = $signature;
$obj->editor_skin = $config->signature_editor_skin;
$signature = getModel('editor')->converter($obj);
$filename = RX_BASEDIR . sprintf('files/member_extra_info/signature/%s%d.signature.php', getNumberingPath($member_srl), $member_srl);
$buff = sprintf('%s', $signature);
Rhymix\Framework\Storage::write($filename, $buff);
clearstatcache(true, $filename);
self::clearMemberCache($member_srl);
return $signature;
}
/**
* Delete the signature file
*
* @param string $member_srl
*
* @return void
*/
public static function delSignature($member_srl)
{
$dirname = RX_BASEDIR . sprintf('files/member_extra_info/signature/%s', getNumberingPath($member_srl));
$filename = sprintf('%s%d.signature.php', $dirname, $member_srl);
Rhymix\Framework\Storage::delete($filename);
Rhymix\Framework\Storage::deleteEmptyDirectory($dirname, true);
clearstatcache(true, $filename);
self::clearMemberCache($member_srl);
}
/**
* Add member to group
*
* @param int $member_srl
* @param int $group_srl
* @return BaseObject
*/
public static function addMemberToGroup($member_srl, $group_srl): BaseObject
{
// Return if member already belongs to group
$args = new stdClass();
$args->member_srl = $member_srl;
$args->group_srl = $group_srl;
$output = executeQueryArray('member.getMemberGroupMember', $args);
if ($output->data && count($output->data) == 1)
{
return $output;
}
// Call trigger (before)
$trigger_output = ModuleHandler::triggerCall('member.addMemberToGroup', 'before', $args);
if (!$trigger_output->toBool())
{
return $trigger_output;
}
// Delete duplicate records
if ($output->data && count($output->data) > 1)
{
executeQuery('member.deleteMemberGroupMember', $args);
}
// Add member to group
$output = executeQuery('member.addMemberToGroup', $args);
if (!$output->toBool())
{
return $output;
}
// Call trigger (after)
ModuleHandler::triggerCall('member.addMemberToGroup', 'after', $args);
self::clearMemberCache($member_srl);
return $output;
}
/**
* Remove member from group
*
* @param int $member_srl
* @param int $group_srl
* @return BaseObject
*/
public static function removeMemberFromGroup(int $member_srl, int $group_srl): BaseObject
{
// Return if member does not belong to group
$args = new stdClass();
$args->member_srl = $member_srl;
$args->group_srl = $group_srl;
$output = executeQueryArray('member.getMemberGroupMember', $args);
if ($output->data && count($output->data) < 1)
{
return $output;
}
// Call trigger (before)
$trigger_output = ModuleHandler::triggerCall('member.removeMemberFromGroup', 'before', $args);
if (!$trigger_output->toBool())
{
return $trigger_output;
}
// Remove member from group
$output = executeQuery('member.deleteMemberGroupMember', $args);
if (!$output->toBool())
{
return $output;
}
// Call trigger (after)
ModuleHandler::triggerCall('member.removeMemberFromGroup', 'after', $args);
self::clearMemberCache($member_srl);
return $output;
}
/**
* Change a group of certain members
* Available only when a member has a single group
*
* @param object $args
*
* @return Object
*/
public static function replaceMemberGroup($args)
{
$obj = new stdClass;
$obj->member_srl = $args->member_srl;
$output = executeQueryArray('member.getMembersGroup', $obj);
if($output->data)
{
foreach($output->data as $key => $val)
{
$date[$val->member_srl] = $val->regdate;
}
}
$output = executeQuery('member.deleteMembersGroup', $obj);
if(!$output->toBool()) return $output;
$inserted_members = array();
foreach($args->member_srl as $key => $val)
{
if($inserted_members[$val]) continue;
$inserted_members[$val] = true;
unset($obj);
$obj = new stdClass;
$obj->member_srl = $val;
$obj->group_srl = $args->group_srl;
$obj->regdate = $date[$obj->member_srl];
$output = executeQuery('member.addMemberToGroup', $obj);
if(!$output->toBool()) return $output;
self::clearMemberCache($obj->member_srl);
}
return new BaseObject();
}
/**
* Auto-login
*
* @param string $autologin_key
* @return int|false
*/
function doAutologin($autologin_key = null)
{
// Validate the key.
if (strlen($autologin_key) == 48)
{
$security_key = substr($autologin_key, 24, 24);
$autologin_key = substr($autologin_key, 0, 24);
}
else
{
return false;
}
// Fetch autologin information from DB.
$args = new stdClass;
$args->autologin_key = $autologin_key;
$args->page = 0;
$output = executeQuery('member.getAutologin', $args);
if (!$output->toBool() || !$output->data)
{
return false;
}
if (is_array($output->data))
{
$output->data = array_first($output->data);
}
if (!$output->data || !$output->data->member_srl)
{
return false;
}
// Hash the security key.
$hashed_security_key = base64_encode(hash_hmac('sha256', $security_key, $autologin_key, true));
// Check the security key.
if ($hashed_security_key !== $output->data->security_key && $hashed_security_key !== $output->data->previous_key ?? '')
{
$args = new stdClass;
$args->autologin_key = $autologin_key;
executeQuery('member.deleteAutologin', $args);
return false;
}
// If the current security key matches, generate a new key.
// If the previous key matches, don't update until the client has the current key.
// Resending the current key in this case will be handled by the Session class.
if ($hashed_security_key === $output->data->security_key && config('session.autologin_refresh') !== false)
{
$new_security_key = Rhymix\Framework\Security::getRandom(24, 'alnum');
$new_hash = base64_encode(hash_hmac('sha256', $new_security_key, $autologin_key, true));
$args = new stdClass;
$args->autologin_key = $autologin_key;
$args->security_key = $new_hash;
$args->previous_key = $output->data->security_key;
$args->user_agent = json_encode(Rhymix\Framework\UA::getBrowserInfo());
$update_output = executeQuery('member.updateAutologin', $args);
if ($update_output->toBool())
{
Rhymix\Framework\Session::setAutologinKeys($autologin_key, $new_security_key);
}
}
else
{
$args = new stdClass;
$args->autologin_key = $autologin_key;
$args->user_agent = json_encode(Rhymix\Framework\UA::getBrowserInfo());
$update_output = executeQuery('member.updateAutologin', $args);
if ($update_output->toBool())
{
Rhymix\Framework\Session::setAutologinKeys($autologin_key, $security_key);
}
}
// Update the last login time.
executeQuery('member.updateLastLogin', (object)['member_srl' => $output->data->member_srl]);
self::clearMemberCache($output->data->member_srl);
// Call a trigger after validate security key (after)
$trigger_obj = new stdClass();
$trigger_obj->member_srl = $output->data->member_srl;
ModuleHandler::triggerCall('member.doAutoLogin', 'after', $trigger_obj);
// Return the member_srl.
return intval($output->data->member_srl);
}
/**
* Log-in
*
* @param string $user_id
* @param string $password
* @param boolean $keep_signed
*
* @return Object
*/
function doLogin($user_id, $password = '', $keep_signed = false)
{
$user_id = strtolower($user_id);
if (!$user_id)
{
return new BaseObject(-1, 'null_user_id');
}
// Call a trigger before log-in (before)
$trigger_obj = new stdClass();
$trigger_obj->user_id = $user_id;
$trigger_obj->password = $password;
$trigger_output = ModuleHandler::triggerCall('member.doLogin', 'before', $trigger_obj);
if(!$trigger_output->toBool()) return $trigger_output;
// check IP access count.
$config = MemberModel::getMemberConfig();
$args = new stdClass();
$args->ipaddress = \RX_CLIENT_IP;
$used_identifier = null;
// check identifier
if((!$config->identifiers || in_array('email_address', $config->identifiers)) && strpos($user_id, '@') !== false)
{
$member_info = MemberModel::getMemberInfoByEmailAddress($user_id);
$used_identifier = 'email_address';
if(!$member_info || strtolower($member_info->email_address) !== strtolower($user_id))
{
return $this->recordLoginError(-1, 'invalid_email_address');
}
}
elseif($config->identifiers && in_array('phone_number', $config->identifiers) && strpos($user_id, '@') === false && !preg_match('/^[a-z]/i', $user_id))
{
if(preg_match('/^\+([0-9-]+)\.([0-9.-]+)$/', $user_id, $matches))
{
$user_id = $matches[2];
$phone_country = $matches[1];
if($config->phone_number_hide_country === 'Y')
{
$phone_country = $config->phone_number_default_country;
}
}
elseif($config->phone_number_default_country)
{
$phone_country = $config->phone_number_default_country;
}
else
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
if($phone_country && !preg_match('/^[A-Z]{3}$/', $phone_country))
{
$phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($phone_country);
}
$numbers_only = preg_replace('/[^0-9]/', '', $user_id);
if (!$numbers_only)
{
return $this->recordLoginError(-1, 'null_user_id');
}
$member_info = MemberModel::getMemberInfoByPhoneNumber($numbers_only, $phone_country);
$used_identifier = 'phone_number';
if(!$member_info || preg_replace('/[^0-9]/', '', $member_info->phone_number) !== $numbers_only)
{
if(in_array('user_id', $config->identifiers))
{
$member_info = MemberModel::getMemberInfoByUserID($user_id);
$used_identifier = 'user_id';
if(!$member_info || strtolower($member_info->user_id) !== strtolower($user_id))
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
}
else
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
}
}
elseif(!$config->identifiers || in_array('user_id', $config->identifiers))
{
$member_info = MemberModel::getMemberInfoByUserID($user_id);
$used_identifier = 'user_id';
if(!$member_info || strtolower($member_info->user_id) !== strtolower($user_id))
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
}
else
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
$output = executeQuery('member.getLoginCountByIp', $args);
$errorCount = $output->data->count;
if($errorCount >= $config->max_error_count)
{
$last_update = strtotime($output->data->last_update);
$term = intval($_SERVER['REQUEST_TIME']-$last_update);
if($term < $config->max_error_count_time)
{
$term = $config->max_error_count_time - $term;
if($term < 60) $term = intval($term).lang('unit_sec');
elseif(60 <= $term && $term < 3600) $term = intval($term/60).lang('unit_min');
elseif(3600 <= $term && $term < 86400) $term = intval($term/3600).lang('unit_hour');
else $term = intval($term/86400).lang('unit_day');
return new BaseObject(-1, sprintf(lang('excess_ip_access_count'), $term));
}
else
{
$args->ipaddress = \RX_CLIENT_IP;
$output = executeQuery('member.deleteLoginCountByIp', $args);
}
}
// Password Check
if($password && !MemberModel::isValidPassword($member_info->password, $password, $member_info->member_srl))
{
$msg = ($used_identifier === 'email_address') ? 'invalid_email_address' : 'invalid_user_id';
return $this->recordMemberLoginError(-1, $msg, $member_info);
}
// If denied == 'Y', notify
if($member_info->denied === 'Y')
{
if ($member_info->status === 'UNAUTHED')
{
return new BaseObject(-1, sprintf(lang('msg_user_not_confirmed'), $member_info->email_address));
}
else
{
$refused_reason = $member_info->refused_reason ? ("\n" . lang('refused_reason') . ': ' . $member_info->refused_reason) : '';
return new BaseObject(-1, lang('msg_user_denied') . $refused_reason);
}
}
// Notify if user is limited
if($member_info->limit_date && substr($member_info->limit_date,0,8) >= date("Ymd"))
{
$limited_reason = $member_info->limited_reason ? ("\n" . lang('refused_reason') . ': ' . $member_info->limited_reason) : '';
return new BaseObject(-9, sprintf(lang('msg_user_limited'), zdate($member_info->limit_date,"Y-m-d")) . $limited_reason);
}
// Do not allow login as admin if not in allowed IP list
if($member_info->is_admin === 'Y' && $this->act === 'procMemberLogin')
{
$oMemberAdminModel = getAdminModel('member');
if(!$oMemberAdminModel->getMemberAdminIPCheck())
{
return new BaseObject(-1, 'msg_admin_ip_not_allowed');
}
}
// Update the latest login time
$args->member_srl = $member_info->member_srl;
$output = executeQuery('member.updateLastLogin', $args);
self::clearMemberCache($args->member_srl);
// Check if there is recoding table.
$oDB = DB::getInstance();
if($oDB->isTableExists('member_count_history') && $config->enable_login_fail_report != 'N')
{
// check if there is login fail records.
$output = executeQuery('member.getLoginCountHistoryByMemberSrl', $args);
if($output->data && $output->data->content)
{
$title = lang('login_fail_report');
$message = '';
$content = unserialize($output->data->content);
if(count($content) > $config->max_error_count)
{
foreach($content as $val)
{
$message .= '- '.lang('regdate').': '.date('Y-m-d h:i:sa',$val[2]).'
- '.lang('ipaddress').': '.$val[0].'
- '.lang('message').': '.$val[1].'
';
}
$message .= '
';
$content = sprintf(lang('login_fail_report_contents'),$message,date('Y-m-d h:i:sa'));
//send message
$oCommunicationController = getController('communication');
$oCommunicationController->sendMessage($args->member_srl, $args->member_srl, $title, $content, true, null, false);
if($member_info->email_address && $member_info->allow_mailing == 'Y')
{
$view_url = Context::getRequestUri();
$content = sprintf("%s
From: %s
To: %s(%s)
",$content, $view_url, $view_url, $member_info->nick_name, $member_info->email_id);
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject($title);
$oMail->setBody($content);
$oMail->addTo($member_info->email_address, $member_info->email_id.' ('.$member_info->nick_name.')');
$oMail->send();
}
$output = executeQuery('member.deleteLoginCountHistoryByMemberSrl', $args);
}
}
}
// When user checked to use auto-login
if($keep_signed)
{
$random_key = Rhymix\Framework\Security::getRandom(48, 'alnum');
$autologin_args = new stdClass;
$autologin_args->autologin_key = substr($random_key, 0, 24);
$autologin_args->security_key = base64_encode(hash_hmac('sha256', substr($random_key, 24, 24), $autologin_args->autologin_key, true));
$autologin_args->member_srl = $member_info->member_srl;
$autologin_args->user_agent = json_encode(Rhymix\Framework\UA::getBrowserInfo());
$autologin_output = executeQuery('member.insertAutologin', $autologin_args);
if ($autologin_output->toBool())
{
Rhymix\Framework\Session::setAutologinKeys(substr($random_key, 0, 24), substr($random_key, 24, 24));
}
}
// Log in!
Rhymix\Framework\Session::login($member_info->member_srl);
$this->setSessionInfo();
// Log out all other sessions if so configured.
if ($config->login_invalidate_other_sessions === 'Y')
{
Rhymix\Framework\Session::destroyOtherSessions($member_info->member_srl);
}
// Call a trigger after successfully log-in (after)
ModuleHandler::triggerCall('member.doLogin', 'after', $member_info);
return $output;
}
/**
* Update or create session information
*/
function setSessionInfo()
{
// If your information came through the current session information to extract information from the users
$member_info = Rhymix\Framework\Session::getMemberInfo(true);
if (!$member_info->member_srl)
{
return;
}
// Information stored in the session login user
Context::set('is_logged', true);
Context::set('logged_info', $member_info);
// Only the menu configuration of the user (such as an add-on to the menu can be changed)
$config = MemberModel::getMemberConfig();
$this->addMemberMenu( 'dispMemberInfo', 'cmd_view_member_info');
if ($config->features['scrapped_documents'] !== false)
{
$this->addMemberMenu( 'dispMemberScrappedDocument', 'cmd_view_scrapped_document');
}
if ($config->features['saved_documents'] !== false)
{
$this->addMemberMenu( 'dispMemberSavedDocument', 'cmd_view_saved_document');
}
if ($config->features['my_documents'] !== false)
{
$this->addMemberMenu( 'dispMemberOwnDocument', 'cmd_view_own_document');
}
if ($config->features['my_comments'] !== false)
{
$this->addMemberMenu( 'dispMemberOwnComment', 'cmd_view_own_comment');
}
if ($config->features['active_logins'] !== false)
{
$this->addMemberMenu( 'dispMemberActiveLogins', 'cmd_view_active_logins');
}
if ($config->features['nickname_log'] !== false && $config->update_nickname_log == 'Y')
{
$this->addMemberMenu( 'dispMemberModifyNicknameLog', 'cmd_modify_nickname_log');
}
}
/**
* Logged method for providing a personalized menu
* Login information is used in the output widget, or personalized page
*/
public static function addMemberMenu($act, $str)
{
$logged_info = Context::get('logged_info');
if(is_object($logged_info))
{
$logged_info->menu_list[$act] = $str;
Context::set('logged_info', $logged_info);
}
}
/**
* Replace lang codes in member menu
*
* @param $logged_info
* @return void
*/
public static function replaceLangForMemberMenu(&$logged_info)
{
if(is_object($logged_info) && !empty($logged_info->menu_list))
{
$logged_info->menu_list = array_map('lang', $logged_info->menu_list);
}
}
/**
* Nickname and click Log In to add a pop-up menu that appears when the method
*/
function addMemberPopupMenu($url, $str, $icon = '', $target = '_blank', $class = '')
{
$member_popup_menu_list = Context::get('member_popup_menu_list');
if(!is_array($member_popup_menu_list)) $member_popup_menu_list = array();
$obj = new stdClass;
$obj->url = $url;
$obj->str = $str;
$obj->class = $class;
$obj->icon = $icon ?: null;
$obj->target = $target;
$member_popup_menu_list[] = $obj;
Context::set('member_popup_menu_list', $member_popup_menu_list);
}
/**
* Add users to the member table
*/
function insertMember(&$args, $password_is_hashed = false)
{
// Call a trigger (before)
$output = ModuleHandler::triggerCall('member.insertMember', 'before', $args);
if(!$output->toBool()) return $output;
// Terms and Conditions portion of the information set up by members reaffirmed
$config = MemberModel::getMemberConfig();
$logged_info = Context::get('logged_info');
// limit_date format is YYYYMMDD
if($args->limit_date)
{
// mobile input date format can be different
if($args->limit_date !== intval($args->limit_date))
{
$args->limit_date = date('Ymd', strtotime($args->limit_date));
}
else
{
$args->limit_date = intval($args->limit_date);
}
}
// If the date of the temporary restrictions limit further information on the date of
if($config->limit_day) $args->limit_date = date("YmdHis", $_SERVER['REQUEST_TIME']+$config->limit_day*60*60*24);
$args->member_srl = getNextSequence();
$args->list_order = -1 * $args->member_srl;
// Set user_id if empty. Otherwise convert to lowercase.
if (trim($args->user_id ?? '') === '')
{
$args->user_id = 't' . $args->member_srl;
}
else
{
$args->user_id = strtolower($args->user_id);
}
if(!$args->user_name) $args->user_name = $args->member_srl;
if(!$args->nick_name) $args->nick_name = $args->member_srl;
// Control of essential parameters
if($args->allow_mailing!='Y') $args->allow_mailing = 'N';
if($args->denied!='Y') $args->denied = 'N';
if(!in_array($args->allow_message, array('Y', 'N', 'F'))) $args->allow_message = 'Y';
if($logged_info->is_admin == 'Y')
{
if($args->is_admin!='Y') $args->is_admin = 'N';
}
else
{
unset($args->is_admin);
}
list($args->email_id, $args->email_host) = explode('@', $args->email_address);
// Sanitize user ID, username, nickname, homepage, blog
$args->user_id = escape($args->user_id, false);
$args->user_name = escape($args->user_name, false);
$args->nick_name = escape($args->nick_name, false);
$args->homepage = escape($args->homepage, false);
$args->blog = escape($args->blog, false);
if($args->homepage && !preg_match("/^[a-z]+:\/\//i",$args->homepage)) $args->homepage = 'http://'.$args->homepage;
if($args->blog && !preg_match("/^[a-z]+:\/\//i",$args->blog)) $args->blog = 'http://'.$args->blog;
$extend_form_list = MemberModel::getJoinFormlist();
$security = new Security($extend_form_list);
$security->encodeHTML('..column_title', '..description', '..default_value', '..options.');
if($config->signupForm)
{
foreach($config->signupForm as $no => $formInfo)
{
if(!$formInfo->isUse) continue;
if($formInfo->isDefaultForm)
{
// birthday format is YYYYMMDD
if($formInfo->name === 'birthday' && $args->{$formInfo->name})
{
// mobile input date format can be different
if($args->{$formInfo->name} !== intval($args->{$formInfo->name}))
{
$args->{$formInfo->name} = date('Ymd', strtotime($args->{$formInfo->name}));
}
else
{
$args->{$formInfo->name} = intval($args->{$formInfo->name});
}
}
}
else
{
$extendForm = $extend_form_list[$formInfo->member_join_form_srl];
// date format is YYYYMMDD
if($extendForm->column_type == 'date' && $args->{$formInfo->name})
{
if($args->{$formInfo->name} !== intval($args->{$formInfo->name}))
{
$args->{$formInfo->name} = date('Ymd', strtotime($args->{$formInfo->name}));
}
else
{
$args->{$formInfo->name} = intval($args->{$formInfo->name});
}
}
}
}
}
// Check password strength
if($args->password && !$password_is_hashed)
{
if(!MemberModel::checkPasswordStrength($args->password, $config->password_strength))
{
$message = lang('about_password_strength');
return new BaseObject(-1, $message[$config->password_strength]);
}
$args->password = MemberModel::hashPassword($args->password);
}
// Check if ID is prohibited
if($logged_info->is_admin !== 'Y' && MemberModel::isDeniedID($args->user_id))
{
return new BaseObject(-1, 'denied_user_id');
}
// Check if ID is duplicate
$member_srl = MemberModel::getMemberSrlByUserID($args->user_id);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_user_id');
}
// Check if nickname is prohibited
if($logged_info->is_admin !== 'Y' && MemberModel::isDeniedNickName($args->nick_name))
{
return new BaseObject(-1, 'denied_nick_name');
}
// Check if nickname is duplicate
if($config->allow_duplicate_nickname !== 'Y')
{
$member_srl = MemberModel::getMemberSrlByNickName($args->nick_name);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_nick_name');
}
}
// Check managed Email Host
if($logged_info->is_admin !== 'Y' && MemberModel::isDeniedEmailHost($args->email_address))
{
$emailhost_check = $config->emailhost_check;
$managed_email_host = lang('managed_email_host');
$email_hosts = MemberModel::getManagedEmailHosts();
foreach ($email_hosts as $host)
{
$hosts[] = $host->email_host;
}
$message = sprintf($managed_email_host[$emailhost_check],implode(', ',$hosts),'id@'.implode(', id@',$hosts));
return new BaseObject(-1, $message);
}
// Format phone number
if (strval($args->phone_number) !== '')
{
$args->phone_country = trim(preg_replace('/[^A-Z]/', '', $args->phone_country), '-');
$args->phone_number = preg_replace('/[^0-9]/', '', $args->phone_number);
$args->phone_type = '';
if ($config->phone_number_hide_country === 'Y' || (!$args->phone_country && $config->phone_number_default_country))
{
$args->phone_country = $config->phone_number_default_country;
}
if ($args->phone_country && !preg_match('/^[A-Z]{3}$/', $args->phone_country))
{
$args->phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($args->phone_country);
}
if ($args->phone_country === 'KOR' && !Rhymix\Framework\Korea::isValidPhoneNumber($args->phone_number))
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
}
else
{
$args->phone_country = '';
$args->phone_number = '';
$args->phone_type = '';
}
// Check if email address is duplicate
$member_srl = MemberModel::getMemberSrlByEmailAddress($args->email_address);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_email_address');
}
// Check if phone number is duplicate
if ($config->phone_number_allow_duplicate !== 'Y' && $args->phone_number)
{
if (!$config->special_phone_number || $config->special_phone_number !== preg_replace('/[^0-9]/', '', $args->phone_number))
{
$member_srl = MemberModel::getMemberSrlByPhoneNumber($args->phone_number, $args->phone_country);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_phone_number');
}
}
}
// Set status
if (!isset($args->status))
{
$args->status = ($args->denied === 'Y') ? 'UNAUTHED' : 'APPROVED';
}
// Insert data into the DB
$args->list_order = -1 * $args->member_srl;
$oDB = DB::getInstance();
$oDB->begin();
$output = executeQuery('member.insertMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
if(is_array($args->group_srl_list)) $group_srl_list = $args->group_srl_list;
else $group_srl_list = explode('|@|', $args->group_srl_list);
// If no value is entered the default group, the value of group registration
if(!$args->group_srl_list)
{
$default_group = MemberModel::getDefaultGroup(0);
if($default_group)
{
// Add to the default group
$output = $this->addMemberToGroup($args->member_srl, $default_group->group_srl);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
}
}
// If the value is the value of the group entered the group registration
else
{
foreach($group_srl_list as $group_srl)
{
$output = $this->addMemberToGroup($args->member_srl, $group_srl);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
}
}
// When using email authentication mode (when you subscribed members denied a) certified mail sent
if($args->denied == 'Y')
{
// Insert data into the authentication DB
$auth_args = new stdClass();
$auth_args->user_id = $args->user_id;
$auth_args->member_srl = $args->member_srl;
$auth_args->new_password = $args->password;
$auth_args->auth_key = Rhymix\Framework\Security::getRandom(40, 'hex');
$args->auth_type = 'signup';
$auth_args->is_register = 'Y';
$output = executeQuery('member.insertAuthMail', $auth_args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
$this->_sendAuthMail($auth_args, $args);
}
ModuleHandler::triggerCall('member.insertMember', 'after', $args);
$oDB->commit();
// Remove from cache
self::clearMemberCache($args->member_srl);
$output->add('member_srl', $args->member_srl);
return $output;
}
/**
* Modify member information
*
* @param bool $deprecated_allow_update_other
*/
function updateMember($args, $deprecated_allow_update_other = FALSE)
{
// Call a trigger (before)
$output = ModuleHandler::triggerCall('member.updateMember', 'before', $args);
if(!$output->toBool()) return $output;
// Create a model object
$config = MemberModel::getMemberConfig();
$logged_info = Context::get('logged_info');
// Get what you want to modify the original information
$orgMemberInfo = MemberModel::getMemberInfoByMemberSrl($args->member_srl);
// Control of essential parameters
if($args->allow_mailing!='Y') $args->allow_mailing = 'N';
if($args->allow_message && !in_array($args->allow_message, array('Y','N','F'))) $args->allow_message = 'Y';
if($logged_info->is_admin == 'Y')
{
if($args->denied!='Y') $args->denied = 'N';
if($args->is_admin!='Y' && $logged_info->member_srl != $args->member_srl) $args->is_admin = 'N';
}
else
{
unset($args->is_admin);
unset($args->limit_date);
unset($args->description);
if (!$deprecated_allow_update_other)
{
unset($args->denied);
unset($args->status);
if ($logged_info->member_srl != $args->member_srl)
{
return new BaseObject(-1, 'msg_invalid_request');
}
}
}
// Sanitize user ID, username, nickname, homepage, blog
if($args->user_id) $args->user_id = escape($args->user_id, false);
$args->user_name = escape($args->user_name, false);
$args->nick_name = escape($args->nick_name, false);
$args->homepage = escape($args->homepage, false);
$args->blog = escape($args->blog, false);
$args->birthday = intval($args->birthday ?? '') ?: '';
if($args->homepage && !preg_match("/^[a-z]+:\/\//is",$args->homepage)) $args->homepage = 'http://'.$args->homepage;
if($args->blog && !preg_match("/^[a-z]+:\/\//is",$args->blog)) $args->blog = 'http://'.$args->blog;
// check member identifier form
// limit_date format is YYYYMMDD
if($args->limit_date)
{
// mobile input date format can be different
if($args->limit_date !== intval($args->limit_date))
{
$args->limit_date = date('Ymd', strtotime($args->limit_date));
}
else
{
$args->limit_date = intval($args->limit_date);
}
}
$extend_form_list = MemberModel::getJoinFormlist();
$security = new Security($extend_form_list);
$security->encodeHTML('..column_title', '..description', '..default_value', '..options.');
if($config->signupForm)
{
foreach($config->signupForm as $no => $formInfo)
{
if(!$formInfo->isUse) continue;
if($formInfo->isDefaultForm)
{
// birthday format is YYYYMMDD
if($formInfo->name === 'birthday' && $args->{$formInfo->name})
{
if($args->{$formInfo->name} !== intval($args->{$formInfo->name}))
{
$args->{$formInfo->name} = date('Ymd', strtotime($args->{$formInfo->name}));
}
else
{
$args->{$formInfo->name} = intval($args->{$formInfo->name});
}
}
}
else
{
$extendForm = $extend_form_list[$formInfo->member_join_form_srl];
// date format is YYYYMMDD
if($extendForm->column_type == 'date' && $args->{$formInfo->name})
{
if($args->{$formInfo->name} !== intval($args->{$formInfo->name}))
{
$args->{$formInfo->name} = date('Ymd', strtotime($args->{$formInfo->name}));
}
else
{
$args->{$formInfo->name} = intval($args->{$formInfo->name});
}
}
}
}
}
// Format phone number
if (strval($args->phone_number) !== '')
{
$args->phone_country = trim(preg_replace('/[^A-Z]/', '', $args->phone_country), '-');
$args->phone_number = preg_replace('/[^0-9]/', '', $args->phone_number);
$args->phone_type = '';
if ($config->phone_number_hide_country === 'Y' || (!$args->phone_country && $config->phone_number_default_country))
{
$args->phone_country = $config->phone_number_default_country;
}
if ($args->phone_country && !preg_match('/^[A-Z]{3}$/', $args->phone_country))
{
$args->phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($args->phone_country);
}
if ($args->phone_country === 'KOR' && !Rhymix\Framework\Korea::isValidPhoneNumber($args->phone_number))
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
}
else
{
$args->phone_country = '';
$args->phone_number = '';
$args->phone_type = '';
}
// Check managed Email Host
if($logged_info->is_admin !== 'Y' && $logged_info->email_address !== $args->email_address && MemberModel::isDeniedEmailHost($args->email_address))
{
$emailhost_check = $config->emailhost_check;
$managed_email_host = lang('managed_email_host');
$email_hosts = MemberModel::getManagedEmailHosts();
foreach ($email_hosts as $host)
{
$hosts[] = $host->email_host;
}
$message = sprintf($managed_email_host[$emailhost_check],implode(', ',$hosts),'id@'.implode(', id@',$hosts));
return new BaseObject(-1, $message);
}
// Check if email address or user ID is duplicate
$identifiers = $config->identifiers ?? [$config->identifier];
if(in_array('email_address', $identifiers))
{
$member_srl = MemberModel::getMemberSrlByEmailAddress($args->email_address);
if($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_email_address');
}
if($logged_info->is_admin !== 'Y')
{
$args->email_address = $orgMemberInfo->email_address;
}
}
if(in_array('user_id', $identifiers))
{
$member_srl = MemberModel::getMemberSrlByUserID($args->user_id);
if($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_user_id');
}
if($logged_info->is_admin !== 'Y')
{
$args->user_id = $orgMemberInfo->user_id;
}
}
// Check if phone number is duplicate
if ($config->phone_number_allow_duplicate !== 'Y' && $args->phone_number)
{
if (!$config->special_phone_number || $config->special_phone_number !== preg_replace('/[^0-9]/', '', $args->phone_number))
{
$member_srl = MemberModel::getMemberSrlByPhoneNumber($args->phone_number, $args->phone_country);
if ($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_phone_number');
}
}
}
// Check if ID is prohibited
if($logged_info->is_admin !== 'Y' && $args->user_id && MemberModel::isDeniedID($args->user_id))
{
return new BaseObject(-1, 'denied_user_id');
}
// Check if ID is duplicate
if($args->user_id)
{
$member_srl = MemberModel::getMemberSrlByUserID($args->user_id);
if($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_user_id');
}
}
// Check if nickname is prohibited
if($logged_info->is_admin !== 'Y' && $args->nick_name && MemberModel::isDeniedNickName($args->nick_name))
{
return new BaseObject(-1, 'denied_nick_name');
}
// Check if nickname is duplicate
if($config->allow_duplicate_nickname !== 'Y')
{
$member_srl = MemberModel::getMemberSrlByNickName($args->nick_name);
if($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_nick_name');
}
}
list($args->email_id, $args->email_host) = explode('@', $args->email_address);
// Check password strength
if($args->password)
{
if(!MemberModel::checkPasswordStrength($args->password, $config->password_strength))
{
$message = lang('about_password_strength');
return new BaseObject(-1, $message[$config->password_strength]);
}
$args->password = MemberModel::hashPassword($args->password);
}
else
{
$args->password = $orgMemberInfo->password;
}
if(!$args->user_name) $args->user_name = $orgMemberInfo->user_name;
if(!$args->user_id) $args->user_id = $orgMemberInfo->user_id;
if(!$args->nick_name) $args->nick_name = $orgMemberInfo->nick_name;
if($logged_info->is_admin !== 'Y')
{
$args->description = $orgMemberInfo->description;
}
$oDB = DB::getInstance();
$oDB->begin();
$output = executeQuery('member.updateMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
else
{
if($args->nick_name != $orgMemberInfo->nick_name && $config->update_nickname_log == 'Y')
{
$log_args = new stdClass();
$log_args->member_srl = $args->member_srl;
$log_args->before_nick_name = $orgMemberInfo->nick_name;
$log_args->after_nick_name = $args->nick_name;
$log_args->user_id = $args->user_id;
executeQuery('member.insertMemberModifyNickName', $log_args);
}
}
if($args->group_srl_list)
{
if(is_array($args->group_srl_list)) $group_srl_list = $args->group_srl_list;
else $group_srl_list = explode('|@|', $args->group_srl_list);
// If the group information, group information changes
if(count($group_srl_list) > 0)
{
// One of its members to delete all the group
$output = executeQuery('member.deleteMemberGroupMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Enter one of the loop a
foreach($group_srl_list as $group_srl)
{
$output = $this->addMemberToGroup($args->member_srl, $group_srl);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
}
// if group is changed, point changed too.
$this->_updatePointByGroup($orgMemberInfo->member_srl, $group_srl_list);
}
}
// Call a trigger (after)
ModuleHandler::triggerCall('member.updateMember', 'after', $args);
$oDB->commit();
// Remove from cache
self::clearMemberCache($args->member_srl);
$output->add('member_srl', $args->member_srl);
return $output;
}
/**
* Modify member extra variable
*/
function updateMemberExtraVars($member_srl, array $values)
{
$args = new stdClass();
$args->member_srl = $member_srl;
$output = executeQuery('member.getMemberInfoByMemberSrl', $args, array('extra_vars'));
if (!$output->toBool())
{
return $output;
}
$extra_vars = $output->data->extra_vars ? unserialize($output->data->extra_vars) : new stdClass;
foreach ($values as $key => $val)
{
$extra_vars->{$key} = $val;
}
$args = new stdClass();
$args->member_srl = $member_srl;
$args->extra_vars = serialize($extra_vars);
$output = executeQuery('member.updateMemberExtraVars', $args);
if (!$output->toBool())
{
return $output;
}
self::clearMemberCache($member_srl);
return $output;
}
/**
* Modify member password
*/
function updateMemberPassword($args)
{
if($args->password)
{
// check password strength
$config = MemberModel::getMemberConfig();
if(!MemberModel::checkPasswordStrength($args->password, $config->password_strength))
{
$message = lang('about_password_strength');
return new BaseObject(-1, $message[$config->password_strength]);
}
$args->password = MemberModel::hashPassword($args->password);
}
else if($args->hashed_password)
{
$args->password = $args->hashed_password;
}
$output = executeQuery('member.updateMemberPassword', $args);
if($output->toBool())
{
$result = executeQuery('member.updateChangePasswordDate', $args);
}
self::clearMemberCache($args->member_srl);
return $output;
}
/**
* Delete User
*/
function deleteMember($member_srl)
{
// Call a trigger (before)
$trigger_obj = new stdClass();
$trigger_obj->member_srl = $member_srl;
$output = ModuleHandler::triggerCall('member.deleteMember', 'before', $trigger_obj);
if (!$output->toBool())
{
return $output;
}
// Bringing the user's information
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl);
if (!$member_info || !$member_info->member_srl)
{
return new BaseObject(-1, 'msg_not_exists_member');
}
// If managers can not be deleted
if ($member_info->is_admin == 'Y')
{
return new BaseObject(-1, 'msg_cannot_delete_admin');
}
$oDB = DB::getInstance();
$oDB->begin();
$args = new stdClass();
$args->member_srl = $member_srl;
// Delete the entries in member_auth_mail
$output = executeQuery('member.deleteAuthMail', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Delete agreement info
$output = executeQuery('member.deleteAgreed', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Delete nickname log
$output = executeQuery('member.deleteMemberModifyNickNameLog', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Delete the entries in member_group_member
$output = executeQuery('member.deleteMemberGroupMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Delete main member info
$output = executeQuery('member.deleteMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Call a trigger (after)
ModuleHandler::triggerCall('member.deleteMember', 'after', $trigger_obj);
$oDB->commit();
// Name, image, image, mark, sign, delete
$this->procMemberDeleteImageName($member_srl);
$this->procMemberDeleteImageMark($member_srl);
$this->procMemberDeleteProfileImage($member_srl);
$this->delSignature($member_srl);
self::clearMemberCache($member_srl);
// Delete all remaining extra info
$dirs = Rhymix\Framework\Storage::readDirectory(RX_BASEDIR . 'files/member_extra_info', true, true, false);
foreach ($dirs as $dir)
{
$member_dir = $dir . '/' . getNumberingPath($member_srl);
Rhymix\Framework\Storage::deleteDirectory($member_dir, false);
Rhymix\Framework\Storage::deleteEmptyDirectory($member_dir, true);
}
return $output;
}
/**
* Destroy all session information
*/
function destroySessionInfo()
{
Rhymix\Framework\Session::destroy();
}
function _updatePointByGroup($memberSrl, $groupSrlList)
{
$pointModuleConfig = ModuleModel::getModuleConfig('point');
$pointGroup = $pointModuleConfig->point_group;
$levelGroup = array();
if(is_array($pointGroup) && count($pointGroup)>0)
{
$levelGroup = array_flip($pointGroup);
ksort($levelGroup);
}
$maxLevel = 0;
$resultGroup = array_intersect($levelGroup, $groupSrlList);
if(count($resultGroup) > 0)
$maxLevel = max(array_flip($resultGroup));
if($maxLevel > 0)
{
$originPoint = PointModel::getPoint($memberSrl);
if($pointModuleConfig->level_step[$maxLevel] > $originPoint)
{
$oPointController = getController('point');
$oPointController->setPoint($memberSrl, $pointModuleConfig->level_step[$maxLevel], 'update');
}
}
}
function procMemberModifyEmailAddress()
{
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
if (!isset($_SESSION['rechecked_password_step']) || $_SESSION['rechecked_password_step'] !== 'INPUT_DATA')
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
$member_info = Context::get('logged_info');
$newEmail = Context::get('email_address');
if(!$newEmail)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check managed Email Host
if(MemberModel::isDeniedEmailHost($newEmail))
{
$config = MemberModel::getMemberConfig();
$emailhost_check = $config->emailhost_check;
$managed_email_host = lang('managed_email_host');
$email_hosts = MemberModel::getManagedEmailHosts();
foreach ($email_hosts as $host)
{
$hosts[] = $host->email_host;
}
$message = sprintf($managed_email_host[$emailhost_check],implode(', ',$hosts),'id@'.implode(', id@',$hosts));
throw new Rhymix\Framework\Exception($message);
}
// Check if the e-mail address is already registered
$member_srl = MemberModel::getMemberSrlByEmailAddress($newEmail);
if($member_srl) throw new Rhymix\Framework\Exception('msg_exists_email_address');
$auth_args = new stdClass();
$auth_args->user_id = $newEmail;
$auth_args->member_srl = $member_info->member_srl;
$auth_args->auth_key = Rhymix\Framework\Security::getRandom(40, 'hex');
$auth_args->new_password = 'XE_change_emaill_address';
$auth_args->auth_type = 'change_email';
$auth_args->is_register = 'N';
$output = executeQuery('member.insertAuthMail', $auth_args);
if(!$output->toBool())
{
return $output;
}
$member_config = ModuleModel::getModuleConfig('member');
$tpl_path = sprintf('%sskins/%s', $this->module_path, $member_config->skin);
if(!is_dir($tpl_path)) $tpl_path = sprintf('%sskins/%s', $this->module_path, 'default');
$memberInfo = array();
$memberInfo[lang('email_address')] = $member_info->email_address;
$memberInfo[lang('nick_name')] = $member_info->nick_name;
Context::set('memberInfo', $memberInfo);
Context::set('newEmail', $newEmail);
$auth_url = getFullUrl('','module','member','act','procMemberAuthEmailAddress','member_srl',$member_info->member_srl, 'auth_key',$auth_args->auth_key);
Context::set('auth_url', $auth_url);
$oTemplate = new Rhymix\Framework\Template($tpl_path, 'confirm_member_new_email');
$content = $oTemplate->compile();
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject(lang('title_modify_email_address'));
$oMail->setBody($content);
$oMail->addTo($newEmail, $member_info->nick_name);
$oMail->send();
unset($_SESSION['rechecked_password_step']);
$msg = sprintf(lang('msg_confirm_mail_sent'), $newEmail);
$this->setMessage($msg);
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', '');
$this->setRedirectUrl($returnUrl);
}
function procMemberAuthEmailAddress()
{
$member_srl = Context::get('member_srl');
$auth_key = Context::get('auth_key');
if(!$member_srl || !$auth_key) throw new Rhymix\Framework\Exceptions\InvalidRequest;
// Test logs for finding password by user_id and authkey
$args = new stdClass;
$args->member_srl = $member_srl;
$args->auth_key = $auth_key;
$output = executeQuery('member.getAuthMail', $args);
if(!$output->toBool() || $output->data->auth_key != $auth_key)
{
if(strlen($output->data->auth_key) !== strlen($auth_key)) executeQuery('member.deleteAuthChangeEmailAddress', $args);
throw new Rhymix\Framework\Exception('msg_invalid_modify_email_auth_key');
}
$newEmail = $output->data->user_id;
$args->email_address = $newEmail;
list($args->email_id, $args->email_host) = explode('@', $newEmail);
$output = executeQuery('member.updateMemberEmailAddress', $args);
if(!$output->toBool()) return $output;
// Remove all values having the member_srl and auth_type = change_email
executeQuery('member.deleteAuthChangeEmailAddress',$args);
self::clearMemberCache($args->member_srl);
// Call a trigger (after)
$trigger_obj = new stdClass;
$trigger_obj->member_srl = $args->member_srl;
$trigger_obj->email_address = $args->email_address;
$trigger_output = ModuleHandler::triggerCall('member.updateMemberEmailAddress', 'after', $trigger_obj);
// Redirect to member info page
$this->setRedirectUrl(getNotEncodedUrl('', 'act', 'dispMemberInfo'));
}
function procMemberSendVerificationSMS()
{
$config = MemberModel::getMemberConfig();
if ($config->phone_number_verify_by_sms !== 'Y')
{
throw new Rhymix\Framework\Exceptions\FeatureDisabled;
}
$phone_country = Context::get('phone_country');
$phone_number = Context::get('phone_number');
if ($config->phone_number_default_country && (!$phone_country || $config->phone_number_hide_country === 'Y'))
{
$phone_country = $config->phone_number_default_country;
}
if (preg_match('/[A-Z]{3}/', $phone_country))
{
$phone_country_calling_code = preg_replace('/[^0-9]/', '', Rhymix\Framework\i18n::getCallingCodeByCountryCode($phone_country));
if (!$phone_country_calling_code)
{
return new BaseObject(-1, 'msg_invalid_phone_country');
}
}
else
{
return new BaseObject(-1, 'msg_invalid_phone_country');
}
if (!preg_match('/[0-9]{2,}/', $phone_number))
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
if ($phone_country === 'KOR' && !Rhymix\Framework\Korea::isValidPhoneNumber($phone_number ?? ''))
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
$is_special = ($config->special_phone_number && $config->special_phone_number === preg_replace('/[^0-9]/', '', $phone_number));
// Check if SMS has already been sent
if (!$is_special)
{
$args = new stdClass;
$args->phone_number = $phone_number;
$args->phone_country = $phone_country;
$args->ipaddress = \RX_CLIENT_IP;
$args->regdate_since = date('YmdHis', time() - ($config->max_auth_sms_count_time ?: 600));
$output = executeQuery('member.chkAuthSms', $args);
if ($output->data->count >= ($config->max_auth_sms_count ?: 5))
{
return new BaseObject(-1, 'msg_auth_sms_rate_limited');
}
}
// Check if phone number is duplicate
if (!$is_special && $config->phone_number_allow_duplicate !== 'Y')
{
$member_srl = MemberModel::getMemberSrlByPhoneNumber($phone_number, $phone_country);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_phone_number');
}
}
// Generate code and store in session
$code = intval(mt_rand(100000, 999999));
$_SESSION['verify_by_sms'] = array(
'country' => $phone_country,
'number' => $phone_number,
'code' => $is_special ? intval($config->special_phone_code) : $code,
'time' => time(),
'count' => 0,
'status' => false,
);
// Store in DB
$args = new stdClass;
$args->member_srl = $this->user->member_srl ?: 0;
$args->phone_number = $phone_number;
$args->phone_country = $phone_country;
$args->code = $is_special ? intval($config->special_phone_code) : $code;
executeQuery('member.insertAuthSms', $args);
if ($is_special)
{
return new BaseObject(0, 'verify_by_sms_code_sent');
}
$sms = new Rhymix\Framework\SMS;
$sms->addTo($phone_number, $phone_country_calling_code);
$site_title = Context::replaceUserLang(Context::get('site_module_info')->settings->title);
$message = sprintf(lang('member.verify_by_sms_message'), $code);
$content = sprintf('[%s] %s', $site_title, $message);
$sms->setContent($content);
$result = $sms->send();
if ($result && config('sms.type') !== 'dummy')
{
return new BaseObject(0, 'verify_by_sms_code_sent');
}
else
{
return new BaseObject(0, 'verify_by_sms_error');
}
}
function procMemberConfirmVerificationSMS()
{
$config = MemberModel::getMemberConfig();
if ($config->phone_number_verify_by_sms !== 'Y')
{
throw new Rhymix\Framework\Exceptions\FeatureDisabled;
}
$code = Context::get('code');
if(!preg_match('/^[0-9]{6}$/', $code))
{
throw new Rhymix\Framework\Exception('verify_by_sms_code_incorrect');
}
$code = intval($code);
if(!isset($_SESSION['verify_by_sms']))
{
throw new Rhymix\Framework\Exception('verify_by_sms_code_incorrect');
}
if (isset($_SESSION['verify_by_sms']['count']) && $_SESSION['verify_by_sms']['count'] >= 10)
{
unset($_SESSION['verify_by_sms']);
throw new Rhymix\Framework\Exception('verify_by_sms_code_too_many_tries');
}
if (isset($_SESSION['verify_by_sms']['time']) && $_SESSION['verify_by_sms']['time'] < time() - 600)
{
unset($_SESSION['verify_by_sms']);
throw new Rhymix\Framework\Exception('verify_by_sms_code_expired');
}
if ($_SESSION['verify_by_sms']['code'] !== $code)
{
$_SESSION['verify_by_sms']['count']++;
throw new Rhymix\Framework\Exception('verify_by_sms_code_incorrect');
}
$_SESSION['verify_by_sms']['status'] = true;
return new BaseObject(0, 'verify_by_sms_code_confirmed');
}
/**
* trigger for document.getDocumentMenu. Append to popup menu a button for procMemberSpammerManage()
*
* @param array &$menu_list
*
* @return object
**/
function triggerGetDocumentMenu(&$menu_list)
{
if(!Context::get('is_logged')) return;
$logged_info = Context::get('logged_info');
$document_srl = Context::get('target_srl');
$columnList = array('document_srl', 'module_srl', 'member_srl', 'ipaddress');
$oDocument = DocumentModel::getDocument($document_srl, false, false, $columnList);
$member_srl = abs($oDocument->get('member_srl'));
$module_srl = $oDocument->get('module_srl');
if(!$member_srl || $member_srl == $logged_info->member_srl) return;
if(!ModuleModel::getGrant(ModuleModel::getModuleInfoByModuleSrl($module_srl), $logged_info)->manager) return;
$oDocumentController = getController('document');
$url = getUrl('','module','member','act','dispMemberSpammer','member_srl',$member_srl,'module_srl',$module_srl);
$oDocumentController->addDocumentPopupMenu($url,'cmd_spammer','','popup');
}
/**
* trigger for comment.getCommentMenu. Append to popup menu a button for procMemberSpammerManage()
*
* @param array &$menu_list
*
* @return object
**/
function triggerGetCommentMenu(&$menu_list)
{
if(!Context::get('is_logged')) return;
$logged_info = Context::get('logged_info');
$comment_srl = Context::get('target_srl');
$columnList = array('comment_srl', 'module_srl', 'member_srl', 'ipaddress');
$oComment = CommentModel::getComment($comment_srl, FALSE, $columnList);
$module_srl = $oComment->get('module_srl');
$member_srl = abs($oComment->get('member_srl'));
if(!$member_srl || $member_srl == $logged_info->member_srl) return;
if(!ModuleModel::getGrant(ModuleModel::getModuleInfoByModuleSrl($module_srl), $logged_info)->manager) return;
$oCommentController = getController('comment');
$url = getUrl('','module','member','act','dispMemberSpammer','member_srl',$member_srl,'module_srl',$module_srl);
$oCommentController->addCommentPopupMenu($url,'cmd_spammer','','popup');
}
/**
* trigger for document.deleteDocument. Delete to document scrap for deleteDocument trigger.
* @param object $obj
* @return void
*/
function triggerDeleteDocument($obj)
{
// Variables
$args = new stdClass;
$args->document_srl = intval($obj->document_srl);
// Delete
$output = executeQuery('member.deleteScrapDocumentByDocumentSrl', $args);
if (!$output->toBool())
{
return $output;
}
}
/**
* Spammer manage. Denied user login. And delete or trash all documents. Response Ajax string
*
* @return object
**/
function procMemberSpammerManage()
{
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\NotPermitted;
$logged_info = Context::get('logged_info');
$member_srl = Context::get('member_srl');
$module_srl = Context::get('module_srl');
$cnt_loop = Context::get('cnt_loop');
$proc_type = Context::get('proc_type');
$isMoveToTrash = ($proc_type !== 'delete') ? true : false;
// check grant
$columnList = array('module_srl', 'module');
$module_info = ModuleModel::getModuleInfoByModuleSrl($module_srl, $columnList);
$grant = ModuleModel::getGrant($module_info, $logged_info);
if(!$grant->manager) throw new Rhymix\Framework\Exceptions\NotPermitted;
// delete or trash destination
// proc member
if($cnt_loop == 1)
$this->_spammerMember($member_srl);
// proc document and comment
elseif($cnt_loop>1)
$this->_spammerDocuments($member_srl, $isMoveToTrash);
// get destination count
$cnt_document = DocumentModel::getDocumentCountByMemberSrl($member_srl);
$cnt_comment = CommentModel::getCommentCountByMemberSrl($member_srl);
$total_count = Context::get('total_count');
$remain_count = $cnt_document + $cnt_comment;
if($cnt_loop == 1) $total_count = $remain_count;
// get progress percent
if($total_count > 0)
$progress = intval( ( ( $total_count - $remain_count ) / $total_count ) * 100 );
else
$progress = 100;
$this->add('total_count', $total_count);
$this->add('remain_count', $remain_count);
$this->add('progress', $progress);
$this->add('member_srl', $member_srl);
$this->add('module_srl', $module_srl);
$this->add('cnt_loop', ++$cnt_loop);
$this->add('proc_type', $proc_type);
return new BaseObject(0);
}
/**
* Denied user login and write description
*
* @param int $member_srl
*
* @return object
**/
protected function _spammerMember($member_srl) {
$logged_info = Context::get('logged_info');
$spam_description = trim( Context::get('spam_description') );
// get member current information
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl);
$cnt_comment = CommentModel::getCommentCountByMemberSrl($member_srl);
$cnt_document = DocumentModel::getDocumentCountByMemberSrl($member_srl);
$args = new stdClass();
$args->member_srl = $member_info->member_srl;
$args->email_address = $member_info->email_address;
$args->user_id = $member_info->user_id;
$args->nick_name = $member_info->nick_name;
$args->denied = 'Y';
$args->status = 'DENIED';
$args->description = trim(vsprintf("%s\n%s [%s %s]\ninfo: %s\ndocuments: %d\ncomments: %d]", [
trim($member_info->description),
lang('cmd_spammer'),
date("Y-m-d H:i:s"),
$logged_info->nick_name,
$spam_description,
$cnt_document,
$cnt_comment,
]));
$output = $this->updateMember($args, true);
self::clearMemberCache($args->member_srl);
return $output;
}
/**
* Delete or trash all documents
*
* @param int $member_srl
* @param bool $isMoveToTrash
*
* @return object
**/
protected function _spammerDocuments($member_srl, $isMoveToTrash = true)
{
$oDocumentController = getController('document');
$oCommentController = getController('comment');
// delete count by one request
$getContentsCount = 10;
// 1. proc comment, 2. proc document
$cnt_comment = CommentModel::getCommentCountByMemberSrl($member_srl);
$cnt_document = DocumentModel::getDocumentCountByMemberSrl($member_srl);
if($cnt_comment > 0)
{
$columnList = array();
$commentList = CommentModel::getCommentListByMemberSrl($member_srl, $columnList, 0, false, $getContentsCount);
if($commentList) {
foreach($commentList as $v) {
if($isMoveToTrash)
{
$oCommentController->moveCommentToTrash($v);
}
else
{
$oCommentController->deleteComment($v->comment_srl, true);
}
}
}
} elseif($cnt_document > 0) {
$columnList = array();
$documentList = DocumentModel::getDocumentListByMemberSrl($member_srl, $columnList, 0, false, $getContentsCount);
if($documentList) {
foreach($documentList as $v) {
if($isMoveToTrash)
{
$oDocumentController->moveDocumentToTrash($v);
}
else
{
$oDocumentController->deleteDocument($v->document_srl, true);
}
}
}
}
return array();
}
/**
* Check required fields on signup or modify info
*
* @param object $config
* @param object $args
* @param string $mode
* @param array $skip
* @return object
*/
protected function _checkSignUpFields($config, $args, $mode = 'insert', $skip = [])
{
$not_required_if_indirect_insert = ['user_id'];
$not_required_in_update = ['password'];
foreach($config->signupForm as $formInfo)
{
if($formInfo->isUse && ($formInfo->required || $formInfo->mustRequired))
{
if ($mode === 'update' && in_array($formInfo->name, $not_required_in_update))
{
// pass
}
elseif (!isset($args->{$formInfo->name}) || $this->_checkEmpty($args->{$formInfo->name} ?? '', $formInfo->type ?? ''))
{
if (in_array($formInfo->name, $not_required_if_indirect_insert) && !preg_match('/^procMember.+/i', Context::get('act')))
{
// pass
}
elseif (!in_array($formInfo->name, $skip))
{
return new BaseObject(-1, sprintf(lang('common.filter.isnull'), $formInfo->title));
}
}
}
if ($formInfo->name === 'email_address' && $args->{$formInfo->name} && !Mail::isVaildMailAddress($args->{$formInfo->name}))
{
return new BaseObject(-1, sprintf(lang('common.filter.invalid_email'), $formInfo->title));
}
if ($formInfo->name === 'user_id' && $args->{$formInfo->name} && !preg_match('/^[a-z]+[\w-]*[a-z0-9_]+$/i', $args->{$formInfo->name}))
{
return new BaseObject(-1, sprintf(lang('common.filter.invalid_user_id'), $formInfo->title));
}
if ($formInfo->name === 'password' && $args->{$formInfo->name})
{
$password_check = (string)Context::get('password2');
if ($password_check !== '' && !hash_equals($args->password, $password_check))
{
return new BaseObject(-1, 'msg_password_mismatch');
}
}
}
return new BaseObject;
}
/**
* Check required fields on signup or modify info
*
* @param object $config
* @param object $args
* @param string $mode
* @param object $original
* @return object
*/
protected function _checkPhoneNumber($config, &$args, $mode = 'insert', $original = null)
{
$required = false;
$verify = $config->phone_number_verify_by_sms === 'Y';
foreach ($config->signupForm as $formInfo)
{
if ($formInfo->name === 'phone_number' && $formInfo->isUse && $formInfo->required)
{
$required = true;
break;
}
}
if ($verify)
{
// Attempt to fill in the country code.
if ($config->phone_number_default_country && (!$args->phone_country || $config->phone_number_hide_country === 'Y'))
{
$args->phone_country = $config->phone_number_default_country;
}
if ($args->phone_country && !preg_match('/^[A-Z]{3}$/', $args->phone_country))
{
$args->phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($args->phone_country);
}
if ($args->phone_country === 'KOR' && !Rhymix\Framework\Korea::isValidPhoneNumber($args->phone_number ?? ''))
{
if ($required)
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
else
{
$args->phone_number = '';
return new BaseObject;
}
}
// If updating, check if the new info is the same as the old info.
if ($mode === 'update' && $original)
{
$recheck_needed = false;
if ($args->phone_country !== $original->phone_country)
{
$recheck_needed = true;
}
if (preg_replace('/[^0-9]/', '', $args->phone_number) !== $original->phone_number)
{
$recheck_needed = true;
}
if (!$recheck_needed)
{
return new BaseObject;
}
}
// Check if verified by SMS.
if (!isset($_SESSION['verify_by_sms']) || !$_SESSION['verify_by_sms']['status'])
{
return new BaseObject(-1, 'verify_by_sms_incomplete');
}
if ($args->phone_country !== $_SESSION['verify_by_sms']['country'])
{
return new BaseObject(-1, 'verify_by_sms_incomplete');
}
if ($args->phone_number !== $_SESSION['verify_by_sms']['number'])
{
return new BaseObject(-1, 'verify_by_sms_incomplete');
}
}
return new BaseObject;
}
/**
* Check if a variable is empty.
*
* @param mixed $var
* @param string $type
* @return bool
*/
protected function _checkEmpty($var, $type = '')
{
if ($type === 'tel' || $type === 'kr_zip')
{
$condition = (is_array($var) && count($var) >= 3 && trim($var[0]) !== '' && trim($var[1]) !== '' && trim($var[2]) !== '');
return !$condition;
}
elseif (is_array($var))
{
return implode('', array_map('trim', $var)) === '';
}
else
{
return trim(strval($var)) === '';
}
}
/**
* @deprecated
* @return void
*/
public static function _clearMemberCache($member_srl)
{
self::clearMemberCache($member_srl);
}
/**
* Clear all cache entries about a member.
*
* @param int $member_srl
* @return void
*/
public static function clearMemberCache($member_srl)
{
$member_srl = intval($member_srl);
Rhymix\Framework\Cache::delete("member:member_info:$member_srl");
Rhymix\Framework\Cache::delete("member:member_groups:$member_srl");
Rhymix\Framework\Cache::delete("site_and_module:accessible_modules:$member_srl");
unset($GLOBALS['__member_info__'][$member_srl]);
unset($GLOBALS['__member_groups__'][$member_srl]);
unset($GLOBALS['__member_info__']['profile_image'][$member_srl]);
unset($GLOBALS['__member_info__']['image_name'][$member_srl]);
unset($GLOBALS['__member_info__']['image_mark'][$member_srl]);
unset($GLOBALS['__member_info__']['group_image_mark'][$member_srl]);
unset($GLOBALS['__member_info__']['signature'][$member_srl]);
}
}
/* End of file member.controller.php */
/* Location: ./modules/member/member.controller.php */