123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352 |
- <?php
- if (!defined('STATUSNET') && !defined('LACONICA')) { exit(1); }
- define('MAX_RECOVERY_TIME', 24 * 60 * 60);
- class RecoverpasswordAction extends Action
- {
- var $mode = null;
- var $msg = null;
- var $success = null;
- function handle()
- {
- parent::handle();
- if (common_logged_in()) {
-
- $this->clientError(_('You are already logged in!'));
- } else if ($_SERVER['REQUEST_METHOD'] == 'POST') {
- if ($this->arg('recover')) {
- $this->recoverPassword();
- } else if ($this->arg('reset')) {
- $this->resetPassword();
- } else {
-
- $this->clientError(_('Unexpected form submission.'));
- }
- } else {
- if ($this->trimmed('code')) {
- $this->checkCode();
- } else {
- $this->showForm();
- }
- }
- }
- function checkCode()
- {
- $code = $this->trimmed('code');
- $confirm = Confirm_address::getKV('code', $code);
- if (!$confirm) {
-
- $this->clientError(_('No such recovery code.'));
- }
- if ($confirm->address_type != 'recover') {
-
- $this->clientError(_('Not a recovery code.'));
- }
- $user = User::getKV($confirm->user_id);
- if (!$user) {
-
- $this->serverError(_('Recovery code for unknown user.'));
- }
- $touched = strtotime($confirm->modified);
- $email = $confirm->address;
-
- $confirm->delete();
-
-
- if ((time() - $touched) > MAX_RECOVERY_TIME) {
- common_log(LOG_WARNING,
- 'Attempted redemption on recovery code ' .
- 'that is ' . $touched . ' seconds old. ');
-
- $this->clientError(_('This confirmation code is too old. ' .
- 'Please start again.'));
- }
-
-
- if (!$user->email) {
- $orig = clone($user);
- $user->email = $email;
-
- $user->updateWithKeys($orig);
- }
-
- $this->setTempUser($user);
- $this->showPasswordForm();
- }
- function setTempUser(&$user)
- {
- common_ensure_session();
- $_SESSION['tempuser'] = $user->id;
- }
- function getTempUser()
- {
- common_ensure_session();
- $user_id = $_SESSION['tempuser'];
- if ($user_id) {
- $user = User::getKV($user_id);
- }
- return $user;
- }
- function clearTempUser()
- {
- common_ensure_session();
- unset($_SESSION['tempuser']);
- }
- function showPageNotice()
- {
- if ($this->msg) {
- $this->element('div', ($this->success) ? 'success' : 'error', $this->msg);
- } else {
- $this->elementStart('div', 'instructions');
- if ($this->mode == 'recover') {
- $this->element('p', null,
-
- _('If you have forgotten or lost your' .
- ' password, you can get a new one sent to' .
- ' the email address you have stored' .
- ' in your account.'));
- } else if ($this->mode == 'reset') {
- $this->element('p', null,
-
- _('You have been identified. Enter a' .
- ' new password below.'));
- }
- $this->elementEnd('div');
- }
- }
- function showForm($msg=null)
- {
- $this->msg = $msg;
- $this->mode = 'recover';
- $this->showPage();
- }
- function showContent()
- {
- if ($this->mode == 'recover') {
- $this->showRecoverForm();
- } else if ($this->mode == 'reset') {
- $this->showResetForm();
- }
- }
- function showRecoverForm()
- {
- $this->elementStart('form', array('method' => 'post',
- 'id' => 'form_password_recover',
- 'class' => 'form_settings',
- 'action' => common_local_url('recoverpassword')));
- $this->elementStart('fieldset');
-
- $this->element('legend', null, _('Password recovery'));
- $this->elementStart('ul', 'form_data');
- $this->elementStart('li');
-
- $this->input('nicknameoremail', _('Nickname or email address'),
- $this->trimmed('nicknameoremail'),
-
- _('Your nickname on this server, ' .
- 'or your registered email address.'));
- $this->elementEnd('li');
- $this->elementEnd('ul');
- $this->element('input', array('name' => 'recover',
- 'type' => 'hidden',
-
- 'value' => _('Recover')));
-
- $this->submit('recover', _m('BUTTON','Recover'));
- $this->elementEnd('fieldset');
- $this->elementEnd('form');
- }
- function title()
- {
- switch ($this->mode) {
-
- case 'reset': return _('Reset password');
-
- case 'recover': return _('Recover password');
-
- case 'sent': return _('Password recovery requested');
-
- case 'saved': return _('Password saved');
- default:
-
- return _('Unknown action');
- }
- }
- function showPasswordForm($msg=null)
- {
- $this->msg = $msg;
- $this->mode = 'reset';
- $this->showPage();
- }
- function showResetForm()
- {
- $this->elementStart('form', array('method' => 'post',
- 'id' => 'form_password_change',
- 'class' => 'form_settings',
- 'action' => common_local_url('recoverpassword')));
- $this->elementStart('fieldset');
-
- $this->element('legend', null, _('Password change'));
- $this->hidden('token', common_session_token());
- $this->elementStart('ul', 'form_data');
- $this->elementStart('li');
-
- $this->password('newpassword', _('New password'),
-
- _('6 or more characters, and do not forget it!'));
- $this->elementEnd('li');
- $this->elementStart('li');
-
- $this->password('confirm', _('Confirm'),
-
- _('Same as password above.'));
- $this->elementEnd('li');
- $this->elementEnd('ul');
-
- $this->submit('reset', _m('BUTTON','Reset'));
- $this->elementEnd('fieldset');
- $this->elementEnd('form');
- }
- function recoverPassword()
- {
- $nore = $this->trimmed('nicknameoremail');
- if (!$nore) {
-
- $this->showForm(_('Enter a nickname or email address.'));
- return;
- }
- try {
- User::recoverPassword($nore);
- $this->mode = 'sent';
- if (common_is_email($nore) && common_config('site', 'fakeaddressrecovery')) {
-
-
- $this->msg = _('If the email address you provided was found in the database, a recovery mail with instructions has been sent there.');
- } else {
-
- $this->msg = _('Instructions for recovering your password ' .
- 'have been sent to the email address registered to your ' .
- 'account.');
- }
- $this->success = true;
- } catch (Exception $e) {
- $this->success = false;
- $this->msg = $e->getMessage();
- }
- $this->showPage();
- }
- function resetPassword()
- {
-
- $token = $this->trimmed('token');
- if (!$token || $token != common_session_token()) {
-
- $this->showForm(_('There was a problem with your session token. Try again, please.'));
- return;
- }
- $user = $this->getTempUser();
- if (!$user) {
-
- $this->clientError(_('Unexpected password reset.'));
- }
- $newpassword = $this->trimmed('newpassword');
- $confirm = $this->trimmed('confirm');
- if (!$newpassword || strlen($newpassword) < 6) {
-
- $this->showPasswordForm(_('Password must be 6 characters or more.'));
- return;
- }
- if ($newpassword != $confirm) {
-
- $this->showPasswordForm(_('Password and confirmation do not match.'));
- return;
- }
-
- $user->setPassword($newpassword);
- $this->clearTempUser();
- if (!common_set_user($user->nickname)) {
-
- $this->serverError(_('Error setting user.'));
- }
- common_real_login(true);
- $this->mode = 'saved';
-
- $this->msg = _('New password successfully saved. ' .
- 'You are now logged in.');
- $this->success = true;
- $this->showPage();
- }
-
- function showLocalNav()
- {
- $nav = new LoginGroupNav($this);
- $nav->show();
- }
- }
|