mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-06-28 07:29:26 +02:00
a1f8892c52
http://svn.silverstripe.com/open/modules/sapphire/branches/govtsecurity ........ r52151 | sminnee | 2008-04-05 11:14:26 +1300 (Sat, 05 Apr 2008) | 1 line Lock users out after 5 failed log-ins ........ git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@53466 467b73ca-7a2a-4603-9d3b-597d59a354a9
87 lines
2.5 KiB
PHP
87 lines
2.5 KiB
PHP
<?php
|
|
|
|
/**
|
|
* @package sapphire
|
|
* @subpackage security
|
|
* @author Markus Lanthaler <markus@silverstripe.com>
|
|
*/
|
|
|
|
/**
|
|
* Authenticator for the default "member" method
|
|
*
|
|
* @author Markus Lanthaler <markus@silverstripe.com>
|
|
* @package sapphire
|
|
* @subpackage security
|
|
*/
|
|
class MemberAuthenticator extends Authenticator {
|
|
|
|
/**
|
|
* Method to authenticate an user
|
|
*
|
|
* @param array $RAW_data Raw data to authenticate the user
|
|
* @param Form $form Optional: If passed, better error messages can be
|
|
* produced by using
|
|
* {@link Form::sessionMessage()}
|
|
* @return bool|Member Returns FALSE if authentication fails, otherwise
|
|
* the member object
|
|
* @see Security::setDefaultAdmin()
|
|
*/
|
|
public static function authenticate(array $RAW_data, Form $form = null) {
|
|
$SQL_user = Convert::raw2sql($RAW_data['Email']);
|
|
$isLockedOut = false;
|
|
|
|
// Default login (see Security::setDefaultAdmin())
|
|
if(Security::check_default_admin($RAW_data['Email'], $RAW_data['Password'])) {
|
|
$member = Security::findAnAdministrator();
|
|
} else {
|
|
$member = DataObject::get_one("Member", "Email = '$SQL_user' AND Password IS NOT NULL");
|
|
if($member && ($member->checkPassword($RAW_data['Password']) == false)) {
|
|
if($member->isLockedOut()) $isLockedOut = true;
|
|
$member->registerFailedLogin();
|
|
$member = null;
|
|
}
|
|
}
|
|
|
|
if($member) {
|
|
Session::clear("BackURL");
|
|
} else if($isLockedOut) {
|
|
if($form) $form->sessionMessage(
|
|
_t('Member.ERRORLOCKEDOUT', "Your account has been temporarily disabled because of too many failed attempts at logging in. Please try again in 20 minutes."),
|
|
"bad"
|
|
);
|
|
} else {
|
|
if($form) $form->sessionMessage(
|
|
_t('Member.ERRORWRONGCRED', "That doesn't seem to be the right e-mail address or password. Please try again."),
|
|
"bad"
|
|
);
|
|
}
|
|
|
|
return $member;
|
|
}
|
|
|
|
|
|
/**
|
|
* Method that creates the login form for this authentication method
|
|
*
|
|
* @param Controller The parent controller, necessary to create the
|
|
* appropriate form action tag
|
|
* @return Form Returns the login form to use with this authentication
|
|
* method
|
|
*/
|
|
public static function get_login_form(Controller $controller) {
|
|
return Object::create("MemberLoginForm", $controller, "LoginForm");
|
|
}
|
|
|
|
|
|
/**
|
|
* Get the name of the authentication method
|
|
*
|
|
* @return string Returns the name of the authentication method.
|
|
*/
|
|
public static function get_name() {
|
|
return _t('MemberAuthenticator.TITLE', "E-mail & Password");
|
|
}
|
|
}
|
|
|
|
|
|
?>
|