mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-10-22 14:05:37 +02:00
a377a67e54
mlanthaler: The missing authenticator base class... (merged from branches/gsocmlanthaler: Switched to an authenticator and a form class to be able to add other authentication methods. (merged from branches/gsoc) mlanthaler: The missing authenticator base class... (merged from branches/gsoc)) git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@41729 467b73ca-7a2a-4603-9d3b-597d59a354a9
159 lines
4.1 KiB
PHP
159 lines
4.1 KiB
PHP
<?php
|
|
/**
|
|
* Log-in form for the "member" authentication method
|
|
*/
|
|
class MemberLoginForm extends Form {
|
|
/**
|
|
* Constructor
|
|
*
|
|
* @param $controller
|
|
* @param $name
|
|
* @param $fields
|
|
* @param $actions
|
|
* @param $checkCurrentUser
|
|
*/
|
|
function __construct($controller, $name, $fields = null, $actions = null, $checkCurrentUser = true) {
|
|
|
|
$customCSS = project() . '/css/member_login.css';
|
|
if(Director::fileExists($customCSS)) {
|
|
Requirements::css($customCSS);
|
|
}
|
|
|
|
if(isset($_REQUEST['BackURL'])) {
|
|
$backURL = $_REQUEST['BackURL'];
|
|
} else {
|
|
$backURL = Session::get('BackURL');
|
|
//Session::clear("BackURL"); don't clear the back URL here! Should be used until the right password is entered!
|
|
}
|
|
|
|
if($checkCurrentUser && Member::currentUserID()) {
|
|
$fields = new FieldSet();
|
|
$actions = new FieldSet(new FormAction("logout", "Log in as someone else"));
|
|
} else {
|
|
if(!$fields) {
|
|
$fields = new FieldSet(
|
|
new HiddenField("AuthenticationMethod", null, "Member"),
|
|
new TextField("Email", "Email address", Session::get('SessionForms.MemberLoginForm.Email')),
|
|
new EncryptField("Password", "Password"),
|
|
new CheckboxField("Remember", "Remember me next time?",true)
|
|
);
|
|
}
|
|
if(!$actions) {
|
|
$actions = new FieldSet(
|
|
new FormAction("dologin", "Log in"),
|
|
new FormAction("forgotPassword", "I've lost my password")
|
|
);
|
|
}
|
|
}
|
|
|
|
if(isset($backURL)) {
|
|
$fields->push(new HiddenField('BackURL', 'BackURL', $backURL));
|
|
}
|
|
|
|
parent::__construct($controller, $name, $fields, $actions);
|
|
}
|
|
|
|
|
|
/**
|
|
* Get message from session
|
|
*/
|
|
protected function getMessageFromSession() {
|
|
parent::getMessageFromSession();
|
|
if(($member = Member::currentUser()) && !Session::get('MemberLoginForm.force_message')) {
|
|
$this->message = "You're logged in as $member->FirstName.";
|
|
}
|
|
Session::set('MemberLoginForm.force_message', false);
|
|
}
|
|
|
|
|
|
/**
|
|
* Login form handler method
|
|
*
|
|
* This method is called when the user clicks on "Log in"
|
|
*
|
|
* @param array $data Submitted data
|
|
*/
|
|
public function dologin($data) {
|
|
if($this->performLogin($data)){
|
|
|
|
if($backURL = $_REQUEST['BackURL']) {
|
|
Session::clear("BackURL");
|
|
Director::redirect($backURL);
|
|
}else
|
|
Director::redirectBack();
|
|
}else{
|
|
|
|
if($badLoginURL = Session::get("BadLoginURL")){
|
|
Director::redirect($badLoginURL);
|
|
}else{
|
|
Director::redirectBack();
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* Log out
|
|
*
|
|
* @todo Figure out for what this method is used!
|
|
*/
|
|
public function logout(){
|
|
$s = new Security();
|
|
return $s->logout();
|
|
}
|
|
|
|
|
|
/**
|
|
* Check the membership
|
|
*
|
|
* If one of them or both don't match, set the fields which are unmatched with red star *
|
|
*/
|
|
public function performLogin($data){
|
|
if($member = MemberAuthenticator::authenticate($data)) {
|
|
$firstname = Convert::raw2xml($member->FirstName);
|
|
$this->sessionMessage("Welcome Back, {$firstname}", "good");
|
|
$member->LogIn();
|
|
if(isset($data['Remember'])) {
|
|
// Deliberately obscure...
|
|
Cookie::set('alc_enc',base64_encode("$data[Email]:$data[Password]"));
|
|
}
|
|
return $member;
|
|
|
|
} else {
|
|
$this->sessionMessage("That doesn't seem to be the right email address or password. Please try again.", "bad");
|
|
return null;
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* Forgot password form handler method
|
|
*
|
|
* This method is called when the user clicks on "Log in"
|
|
*
|
|
* @param array $data Submitted data
|
|
*/
|
|
function forgotPassword($data) {
|
|
$SQL_data = Convert::raw2sql($data);
|
|
if($data['Email'] && $member = DataObject::get_one("Member", "Member.Email = '$SQL_data[Email]'")) {
|
|
if(!$member->Password) {
|
|
$member->createNewPassword();
|
|
$member->write();
|
|
}
|
|
|
|
$member->sendInfo('forgotPassword');
|
|
Director::redirect('Security/passwordsent/' . urlencode($data['Email']));
|
|
|
|
} else if($data['Email']) {
|
|
$this->sessionMessage("Sorry, but I don't recognise the email address. Maybe you need to sign up, or perhaps you used another email address?", "bad");
|
|
Director::redirectBack();
|
|
|
|
} else {
|
|
Director::redirect("Security/lostpassword");
|
|
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
?>
|