91 lines
		
	
	
		
			2.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			91 lines
		
	
	
		
			2.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| 
 | |
| namespace kernel\modules\secure\controllers;
 | |
| 
 | |
| use JetBrains\PhpStorm\NoReturn;
 | |
| use kernel\AdminController;
 | |
| use kernel\Flash;
 | |
| use kernel\helpers\Debug;
 | |
| use kernel\modules\secure\models\forms\LoginForm;
 | |
| use kernel\modules\secure\models\forms\RegisterForm;
 | |
| use kernel\modules\user\service\UserService;
 | |
| 
 | |
| class SecureController extends AdminController
 | |
| {
 | |
|     protected UserService $userService;
 | |
| 
 | |
|     protected function init(): void
 | |
|     {
 | |
|         parent::init();
 | |
|         $this->cgView->viewPath = KERNEL_MODULES_DIR. "/secure/views/";
 | |
|         $this->cgView->layout = "/login.php";
 | |
|         $this->userService = new UserService();
 | |
|     }
 | |
| 
 | |
|     public function actionLogin(): void
 | |
|     {
 | |
|         $this->cgView->render('login.php');
 | |
|     }
 | |
| 
 | |
|     #[NoReturn] public function actionAuth(): void
 | |
|     {
 | |
|         $loginForm = new LoginForm();
 | |
|         $loginForm->load($_REQUEST);
 | |
| 
 | |
|         if(filter_var($loginForm->getItem("username"), FILTER_VALIDATE_EMAIL)) {
 | |
|             $field = "email";
 | |
|         }
 | |
|         else {
 | |
|             $field = "username";
 | |
|         }
 | |
| 
 | |
|         $user = $this->userService->getByField($field, $loginForm->getItem("username"));
 | |
|         if (!$user){
 | |
|             Flash::setMessage("error", "User not found.");
 | |
|             $this->redirect("/admin/login", code: 302);
 | |
|         }
 | |
| 
 | |
|         if (password_verify($loginForm->getItem("password"), $user->password_hash)) {
 | |
|             setcookie('user_id', $user->id, time()+60*60*24, '/', $_SERVER['SERVER_NAME'], false);
 | |
|             $this->redirect("/admin", code: 302);
 | |
|         } else {
 | |
|             Flash::setMessage("error", "Username or password incorrect.");
 | |
|             $this->redirect("/admin/login", code: 302);
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     #[NoReturn] public function actionLogout(): void
 | |
|     {
 | |
|         unset($_COOKIE['user_id']);
 | |
|         setcookie('user_id', "", -1, '/', ".".$_SERVER['SERVER_NAME'], false);
 | |
|         $this->redirect("/", code: 302);
 | |
|     }
 | |
| 
 | |
|     public function actionRegister()
 | |
|     {
 | |
|         $this->cgView->render('register.php');
 | |
|     }
 | |
| 
 | |
|     public function actionRegistration(): void
 | |
|     {
 | |
|         $regForm = new RegisterForm();
 | |
|         $regForm->load($_REQUEST);
 | |
| 
 | |
|         if ($this->userService->getByField('username', $regForm->getItem("username"))) {
 | |
|             Flash::setMessage("error", "Username already exists.");
 | |
|             $this->redirect("/admin/register", code: 302);
 | |
|         }
 | |
| 
 | |
|         if ($this->userService->getByField('email', $regForm->getItem("email"))) {
 | |
|             Flash::setMessage("error", "Email already exists.");
 | |
|             $this->redirect("/admin/register", code: 302);
 | |
|         }
 | |
| 
 | |
|         $user = $this->userService->create($regForm);
 | |
|         if ($user){
 | |
|             setcookie('user_id', $user->id, time()+60*60*24, '/', $_SERVER['SERVER_NAME'], false);
 | |
|             $this->redirect("/admin", code: 302);
 | |
|         }
 | |
|     }
 | |
| 
 | |
| } |