rhymix/modules/member/member.controller.php
Kijin Sung b0f66a36c5 Convert all instances of _XE_PATH_, __XE_VERSION__, etc. to Rhymix constants
_XE_PATH_ -> RX_BASEDIR
__XE_VERSION__ -> RX_VERSION
2020-12-18 15:21:23 +09:00

3879 lines
120 KiB
PHP

<?php
/* Copyright (C) NAVER <http://www.navercorp.com> */
/**
* @class memberController
* @author NAVER (developers@xpressengine.com)
* Controller class of member module
*/
class memberController extends member
{
/**
* Initialization
*
* @return void
*/
function init()
{
}
/**
* Log-in by checking user_id and password
*
* @param string $user_id
* @param string $password
* @param string $keep_signed
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberLogin($user_id = null, $password = null, $keep_signed = null)
{
if(!$user_id && !$password && Context::getRequestMethod() == 'GET')
{
$this->setRedirectUrl(getNotEncodedUrl(''));
throw new Rhymix\Framework\Exception('null_user_id');
}
// Variables
if(!$user_id) $user_id = Context::get('user_id');
$user_id = trim($user_id);
if(!$password) $password = Context::get('password');
$password = trim($password);
if(!$keep_signed) $keep_signed = Context::get('keep_signed');
// Return an error when id and password doesn't exist
if(!$user_id) throw new Rhymix\Framework\Exception('null_user_id');
if(!$password) throw new Rhymix\Framework\Exception('null_password');
$output = $this->doLogin($user_id, $password, $keep_signed=='Y'?true:false);
if (!$output->toBool()) return $output;
$config = ModuleModel::getModuleConfig('member');
$member_info = Context::get('logged_info');
// Check change_password_date
$limit_date = $config->change_password_date;
// Check if change_password_date is set
if($limit_date > 0)
{
if($member_info->change_password_date < date ('YmdHis', strtotime ('-' . $limit_date . ' day')))
{
$msg = sprintf(lang('msg_change_password_date'), $limit_date);
$change_password_url = getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyPassword');
return $this->setRedirectUrl($change_password_url, new BaseObject(-1, $msg));
}
}
// Delete all previous authmail if login is successful
$args = new stdClass();
$args->member_srl = $member_info->member_srl;
executeQuery('member.deleteAuthMail', $args);
// If a device token is supplied, attempt to register it.
$device_token = Context::get('device_token');
if ($device_token)
{
$output = executeQuery('member.getMemberDevice', ['device_token' => $device_token]);
if (!$output->data || $output->data->member_srl != $member_info->member_srl)
{
$output = $this->procMemberRegisterDevice($member_info->member_srl);
if ($output instanceof BaseObject && !$output->toBool())
{
return $output;
}
}
else
{
executeQuery('member.updateMemberDeviceLastActiveDate', ['device_token' => $device_token]);
}
}
if(!$config->after_login_url)
{
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', '');
}
else
{
$returnUrl = $config->after_login_url;
}
return $this->setRedirectUrl($returnUrl, $output);
}
/**
* Register device
*/
function procMemberRegisterDevice($member_srl = null)
{
Context::setResponseMethod('JSON');
// Check user_id, password, device_token
$allow_guest_device = config('push.allow_guest_device');
$user_id = Context::get('user_id');
$password = Context::get('password');
$device_token = Context::get('device_token');
$device_model = escape(Context::get('device_model'));
// Return an error when id and password doesn't exist
if(!$member_srl && !$user_id && !$allow_guest_device) return new BaseObject(-1, 'NULL_USER_ID');
if(!$member_srl && !$password && !$allow_guest_device) return new BaseObject(-1, 'NULL_PASSWORD');
if(!$device_token) return new BaseObject(-1, 'NULL_DEVICE_TOKEN');
// Get device information
$browserInfo = Rhymix\Framework\UA::getBrowserInfo();
$device_type = escape(strtolower($browserInfo->os));
$device_version = $browserInfo->os_version;
if(!$device_model)
{
$device_model = escape($browserInfo->device);
}
// Detect device token type
if (preg_match('/^[0-9a-z]{64}$/', $device_token))
{
$device_token_type = 'apns';
}
elseif (preg_match('/^[0-9a-zA-Z:_-]+$/', $device_token) && strlen($device_token) > 64)
{
$device_token_type = 'fcm';
}
else
{
return new BaseObject(-1, 'INVALID_DEVICE_TOKEN');
}
if ($member_srl)
{
$member_srl = intval($member_srl);
}
elseif ($user_id && $password)
{
$output = $this->procMemberLogin($user_id, $password);
if(!$output->toBool())
{
return new BaseObject(-1, 'LOGIN_FAILED');
}
$logged_info = Context::get('logged_info');
$member_srl = intval($logged_info->member_srl);
}
else
{
$logged_info = null;
$member_srl = 0;
}
// Generate keys
$random_key = Rhymix\Framework\Security::getRandom();
$device_key = hash_hmac('sha256', $random_key, $member_srl . ':' . config('crypto.authentication_key'));
// Prepare query arguments
$args = new stdClass;
$args->device_srl = getNextSequence();
$args->member_srl = $member_srl;
$args->device_token = $device_token;
$args->device_token_type = $device_token_type;
$args->device_key = $device_key;
$args->device_type = $device_type;
$args->device_version = $device_version;
$args->device_model = $device_model;
// Call trigger (before)
$trigger_output = ModuleHandler::triggerCall('member.insertMemberDevice', 'before', $args);
if(!$trigger_output->toBool()) return $trigger_output;
// Start transaction
$oDB = DB::getInstance();
$oDB->begin();
// Remove duplicated token key
executeQuery('member.deleteMemberDevice', ['device_token' => $device_token]);
// Create member_device
$output = executeQuery('member.insertMemberDevice', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Call trigger (after)
ModuleHandler::triggerCall('member.insertMemberDevice', 'after', $args);
$oDB->commit();
// Set parameters
$this->add('member_srl', $member_srl);
$this->add('user_id', $logged_info ? $logged_info->user_id : null);
$this->add('user_name', $logged_info ? $logged_info->user_name : null);
$this->add('nick_name', $logged_info ? $logged_info->nick_name : null);
$this->add('device_key', $random_key);
}
/**
* Automatically log-in to registered device
*/
function procMemberLoginWithDevice()
{
Context::setResponseMethod('JSON');
// Check member_srl, device_token, device_key
$allow_guest_device = config('push.allow_guest_device');
$member_srl = intval(Context::get('member_srl'));
$device_token = Context::get('device_token');
$random_key = Context::get('device_key');
// Return an error when id, password and device_key doesn't exist
if(!$member_srl && !$allow_guest_device) return new BaseObject(-1, 'NULL_MEMBER_SRL');
if(!$device_token) return new BaseObject(-1, 'NULL_DEVICE_TOKEN');
if(!$random_key) return new BaseObject(-1, 'NULL_DEVICE_KEY');
$args = new stdClass;
$args->member_srl = $member_srl;
$args->device_token = $device_token;
$args->device_key = hash_hmac('sha256', $random_key, $member_srl . ':' . config('crypto.authentication_key'));
$output = executeQueryArray('member.getMemberDevice', $args);
if(!$output->toBool())
{
return new BaseObject(-1, 'DEVICE_RETRIEVE_FAILED');
}
if(!$output->data)
{
return new BaseObject(-1, 'UNREGISTERED_DEVICE');
}
// Log-in
if($member_srl)
{
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl);
$output = $this->doLogin($member_info->user_id);
if(!$output->toBool())
{
return new BaseObject(-1, 'LOGIN_FAILED');
}
}
else
{
$member_info = null;
}
// Update last active date
executeQuery('member.updateMemberDeviceLastActiveDate', ['device_token' => $device_token]);
$this->add('member_srl', $member_srl);
$this->add('user_id', $member_info ? $member_info->user_id : null);
$this->add('user_name', $member_info ? $member_info->user_name : null);
$this->add('nick_name', $member_info ? $member_info->nick_name : null);
}
/**
* Log-out
*
* @return Object
*/
function procMemberLogout()
{
// Call a trigger before log-out (before)
$logged_info = Context::get('logged_info');
$trigger_output = ModuleHandler::triggerCall('member.doLogout', 'before', $logged_info);
if(!$trigger_output->toBool()) return $trigger_output;
// Destroy session information
Rhymix\Framework\Session::logout();
self::clearMemberCache($logged_info->member_srl);
// Call a trigger after log-out (after)
ModuleHandler::triggerCall('member.doLogout', 'after', $logged_info);
$output = new BaseObject();
$config = ModuleModel::getModuleConfig('member');
if($config->after_logout_url)
{
$output->redirect_url = $config->after_logout_url;
}
return $output;
}
/**
* Scrap document
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberScrapDocument()
{
$document_srl = (int) (Context::get('document_srl') ?: Context::get('target_srl'));
if(!$document_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
$oDocument = DocumentModel::getDocument($document_srl);
// Check document
if(!$oDocument->isAccessible())
{
throw new Rhymix\Framework\Exception('msg_is_secret');
}
$module_info = ModuleModel::getModuleInfoByModuleSrl($oDocument->get('module_srl'));
$logged_info = Context::get('logged_info');
$grant = ModuleModel::getGrant($module_info, $logged_info);
// Check access to module of the document
if(!$grant->access)
{
throw new Rhymix\Framework\Exceptions\NotPermitted;
}
// Check grant to module of the document
if(isset($grant->list) && isset($grant->view) && (!$grant->list || !$grant->view))
{
throw new Rhymix\Framework\Exceptions\NotPermitted;
}
// Check consultation option
if(isset($grant->consultation_read) && $module_info->consultation == 'Y' && !$grant->consultation_read && !$oDocument->isGranted())
{
throw new Rhymix\Framework\Exceptions\NotPermitted;
}
// Find default scrap folder
$args = new stdClass();
$args->member_srl = $logged_info->member_srl;
$args->name = '/DEFAULT/';
$output = executeQuery('member.getScrapFolderList', $args);
if($output->toBool() && is_object($output->data) && $output->data->folder_srl)
{
$default_folder_srl = $output->data->folder_srl;
}
else
{
$default_folder_srl = null;
}
// Variables
$args = new stdClass();
$args->document_srl = $document_srl;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $default_folder_srl;
$args->user_id = $oDocument->get('user_id');
$args->user_name = $oDocument->get('user_name');
$args->nick_name = $oDocument->get('nick_name');
$args->target_member_srl = $oDocument->get('member_srl');
$args->title = $oDocument->get('title');
// Check if already scrapped
$output = executeQuery('member.getScrapDocument', $args);
if($output->data->count)
{
throw new Rhymix\Framework\Exception('msg_alreay_scrapped');
}
// Call trigger (before)
$trigger_output = ModuleHandler::triggerCall('member.procMemberScrapDocument', 'before', $args);
if (!$trigger_output->toBool())
{
return $trigger_output;
}
// Insert
$output = executeQuery('member.addScrapDocument', $args);
if(!$output->toBool()) return $output;
// Call trigger (after)
ModuleHandler::triggerCall('member.procMemberScrapDocument', 'after', $args);
$this->setError(-1);
$this->setMessage('success_registed');
}
/**
* Delete a scrap
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberDeleteScrap()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
$document_srl = (int)Context::get('document_srl');
if(!$document_srl) throw new Rhymix\Framework\Exceptions\InvalidRequest;
// Variables
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->document_srl = $document_srl;
return executeQuery('member.deleteScrapDocument', $args);
}
/**
* Move a scrap to another folder
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberMoveScrapFolder()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
$document_srl = (int)Context::get('document_srl');
$folder_srl = (int)Context::get('folder_srl');
if(!$document_srl || !$folder_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check that the target folder exists and belongs to member
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $folder_srl;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(!count($output->data))
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Move
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->document_srl = $document_srl;
$args->folder_srl = $folder_srl;
return executeQuery('member.updateScrapDocumentFolder', $args);
}
/**
* Create a scrap folder
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsertScrapFolder()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
// Get new folder name
$folder_name = Context::get('name');
$folder_name = escape(trim(utf8_normalize_spaces($folder_name)));
if(!$folder_name)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check existing folder with same name
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->name = $folder_name;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(count($output->data) || $folder_name === lang('default_folder'))
{
throw new Rhymix\Framework\Exception('msg_folder_alreay_exists');
}
// Create folder
$args = new stdClass;
$args->folder_srl = getNextSequence();
$args->member_srl = $logged_info->member_srl;
$args->name = $folder_name;
$args->list_order = $args->folder_srl;
$this->add('folder_srl', $args->folder_srl);
return executeQuery('member.insertScrapFolder', $args);
}
/**
* Rename a scrap folder
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberRenameScrapFolder()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
// Get new folder name
$folder_srl = intval(Context::get('folder_srl'));
$folder_name = Context::get('name');
$folder_name = escape(trim(utf8_normalize_spaces($folder_name)));
if(!$folder_srl || !$folder_name)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check that the original folder exists and belongs to member
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $folder_srl;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(!count($output->data))
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
if(array_first($output->data)->name === '/DEFAULT/')
{
throw new Rhymix\Framework\Exception('msg_folder_is_default');
}
// Check existing folder with same name
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->not_folder_srl = $folder_srl;
$args->name = $folder_name;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(count($output->data) || $folder_name === lang('default_folder'))
{
throw new Rhymix\Framework\Exception('msg_folder_alreay_exists');
}
// Rename folder
$args = new stdClass;
$args->folder_srl = $folder_srl;
$args->name = $folder_name;
return executeQuery('member.updateScrapFolder', $args);
}
/**
* Delete a scrap folder
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberDeleteScrapFolder()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
// Get folder_srl to delete
$folder_srl = intval(Context::get('folder_srl'));
if(!$folder_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Check that the folder exists and belongs to member
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $folder_srl;
$output = executeQueryArray('member.getScrapFolderList', $args);
if(!count($output->data))
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
if(array_first($output->data)->name === '/DEFAULT/')
{
throw new Rhymix\Framework\Exception('msg_folder_is_default');
}
// Check that the folder is empty
$args = new stdClass;
$args->member_srl = $logged_info->member_srl;
$args->folder_srl = $folder_srl;
$output = executeQueryArray('member.getScrapDocumentList', $args);
if(count($output->data))
{
throw new Rhymix\Framework\Exception('msg_folder_not_empty');
}
// Delete folder
$args = new stdClass;
$args->folder_srl = $folder_srl;
return executeQuery('member.deleteScrapFolder', $args);
}
/**
* Migrate a member's scrapped documents to the new folder system.
*
* @param int $member_srl
* @return void|Object (void : success, Object : fail)
*/
function migrateMemberScrappedDocuments($member_srl)
{
$args = new stdClass;
$args->folder_srl = getNextSequence();
$args->member_srl = $member_srl;
$args->name = '/DEFAULT/';
$args->list_order = $args->folder_srl;
$output = executeQuery('member.insertScrapFolder', $args);
if(!$output->toBool())
{
return $output;
}
$output = executeQuery('member.updateScrapFolderFromNull', $args);
if(!$output->toBool())
{
return $output;
}
}
/**
* Save posts
* @deprecated - instead Document Controller - procDocumentTempSave method use
* @return Object
*/
function procMemberSaveDocument()
{
return new BaseObject(0, 'Deprecated method');
}
/**
* Delete the post
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberDeleteSavedDocument()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
$document_srl = (int)Context::get('document_srl');
if(!$document_srl) throw new Rhymix\Framework\Exceptions\InvalidRequest;
$oDocument = DocumentModel::getDocument($document_srl);
if ($oDocument->get('member_srl') != $logged_info->member_srl)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
$configStatusList = DocumentModel::getStatusList();
if ($oDocument->get('status') != $configStatusList['temp'])
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Variables
$oDocumentController = getController('document');
$oDocumentController->deleteDocument($document_srl);
}
/**
* Delete an autologin
*/
function procMemberDeleteAutologin()
{
// Check login information
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$logged_info = Context::get('logged_info');
$autologin_id = intval(Context::get('autologin_id'));
$autologin_key = Context::get('autologin_key');
if (!$autologin_id || !$autologin_key)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
$args = new stdClass;
$args->autologin_id = $autologin_id;
$args->autologin_key = $autologin_key;
$output = executeQueryArray('member.getAutologin', $args);
if ($output->toBool() && $output->data)
{
$autologin_info = array_first($output->data);
if ($autologin_info->member_srl == $logged_info->member_srl)
{
$output = executeQuery('member.deleteAutologin', $args);
if ($output->toBool())
{
$this->add('deleted', 'Y');
}
else
{
$this->add('deleted', 'N');
}
}
else
{
$this->add('deleted', 'N');
}
}
else
{
$this->add('deleted', 'N');
}
}
/**
* Check values when member joining
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberCheckValue()
{
$name = Context::get('name');
$value = Context::get('value');
if(!$value) return;
$config = MemberModel::getMemberConfig();
// Check if logged-in
$logged_info = Context::get('logged_info');
switch($name)
{
case 'user_id' :
// Check denied ID
if(MemberModel::isDeniedID($value)) return new BaseObject(0,'denied_user_id');
// Check if duplicated
$member_srl = MemberModel::getMemberSrlByUserID($value);
if($member_srl && $logged_info->member_srl != $member_srl ) return new BaseObject(0,'msg_exists_user_id');
break;
case 'nick_name' :
// Check denied ID
if(MemberModel::isDeniedNickName($value))
{
return new BaseObject(0,'denied_nick_name');
}
// Check if duplicated
if($config->allow_duplicate_nickname !== 'Y')
{
$member_srl = MemberModel::getMemberSrlByNickName($value);
if($member_srl && $logged_info->member_srl != $member_srl ) return new BaseObject(0,'msg_exists_nick_name');
}
break;
case 'email_address' :
// Check managed Email Host
if(MemberModel::isDeniedEmailHost($value))
{
$emailhost_check = $config->emailhost_check;
$managed_email_host = lang('managed_email_host');
$email_hosts = MemberModel::getManagedEmailHosts();
foreach ($email_hosts as $host)
{
$hosts[] = $host->email_host;
}
$message = sprintf($managed_email_host[$emailhost_check],implode(', ',$hosts),'id@'.implode(', id@',$hosts));
return new BaseObject(0,$message);
}
// Check if duplicated
$member_srl = MemberModel::getMemberSrlByEmailAddress($value);
if($member_srl && $logged_info->member_srl != $member_srl ) return new BaseObject(0,'msg_exists_email_address');
break;
}
}
/**
* Join Membership
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsert()
{
if (Context::getRequestMethod() == 'GET')
{
throw new Rhymix\Framework\Exceptions\SecurityViolation;
}
$config = MemberModel::getMemberConfig();
// call a trigger (before)
$trigger_output = ModuleHandler::triggerCall ('member.procMemberInsert', 'before', $config);
if(!$trigger_output->toBool ()) return $trigger_output;
// Check if an administrator allows a membership
if($config->enable_join != 'Y') throw new Rhymix\Framework\Exceptions\FeatureDisabled('msg_signup_disabled');
// Check if the user accept the license terms (only if terms exist)
$accept_agreement = Context::get('accept_agreement');
if(!is_array($accept_agreement))
{
$accept_agreement = array_fill(0, count($config->agreements), $accept_agreement);
}
$accept_agreement_rearranged = array();
foreach($config->agreements as $i => $agreement)
{
if($agreement->type === 'disabled')
{
continue;
}
if($agreement->type === 'required' && $accept_agreement[$i] !== 'Y')
{
throw new Rhymix\Framework\Exception('msg_accept_agreement');
}
$accept_agreement_rearranged[$i] = $accept_agreement[$i] === 'Y' ? 'Y' : 'N';
}
// Extract the necessary information in advance
$getVars = array();
$use_phone = false;
if($config->signupForm)
{
foreach($config->signupForm as $formInfo)
{
if($formInfo->name === 'phone_number' && $formInfo->isUse)
{
$use_phone = true;
}
if($formInfo->isDefaultForm && ($formInfo->isUse || $formInfo->required || $formInfo->mustRequired))
{
$getVars[] = $formInfo->name;
}
}
}
$args = new stdClass;
foreach($getVars as $val)
{
$args->{$val} = Context::get($val);
if ($val === 'birthday')
{
$args->birthday_ui = Context::get('birthday_ui');
}
if ($val === 'phone_number')
{
$args->phone_country = preg_replace('/[^A-Z]/', '', Context::get('phone_country'));
}
}
// mobile input date format can be different
if($args->birthday)
{
if($args->birthday !== intval($args->birthday))
{
$args->birthday = date('Ymd', strtotime($args->birthday));
}
else
{
$args->birthday = intval($args->birthday);
}
}
if(!$args->birthday && $args->birthday_ui)
{
$args->birthday = intval(strtr($args->birthday_ui, array('-'=>'', '/'=>'', '.'=>'', ' '=>'')));
}
$args->allow_mailing = Context::get('allow_mailing');
$args->allow_message = Context::get('allow_message');
if($args->password1) $args->password = $args->password1;
// Check phone number
if ($config->phone_number_verify_by_sms === 'Y' && $use_phone)
{
if (!isset($_SESSION['verify_by_sms']) || !$_SESSION['verify_by_sms']['status'])
{
throw new Rhymix\Framework\Exception('verify_by_sms_incomplete');
}
if ($config->phone_number_default_country && (!$args->phone_country || $config->phone_number_hide_country === 'Y'))
{
$args->phone_country = $config->phone_number_default_country;
}
if ($args->phone_country && !preg_match('/^[A-Z]{3}$/', $args->phone_country))
{
$args->phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($args->phone_country);
}
if ($args->phone_country !== $_SESSION['verify_by_sms']['country'])
{
throw new Rhymix\Framework\Exception('verify_by_sms_incomplete');
}
if ($args->phone_number !== $_SESSION['verify_by_sms']['number'])
{
throw new Rhymix\Framework\Exception('verify_by_sms_incomplete');
}
}
// check password strength
if(!MemberModel::checkPasswordStrength($args->password, $config->password_strength))
{
$message = lang('about_password_strength');
throw new Rhymix\Framework\Exception($message[$config->password_strength]);
}
// Remove some unnecessary variables from all the vars
$all_args = Context::getRequestVars();
unset($all_args->xe_validator_id);
unset($all_args->module);
unset($all_args->act);
unset($all_args->is_admin);
unset($all_args->member_srl);
unset($all_args->description);
unset($all_args->group_srl_list);
unset($all_args->body);
unset($all_args->accept_agreement);
unset($all_args->signature);
unset($all_args->password);
unset($all_args->password2);
unset($all_args->mid);
unset($all_args->success_return_url);
unset($all_args->error_return_url);
unset($all_args->ruleset);
unset($all_args->captchaType);
unset($all_args->secret_text);
unset($all_args->use_editor);
unset($all_args->use_html);
// Set the user state as "denied" when using mail authentication
if($config->enable_confirm == 'Y') $args->denied = 'Y';
// Add extra vars after excluding necessary information from all the requested arguments
$extra_vars = delObjectVars($all_args, $args);
$args->extra_vars = serialize($extra_vars);
// remove whitespace
$checkInfos = array('user_id', 'user_name', 'nick_name', 'email_address');
foreach($checkInfos as $val)
{
if(isset($args->{$val}))
{
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->{$val})));
}
}
// Check symbols in nickname
if($config->nickname_symbols === 'N')
{
if(preg_match('/[^\pL\d]/u', $args->nick_name, $matches))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
}
}
elseif($config->nickname_symbols === 'LIST')
{
$list = preg_quote($config->nickname_symbols_allowed_list, '/');
if(preg_match('/[^\pL\d' . $list . ']/u', $args->nick_name, $matches))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
}
}
// Insert member info
$output = $this->insertMember($args);
if($output instanceof BaseObject && !$output->toBool())
{
return $output;
}
// Insert agreement info
foreach($accept_agreement_rearranged as $agreement_sequence => $agreed)
{
$ag_args = new stdClass;
$ag_args->member_srl = $args->member_srl;
$ag_args->agreement_sequence = $agreement_sequence;
$ag_args->agreed = $agreed;
$output = executeQuery('member.insertAgreed', $ag_args);
if($output instanceof BaseObject && !$output->toBool())
{
return $output;
}
}
// insert ProfileImage, ImageName, ImageMark
$profile_image = Context::get('profile_image');
if(is_uploaded_file($profile_image['tmp_name']))
{
$this->insertProfileImage($args->member_srl, $profile_image['tmp_name']);
}
$image_mark = Context::get('image_mark');
if(is_uploaded_file($image_mark['tmp_name']))
{
$this->insertImageMark($args->member_srl, $image_mark['tmp_name']);
}
$image_name = Context::get('image_name');
if(is_uploaded_file($image_name['tmp_name']))
{
$this->insertImageName($args->member_srl, $image_name['tmp_name']);
}
// Save Signature
$signature = Context::get('signature');
$this->putSignature($args->member_srl, $signature);
// Log-in
if($config->enable_confirm != 'Y')
{
$output = $this->doLogin($args->{$config->identifier});
if(!$output->toBool()) {
if($output->error == -9)
$output->error = -11;
return $this->setRedirectUrl(getUrl('', 'act', 'dispMemberLoginForm'), $output);
}
}
// Register device
$device_token = Context::get('device_token');
if ($device_token)
{
$output = executeQuery('member.getMemberDevice', ['device_token' => $device_token]);
if (!$output->data || $output->data->member_srl != $args->member_srl)
{
$this->procMemberRegisterDevice($args->member_srl);
}
}
// Results
$this->add('member_srl', $args->member_srl);
if($config->redirect_url) $this->add('redirect_url', $config->redirect_url);
if($config->enable_confirm == 'Y')
{
$msg = sprintf(lang('msg_confirm_mail_sent'), $args->email_address);
$this->setMessage($msg);
return $this->setRedirectUrl(getUrl('', 'act', 'dispMemberLoginForm'), new BaseObject(-12, $msg));
}
else $this->setMessage('success_registed');
// Call a trigger (after)
ModuleHandler::triggerCall('member.procMemberInsert', 'after', $config);
if($config->redirect_url)
{
$returnUrl = $config->redirect_url;
}
else
{
if(Context::get('success_return_url'))
{
$returnUrl = Context::get('success_return_url');
}
else if($_COOKIE['XE_REDIRECT_URL'])
{
$returnUrl = $_COOKIE['XE_REDIRECT_URL'];
setcookie("XE_REDIRECT_URL", '', 1);
}
}
self::clearMemberCache($args->member_srl, $site_module_info->site_srl);
$this->setRedirectUrl($returnUrl);
}
function procMemberModifyInfoBefore()
{
if($_SESSION['rechecked_password_step'] != 'INPUT_PASSWORD')
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
if(!Context::get('is_logged'))
{
throw new Rhymix\Framework\Exceptions\MustLogin;
}
$password = Context::get('password');
if(!$password)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Get information of logged-in user
$logged_info = Context::get('logged_info');
$member_srl = $logged_info->member_srl;
$columnList = array('member_srl', 'password');
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl, 0, $columnList);
// Verify the current password
if(!MemberModel::isValidPassword($member_info->password, $password))
{
throw new Rhymix\Framework\Exception('invalid_password');
}
$_SESSION['rechecked_password_step'] = 'VALIDATE_PASSWORD';
if(Context::get('success_return_url'))
{
$redirectUrl = Context::get('success_return_url');
}
else
{
$redirectUrl = getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyInfo');
}
$this->setRedirectUrl($redirectUrl);
}
/**
* Edit member profile
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberModifyInfo()
{
if(!Context::get('is_logged'))
{
throw new Rhymix\Framework\Exceptions\MustLogin;
}
if($_SESSION['rechecked_password_step'] != 'INPUT_DATA')
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Get current module config and user info
$config = MemberModel::getMemberConfig();
$logged_info = Context::get('logged_info');
// Extract the necessary information in advance
$getVars = array('allow_mailing','allow_message');
$use_phone = false;
if($config->signupForm)
{
foreach($config->signupForm as $formInfo)
{
if($formInfo->name === 'phone_number' && $formInfo->isUse)
{
$use_phone = true;
}
if($formInfo->isDefaultForm && ($formInfo->isUse || $formInfo->required || $formInfo->mustRequired))
{
$getVars[] = $formInfo->name;
}
}
}
$args = new stdClass;
foreach($getVars as $val)
{
$args->{$val} = Context::get($val);
if($val === 'birthday')
{
$args->birthday_ui = Context::get('birthday_ui');
}
if ($val === 'phone_number')
{
$args->phone_country = preg_replace('/[^A-Z]/', '', Context::get('phone_country'));
}
}
// mobile input date format can be different
if($args->birthday)
{
if($args->birthday !== intval($args->birthday))
{
$args->birthday = date('Ymd', strtotime($args->birthday));
}
else
{
$args->birthday = intval($args->birthday);
}
}
if(!$args->birthday && $args->birthday_ui)
{
$args->birthday = intval(strtr($args->birthday_ui, array('-'=>'', '/'=>'', '.'=>'', ' '=>'')));
}
// Check phone number
if ($config->phone_number_verify_by_sms === 'Y' && $use_phone)
{
$phone_verify_needed = false;
if ($config->phone_number_default_country && (!$args->phone_country || $config->phone_number_hide_country === 'Y'))
{
$args->phone_country = $config->phone_number_default_country;
}
if ($args->phone_country && !preg_match('/^[A-Z]{3}$/', $args->phone_country))
{
$args->phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($args->phone_country);
}
if ($args->phone_country !== $logged_info->phone_country)
{
$phone_verify_needed = true;
}
if (preg_replace('/[^0-9]/', '', $args->phone_number) !== $logged_info->phone_number)
{
$phone_verify_needed = true;
}
if ($phone_verify_needed)
{
if (!isset($_SESSION['verify_by_sms']) || !$_SESSION['verify_by_sms']['status'])
{
throw new Rhymix\Framework\Exception('verify_by_sms_incomplete');
}
if ($args->phone_country !== $_SESSION['verify_by_sms']['country'])
{
throw new Rhymix\Framework\Exception('verify_by_sms_incomplete');
}
if ($args->phone_number !== $_SESSION['verify_by_sms']['number'])
{
throw new Rhymix\Framework\Exception('verify_by_sms_incomplete');
}
}
}
$args->member_srl = $logged_info->member_srl;
// Remove some unnecessary variables from all the vars
$all_args = Context::getRequestVars();
unset($all_args->xe_validator_id);
unset($all_args->module);
unset($all_args->act);
unset($all_args->is_admin);
unset($all_args->member_srl);
unset($all_args->description);
unset($all_args->group_srl_list);
unset($all_args->body);
unset($all_args->accept_agreement);
unset($all_args->signature);
unset($all_args->password);
unset($all_args->password2);
unset($all_args->mid);
unset($all_args->success_return_url);
unset($all_args->error_return_url);
unset($all_args->ruleset);
unset($all_args->captchaType);
unset($all_args->secret_text);
unset($all_args->use_editor);
unset($all_args->use_html);
unset($all_args->_filter);
$extra_vars = delObjectVars($all_args, $args);
$args->extra_vars = serialize($extra_vars);
// remove whitespace
$checkInfos = array('user_id', 'user_name', 'nick_name', 'email_address');
foreach($checkInfos as $val)
{
if(isset($args->{$val}))
{
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', utf8_clean(html_entity_decode($args->{$val})));
}
}
// Check symbols in nickname
if($config->nickname_symbols === 'N')
{
if(preg_match('/[^\pL\d]/u', $args->nick_name, $matches))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
}
}
elseif($config->nickname_symbols === 'LIST')
{
$list = preg_quote($config->nickname_symbols_allowed_list, '/');
if(preg_match('/[^\pL\d' . $list . ']/u', $args->nick_name, $matches))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_invalid_symbol_in_nickname'), escape($matches[0])));
}
}
// Execute insert or update depending on the value of member_srl
$output = $this->updateMember($args);
if(!$output->toBool()) return $output;
$profile_image = Context::get('profile_image');
if(is_uploaded_file($profile_image['tmp_name']))
{
$this->insertProfileImage($args->member_srl, $profile_image['tmp_name']);
}
$image_mark = Context::get('image_mark');
if(is_uploaded_file($image_mark['tmp_name']))
{
$this->insertImageMark($args->member_srl, $image_mark['tmp_name']);
}
$image_name = Context::get('image_name');
if(is_uploaded_file($image_name['tmp_name']))
{
$this->insertImageName($args->member_srl, $image_name['tmp_name']);
}
// Save Signature
$signature = Context::get('signature');
$this->putSignature($args->member_srl, $signature);
if($config->member_allow_fileupload === 'Y')
{
getController('file')->setFilesValid($args->member_srl, 'sig');
}
// Get user_id information
$member_info = MemberModel::getMemberInfoByMemberSrl($args->member_srl);
// Call a trigger after successfully modified (after)
ModuleHandler::triggerCall('member.procMemberModifyInfo', 'after', $member_info);
unset($_SESSION['rechecked_password_step']);
$this->setSessionInfo();
// Return result
$this->add('member_srl', $args->member_srl);
$this->setMessage('success_updated');
$site_module_info = Context::get('site_module_info');
self::clearMemberCache($args->member_srl, $site_module_info->site_srl);
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Change the user password
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberModifyPassword()
{
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
// Extract the necessary information in advance
$current_password = trim(Context::get('current_password'));
$password = trim(Context::get('password1'));
// Get information of logged-in user
$logged_info = Context::get('logged_info');
$member_srl = $logged_info->member_srl;
// Get information of member_srl
$columnList = array('member_srl', 'password');
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl, 0, $columnList);
// Verify the cuttent password
if(!MemberModel::isValidPassword($member_info->password, $current_password, $member_srl)) throw new Rhymix\Framework\Exception('invalid_password');
// Check if a new password is as same as the previous password
if($current_password == $password) throw new Rhymix\Framework\Exception('invalid_new_password');
// Execute insert or update depending on the value of member_srl
$args = new stdClass;
$args->member_srl = $member_srl;
$args->password = $password;
$output = $this->updateMemberPassword($args);
if(!$output->toBool()) return $output;
// Log out all other sessions.
$member_config = ModuleModel::getModuleConfig('member');
if ($member_config->password_change_invalidate_other_sessions === 'Y')
{
Rhymix\Framework\Session::destroyOtherSessions($member_srl);
}
$this->add('member_srl', $args->member_srl);
$this->setMessage('success_updated');
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Membership withdrawal
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberLeave()
{
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
// Extract the necessary information in advance
$password = trim(Context::get('password'));
// Get information of logged-in user
$logged_info = Context::get('logged_info');
$member_srl = $logged_info->member_srl;
// Get information of member_srl
$columnList = array('member_srl', 'password');
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl, 0, $columnList);
// Verify the cuttent password
if(!MemberModel::isValidPassword($member_info->password, $password)) throw new Rhymix\Framework\Exception('invalid_password');
$output = $this->deleteMember($member_srl);
if(!$output->toBool()) return $output;
// Destroy all session information
executeQuery('member.deleteAutologin', (object)array('member_srl' => $member_srl));
Rhymix\Framework\Session::logout();
// Return success message
$this->setMessage('success_leaved');
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', '');
$this->setRedirectUrl($returnUrl);
}
/**
* Add a profile image
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsertProfileImage()
{
// Check if the file is successfully uploaded
$file = Context::get('profile_image');
if(!is_uploaded_file($file['tmp_name'])) throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
// Ignore if member_srl is invalid or doesn't exist.
$member_srl = Context::get('member_srl');
if(!$member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
$logged_info = Context::get('logged_info');
if($logged_info->is_admin != 'Y' && $logged_info->member_srl != $member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
// Return if member module is set not to use an image name or the user is not an administrator ;
$config = MemberModel::getMemberConfig();
if($logged_info->is_admin != 'Y' && $config->profile_image != 'Y') throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
$output = $this->insertProfileImage($member_srl, $file['tmp_name']);
if(!$output->toBool()) return $output;
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Insert a profile image
*
* @param int $member_srl
* @param object $target_file
*
* @return void
*/
function insertProfileImage($member_srl, $target_file)
{
$config = MemberModel::getMemberConfig();
// Get an image size
$max_width = $config->profile_image_max_width;
$max_height = $config->profile_image_max_height;
$max_filesize = $config->profile_image_max_filesize;
Context::loadLang(RX_BASEDIR . 'modules/file/lang');
// Get file information
FileHandler::clearStatCache($target_file);
list($width, $height, $type) = @getimagesize($target_file);
if(IMAGETYPE_PNG == $type) $ext = 'png';
elseif(IMAGETYPE_JPEG == $type) $ext = 'jpg';
elseif(IMAGETYPE_GIF == $type) $ext = 'gif';
else
{
throw new Rhymix\Framework\Exception('msg_not_uploaded_profile_image');
}
$target_path = sprintf('files/member_extra_info/profile_image/%s', getNumberingPath($member_srl));
FileHandler::makeDir($target_path);
$target_filename = sprintf('%s%d.%s', $target_path, $member_srl, $ext);
// Convert if the image size is larger than a given size
if($width > $max_width || $height > $max_height)
{
$temp_filename = sprintf('files/cache/tmp/profile_image_%d.%s', $member_srl, $ext);
FileHandler::createImageFile($target_file, $temp_filename, $max_width, $max_height, $ext);
// 파일 용량 제한
FileHandler::clearStatCache($temp_filename);
$filesize = filesize($temp_filename);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
FileHandler::removeFile($temp_filename);
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_profile_image'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
FileHandler::moveFile($temp_filename, $target_filename);
FileHandler::clearStatCache($target_filename);
}
else
{
// 파일 용량 제한
$filesize = filesize($target_file);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_profile_image'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
@copy($target_file, $target_filename);
FileHandler::clearStatCache($target_filename);
}
return new BaseObject(0, 'success');
}
/**
* Add an image name
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsertImageName()
{
// Check if the file is successfully uploaded
$file = Context::get('image_name');
if(!is_uploaded_file($file['tmp_name'])) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_name');
// Ignore if member_srl is invalid or doesn't exist.
$member_srl = Context::get('member_srl');
if(!$member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_name');
$logged_info = Context::get('logged_info');
if($logged_info->is_admin != 'Y' && $logged_info->member_srl != $member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_name');
// Return if member module is set not to use an image name or the user is not an administrator ;
$config = MemberModel::getMemberConfig();
if($logged_info->is_admin != 'Y' && $config->image_name != 'Y') throw new Rhymix\Framework\Exception('msg_not_uploaded_image_name');
$output = $this->insertImageName($member_srl, $file['tmp_name']);
if(!$output->toBool()) return $output;
// Page refresh
//$this->setRefreshPage();
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Insert a image name
*
* @param int $member_srl
* @param object $target_file
*
* @return void
*/
function insertImageName($member_srl, $target_file)
{
$config = MemberModel::getMemberConfig();
// Get an image size
$max_width = $config->image_name_max_width;
$max_height = $config->image_name_max_height;
$max_filesize = $config->image_name_max_filesize;
Context::loadLang(RX_BASEDIR . 'modules/file/lang');
// Get a target path to save
$target_path = sprintf('files/member_extra_info/image_name/%s/', getNumberingPath($member_srl));
FileHandler::makeDir($target_path);
$target_filename = sprintf('%s%d.gif', $target_path, $member_srl);
// Get file information
list($width, $height, $type) = @getimagesize($target_file);
// Convert if the image size is larger than a given size or if the format is not a gif
if($width > $max_width || $height > $max_height || $type!=1)
{
$temp_filename = sprintf('files/cache/tmp/image_name_%d.gif', $member_srl, $ext);
FileHandler::createImageFile($target_file, $temp_filename, $max_width, $max_height, 'gif');
// 파일 용량 제한
FileHandler::clearStatCache($temp_filename);
$filesize = filesize($temp_filename);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
FileHandler::removeFile($temp_filename);
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_image_name'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
FileHandler::moveFile($temp_filename, $target_filename);
FileHandler::clearStatCache($target_filename);
}
else
{
// 파일 용량 제한
$filesize = filesize($target_file);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_image_name'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
@copy($target_file, $target_filename);
FileHandler::clearStatCache($target_filename);
}
return new BaseObject(0, 'success');
}
/**
* Delete profile image
*
* @return Object
*/
function procMemberDeleteProfileImage($_memberSrl = 0)
{
$member_srl = ($_memberSrl) ? $_memberSrl : Context::get('member_srl');
if(!$member_srl)
{
return new BaseObject(0,'success');
}
$logged_info = Context::get('logged_info');
if($logged_info && ($logged_info->is_admin == 'Y' || $logged_info->member_srl == $member_srl))
{
$profile_image = MemberModel::getProfileImage($member_srl);
FileHandler::removeFile($profile_image->file);
Rhymix\Framework\Storage::deleteEmptyDirectory(dirname(FileHandler::getRealPath($profile_image->file)), true);
self::clearMemberCache($member_srl);
}
return new BaseObject(0,'success');
}
/**
* Delete Image name
*
* @return void
*/
function procMemberDeleteImageName($_memberSrl = 0)
{
$member_srl = ($_memberSrl) ? $_memberSrl : Context::get('member_srl');
if(!$member_srl)
{
return new BaseObject(0,'success');
}
$logged_info = Context::get('logged_info');
if($logged_info && ($logged_info->is_admin == 'Y' || $logged_info->member_srl == $member_srl))
{
$image_name = MemberModel::getImageName($member_srl);
FileHandler::removeFile($image_name->file);
Rhymix\Framework\Storage::deleteEmptyDirectory(dirname(FileHandler::getRealPath($image_name->file)), true);
}
return new BaseObject(0,'success');
}
/**
* Add an image to mark
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberInsertImageMark()
{
// Check if the file is successfully uploaded
$file = Context::get('image_mark');
if(!is_uploaded_file($file['tmp_name'])) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_mark');
// Ignore if member_srl is invalid or doesn't exist.
$member_srl = Context::get('member_srl');
if(!$member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_mark');
$logged_info = Context::get('logged_info');
if($logged_info->is_admin != 'Y' && $logged_info->member_srl != $member_srl) throw new Rhymix\Framework\Exception('msg_not_uploaded_image_mark');
// Membership in the images mark the module using the ban was set by an administrator or return;
$config = MemberModel::getMemberConfig();
if($logged_info->is_admin != 'Y' && $config->image_mark != 'Y') throw new Rhymix\Framework\Exception('msg_not_uploaded_image_mark');
$this->insertImageMark($member_srl, $file['tmp_name']);
if(!$output->toBool()) return $output;
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberModifyInfo');
$this->setRedirectUrl($returnUrl);
}
/**
* Insert a image mark
*
* @param int $member_srl
* @param object $target_file
*
* @return void
*/
function insertImageMark($member_srl, $target_file)
{
$config = MemberModel::getMemberConfig();
// Get an image size
$max_width = $config->image_mark_max_width;
$max_height = $config->image_mark_max_height;
$max_filesize = $config->image_mark_max_filesize;
Context::loadLang(RX_BASEDIR . 'modules/file/lang');
$target_path = sprintf('files/member_extra_info/image_mark/%s/', getNumberingPath($member_srl));
FileHandler::makeDir($target_path);
$target_filename = sprintf('%s%d.gif', $target_path, $member_srl);
// Get file information
list($width, $height, $type, $attrs) = @getimagesize($target_file);
if($width > $max_width || $height > $max_height || $type!=1)
{
$temp_filename = sprintf('files/cache/tmp/image_mark_%d.gif', $member_srl);
FileHandler::createImageFile($target_file, $temp_filename, $max_width, $max_height, 'gif');
// 파일 용량 제한
FileHandler::clearStatCache($temp_filename);
$filesize = filesize($temp_filename);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
FileHandler::removeFile($temp_filename);
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_group_image_mark'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
FileHandler::moveFile($temp_filename, $target_filename);
FileHandler::clearStatCache($target_filename);
}
else
{
$filesize = filesize($target_file);
if($max_filesize && $filesize > ($max_filesize * 1024))
{
FileHandler::removeFile($target_file);
throw new Rhymix\Framework\Exception(implode(' ' , array(
Context::getLang('msg_not_uploaded_group_image_mark'),
Context::getLang('msg_exceeds_limit_size')
)));
}
FileHandler::removeFilesInDir($target_path);
@copy($target_file, $target_filename);
FileHandler::clearStatCache($target_filename);
}
return new BaseObject(0, 'success');
}
/**
* Delete Image Mark
*
* @return Object
*/
function procMemberDeleteImageMark($_memberSrl = 0)
{
$member_srl = ($_memberSrl) ? $_memberSrl : Context::get('member_srl');
if(!$member_srl)
{
return new BaseObject(0,'success');
}
$logged_info = Context::get('logged_info');
if($logged_info && ($logged_info->is_admin == 'Y' || $logged_info->member_srl == $member_srl))
{
$image_mark = MemberModel::getImageMark($member_srl);
FileHandler::removeFile($image_mark->file);
Rhymix\Framework\Storage::deleteEmptyDirectory(dirname(FileHandler::getRealPath($image_mark->file)), true);
}
return new BaseObject(0,'success');
}
/**
* Find ID/Password
*
* @return Object
*/
function procMemberFindAccount()
{
$email_address = Context::get('email_address');
if(!$email_address) throw new Rhymix\Framework\Exceptions\InvalidRequest;
// Check if a member having the same email address exists
$member_srl = MemberModel::getMemberSrlByEmailAddress($email_address);
if(!$member_srl) throw new Rhymix\Framework\Exception('msg_email_not_exists');
// Get information of the member
$columnList = array('denied', 'member_srl', 'user_id', 'user_name', 'email_address', 'nick_name');
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl, 0, $columnList);
// Check if possible to find member's ID and password
if($member_info->denied == 'Y')
{
$chk_args = new stdClass;
$chk_args->member_srl = $member_info->member_srl;
$output = executeQuery('member.chkAuthMail', $chk_args);
if($output->toBool() && $output->data->count != '0') throw new Rhymix\Framework\Exception('msg_user_not_confirmed');
}
// Insert data into the authentication DB
$args = new stdClass();
$args->user_id = $member_info->user_id;
$args->member_srl = $member_info->member_srl;
$args->new_password = Rhymix\Framework\Password::getRandomPassword(8);
$args->auth_key = Rhymix\Framework\Security::getRandom(40, 'hex');
$args->is_register = 'N';
$output = executeQuery('member.insertAuthMail', $args);
if(!$output->toBool()) return $output;
// Get content of the email to send a member
Context::set('auth_args', $args);
$member_config = ModuleModel::getModuleConfig('member');
$memberInfo = array();
global $lang;
if(is_array($member_config->signupForm))
{
$exceptForm=array('password', 'find_account_question');
foreach($member_config->signupForm as $form)
{
if(!in_array($form->name, $exceptForm) && $form->isDefaultForm && ($form->required || $form->mustRequired))
{
$memberInfo[$lang->{$form->name}] = $member_info->{$form->name};
}
}
}
else
{
$memberInfo[$lang->user_id] = $args->user_id;
$memberInfo[$lang->user_name] = $args->user_name;
$memberInfo[$lang->nick_name] = $args->nick_name;
$memberInfo[$lang->email_address] = $args->email_address;
}
Context::set('memberInfo', $memberInfo);
if(!$member_config->skin) $member_config->skin = "default";
if(!$member_config->colorset) $member_config->colorset = "white";
Context::set('member_config', $member_config);
$tpl_path = sprintf('%sskins/%s', $this->module_path, $member_config->skin);
if(!is_dir($tpl_path)) $tpl_path = sprintf('%sskins/%s', $this->module_path, 'default');
$find_url = getFullUrl ('', 'module', 'member', 'act', 'procMemberAuthAccount', 'member_srl', $member_info->member_srl, 'auth_key', $args->auth_key);
Context::set('find_url', $find_url);
$oTemplate = &TemplateHandler::getInstance();
$content = $oTemplate->compile($tpl_path, 'find_member_account_mail');
// Get information of the Webmaster
$member_config = ModuleModel::getModuleConfig('member');
// Send a mail
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject(lang('msg_find_account_title'));
$oMail->setBody($content);
$oMail->addTo($member_info->email_address, $member_info->nick_name);
$oMail->send();
// Return message
$msg = sprintf(lang('msg_auth_mail_sent'), $member_info->email_address);
if(!in_array(Context::getRequestMethod(),array('XMLRPC','JSON')))
{
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', 'dispMemberFindAccount');
$this->setRedirectUrl($returnUrl);
}
return new BaseObject(0,$msg);
}
/**
* Generate a temp password by answering to the pre-determined question
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberFindAccountByQuestion()
{
throw new Rhymix\Framework\Exception('msg_question_not_allowed');
}
/**
* Execute finding ID/Passoword
* When clicking the link in the verification email, a method is called to change the old password and to authenticate it
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberAuthAccount()
{
$config = MemberModel::getMemberConfig();
// Test user_id and authkey
$member_srl = Context::get('member_srl');
$auth_key = Context::get('auth_key');
if(!$member_srl || !$auth_key)
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
// Call a trigger (before)
$trigger_obj = new stdClass;
$trigger_obj->member_srl = $member_srl;
$trigger_obj->auth_key = $auth_key;
$trigger_output = ModuleHandler::triggerCall('member.procMemberAuthAccount', 'before', $trigger_obj);
if(!$trigger_output->toBool())
{
return $trigger_output;
}
// Test logs for finding password by user_id and authkey
$args = new stdClass;
$args->member_srl = $member_srl;
$args->auth_key = $auth_key;
$output = executeQuery('member.getAuthMail', $args);
if(!$output->toBool() || $output->data->auth_key !== $auth_key)
{
executeQuery('member.deleteAuthMail', $args);
throw new Rhymix\Framework\Exception('msg_invalid_auth_key');
}
$expires = (intval($config->authmail_expires) * intval($config->authmail_expires_unit)) ?: 86400;
if(ztime($output->data->regdate) < time() - $expires)
{
executeQuery('member.deleteAuthMail', $args);
throw new Rhymix\Framework\Exception('msg_expired_auth_key');
}
// Back up the value of $output->data->is_register
$is_register = $output->data->is_register;
// If credentials are correct, change the password to a new one
if($is_register === 'Y')
{
$args->denied = 'N';
}
else
{
$args->password = MemberModel::hashPassword($output->data->new_password);
}
$output = executeQuery('member.updateMemberPassword', $args);
if(!$output->toBool())
{
return $output;
}
// 인증 정보를 여기서 삭제하지 않고 로그인 시점에 삭제되도록 함
// https://github.com/rhymix/rhymix/issues/1232
// executeQuery('member.deleteAuthMail', $args);
// Clear login failure log
// https://github.com/rhymix/rhymix/issues/1429
executeQuery('member.deleteLoginCountByIp', ['ipaddress' => \RX_CLIENT_IP]);
// Clear member cache
self::clearMemberCache($args->member_srl);
// Call a trigger (after)
$trigger_obj->is_register = $is_register;
$trigger_output = ModuleHandler::triggerCall('member.procMemberAuthAccount', 'after', $trigger_obj);
// Notify the result
$message = $is_register === 'Y' ? lang('msg_success_confirmed') : lang('msg_success_authed');
Context::setValidatorMessage('modules/member/skins', $message);
$this->setRedirectUrl(getNotEncodedUrl('', 'act', 'dispMemberLoginForm'));
}
/**
* Request to re-send the authentication mail
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberResendAuthMail()
{
// Get an email_address
$email_address = Context::get('email_address');
if(!$email_address) throw new Rhymix\Framework\Exceptions\InvalidRequest;
// Log test by using email_address
$args = new stdClass;
$args->email_address = $email_address;
$member_srl = MemberModel::getMemberSrlByEmailAddress($email_address);
if(!$member_srl)
{
throw new Rhymix\Framework\Exception('msg_not_exists_member');
}
$columnList = array('member_srl', 'user_id', 'user_name', 'nick_name', 'email_address');
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl, 0, $columnList);
if(!$member_info || !$member_info->member_srl)
{
throw new Rhymix\Framework\Exception('msg_not_exists_member');
}
if($member_info->denied !== 'Y')
{
throw new Rhymix\Framework\Exception('msg_activation_not_needed');
}
$member_config = ModuleModel::getModuleConfig('member');
if(!$member_config->skin) $member_config->skin = "default";
if(!$member_config->colorset) $member_config->colorset = "white";
// Check if a authentication mail has been sent previously
$chk_args = new stdClass;
$chk_args->member_srl = $member_info->member_srl;
$output = executeQuery('member.chkAuthMail', $chk_args);
if($output->toBool() && $output->data->count == '0')
{
throw new Rhymix\Framework\Exception('msg_activation_key_not_found');
}
$auth_args = new stdClass;
$auth_args->member_srl = $member_info->member_srl;
$output = executeQueryArray('member.getAuthMailInfo', $auth_args);
if(!$output->data || !$output->data[0]->auth_key)
{
throw new Rhymix\Framework\Exception('msg_activation_key_not_found');
}
$auth_info = $output->data[0];
// Update the regdate of authmail entry
$renewal_args = new stdClass;
$renewal_args->member_srl = $member_info->member_srl;
$renewal_args->auth_key = $auth_info->auth_key;
$output = executeQuery('member.updateAuthMail', $renewal_args);
$memberInfo = array();
global $lang;
if(is_array($member_config->signupForm))
{
$exceptForm=array('password', 'find_account_question');
foreach($member_config->signupForm as $form)
{
if(!in_array($form->name, $exceptForm) && $form->isDefaultForm && ($form->required || $form->mustRequired))
{
$memberInfo[$lang->{$form->name}] = $member_info->{$form->name};
}
}
}
else
{
$memberInfo[$lang->user_id] = $member_info->user_id;
$memberInfo[$lang->user_name] = $member_info->user_name;
$memberInfo[$lang->nick_name] = $member_info->nick_name;
$memberInfo[$lang->email_address] = $member_info->email_address;
}
// Get content of the email to send a member
Context::set('memberInfo', $memberInfo);
Context::set('member_config', $member_config);
$tpl_path = sprintf('%sskins/%s', $this->module_path, $member_config->skin);
if(!is_dir($tpl_path)) $tpl_path = sprintf('%sskins/%s', $this->module_path, 'default');
$auth_url = getFullUrl('','module','member','act','procMemberAuthAccount','member_srl',$member_info->member_srl, 'auth_key',$auth_info->auth_key);
Context::set('auth_url', $auth_url);
$oTemplate = &TemplateHandler::getInstance();
$content = $oTemplate->compile($tpl_path, 'confirm_member_account_mail');
// Send a mail
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject(lang('msg_confirm_account_title'));
$oMail->setBody($content);
$oMail->addTo($member_info->email_address, $member_info->nick_name);
$oMail->send();
$msg = sprintf(lang('msg_confirm_mail_sent'), $args->email_address);
$this->setMessage($msg);
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', '');
$this->setRedirectUrl($returnUrl);
}
function _sendAuthMail($auth_args, $member_info)
{
$member_config = MemberModel::getMemberConfig();
// Get content of the email to send a member
Context::set('auth_args', $auth_args);
$memberInfo = array();
global $lang;
if(is_array($member_config->signupForm))
{
$exceptForm=array('password', 'find_account_question');
foreach($member_config->signupForm as $form)
{
if(!in_array($form->name, $exceptForm) && $form->isDefaultForm && ($form->required || $form->mustRequired))
{
$memberInfo[$lang->{$form->name}] = $member_info->{$form->name};
}
}
}
else
{
$memberInfo[$lang->user_id] = $member_info->user_id;
$memberInfo[$lang->user_name] = $member_info->user_name;
$memberInfo[$lang->nick_name] = $member_info->nick_name;
$memberInfo[$lang->email_address] = $member_info->email_address;
}
Context::set('memberInfo', $memberInfo);
if(!$member_config->skin) $member_config->skin = "default";
if(!$member_config->colorset) $member_config->colorset = "white";
Context::set('member_config', $member_config);
$tpl_path = sprintf('%sskins/%s', $this->module_path, $member_config->skin);
if(!is_dir($tpl_path)) $tpl_path = sprintf('%sskins/%s', $this->module_path, 'default');
$auth_url = getFullUrl('','module','member','act','procMemberAuthAccount','member_srl',$member_info->member_srl, 'auth_key',$auth_args->auth_key);
Context::set('auth_url', $auth_url);
$oTemplate = &TemplateHandler::getInstance();
$content = $oTemplate->compile($tpl_path, 'confirm_member_account_mail');
// Send a mail
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject(lang('msg_confirm_account_title'));
$oMail->setBody($content);
$oMail->addTo($member_info->email_address, $member_info->nick_name);
$oMail->send();
}
/**
* Join a virtual site
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberSiteSignUp()
{
$site_module_info = Context::get('site_module_info');
$logged_info = Context::get('logged_info');
if(!$site_module_info->site_srl || !Context::get('is_logged') || count($logged_info->group_srl_list) ) throw new Rhymix\Framework\Exceptions\InvalidRequest;
$columnList = array('site_srl', 'group_srl', 'title');
$default_group = MemberModel::getDefaultGroup($site_module_info->site_srl, $columnList);
$this->addMemberToGroup($logged_info->member_srl, $default_group->group_srl, $site_module_info->site_srl);
$groups[$default_group->group_srl] = $default_group->title;
$logged_info->group_list = $groups;
}
/**
* Leave the virtual site
*
* @return void|Object (void : success, Object : fail)
*/
function procMemberSiteLeave()
{
$site_module_info = Context::get('site_module_info');
$logged_info = Context::get('logged_info');
if(!$site_module_info->site_srl || !Context::get('is_logged') || count($logged_info->group_srl_list) ) throw new Rhymix\Framework\Exceptions\InvalidRequest;
$args = new stdClass;
$args->site_srl= $site_module_info->site_srl;
$args->member_srl = $logged_info->member_srl;
$output = executeQuery('member.deleteMembersGroup', $args);
if(!$output->toBool()) return $output;
$this->setMessage('success_deleted');
self::clearMemberCache($args->member_srl, $site_module_info->site_srl);
}
/**
* Save the member configurations
*
* @param object $args
*
* @return void
*/
function setMemberConfig($args)
{
if(!$args->skin) $args->skin = "default";
if(!$args->colorset) $args->colorset = "white";
if(!$args->editor_skin) $args->editor_skin= "ckeditor";
if(!$args->editor_colorset) $args->editor_colorset = "moono-lisa";
if($args->enable_join!='Y') $args->enable_join = 'N';
$args->enable_openid= 'N';
if($args->profile_image !='Y') $args->profile_image = 'N';
if($args->image_name!='Y') $args->image_name = 'N';
if($args->image_mark!='Y') $args->image_mark = 'N';
if($args->group_image_mark!='Y') $args->group_image_mark = 'N';
if(!trim(strip_tags($args->agreement))) $args->agreement = null;
$args->limit_day = (int)$args->limit_day;
$agreement = trim($args->agreement);
unset($args->agreement);
$oModuleController = getController('module');
$output = $oModuleController->insertModuleConfig('member',$args);
if(!$output->toBool()) return $output;
$agreement_file = RX_BASEDIR.'files/member_extra_info/agreement.txt';
FileHandler::writeFile($agreement_file, $agreement);
return new BaseObject();
}
/**
* Save the signature as a file
*
* @param int $member_srl
* @param string $signature
*
* @return void
*/
function putSignature($member_srl, $signature)
{
if((!$signature = utf8_trim(removeHackTag($signature))) || is_empty_html_content($signature))
{
getController('member')->delSignature($member_srl);
return;
}
// Editor converter
$obj = new stdClass;
$config = MemberModel::getMemberConfig();
if($config->signature_html == 'N')
{
$obj->converter = 'text';
}
$obj->content = $signature;
$obj->editor_skin = $config->signature_editor_skin;
$signature = getModel('editor')->converter($obj);
$filename = sprintf('files/member_extra_info/signature/%s%d.signature.php', getNumberingPath($member_srl), $member_srl);
$buff = sprintf('<?php if(!defined("__XE__")) exit();?>%s', $signature);
Rhymix\Framework\Storage::write($filename, $buff);
return $signature;
}
/**
* Delete the signature file
*
* @param string $member_srl
*
* @return void
*/
function delSignature($member_srl)
{
$dirname = RX_BASEDIR . sprintf('files/member_extra_info/signature/%s', getNumberingPath($member_srl));
Rhymix\Framework\Storage::deleteDirectory($dirname, false);
Rhymix\Framework\Storage::deleteEmptyDirectory($dirname, true);
}
/**
* Add group_srl to member_srl
*
* @param int $member_srl
* @param int $group_srl
* @param int $site_srl
*
* @return Object
*/
function addMemberToGroup($member_srl, $group_srl, $site_srl=0)
{
$args = new stdClass();
$args->member_srl = $member_srl;
$args->group_srl = $group_srl;
if($site_srl) $args->site_srl = $site_srl;
// Add
$output = executeQuery('member.addMemberToGroup',$args);
ModuleHandler::triggerCall('member.addMemberToGroup', 'after', $args);
self::clearMemberCache($member_srl, $site_srl);
return $output;
}
/**
* Change a group of certain members
* Available only when a member has a single group
*
* @param object $args
*
* @return Object
*/
function replaceMemberGroup($args)
{
$obj = new stdClass;
$obj->site_srl = $args->site_srl;
$obj->member_srl = implode(',',$args->member_srl);
$output = executeQueryArray('member.getMembersGroup', $obj);
if($output->data) foreach($output->data as $key => $val) $date[$val->member_srl] = $val->regdate;
$output = executeQuery('member.deleteMembersGroup', $obj);
if(!$output->toBool()) return $output;
$inserted_members = array();
foreach($args->member_srl as $key => $val)
{
if($inserted_members[$val]) continue;
$inserted_members[$val] = true;
unset($obj);
$obj = new stdClass;
$obj->member_srl = $val;
$obj->group_srl = $args->group_srl;
$obj->site_srl = $args->site_srl;
$obj->regdate = $date[$obj->member_srl];
$output = executeQuery('member.addMemberToGroup', $obj);
if(!$output->toBool()) return $output;
self::clearMemberCache($obj->member_srl, $args->site_srl);
}
return new BaseObject();
}
/**
* Auto-login
*
* @param string $autologin_key
* @return int|false
*/
function doAutologin($autologin_key = null)
{
// Validate the key.
if (strlen($autologin_key) == 48)
{
$security_key = substr($autologin_key, 24, 24);
$autologin_key = substr($autologin_key, 0, 24);
}
else
{
return false;
}
// Fetch autologin information from DB.
$args = new stdClass;
$args->autologin_key = $autologin_key;
$output = executeQuery('member.getAutologin', $args);
if (!$output->toBool() || !$output->data)
{
return false;
}
if (is_array($output->data))
{
$output->data = array_first($output->data);
}
// Hash the security key.
$valid_security_keys = array(base64_encode(hash_hmac('sha256', $security_key, $autologin_key, true)));
// Check the security key.
if (!in_array($output->data->security_key, $valid_security_keys) || !$output->data->member_srl)
{
$args = new stdClass;
$args->autologin_key = $autologin_key;
executeQuery('member.deleteAutologin', $args);
return false;
}
// Update the security key.
$new_security_key = Rhymix\Framework\Security::getRandom(24, 'alnum');
$args = new stdClass;
$args->autologin_key = $autologin_key;
$args->security_key = base64_encode(hash_hmac('sha256', $new_security_key, $autologin_key, true));
$update_output = executeQuery('member.updateAutologin', $args);
if ($update_output->toBool())
{
Rhymix\Framework\Session::setAutologinKeys($autologin_key, $new_security_key);
}
// Update the last login time.
executeQuery('member.updateLastLogin', (object)['member_srl' => $output->data->member_srl]);
self::clearMemberCache($output->data->member_srl);
// Return the member_srl.
return intval($output->data->member_srl);
}
/**
* Log-in
*
* @param string $user_id
* @param string $password
* @param boolean $keep_signed
*
* @return Object
*/
function doLogin($user_id, $password = '', $keep_signed = false)
{
$user_id = strtolower($user_id);
if(!$user_id) return new BaseObject(-1, 'null_user_id');
// Call a trigger before log-in (before)
$trigger_obj = new stdClass();
$trigger_obj->user_id = $user_id;
$trigger_obj->password = $password;
$trigger_output = ModuleHandler::triggerCall('member.doLogin', 'before', $trigger_obj);
if(!$trigger_output->toBool()) return $trigger_output;
// check IP access count.
$config = MemberModel::getMemberConfig();
$args = new stdClass();
$args->ipaddress = \RX_CLIENT_IP;
// check identifier
if((!$config->identifiers || in_array('email_address', $config->identifiers)) && strpos($user_id, '@') !== false)
{
$member_info = MemberModel::getMemberInfoByEmailAddress($user_id);
if(!$user_id || strtolower($member_info->email_address) !== strtolower($user_id))
{
return $this->recordLoginError(-1, 'invalid_email_address');
}
}
elseif($config->identifiers && in_array('phone_number', $config->identifiers) && strpos($user_id, '@') === false)
{
if(preg_match('/^\+([0-9-]+)\.([0-9.-]+)$/', $user_id, $matches))
{
$user_id = $matches[2];
$phone_country = $matches[1];
if($config->phone_number_hide_country === 'Y')
{
$phone_country = $config->phone_number_default_country;
}
}
elseif($config->phone_number_default_country)
{
$phone_country = $config->phone_number_default_country;
}
else
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
if($phone_country && !preg_match('/^[A-Z]{3}$/', $phone_country))
{
$phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($phone_country);
}
$user_id = preg_replace('/[^0-9]/', '', $user_id);
$member_info = MemberModel::getMemberInfoByPhoneNumber($user_id, $phone_country);
if(!$user_id || strtolower($member_info->phone_number) !== $user_id)
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
}
elseif(!$config->identifiers || in_array('user_id', $config->identifiers))
{
$member_info = MemberModel::getMemberInfoByUserID($user_id);
if(!$user_id || strtolower($member_info->user_id) !== strtolower($user_id))
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
}
else
{
return $this->recordLoginError(-1, 'invalid_user_id');
}
$output = executeQuery('member.getLoginCountByIp', $args);
$errorCount = $output->data->count;
if($errorCount >= $config->max_error_count)
{
$last_update = strtotime($output->data->last_update);
$term = intval($_SERVER['REQUEST_TIME']-$last_update);
if($term < $config->max_error_count_time)
{
$term = $config->max_error_count_time - $term;
if($term < 60) $term = intval($term).lang('unit_sec');
elseif(60 <= $term && $term < 3600) $term = intval($term/60).lang('unit_min');
elseif(3600 <= $term && $term < 86400) $term = intval($term/3600).lang('unit_hour');
else $term = intval($term/86400).lang('unit_day');
return new BaseObject(-1, sprintf(lang('excess_ip_access_count'), $term));
}
else
{
$args->ipaddress = \RX_CLIENT_IP;
$output = executeQuery('member.deleteLoginCountByIp', $args);
}
}
// Password Check
if($password && !MemberModel::isValidPassword($member_info->password, $password, $member_info->member_srl))
{
return $this->recordMemberLoginError(-1, 'invalid_password', $member_info);
}
// If denied == 'Y', notify
if($member_info->denied == 'Y')
{
$args->member_srl = $member_info->member_srl;
$output = executeQuery('member.chkAuthMail', $args);
if ($output->toBool() && $output->data->count)
{
return new BaseObject(-1, sprintf(lang('msg_user_not_confirmed'), $member_info->email_address));
}
$refused_reason = $member_info->refused_reason ? ('<br>' . lang('refused_reason') . ': ' . $member_info->refused_reason) : '';
return new BaseObject(-1, lang('msg_user_denied') . $refused_reason);
}
// Notify if user is limited
if($member_info->limit_date && substr($member_info->limit_date,0,8) >= date("Ymd"))
{
$limited_reason = $member_info->limited_reason ? ('<br>' . lang('refused_reason') . ': ' . $member_info->limited_reason) : '';
return new BaseObject(-9, sprintf(lang('msg_user_limited'), zdate($member_info->limit_date,"Y-m-d")) . $limited_reason);
}
// Do not allow login as admin if not in allowed IP list
if($member_info->is_admin === 'Y' && $this->act === 'procMemberLogin')
{
$oMemberAdminModel = getAdminModel('member');
if(!$oMemberAdminModel->getMemberAdminIPCheck())
{
return new BaseObject(-1, 'msg_admin_ip_not_allowed');
}
}
// Update the latest login time
$args->member_srl = $member_info->member_srl;
$output = executeQuery('member.updateLastLogin', $args);
$site_module_info = Context::get('site_module_info');
self::clearMemberCache($args->member_srl, $site_module_info->site_srl);
// Check if there is recoding table.
$oDB = &DB::getInstance();
if($oDB->isTableExists('member_count_history') && $config->enable_login_fail_report != 'N')
{
// check if there is login fail records.
$output = executeQuery('member.getLoginCountHistoryByMemberSrl', $args);
if($output->data && $output->data->content)
{
$title = lang('login_fail_report');
$message = '<ul>';
$content = unserialize($output->data->content);
if(count($content) > $config->max_error_count)
{
foreach($content as $val)
{
$message .= '<li>'.lang('regdate').': '.date('Y-m-d h:i:sa',$val[2]).'<ul><li>'.lang('ipaddress').': '.$val[0].'</li><li>'.lang('message').': '.$val[1].'</li></ul></li>';
}
$message .= '</ul>';
$content = sprintf(lang('login_fail_report_contents'),$message,date('Y-m-d h:i:sa'));
//send message
$oCommunicationController = getController('communication');
$oCommunicationController->sendMessage($args->member_srl, $args->member_srl, $title, $content, true);
if($member_info->email_address && $member_info->allow_mailing == 'Y')
{
$view_url = Context::getRequestUri();
$content = sprintf("%s<hr /><p>From: <a href=\"%s\" target=\"_blank\">%s</a><br />To: %s(%s)</p>",$content, $view_url, $view_url, $member_info->nick_name, $member_info->email_id);
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject($title);
$oMail->setBody($content);
$oMail->addTo($member_info->email_address, $member_info->email_id.' ('.$member_info->nick_name.')');
$oMail->send();
}
$output = executeQuery('member.deleteLoginCountHistoryByMemberSrl', $args);
}
}
}
// Call a trigger after successfully log-in (after)
ModuleHandler::triggerCall('member.doLogin', 'after', $member_info);
// When user checked to use auto-login
if($keep_signed)
{
$random_key = Rhymix\Framework\Security::getRandom(48, 'alnum');
$autologin_args = new stdClass;
$autologin_args->autologin_key = substr($random_key, 0, 24);
$autologin_args->security_key = base64_encode(hash_hmac('sha256', substr($random_key, 24, 24), $autologin_args->autologin_key, true));
$autologin_args->member_srl = $member_info->member_srl;
$autologin_args->user_agent = json_encode(Rhymix\Framework\UA::getBrowserInfo());
$autologin_output = executeQuery('member.insertAutologin', $autologin_args);
if ($autologin_output->toBool())
{
Rhymix\Framework\Session::setAutologinKeys(substr($random_key, 0, 24), substr($random_key, 24, 24));
}
}
Rhymix\Framework\Session::login($member_info->member_srl);
$this->setSessionInfo();
return $output;
}
/**
* Update or create session information
*/
function setSessionInfo()
{
// If your information came through the current session information to extract information from the users
$member_info = Rhymix\Framework\Session::getMemberInfo(true);
if (!$member_info->member_srl)
{
return;
}
// Information stored in the session login user
Context::set('is_logged', true);
Context::set('logged_info', $member_info);
// Only the menu configuration of the user (such as an add-on to the menu can be changed)
$config = MemberModel::getMemberConfig();
$this->addMemberMenu( 'dispMemberInfo', 'cmd_view_member_info');
if ($config->features['scrapped_documents'] !== false)
{
$this->addMemberMenu( 'dispMemberScrappedDocument', 'cmd_view_scrapped_document');
}
if ($config->features['saved_documents'] !== false)
{
$this->addMemberMenu( 'dispMemberSavedDocument', 'cmd_view_saved_document');
}
if ($config->features['my_documents'] !== false)
{
$this->addMemberMenu( 'dispMemberOwnDocument', 'cmd_view_own_document');
}
if ($config->features['my_comments'] !== false)
{
$this->addMemberMenu( 'dispMemberOwnComment', 'cmd_view_own_comment');
}
if ($config->features['active_logins'] !== false)
{
$this->addMemberMenu( 'dispMemberActiveLogins', 'cmd_view_active_logins');
}
if ($config->features['nickname_log'] !== false && $config->update_nickname_log == 'Y')
{
$this->addMemberMenu( 'dispMemberModifyNicknameLog', 'cmd_modify_nickname_log');
}
}
/**
* Logged method for providing a personalized menu
* Login information is used in the output widget, or personalized page
*/
function addMemberMenu($act, $str)
{
$logged_info = Context::get('logged_info');
if(!is_object($logged_info))
{
return;
}
$logged_info->menu_list[$act] = lang($str);
Context::set('logged_info', $logged_info);
}
/**
* Nickname and click Log In to add a pop-up menu that appears when the method
*/
function addMemberPopupMenu($url, $str, $icon = '', $target = 'self', $class = '')
{
$member_popup_menu_list = Context::get('member_popup_menu_list');
if(!is_array($member_popup_menu_list)) $member_popup_menu_list = array();
$obj = new stdClass;
$obj->url = $url;
$obj->str = $str;
$obj->class = $class;
$obj->icon = $icon ?: null;
$obj->target = $target;
$member_popup_menu_list[] = $obj;
Context::set('member_popup_menu_list', $member_popup_menu_list);
}
/**
* Add users to the member table
*/
function insertMember(&$args, $password_is_hashed = false)
{
// Call a trigger (before)
$output = ModuleHandler::triggerCall('member.insertMember', 'before', $args);
if(!$output->toBool()) return $output;
// Terms and Conditions portion of the information set up by members reaffirmed
$config = MemberModel::getMemberConfig();
$logged_info = Context::get('logged_info');
// limit_date format is YYYYMMDD
if($args->limit_date)
{
// mobile input date format can be different
if($args->limit_date !== intval($args->limit_date))
{
$args->limit_date = date('Ymd', strtotime($args->limit_date));
}
else
{
$args->limit_date = intval($args->limit_date);
}
}
// If the date of the temporary restrictions limit further information on the date of
if($config->limit_day) $args->limit_date = date("YmdHis", $_SERVER['REQUEST_TIME']+$config->limit_day*60*60*24);
$args->member_srl = getNextSequence();
$args->list_order = -1 * $args->member_srl;
// Execute insert or update depending on the value of member_srl
if(!$args->user_id) $args->user_id = 't'.$args->member_srl;
// Enter the user's identity changed to lowercase
else $args->user_id = strtolower($args->user_id);
if(!$args->user_name) $args->user_name = $args->member_srl;
if(!$args->nick_name) $args->nick_name = $args->member_srl;
// Control of essential parameters
if($args->allow_mailing!='Y') $args->allow_mailing = 'N';
if($args->denied!='Y') $args->denied = 'N';
if(!in_array($args->allow_message, array('Y', 'N', 'F'))) $args->allow_message = 'Y';
if($logged_info->is_admin == 'Y')
{
if($args->is_admin!='Y') $args->is_admin = 'N';
}
else
{
unset($args->is_admin);
}
list($args->email_id, $args->email_host) = explode('@', $args->email_address);
// Sanitize user ID, username, nickname, homepage, blog
$args->user_id = escape($args->user_id, false);
$args->user_name = escape($args->user_name, false);
$args->nick_name = escape($args->nick_name, false);
$args->homepage = escape($args->homepage, false);
$args->blog = escape($args->blog, false);
if($args->homepage && !preg_match("/^[a-z]+:\/\//i",$args->homepage)) $args->homepage = 'http://'.$args->homepage;
if($args->blog && !preg_match("/^[a-z]+:\/\//i",$args->blog)) $args->blog = 'http://'.$args->blog;
$extend_form_list = MemberModel::getJoinFormlist();
$security = new Security($extend_form_list);
$security->encodeHTML('..column_title', '..description', '..default_value.');
if($config->signupForm) {
foreach($config->signupForm as $no => $formInfo)
{
if(!$formInfo->isUse) continue;
if($formInfo->isDefaultForm)
{
// birthday format is YYYYMMDD
if($formInfo->name === 'birthday' && $args->{$formInfo->name})
{
// mobile input date format can be different
if($args->{$formInfo->name} !== intval($args->{$formInfo->name}))
{
$args->{$formInfo->name} = date('Ymd', strtotime($args->{$formInfo->name}));
}
else
{
$args->{$formInfo->name} = intval($args->{$formInfo->name});
}
}
}
else
{
$extendForm = $extend_form_list[$formInfo->member_join_form_srl];
// date format is YYYYMMDD
if($extendForm->column_type == 'date' && $args->{$formInfo->name})
{
if($args->{$formInfo->name} !== intval($args->{$formInfo->name}))
{
$args->{$formInfo->name} = date('Ymd', strtotime($args->{$formInfo->name}));
}
else
{
$args->{$formInfo->name} = intval($args->{$formInfo->name});
}
}
}
}
}
// Check password strength
if($args->password && !$password_is_hashed)
{
if(!MemberModel::checkPasswordStrength($args->password, $config->password_strength))
{
$message = lang('about_password_strength');
return new BaseObject(-1, $message[$config->password_strength]);
}
$args->password = MemberModel::hashPassword($args->password);
}
// Check if ID is prohibited
if($logged_info->is_admin !== 'Y' && MemberModel::isDeniedID($args->user_id))
{
return new BaseObject(-1, 'denied_user_id');
}
// Check if ID is duplicate
$member_srl = MemberModel::getMemberSrlByUserID($args->user_id);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_user_id');
}
// Check if nickname is prohibited
if($logged_info->is_admin !== 'Y' && MemberModel::isDeniedNickName($args->nick_name))
{
return new BaseObject(-1, 'denied_nick_name');
}
// Check if nickname is duplicate
if($config->allow_duplicate_nickname !== 'Y')
{
$member_srl = MemberModel::getMemberSrlByNickName($args->nick_name);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_nick_name');
}
}
// Check managed Email Host
if($logged_info->is_admin !== 'Y' && MemberModel::isDeniedEmailHost($args->email_address))
{
$emailhost_check = $config->emailhost_check;
$managed_email_host = lang('managed_email_host');
$email_hosts = MemberModel::getManagedEmailHosts();
foreach ($email_hosts as $host)
{
$hosts[] = $host->email_host;
}
$message = sprintf($managed_email_host[$emailhost_check],implode(', ',$hosts),'id@'.implode(', id@',$hosts));
return new BaseObject(-1, $message);
}
// Format phone number
if (strval($args->phone_number) !== '')
{
$args->phone_country = trim(preg_replace('/[^A-Z]/', '', $args->phone_country), '-');
$args->phone_number = preg_replace('/[^0-9]/', '', $args->phone_number);
$args->phone_type = '';
if ($config->phone_number_hide_country === 'Y' || (!$args->phone_country && $config->phone_number_default_country))
{
$args->phone_country = $config->phone_number_default_country;
}
if ($args->phone_country && !preg_match('/^[A-Z]{3}$/', $args->phone_country))
{
$args->phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($args->phone_country);
}
if ($args->phone_country === 'KOR' && !Rhymix\Framework\Korea::isValidPhoneNumber($args->phone_number))
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
}
else
{
$args->phone_country = '';
$args->phone_number = '';
$args->phone_type = '';
}
// Check if email address is duplicate
$member_srl = MemberModel::getMemberSrlByEmailAddress($args->email_address);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_email_address');
}
// Check if phone number is duplicate
if ($config->phone_number_allow_duplicate !== 'Y' && $args->phone_number)
{
if (!$config->special_phone_number || $config->special_phone_number !== preg_replace('/[^0-9]/', '', $args->phone_number))
{
$member_srl = MemberModel::getMemberSrlByPhoneNumber($args->phone_number, $args->phone_country);
if($member_srl)
{
return new BaseObject(-1, 'msg_exists_phone_number');
}
}
}
// Insert data into the DB
$args->list_order = -1 * $args->member_srl;
if(!$args->user_id) $args->user_id = 't'.$args->member_srl;
if(!$args->user_name) $args->user_name = $args->member_srl;
$oDB = &DB::getInstance();
$oDB->begin();
$output = executeQuery('member.insertMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
if(is_array($args->group_srl_list)) $group_srl_list = $args->group_srl_list;
else $group_srl_list = explode('|@|', $args->group_srl_list);
// If no value is entered the default group, the value of group registration
if(!$args->group_srl_list)
{
$columnList = array('site_srl', 'group_srl');
$default_group = MemberModel::getDefaultGroup(0, $columnList);
if($default_group)
{
// Add to the default group
$output = $this->addMemberToGroup($args->member_srl,$default_group->group_srl);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
}
// If the value is the value of the group entered the group registration
}
else
{
for($i=0;$i<count($group_srl_list);$i++)
{
$output = $this->addMemberToGroup($args->member_srl,$group_srl_list[$i]);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
}
}
// When using email authentication mode (when you subscribed members denied a) certified mail sent
if($args->denied == 'Y')
{
// Insert data into the authentication DB
$auth_args = new stdClass();
$auth_args->user_id = $args->user_id;
$auth_args->member_srl = $args->member_srl;
$auth_args->new_password = $args->password;
$auth_args->auth_key = Rhymix\Framework\Security::getRandom(40, 'hex');
$auth_args->is_register = 'Y';
$output = executeQuery('member.insertAuthMail', $auth_args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
$this->_sendAuthMail($auth_args, $args);
}
ModuleHandler::triggerCall('member.insertMember', 'after', $args);
$oDB->commit(true);
$output->add('member_srl', $args->member_srl);
return $output;
}
/**
* Modify member information
*
* @param bool $is_admin , modified 2013-11-22
*/
function updateMember($args, $is_admin = FALSE)
{
// Call a trigger (before)
$output = ModuleHandler::triggerCall('member.updateMember', 'before', $args);
if(!$output->toBool()) return $output;
// Create a model object
$config = MemberModel::getMemberConfig();
$logged_info = Context::get('logged_info');
// Get what you want to modify the original information
$orgMemberInfo = MemberModel::getMemberInfoByMemberSrl($args->member_srl);
// Control of essential parameters
if($args->allow_mailing!='Y') $args->allow_mailing = 'N';
if($args->allow_message && !in_array($args->allow_message, array('Y','N','F'))) $args->allow_message = 'Y';
if($logged_info->is_admin == 'Y')
{
if($args->denied!='Y') $args->denied = 'N';
if($args->is_admin!='Y' && $logged_info->member_srl != $args->member_srl) $args->is_admin = 'N';
}
else
{
unset($args->is_admin);
unset($args->limit_date);
unset($args->description);
if($is_admin == false)
{
unset($args->denied);
}
if($logged_info->member_srl != $args->member_srl && $is_admin == false)
{
return new BaseObject(-1, 'msg_invalid_request');
}
}
// Sanitize user ID, username, nickname, homepage, blog
if($args->user_id) $args->user_id = escape($args->user_id, false);
$args->user_name = escape($args->user_name, false);
$args->nick_name = escape($args->nick_name, false);
$args->homepage = escape($args->homepage, false);
$args->blog = escape($args->blog, false);
if($args->homepage && !preg_match("/^[a-z]+:\/\//is",$args->homepage)) $args->homepage = 'http://'.$args->homepage;
if($args->blog && !preg_match("/^[a-z]+:\/\//is",$args->blog)) $args->blog = 'http://'.$args->blog;
// check member identifier form
// limit_date format is YYYYMMDD
if($args->limit_date)
{
// mobile input date format can be different
if($args->limit_date !== intval($args->limit_date))
{
$args->limit_date = date('Ymd', strtotime($args->limit_date));
}
else
{
$args->limit_date = intval($args->limit_date);
}
}
$extend_form_list = MemberModel::getJoinFormlist();
$security = new Security($extend_form_list);
$security->encodeHTML('..column_title', '..description', '..default_value.');
if($config->signupForm){
foreach($config->signupForm as $no => $formInfo)
{
if(!$formInfo->isUse) continue;
if($formInfo->isDefaultForm)
{
// birthday format is YYYYMMDD
if($formInfo->name === 'birthday' && $args->{$formInfo->name})
{
if($args->{$formInfo->name} !== intval($args->{$formInfo->name}))
{
$args->{$formInfo->name} = date('Ymd', strtotime($args->{$formInfo->name}));
}
else
{
$args->{$formInfo->name} = intval($args->{$formInfo->name});
}
}
}
else
{
$extendForm = $extend_form_list[$formInfo->member_join_form_srl];
// date format is YYYYMMDD
if($extendForm->column_type == 'date' && $args->{$formInfo->name})
{
if($args->{$formInfo->name} !== intval($args->{$formInfo->name}))
{
$args->{$formInfo->name} = date('Ymd', strtotime($args->{$formInfo->name}));
}
else
{
$args->{$formInfo->name} = intval($args->{$formInfo->name});
}
}
}
}
}
// Format phone number
if (strval($args->phone_number) !== '')
{
$args->phone_country = trim(preg_replace('/[^A-Z]/', '', $args->phone_country), '-');
$args->phone_number = preg_replace('/[^0-9]/', '', $args->phone_number);
$args->phone_type = '';
if ($config->phone_number_hide_country === 'Y' || (!$args->phone_country && $config->phone_number_default_country))
{
$args->phone_country = $config->phone_number_default_country;
}
if ($args->phone_country && !preg_match('/^[A-Z]{3}$/', $args->phone_country))
{
$args->phone_country = Rhymix\Framework\i18n::getCountryCodeByCallingCode($args->phone_country);
}
if ($args->phone_country === 'KOR' && !Rhymix\Framework\Korea::isValidPhoneNumber($args->phone_number))
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
}
else
{
$args->phone_country = '';
$args->phone_number = '';
$args->phone_type = '';
}
// Check managed Email Host
if($logged_info->is_admin !== 'Y' && $logged_info->email_address !== $args->email_address && MemberModel::isDeniedEmailHost($args->email_address))
{
$emailhost_check = $config->emailhost_check;
$managed_email_host = lang('managed_email_host');
$email_hosts = MemberModel::getManagedEmailHosts();
foreach ($email_hosts as $host)
{
$hosts[] = $host->email_host;
}
$message = sprintf($managed_email_host[$emailhost_check],implode(', ',$hosts),'id@'.implode(', id@',$hosts));
return new BaseObject(-1, $message);
}
// Check if email address or user ID is duplicate
if($config->identifier == 'email_address')
{
$member_srl = MemberModel::getMemberSrlByEmailAddress($args->email_address);
if($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_email_address');
}
$args->email_address = $orgMemberInfo->email_address;
}
else
{
$member_srl = MemberModel::getMemberSrlByUserID($args->user_id);
if($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_user_id');
}
$args->user_id = $orgMemberInfo->user_id;
}
// Check if phone number is duplicate
if ($config->phone_number_allow_duplicate !== 'Y' && $args->phone_number)
{
if (!$config->special_phone_number || $config->special_phone_number !== preg_replace('/[^0-9]/', '', $args->phone_number))
{
$member_srl = MemberModel::getMemberSrlByPhoneNumber($args->phone_number, $args->phone_country);
if ($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_phone_number');
}
}
}
// Check if ID is prohibited
if($logged_info->is_admin !== 'Y' && $args->user_id && MemberModel::isDeniedID($args->user_id))
{
return new BaseObject(-1, 'denied_user_id');
}
// Check if ID is duplicate
if($args->user_id)
{
$member_srl = MemberModel::getMemberSrlByUserID($args->user_id);
if($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_user_id');
}
}
// Check if nickname is prohibited
if($logged_info->is_admin !== 'Y' && $args->nick_name && MemberModel::isDeniedNickName($args->nick_name))
{
return new BaseObject(-1, 'denied_nick_name');
}
// Check if nickname is duplicate
if($config->allow_duplicate_nickname !== 'Y')
{
$member_srl = MemberModel::getMemberSrlByNickName($args->nick_name);
if($member_srl && $args->member_srl != $member_srl)
{
return new BaseObject(-1, 'msg_exists_nick_name');
}
}
list($args->email_id, $args->email_host) = explode('@', $args->email_address);
$oDB = &DB::getInstance();
$oDB->begin();
// Check password strength
if($args->password)
{
if(!MemberModel::checkPasswordStrength($args->password, $config->password_strength))
{
$message = lang('about_password_strength');
return new BaseObject(-1, $message[$config->password_strength]);
}
$args->password = MemberModel::hashPassword($args->password);
}
else
{
$args->password = $orgMemberInfo->password;
}
if(!$args->user_name) $args->user_name = $orgMemberInfo->user_name;
if(!$args->user_id) $args->user_id = $orgMemberInfo->user_id;
if(!$args->nick_name) $args->nick_name = $orgMemberInfo->nick_name;
if($logged_info->is_admin !== 'Y')
{
$args->description = $orgMemberInfo->description;
}
if(!$args->birthday) $args->birthday = $orgMemberInfo->birthday;
$output = executeQuery('member.updateMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
else
{
if($args->nick_name != $orgMemberInfo->nick_name && $config->update_nickname_log == 'Y')
{
$log_args = new stdClass();
$log_args->member_srl = $args->member_srl;
$log_args->before_nick_name = $orgMemberInfo->nick_name;
$log_args->after_nick_name = $args->nick_name;
$log_args->user_id = $args->user_id;
$log_output = executeQuery('member.insertMemberModifyNickName', $log_args);
}
}
if($args->group_srl_list)
{
if(is_array($args->group_srl_list)) $group_srl_list = $args->group_srl_list;
else $group_srl_list = explode('|@|', $args->group_srl_list);
// If the group information, group information changes
if(count($group_srl_list) > 0)
{
$args->site_srl = 0;
// One of its members to delete all the group
$output = executeQuery('member.deleteMemberGroupMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Enter one of the loop a
for($i=0;$i<count($group_srl_list);$i++)
{
$output = $this->addMemberToGroup($args->member_srl,$group_srl_list[$i]);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
}
// if group is changed, point changed too.
$this->_updatePointByGroup($orgMemberInfo->member_srl, $group_srl_list);
}
}
// Call a trigger (after)
ModuleHandler::triggerCall('member.updateMember', 'after', $args);
$oDB->commit();
// Remove from cache
unset($GLOBALS['__member_info__'][$args->member_srl]);
self::clearMemberCache($args->member_srl, $args->site_srl);
$output->add('member_srl', $args->member_srl);
return $output;
}
/**
* Modify member extra variable
*/
function updateMemberExtraVars($member_srl, array $values)
{
$args = new stdClass();
$args->member_srl = $member_srl;
$output = executeQuery('member.getMemberInfoByMemberSrl', $args, array('extra_vars'));
if (!$output->toBool())
{
return $output;
}
$extra_vars = $output->data->extra_vars ? unserialize($output->data->extra_vars) : new stdClass;
foreach ($values as $key => $val)
{
$extra_vars->{$key} = $val;
}
$args = new stdClass();
$args->member_srl = $member_srl;
$args->extra_vars = serialize($extra_vars);
$output = executeQuery('member.updateMemberExtraVars', $args);
if (!$output->toBool())
{
return $output;
}
unset($GLOBALS['__member_info__'][$member_srl]);
self::clearMemberCache($member_srl);
return $output;
}
/**
* Modify member password
*/
function updateMemberPassword($args)
{
if($args->password)
{
// check password strength
$config = MemberModel::getMemberConfig();
if(!MemberModel::checkPasswordStrength($args->password, $config->password_strength))
{
$message = lang('about_password_strength');
return new BaseObject(-1, $message[$config->password_strength]);
}
$args->password = MemberModel::hashPassword($args->password);
}
else if($args->hashed_password)
{
$args->password = $args->hashed_password;
}
$output = executeQuery('member.updateMemberPassword', $args);
if($output->toBool())
{
$result = executeQuery('member.updateChangePasswordDate', $args);
}
unset($GLOBALS['__member_info__'][$args->member_srl]);
self::clearMemberCache($args->member_srl);
return $output;
}
/**
* Delete User
*/
function deleteMember($member_srl)
{
// Call a trigger (before)
$trigger_obj = new stdClass();
$trigger_obj->member_srl = $member_srl;
$output = ModuleHandler::triggerCall('member.deleteMember', 'before', $trigger_obj);
if(!$output->toBool()) return $output;
// Bringing the user's information
$columnList = array('member_srl', 'is_admin');
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl, 0, $columnList);
if(!$member_info) return new BaseObject(-1, 'msg_not_exists_member');
// If managers can not be deleted
if($member_info->is_admin == 'Y') return new BaseObject(-1, 'msg_cannot_delete_admin');
$oDB = &DB::getInstance();
$oDB->begin();
$args = new stdClass();
$args->member_srl = $member_srl;
// Delete the entries in member_auth_mail
$output = executeQuery('member.deleteAuthMail', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Delete agreement info
$output = executeQuery('member.deleteAgreed', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Delete nickname log
$output = executeQuery('member.deleteMemberModifyNickNameLog', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Delete the entries in member_group_member
$output = executeQuery('member.deleteMemberGroupMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Delete main member info
$output = executeQuery('member.deleteMember', $args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
// Call a trigger (after)
ModuleHandler::triggerCall('member.deleteMember', 'after', $trigger_obj);
$oDB->commit();
// Name, image, image, mark, sign, delete
$this->procMemberDeleteImageName($member_srl);
$this->procMemberDeleteImageMark($member_srl);
$this->procMemberDeleteProfileImage($member_srl);
$this->delSignature($member_srl);
self::clearMemberCache($member_srl);
// Delete all remaining extra info
$dirs = Rhymix\Framework\Storage::readDirectory(RX_BASEDIR . 'files/member_extra_info', true, true, false);
foreach ($dirs as $dir)
{
$member_dir = $dir . '/' . getNumberingPath($member_srl);
Rhymix\Framework\Storage::deleteDirectory($member_dir, false);
Rhymix\Framework\Storage::deleteEmptyDirectory($member_dir, true);
}
return $output;
}
/**
* Destroy all session information
*/
function destroySessionInfo()
{
Rhymix\Framework\Session::destroy();
}
function _updatePointByGroup($memberSrl, $groupSrlList)
{
$pointModuleConfig = ModuleModel::getModuleConfig('point');
$pointGroup = $pointModuleConfig->point_group;
$levelGroup = array();
if(is_array($pointGroup) && count($pointGroup)>0)
{
$levelGroup = array_flip($pointGroup);
ksort($levelGroup);
}
$maxLevel = 0;
$resultGroup = array_intersect($levelGroup, $groupSrlList);
if(count($resultGroup) > 0)
$maxLevel = max(array_flip($resultGroup));
if($maxLevel > 0)
{
$originPoint = PointModel::getPoint($memberSrl);
if($pointModuleConfig->level_step[$maxLevel] > $originPoint)
{
$oPointController = getController('point');
$oPointController->setPoint($memberSrl, $pointModuleConfig->level_step[$maxLevel], 'update');
}
}
}
function procMemberModifyEmailAddress()
{
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\MustLogin;
$member_info = Context::get('logged_info');
$newEmail = Context::get('email_address');
if(!$newEmail) throw new Rhymix\Framework\Exceptions\InvalidRequest;
// Check managed Email Host
if(MemberModel::isDeniedEmailHost($newEmail))
{
$config = MemberModel::getMemberConfig();
$emailhost_check = $config->emailhost_check;
$managed_email_host = lang('managed_email_host');
$email_hosts = MemberModel::getManagedEmailHosts();
foreach ($email_hosts as $host)
{
$hosts[] = $host->email_host;
}
$message = sprintf($managed_email_host[$emailhost_check],implode(', ',$hosts),'id@'.implode(', id@',$hosts));
throw new Rhymix\Framework\Exception($message);
}
// Check if the e-mail address is already registered
$member_srl = MemberModel::getMemberSrlByEmailAddress($newEmail);
if($member_srl) throw new Rhymix\Framework\Exception('msg_exists_email_address');
if($_SESSION['rechecked_password_step'] != 'INPUT_DATA')
{
throw new Rhymix\Framework\Exceptions\InvalidRequest;
}
unset($_SESSION['rechecked_password_step']);
$auth_args = new stdClass();
$auth_args->user_id = $newEmail;
$auth_args->member_srl = $member_info->member_srl;
$auth_args->auth_key = Rhymix\Framework\Security::getRandom(40, 'hex');
$auth_args->new_password = 'XE_change_emaill_address';
$oDB = &DB::getInstance();
$oDB->begin();
$output = executeQuery('member.insertAuthMail', $auth_args);
if(!$output->toBool())
{
$oDB->rollback();
return $output;
}
$member_config = ModuleModel::getModuleConfig('member');
$tpl_path = sprintf('%sskins/%s', $this->module_path, $member_config->skin);
if(!is_dir($tpl_path)) $tpl_path = sprintf('%sskins/%s', $this->module_path, 'default');
global $lang;
$memberInfo = array();
$memberInfo[$lang->email_address] = $member_info->email_address;
$memberInfo[$lang->nick_name] = $member_info->nick_name;
Context::set('memberInfo', $memberInfo);
Context::set('newEmail', $newEmail);
$auth_url = getFullUrl('','module','member','act','procMemberAuthEmailAddress','member_srl',$member_info->member_srl, 'auth_key',$auth_args->auth_key);
Context::set('auth_url', $auth_url);
$oTemplate = &TemplateHandler::getInstance();
$content = $oTemplate->compile($tpl_path, 'confirm_member_new_email');
$oMail = new \Rhymix\Framework\Mail();
$oMail->setSubject(lang('title_modify_email_address'));
$oMail->setBody($content);
$oMail->addTo($newEmail, $member_info->nick_name);
$oMail->send();
$msg = sprintf(lang('msg_confirm_mail_sent'), $newEmail);
$this->setMessage($msg);
$returnUrl = Context::get('success_return_url') ? Context::get('success_return_url') : getNotEncodedUrl('', 'mid', Context::get('mid'), 'act', '');
$this->setRedirectUrl($returnUrl);
}
function procMemberAuthEmailAddress()
{
$member_srl = Context::get('member_srl');
$auth_key = Context::get('auth_key');
if(!$member_srl || !$auth_key) throw new Rhymix\Framework\Exceptions\InvalidRequest;
// Test logs for finding password by user_id and authkey
$args = new stdClass;
$args->member_srl = $member_srl;
$args->auth_key = $auth_key;
$output = executeQuery('member.getAuthMail', $args);
if(!$output->toBool() || $output->data->auth_key != $auth_key)
{
if(strlen($output->data->auth_key) !== strlen($auth_key)) executeQuery('member.deleteAuthChangeEmailAddress', $args);
throw new Rhymix\Framework\Exception('msg_invalid_modify_email_auth_key');
}
$newEmail = $output->data->user_id;
$args->email_address = $newEmail;
list($args->email_id, $args->email_host) = explode('@', $newEmail);
$output = executeQuery('member.updateMemberEmailAddress', $args);
if(!$output->toBool()) return $output;
// Remove all values having the member_srl and new_password equal to 'XE_change_emaill_address' from authentication table
executeQuery('member.deleteAuthChangeEmailAddress',$args);
self::clearMemberCache($args->member_srl);
// Call a trigger (after)
$trigger_obj = new stdClass;
$trigger_obj->member_srl = $args->member_srl;
$trigger_obj->email_address = $args->email_address;
$trigger_output = ModuleHandler::triggerCall('member.updateMemberEmailAddress', 'after', $trigger_obj);
// Redirect to member info page
$this->setRedirectUrl(getNotEncodedUrl('', 'act', 'dispMemberInfo'));
}
function procMemberSendVerificationSMS()
{
$config = MemberModel::getMemberConfig();
if ($config->phone_number_verify_by_sms !== 'Y')
{
throw new Rhymix\Framework\Exceptions\FeatureDisabled;
}
$phone_country = Context::get('phone_country');
$phone_number = Context::get('phone_number');
if ($config->phone_number_default_country && (!$phone_country || $config->phone_number_hide_country === 'Y'))
{
$phone_country = $config->phone_number_default_country;
}
if (preg_match('/[A-Z]{3}/', $phone_country))
{
$phone_country_calling_code = preg_replace('/[^0-9]/', '', Rhymix\Framework\i18n::getCallingCodeByCountryCode($phone_country));
if (!$phone_country_calling_code)
{
return new BaseObject(-1, 'msg_invalid_phone_country');
}
}
else
{
return new BaseObject(-1, 'msg_invalid_phone_country');
}
if (!preg_match('/[0-9]{2,}/', $phone_number))
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
if ($phone_country === 'KOR' && !Rhymix\Framework\Korea::isValidPhoneNumber($phone_number))
{
return new BaseObject(-1, 'msg_invalid_phone_number');
}
$is_special = ($config->special_phone_number && $config->special_phone_number === preg_replace('/[^0-9]/', '', $phone_number));
$code = intval(mt_rand(100000, 999999));
$_SESSION['verify_by_sms'] = array(
'country' => $phone_country,
'number' => $phone_number,
'code' => $is_special ? intval($config->special_phone_code) : $code,
'status' => false,
);
if ($is_special)
{
return new BaseObject(0, 'verify_by_sms_code_sent');
}
$sms = new Rhymix\Framework\SMS;
$sms->addTo($phone_number, $phone_country_calling_code);
$content = '[' . Context::get('site_module_info')->settings->title . '] ' . sprintf(lang('member.verify_by_sms_message'), $code);
$sms->setContent($content);
$result = $sms->send();
if ($result && config('sms.type') !== 'dummy')
{
return new BaseObject(0, 'verify_by_sms_code_sent');
}
else
{
return new BaseObject(0, 'verify_by_sms_error');
}
}
function procMemberConfirmVerificationSMS()
{
$config = MemberModel::getMemberConfig();
if ($config->phone_number_verify_by_sms !== 'Y')
{
throw new Rhymix\Framework\Exceptions\FeatureDisabled;
}
$code = Context::get('code');
if(!preg_match('/^[0-9]{6}$/', $code))
{
throw new Rhymix\Framework\Exception('verify_by_sms_code_incorrect');
}
$code = intval($code);
if(!isset($_SESSION['verify_by_sms']) || $_SESSION['verify_by_sms']['code'] !== $code)
{
throw new Rhymix\Framework\Exception('verify_by_sms_code_incorrect');
}
$_SESSION['verify_by_sms']['status'] = true;
return new BaseObject(0, 'verify_by_sms_code_confirmed');
}
/**
* Delete a registered device.
*/
public function procMemberDeleteDevice()
{
$device_srl = intval(Context::get('device_srl'));
$logged_info = Context::get('logged_info');
$args = new stdClass;
$args->device_srl = $device_srl;
$output = executeQuery('member.getMemberDevice', $args);
if (!$output->data || !is_object($output->data))
{
throw new Rhymix\Framework\Exceptions\TargetNotFound;
}
if (!$output->data->member_srl || $output->data->member_srl != $logged_info->member_srl)
{
throw new Rhymix\Framework\Exceptions\TargetNotFound;
}
$args = new stdClass;
$args->device_token = $output->data->device_token;
$output = executeQuery('member.deleteMemberDevice', $args);
if (!$output->toBool())
{
return $output;
}
}
/**
* trigger for document.getDocumentMenu. Append to popup menu a button for procMemberSpammerManage()
*
* @param array &$menu_list
*
* @return object
**/
function triggerGetDocumentMenu(&$menu_list)
{
if(!Context::get('is_logged')) return;
$logged_info = Context::get('logged_info');
$document_srl = Context::get('target_srl');
$columnList = array('document_srl', 'module_srl', 'member_srl', 'ipaddress');
$oDocument = DocumentModel::getDocument($document_srl, false, false, $columnList);
$member_srl = abs($oDocument->get('member_srl'));
$module_srl = $oDocument->get('module_srl');
if(!$member_srl || $member_srl == $logged_info->member_srl) return;
if(!ModuleModel::getGrant(ModuleModel::getModuleInfoByModuleSrl($module_srl), $logged_info)->manager) return;
$oDocumentController = getController('document');
$url = getUrl('','module','member','act','dispMemberSpammer','member_srl',$member_srl,'module_srl',$module_srl);
$oDocumentController->addDocumentPopupMenu($url,'cmd_spammer','','popup');
}
/**
* trigger for comment.getCommentMenu. Append to popup menu a button for procMemberSpammerManage()
*
* @param array &$menu_list
*
* @return object
**/
function triggerGetCommentMenu(&$menu_list)
{
if(!Context::get('is_logged')) return;
$logged_info = Context::get('logged_info');
$comment_srl = Context::get('target_srl');
$columnList = array('comment_srl', 'module_srl', 'member_srl', 'ipaddress');
$oComment = CommentModel::getComment($comment_srl, FALSE, $columnList);
$module_srl = $oComment->get('module_srl');
$member_srl = abs($oComment->get('member_srl'));
if(!$member_srl || $member_srl == $logged_info->member_srl) return;
if(!ModuleModel::getGrant(ModuleModel::getModuleInfoByModuleSrl($module_srl), $logged_info)->manager) return;
$oCommentController = getController('comment');
$url = getUrl('','module','member','act','dispMemberSpammer','member_srl',$member_srl,'module_srl',$module_srl);
$oCommentController->addCommentPopupMenu($url,'cmd_spammer','','popup');
}
/**
* Spammer manage. Denied user login. And delete or trash all documents. Response Ajax string
*
* @return object
**/
function procMemberSpammerManage()
{
if(!Context::get('is_logged')) throw new Rhymix\Framework\Exceptions\NotPermitted;
$logged_info = Context::get('logged_info');
$member_srl = Context::get('member_srl');
$module_srl = Context::get('module_srl');
$cnt_loop = Context::get('cnt_loop');
$proc_type = Context::get('proc_type');
$isMoveToTrash = true;
if($proc_type == "delete")
$isMoveToTrash = false;
// check grant
$columnList = array('module_srl', 'module');
$module_info = ModuleModel::getModuleInfoByModuleSrl($module_srl, $columnList);
$grant = ModuleModel::getGrant($module_info, $logged_info);
if(!$grant->manager) throw new Rhymix\Framework\Exceptions\NotPermitted;
$proc_msg = "";
// delete or trash destination
// proc member
if($cnt_loop == 1)
$this->_spammerMember($member_srl);
// proc document and comment
elseif($cnt_loop>1)
$this->_spammerDocuments($member_srl, $isMoveToTrash);
// get destination count
$cnt_document = DocumentModel::getDocumentCountByMemberSrl($member_srl);
$cnt_comment = CommentModel::getCommentCountByMemberSrl($member_srl);
$total_count = Context::get('total_count');
$remain_count = $cnt_document + $cnt_comment;
if($cnt_loop == 1) $total_count = $remain_count;
// get progress percent
if($total_count > 0)
$progress = intval( ( ( $total_count - $remain_count ) / $total_count ) * 100 );
else
$progress = 100;
$this->add('total_count', $total_count);
$this->add('remain_count', $remain_count);
$this->add('progress', $progress);
$this->add('member_srl', $member_srl);
$this->add('module_srl', $module_srl);
$this->add('cnt_loop', ++$cnt_loop);
$this->add('proc_type', $proc_type);
return new BaseObject(0);
}
/**
* Denied user login and write description
*
* @param int $member_srl
*
* @return object
**/
private function _spammerMember($member_srl) {
$logged_info = Context::get('logged_info');
$spam_description = trim( Context::get('spam_description') );
$columnList = array('member_srl', 'email_address', 'user_id', 'nick_name', 'description');
// get member current infomation
$member_info = MemberModel::getMemberInfoByMemberSrl($member_srl, 0, $columnList);
$cnt_comment = CommentModel::getCommentCountByMemberSrl($member_srl);
$cnt_document = DocumentModel::getDocumentCountByMemberSrl($member_srl);
$total_count = $cnt_comment + $cnt_document;
$args = new stdClass();
$args->member_srl = $member_info->member_srl;
$args->email_address = $member_info->email_address;
$args->user_id = $member_info->user_id;
$args->nick_name = $member_info->nick_name;
$args->denied = "Y";
$args->description = trim( $member_info->description );
if( $args->description != "" ) $args->description .= "\n"; // add new line
$args->description .= lang('cmd_spammer') . "[" . date("Y-m-d H:i:s") . " from:" . $logged_info->user_id . " info:" . $spam_description . " docuemnts count:" . $total_count . "]";
$output = $this->updateMember($args, true);
self::clearMemberCache($args->member_srl);
return $output;
}
/**
* Delete or trash all documents
*
* @param int $member_srl
* @param bool $isMoveToTrash
*
* @return object
**/
private function _spammerDocuments($member_srl, $isMoveToTrash)
{
$oDocumentController = getController('document');
$oCommentController = getController('comment');
// delete count by one request
$getContentsCount = 10;
// 1. proc comment, 2. proc document
$cnt_comment = CommentModel::getCommentCountByMemberSrl($member_srl);
$cnt_document = DocumentModel::getDocumentCountByMemberSrl($member_srl);
if($cnt_comment > 0)
{
$columnList = array();
$commentList = CommentModel::getCommentListByMemberSrl($member_srl, $columnList, 0, false, $getContentsCount);
if($commentList) {
foreach($commentList as $v) {
$oCommentController->deleteComment($v->comment_srl, true, $isMoveToTrash);
}
}
} elseif($cnt_document > 0) {
$columnList = array();
$documentList = DocumentModel::getDocumentListByMemberSrl($member_srl, $columnList, 0, false, $getContentsCount);
if($documentList) {
foreach($documentList as $v) {
if($isMoveToTrash) $oDocumentController->moveDocumentToTrash($v);
else $oDocumentController->deleteDocument($v->document_srl);
}
}
}
return array();
}
public static function _clearMemberCache($member_srl)
{
return self::clearMemberCache($member_srl);
}
public static function clearMemberCache($member_srl)
{
$member_srl = intval($member_srl);
Rhymix\Framework\Cache::delete("member:member_info:$member_srl");
Rhymix\Framework\Cache::delete("member:member_groups:$member_srl:site:0");
Rhymix\Framework\Cache::delete("site_and_module:accessible_modules:$member_srl");
unset($GLOBALS['__member_info__'][$member_srl]);
unset($GLOBALS['__member_groups__'][$member_srl]);
}
}
/* End of file member.controller.php */
/* Location: ./modules/member/member.controller.php */