Premier commit
This commit is contained in:
96
modules/user/models/Permission.php
Normal file
96
modules/user/models/Permission.php
Normal file
@@ -0,0 +1,96 @@
|
||||
<?php
|
||||
/**
|
||||
* This file is part of the Piko user module
|
||||
*
|
||||
* @copyright 2020 Sylvain PHILIP.
|
||||
* @license LGPL-3.0; see LICENSE.txt
|
||||
* @link https://github.com/piko-framework/piko-user
|
||||
*/
|
||||
namespace app\modules\user\models;
|
||||
|
||||
use function Piko\I18n\__;
|
||||
|
||||
/**
|
||||
* This is the model class for table "auth_permission".
|
||||
*
|
||||
* @property integer $id
|
||||
* @property string $name;
|
||||
*
|
||||
* @author Sylvain PHILIP <contact@sphilip.com>
|
||||
*/
|
||||
class Permission extends \piko\DbRecord
|
||||
{
|
||||
/**
|
||||
* The table name
|
||||
*
|
||||
* @var string
|
||||
*/
|
||||
protected $tableName = 'auth_permission';
|
||||
|
||||
/**
|
||||
* The model errors
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
public $errors = [];
|
||||
|
||||
/**
|
||||
* The table schema
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
protected $schema = [
|
||||
'id' => self::TYPE_INT,
|
||||
'name' => self::TYPE_STRING,
|
||||
];
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \Piko\ModelTrait::validate()
|
||||
*/
|
||||
protected function validate(): void
|
||||
{
|
||||
if (empty($this->name)) {
|
||||
$this->errors['name'] = __('user', 'Permission name must be filled in.');
|
||||
} else {
|
||||
$st = $this->db->prepare('SELECT COUNT(`id`) FROM `auth_permission` WHERE name = :name');
|
||||
$st->execute(['name' => $this->name]);
|
||||
|
||||
$count = (int) $st->fetchColumn();
|
||||
|
||||
if ($count) {
|
||||
$this->errors['name'] = __('user', 'Permission already exists.');
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Find permissions
|
||||
*
|
||||
* @param string $order The order condition
|
||||
* @param number $start The offset start
|
||||
* @param number $limit The offset limit
|
||||
*
|
||||
* @return array An array of permission rows
|
||||
*/
|
||||
public static function find($order = '', $start = 0, $limit = 0)
|
||||
{
|
||||
$db = User::$pdo;
|
||||
$query = 'SELECT `id`, `name` FROM `auth_permission`';
|
||||
$query .= ' ORDER BY ' . (empty($order) ? '`id` DESC' : $order);
|
||||
|
||||
if (!empty($start)) {
|
||||
$query .= ' OFFSET ' . (int) $start;
|
||||
}
|
||||
|
||||
if (!empty($limit)) {
|
||||
$query .= ' LIMIT ' . (int) $limit;
|
||||
}
|
||||
|
||||
$sth = $db->prepare($query);
|
||||
|
||||
$sth->execute();
|
||||
|
||||
return $sth->fetchAll();
|
||||
}
|
||||
}
|
||||
180
modules/user/models/Role.php
Normal file
180
modules/user/models/Role.php
Normal file
@@ -0,0 +1,180 @@
|
||||
<?php
|
||||
/**
|
||||
* This file is part of the Piko user module
|
||||
*
|
||||
* @copyright 2020 Sylvain PHILIP.
|
||||
* @license LGPL-3.0; see LICENSE.txt
|
||||
* @link https://github.com/piko-framework/piko-user
|
||||
*/
|
||||
namespace app\modules\user\models;
|
||||
|
||||
use function Piko\I18n\__;
|
||||
use app\modules\user\Rbac;
|
||||
|
||||
/**
|
||||
* This is the model class for table "auth_role.
|
||||
*
|
||||
* @property integer $id
|
||||
* @property integer $parent_id
|
||||
* @property string $name;
|
||||
* @property string $description;
|
||||
*
|
||||
* @author Sylvain PHILIP <contact@sphilip.com>
|
||||
*/
|
||||
class Role extends \Piko\DbRecord
|
||||
{
|
||||
const SCENARIO_ADMIN = 'admin';
|
||||
|
||||
/**
|
||||
* The table name
|
||||
*
|
||||
* @var string
|
||||
*/
|
||||
protected $tableName = 'auth_role';
|
||||
|
||||
/**
|
||||
* The model scenario
|
||||
*
|
||||
* @var string
|
||||
*/
|
||||
public $scenario = '';
|
||||
|
||||
/**
|
||||
* The model errors
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
public $errors = [];
|
||||
|
||||
/**
|
||||
* The role permissions
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
public $permissions = [];
|
||||
|
||||
/**
|
||||
* The table schema
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
protected $schema = [
|
||||
'id' => self::TYPE_INT,
|
||||
'name' => self::TYPE_STRING,
|
||||
'description' => self::TYPE_STRING,
|
||||
];
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \piko\Component::init()
|
||||
*/
|
||||
protected function init()
|
||||
{
|
||||
if (!empty($this->name)) {
|
||||
$this->permissions = Rbac::getRolePermissionIds($this->name);
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \Piko\DbRecord::bind()
|
||||
*/
|
||||
public function bind($data): void
|
||||
{
|
||||
if (isset($data['permissions'])) {
|
||||
$this->permissions = $data['permissions'];
|
||||
unset($data['permissions']);
|
||||
}
|
||||
|
||||
parent::bind($data);
|
||||
}
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \Piko\DbRecord::afterSave()
|
||||
*/
|
||||
protected function afterSave(): void
|
||||
{
|
||||
if ($this->scenario === self::SCENARIO_ADMIN) {
|
||||
|
||||
$st = $this->db->prepare('DELETE FROM `auth_role_has_permission` WHERE role_id = :role_id');
|
||||
|
||||
if (!$st->execute(['role_id' => $this->id])) {
|
||||
throw new \RuntimeException(
|
||||
"Error while trying to delete role id {$this->id} in auth_role_has_permission table"
|
||||
);
|
||||
}
|
||||
|
||||
if (!empty($this->permissions)) {
|
||||
|
||||
$values = [];
|
||||
|
||||
foreach ($this->permissions as $id) {
|
||||
$values[] = '(' . (int) $this->id . ',' . (int) $id . ')';
|
||||
}
|
||||
|
||||
$query = 'INSERT INTO `auth_role_has_permission` (role_id, permission_id) VALUES '
|
||||
. implode(', ', $values);
|
||||
|
||||
$this->db->beginTransaction();
|
||||
|
||||
$st = $this->db->prepare($query);
|
||||
$st->execute();
|
||||
$this->db->commit();
|
||||
}
|
||||
}
|
||||
|
||||
parent::afterSave();
|
||||
}
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \Piko\ModelTrait::validate()
|
||||
*/
|
||||
protected function validate(): void
|
||||
{
|
||||
if (empty($this->name)) {
|
||||
$this->errors['name'] = __('user', 'Role name must be filled in.');
|
||||
} else {
|
||||
$st = $this->db->prepare('SELECT COUNT(`id`) FROM `auth_role` WHERE name = :name');
|
||||
$st->execute(['name' => $this->name]);
|
||||
|
||||
$count = (int) $st->fetchColumn();
|
||||
|
||||
if ($count) {
|
||||
$this->errors['name'] = __('user', 'Role already exists.');
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Get roles
|
||||
*
|
||||
* @param string $order The order condition
|
||||
* @param number $start The offset start
|
||||
* @param number $limit The offset limit
|
||||
*
|
||||
* @return array An array of role rows
|
||||
*/
|
||||
public static function find($order = '', $start = 0, $limit = 0)
|
||||
{
|
||||
$db = User::$pdo;
|
||||
$query = 'SELECT * FROM `auth_role`';
|
||||
|
||||
$query .= ' ORDER BY ' . (empty($order) ? '`id` DESC' : $order);
|
||||
|
||||
if (!empty($start)) {
|
||||
$query .= ' OFFSET ' . (int) $start;
|
||||
}
|
||||
|
||||
if (!empty($limit)) {
|
||||
$query .= ' LIMIT ' . (int) $limit;
|
||||
}
|
||||
|
||||
$sth = $db->prepare($query);
|
||||
|
||||
$sth->execute();
|
||||
|
||||
return $sth->fetchAll();
|
||||
}
|
||||
}
|
||||
551
modules/user/models/User.php
Normal file
551
modules/user/models/User.php
Normal file
@@ -0,0 +1,551 @@
|
||||
<?php
|
||||
/**
|
||||
* This file is part of the Piko user module
|
||||
*
|
||||
* @copyright 2020 Sylvain PHILIP.
|
||||
* @license LGPL-3.0; see LICENSE.txt
|
||||
* @link https://github.com/piko-framework/piko-user
|
||||
*/
|
||||
namespace app\modules\user\models;
|
||||
|
||||
use function Piko\I18n\__;
|
||||
use Piko\Router;
|
||||
use app\modules\user\Rbac;
|
||||
use app\modules\user\Module;
|
||||
use Nette\Mail\Message;
|
||||
use Nette\Mail\SmtpMailer;
|
||||
use Nette\Utils\Random;
|
||||
|
||||
/**
|
||||
* This is the model class for table "user".
|
||||
*
|
||||
* @property integer $id
|
||||
* @property string $name;
|
||||
* @property string $username;
|
||||
* @property string $email;
|
||||
* @property string $password;
|
||||
* @property string $auth_key;
|
||||
* @property integer $confirmed_at;
|
||||
* @property integer $blocked_at;
|
||||
* @property string $registration_ip;
|
||||
* @property integer $created_at;
|
||||
* @property integer $updated_at;
|
||||
* @property integer $last_login_at;
|
||||
* @property string $timezone;
|
||||
* @property string $profil;
|
||||
*
|
||||
* @author Sylvain PHILIP <contact@sphilip.com>
|
||||
*/
|
||||
class User extends \Piko\DbRecord implements \Piko\User\IdentityInterface
|
||||
{
|
||||
const SCENARIO_ADMIN = 'admin';
|
||||
const SCENARIO_REGISTER = 'register';
|
||||
const SCENARIO_RESET = 'reset';
|
||||
|
||||
public static \PDO $pdo;
|
||||
public static Module $module;
|
||||
|
||||
/**
|
||||
* The table name
|
||||
* @var string
|
||||
*/
|
||||
protected $tableName = 'user';
|
||||
|
||||
/**
|
||||
* The model errors
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
public $errors = [];
|
||||
|
||||
/**
|
||||
* The model scenario
|
||||
*
|
||||
* @var string
|
||||
*/
|
||||
public $scenario = '';
|
||||
|
||||
/**
|
||||
* The user role ids
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
protected $roleIds = [];
|
||||
|
||||
/**
|
||||
* The confirmation password
|
||||
*
|
||||
* @var string
|
||||
*/
|
||||
protected $password2 = '';
|
||||
|
||||
/**
|
||||
* Reset password state
|
||||
*
|
||||
* @var boolean
|
||||
*/
|
||||
protected $resetPassword = false;
|
||||
|
||||
/**
|
||||
* The table schema
|
||||
*
|
||||
* @var array
|
||||
*/
|
||||
protected $schema = [
|
||||
'id' => self::TYPE_INT,
|
||||
'name' => self::TYPE_STRING,
|
||||
'username' => self::TYPE_STRING,
|
||||
'email' => self::TYPE_STRING,
|
||||
'password' => self::TYPE_STRING,
|
||||
'auth_key' => self::TYPE_STRING,
|
||||
'confirmed_at' => self::TYPE_INT,
|
||||
'blocked_at' => self::TYPE_INT,
|
||||
'registration_ip' => self::TYPE_STRING,
|
||||
'created_at' => self::TYPE_INT,
|
||||
'updated_at' => self::TYPE_INT,
|
||||
'last_login_at' => self::TYPE_INT,
|
||||
'is_admin' => self::TYPE_INT,
|
||||
'timezone' => self::TYPE_STRING,
|
||||
'profil' => self::TYPE_STRING,
|
||||
];
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \Piko\DbRecord::beforeSave()
|
||||
*/
|
||||
protected function beforeSave($isNew): bool
|
||||
{
|
||||
if ($isNew) {
|
||||
$this->name = $this->username;
|
||||
$this->password = sha1($this->password);
|
||||
$this->created_at = time();
|
||||
$this->auth_key = sha1(Random::generate(10));
|
||||
} else {
|
||||
$this->updated_at = time();
|
||||
|
||||
if ($this->resetPassword) {
|
||||
$this->password = sha1($this->password);
|
||||
}
|
||||
}
|
||||
|
||||
return parent::beforeSave($isNew);
|
||||
}
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \Piko\DbRecord::afterSave()
|
||||
*/
|
||||
protected function afterSave(): void
|
||||
{
|
||||
if ($this->scenario === self::SCENARIO_ADMIN) {
|
||||
|
||||
// Don't allow admin user to remove its admin role
|
||||
/*
|
||||
if ($this->id == Piko::get('user')->getId()) {
|
||||
|
||||
$adminRole = Piko::get('userModule')->adminRole;
|
||||
$adminRoleId = Rbac::getRoleId($adminRole);
|
||||
|
||||
if (!in_array($adminRoleId, $this->roleIds)) {
|
||||
$this->roleIds[] = $adminRoleId;
|
||||
}
|
||||
}
|
||||
*/
|
||||
|
||||
if (!empty($this->roleIds)) {
|
||||
|
||||
$roleIds = Rbac::getUserRoleIds($this->id);
|
||||
|
||||
$idsToRemove = array_diff($roleIds, $this->roleIds);
|
||||
$idsToAdd = array_diff($this->roleIds, $roleIds);
|
||||
|
||||
if (!empty($idsToRemove)) {
|
||||
$query = 'DELETE FROM `auth_assignment` WHERE user_id = :user_id AND role_id IN('
|
||||
. implode(',', $idsToRemove) . ')';
|
||||
$st = $this->db->prepare($query);
|
||||
$st->execute(['user_id' => $this->id]);
|
||||
}
|
||||
|
||||
if (!empty($idsToAdd)) {
|
||||
$values = [];
|
||||
foreach ($idsToAdd as $id) {
|
||||
$values[] = '(' . (int) $this->id . ',' . (int) $id . ')';
|
||||
}
|
||||
|
||||
$query = 'INSERT INTO `auth_assignment` (user_id, role_id) VALUES ' . implode(', ', $values);
|
||||
|
||||
$this->db->beginTransaction();
|
||||
$st = $this->db->prepare($query);
|
||||
$st->execute();
|
||||
$this->db->commit();
|
||||
}
|
||||
} else {
|
||||
|
||||
$st = $this->db->prepare('DELETE FROM `auth_assignment` WHERE user_id = :user_id');
|
||||
$st->execute(['user_id' => $this->id]);
|
||||
}
|
||||
}
|
||||
|
||||
parent::afterSave();
|
||||
}
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \Piko\DbRecord::bind()
|
||||
*/
|
||||
public function bind($data): void
|
||||
{
|
||||
if (isset($data['password']) && empty($data['password'])) {
|
||||
unset($data['password']);
|
||||
}
|
||||
|
||||
if (isset($data['password2'])) {
|
||||
$this->password2 = $data['password2'];
|
||||
unset($data['password2']);
|
||||
}
|
||||
|
||||
if (!empty($data['password']) && !$this->validatePassword($data['password'])) {
|
||||
$this->resetPassword = true;
|
||||
}
|
||||
|
||||
if (!empty($data['profil']) && is_array($data['profil'])) {
|
||||
$data['profil'] = json_encode($data['profil']);
|
||||
}
|
||||
|
||||
if (isset($data['roles']) && $this->scenario == self::SCENARIO_ADMIN) {
|
||||
$this->roleIds = $data['roles'];
|
||||
unset($data['roles']);
|
||||
}
|
||||
|
||||
parent::bind($data);
|
||||
}
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \Piko\ModeTrait::validate()
|
||||
*/
|
||||
protected function validate(): void
|
||||
{
|
||||
if (empty($this->email)) {
|
||||
$this->errors['email'] = __('user', 'Email must be filled in.');
|
||||
} elseif (!filter_var($this->email, FILTER_VALIDATE_EMAIL)) {
|
||||
$this->errors['email'] = __(
|
||||
'user',
|
||||
'{email} is not a valid email address.',
|
||||
['email' => $this->data['email']]
|
||||
);
|
||||
}
|
||||
|
||||
if (($this->scenario == self::SCENARIO_REGISTER || $this->scenario == self::SCENARIO_ADMIN)
|
||||
&& empty($this->username)) {
|
||||
$this->errors['username'] = __('user', 'Username must be filled in.') ;
|
||||
}
|
||||
|
||||
// New user
|
||||
if (($this->scenario == self::SCENARIO_REGISTER || $this->scenario == self::SCENARIO_ADMIN)
|
||||
&& empty($this->id)) {
|
||||
|
||||
$st = $this->db->prepare('SELECT id FROM user WHERE email = ?');
|
||||
$st->execute([$this->email]);
|
||||
$id = $st->fetchColumn();
|
||||
|
||||
if ($id) {
|
||||
$this->errors['email'] = __('user', 'This email is already used.');
|
||||
}
|
||||
|
||||
$st = $this->db->prepare('SELECT id FROM user WHERE username = ?');
|
||||
$st->execute([$this->username]);
|
||||
$id = $st->fetchColumn();
|
||||
|
||||
if ($id) {
|
||||
$this->errors['username'] = __('user', 'This username is already used.');
|
||||
}
|
||||
}
|
||||
|
||||
if (($this->scenario == self::SCENARIO_REGISTER || $this->scenario == self::SCENARIO_RESET)
|
||||
&& empty($this->password)) {
|
||||
$this->errors['password'] = __('user', 'Password must be filled in.');
|
||||
|
||||
} elseif (($this->scenario == self::SCENARIO_REGISTER || $this->scenario == self::SCENARIO_RESET) &&
|
||||
strlen($this->password) < static::$module->passwordMinLength) {
|
||||
$this->errors['password'] = __(
|
||||
'user',
|
||||
'Password is to short. Minimum {num}: characters.',
|
||||
['num' => static::$module->passwordMinLength]
|
||||
);
|
||||
}
|
||||
|
||||
if (($this->scenario == self::SCENARIO_REGISTER || $this->scenario == self::SCENARIO_RESET) &&
|
||||
$this->password != $this->password2) {
|
||||
$this->errors['password2'] = __('user', 'Passwords are not the same.');
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Get user role ids
|
||||
*
|
||||
* @return array An array containg role ids
|
||||
*/
|
||||
public function getRoleIds()
|
||||
{
|
||||
return Rbac::getUserRoleIds($this->id);
|
||||
}
|
||||
|
||||
/**
|
||||
* Activate an user
|
||||
*
|
||||
* @return boolean
|
||||
*/
|
||||
public function activate()
|
||||
{
|
||||
$this->confirmed_at = time();
|
||||
return $this->save();
|
||||
}
|
||||
|
||||
/**
|
||||
* Check if the user is activated
|
||||
* @return boolean
|
||||
*/
|
||||
public function isActivated()
|
||||
{
|
||||
return empty($this->confirmed_at) ? false : true;
|
||||
}
|
||||
|
||||
/**
|
||||
* Send Registration confirmation email
|
||||
*
|
||||
* @return boolean Return false if fail to send email
|
||||
*/
|
||||
public function sendRegistrationConfirmation(Router $router, SmtpMailer $mailer)
|
||||
{
|
||||
$siteName = getenv('SITE_NAME');
|
||||
$baseUrl = $this->getAbsoluteBaseUrl();
|
||||
|
||||
$message = __('user', 'confirmation_mail_body', [
|
||||
'site_name' => $siteName,
|
||||
'link' => $baseUrl . $router->getUrl('user/default/confirmation', ['token' => $this->auth_key]),
|
||||
'base_url' => $baseUrl,
|
||||
'username' => $this->username,
|
||||
]);
|
||||
|
||||
$subject = __('user', 'Registration confirmation on {site_name}', ['site_name' => $siteName]);
|
||||
|
||||
$mail = new Message();
|
||||
$mail->setFrom($siteName . ' <' . getenv('NO_REPLY_EMAIL') . '>')
|
||||
->addTo($this->email)
|
||||
->setSubject($subject)
|
||||
->setBody($message);
|
||||
|
||||
try {
|
||||
$mailer->send($mail);
|
||||
return true;
|
||||
|
||||
} catch (\Exception $e) {
|
||||
$this->errors['sendmail'] = $e->getMessage();
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
/**
|
||||
* Send reset password email
|
||||
*
|
||||
* @return boolean Return false if fail to send email
|
||||
*/
|
||||
public function sendResetPassword(Router $router, SmtpMailer $mailer)
|
||||
{
|
||||
$siteName = getenv('SITE_NAME');
|
||||
|
||||
$baseUrl = $this->getAbsoluteBaseUrl();
|
||||
|
||||
$message = __('user', 'reset_password_mail_body', [
|
||||
'site_name' => $siteName,
|
||||
'link' => $baseUrl . $router->getUrl('user/default/reset-password', ['token' => $this->auth_key]),
|
||||
'username' => $this->username,
|
||||
]);
|
||||
|
||||
$subject = __('user', 'Password change request on {site_name}', ['site_name' => $siteName]);
|
||||
|
||||
$mail = new Message();
|
||||
$mail->setFrom($siteName . ' <' . getenv('NO_REPLY_EMAIL') . '>')
|
||||
->addTo($this->email)
|
||||
->setSubject($subject)
|
||||
->setBody($message);
|
||||
|
||||
try {
|
||||
$mailer->send($mail);
|
||||
return true;
|
||||
|
||||
} catch (\Exception $e) {
|
||||
$this->errors['sendmail'] = $e->getMessage();
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
/**
|
||||
* Get users
|
||||
*
|
||||
* @param array $filters Array of filter conditions (['name' => ''])
|
||||
* @param string $order The order condition
|
||||
* @param number $start The offset start
|
||||
* @param number $limit The offset limit
|
||||
*
|
||||
* @return array An array of user rows
|
||||
*/
|
||||
public static function find($filters = [], $order = '', $start = 0, $limit = 0)
|
||||
{
|
||||
$query = 'SELECT * FROM `user`';
|
||||
$where = [];
|
||||
|
||||
if (!empty($filters['name'])) {
|
||||
$where[] = '`name` LIKE :search';
|
||||
}
|
||||
|
||||
if (!empty($where)) {
|
||||
$query .= ' WHERE ' . implode(' AND ', $where);
|
||||
}
|
||||
|
||||
$query .= ' ORDER BY ' . (empty($order) ? '`id` DESC' : $order);
|
||||
|
||||
if (!empty($start)) {
|
||||
$query .= ' OFFSET ' . (int) $start;
|
||||
}
|
||||
|
||||
if (!empty($limit)) {
|
||||
$query .= ' LIMIT ' . (int) $limit;
|
||||
}
|
||||
|
||||
$sth = static::$pdo->prepare($query);
|
||||
|
||||
$sth->execute($filters);
|
||||
|
||||
return $sth->fetchAll();
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* Find user by username
|
||||
*
|
||||
* @param string $username
|
||||
* @return User|NULL
|
||||
*/
|
||||
public static function findByUsername($username)
|
||||
{
|
||||
$st = static::$pdo->prepare('SELECT id FROM user WHERE username = ?');
|
||||
$st->bindParam(1, $username, \PDO::PARAM_STR);
|
||||
|
||||
if ($st->execute()) {
|
||||
$id = $st->fetchColumn();
|
||||
|
||||
if ($id) {
|
||||
$user = new static(static::$pdo);
|
||||
$user->load($id);
|
||||
|
||||
return $user;
|
||||
}
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
/**
|
||||
* Find user by email
|
||||
*
|
||||
* @param string $email
|
||||
* @return User|NULL
|
||||
*/
|
||||
public static function findByEmail($email)
|
||||
{
|
||||
|
||||
$st = static::$pdo->prepare('SELECT id FROM user WHERE email = ?');
|
||||
$st->bindParam(1, $email, \PDO::PARAM_STR);
|
||||
|
||||
if ($st->execute()) {
|
||||
$id = $st->fetchColumn();
|
||||
|
||||
if ($id) {
|
||||
$user = new static(static::$pdo);
|
||||
|
||||
return $user->load($id);
|
||||
}
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
/**
|
||||
* Find user by auth key
|
||||
*
|
||||
* @param string $token
|
||||
* @return User|NULL
|
||||
*/
|
||||
public static function findByAuthKey($token)
|
||||
{
|
||||
$st = static::$pdo->prepare('SELECT id FROM `user` WHERE `auth_key` = ?');
|
||||
|
||||
if ($st->execute([$token])) {
|
||||
$id = $st->fetchColumn();
|
||||
|
||||
if ($id) {
|
||||
$user = new static(static::$pdo);
|
||||
$user->load($id);
|
||||
|
||||
return $user;
|
||||
}
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
/**
|
||||
* Validate password
|
||||
*
|
||||
* @param string $password
|
||||
* @return boolean
|
||||
*/
|
||||
public function validatePassword($password)
|
||||
{
|
||||
return $this->password == sha1($password);
|
||||
}
|
||||
|
||||
/**
|
||||
* Find user by Id
|
||||
*
|
||||
* @param int $id
|
||||
* @return User|NULL
|
||||
*/
|
||||
public static function findIdentity($id)
|
||||
{
|
||||
try {
|
||||
$user = new static(static::$pdo);
|
||||
|
||||
return $user->load($id);
|
||||
} catch (\RuntimeException $e) {
|
||||
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
/**
|
||||
* {@inheritDoc}
|
||||
* @see \piko\IdentityInterface::getId()
|
||||
*/
|
||||
public function getId()
|
||||
{
|
||||
return $this->id;
|
||||
}
|
||||
|
||||
/**
|
||||
* Get absolute base Url
|
||||
*
|
||||
* @return string
|
||||
*/
|
||||
protected function getAbsoluteBaseUrl()
|
||||
{
|
||||
$protocol = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http';
|
||||
|
||||
return "$protocol://{$_SERVER['HTTP_HOST']}";
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user