pakerpale/cm-app-services2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial import from local backup (Documents-Playground/pakerpale)

Browse Source
This commit is contained in:
jeonghwa
2026-07-03 05:27:38 +09:00
commit 1bf24f7d86
79 changed files with 9869 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

60
application/controllers/api/admin.php Normal file
View File

@@ -0,0 +1,60 @@
<?php defined('BASEPATH') or exit('No direct script access allowed');
require APPPATH . '/libraries/REST_Controller.php';
class Admin extends REST_Controller
{
public function __construct()
{
parent::__construct();
$this->load->library('session');
}
public function login_get()
{
if ($login = $this->get('login')) {
parse_str(base64_decode($login), $user);
$this->session->set_userdata($user);
if($this->session->userdata('username')) {
header('location:'. ($this->get('redirect') ? $this->get('redirect') : '/'));
}
}
}
private function loginCheck() {
return $this->session->userdata('username');
}
public function station_schedule_get()
{
if ($this->loginCheck()) {
$this->load->model('station_schedule_model');
if(!$this->get('categoryId') || !$this->get('dayName')) {
$this->res(402, 'Preconfigure required');
}else {
$schedules = $this->station_schedule_model->findSchedulesByCategoryIdAndDayName($this->get('categoryId'), $this->get('dayName'))->result();
$this->res(200, 'Success', $schedules);
}
} else {
$this->res(401, 'Not authorized');
}
}
public function station_schedule_post()
{
if ($this->loginCheck()) {
$this->load->model('station_schedule_model');
if(!$this->post('categoryId') || !$this->post('dayName') || !$this->post('data')) {
$this->res(402, 'Preconfigure required');
}else {
$schedules = $this->station_schedule_model
->insertSchedules($this->post('categoryId'), $this->post('dayName'), json_decode($this->post('data'), true));
$this->res(200, 'Success', $schedules);
}
} else {
$this->res(401, 'Not authorized');
}
}
}

228
application/controllers/api/auth.php Normal file
View File

@@ -0,0 +1,228 @@
<?php defined('BASEPATH') or exit('No direct script access allowed');
/**
* Keys Controller
*
* This is a basic Key Management REST controller to make and delete keys.
*
* @package CodeIgniter
* @subpackage Rest Server
* @category Controller
* @author Phil Sturgeon
* @link http://philsturgeon.co.uk/code/
*/
// This can be removed if you use __autoload() in config.php
require APPPATH . '/libraries/REST_Controller.php';
class Auth extends REST_Controller
{
protected $methods = array(
'index_put' => array('level' => 10, 'limit' => 10),
'index_delete' => array('level' => 10),
'level_post' => array('level' => 10),
'regenerate_post' => array('level' => 10),
);
/**
* Key Create
*
* Insert a key into the database.
*
* @access public
* @return void
*/
public function login_post()
{
if ($this->_check_login($this->request->body->username, $this->request->body->userpass)) {
$key = self::_generate_key();
$level = $this->put('level') ? $this->put('level') : 1;
$ignore_limits = $this->put('ignore_limits') ? $this->put('ignore_limits') : 1;
$this->rest->db->where('username', $this->request->body->username)->delete(config_item('rest_keys_table'));
if (self::_insert_key($key, array('level' => $level, 'ignore_limits' => $ignore_limits, 'username' => $this->request->body->username))) {
$this->res(200, 'Success', array('accessToken' => $key)); // 201 = Created
}
} else {
$this->res(403, 'Invalid Username and Password');
}
}
// --------------------------------------------------------------------
/**
* Key Delete
*
* Remove a key from the database to stop it working.
*
* @access public
* @return void
*/
public function index_delete()
{
$key = $this->delete('key');
// Does this key even exist?
if (!self::_key_exists($key)) {
// NOOOOOOOOO!
$this->response(array('status' => 0, 'error' => 'Invalid API Key.'), 400);
}
// Kill it
self::_delete_key($key);
// Tell em we killed it
$this->response(array('status' => 1, 'success' => 'API Key was deleted.'), 200);
}
// --------------------------------------------------------------------
/**
* Update Key
*
* Change the level
*
* @access public
* @return void
*/
public function level_post()
{
$key = $this->post('key');
$new_level = $this->post('level');
// Does this key even exist?
if (!self::_key_exists($key)) {
// NOOOOOOOOO!
$this->response(array('error' => 'Invalid API Key.'), 400);
}
// Update the key level
if (self::_update_key($key, array('level' => $new_level))) {
$this->response(array('status' => 1, 'success' => 'API Key was updated.'), 200); // 200 = OK
} else {
$this->response(array('status' => 0, 'error' => 'Could not update the key level.'), 500); // 500 = Internal Server Error
}
}
// --------------------------------------------------------------------
/**
* Update Key
*
* Change the level
*
* @access public
* @return void
*/
public function suspend_post()
{
$key = $this->post('key');
// Does this key even exist?
if (!self::_key_exists($key)) {
// NOOOOOOOOO!
$this->response(array('error' => 'Invalid API Key.'), 400);
}
// Update the key level
if (self::_update_key($key, array('level' => 0))) {
$this->response(array('status' => 1, 'success' => 'Key was suspended.'), 200); // 200 = OK
} else {
$this->response(array('status' => 0, 'error' => 'Could not suspend the user.'), 500); // 500 = Internal Server Error
}
}
// --------------------------------------------------------------------
/**
* Regenerate Key
*
* Remove a key from the database to stop it working.
*
* @access public
* @return void
*/
public function regenerate_post()
{
$old_key = $this->post('key');
$key_details = self::_get_key($old_key);
// The key wasnt found
if (!$key_details) {
// NOOOOOOOOO!
$this->response(array('status' => 0, 'error' => 'Invalid API Key.'), 400);
}
// Build a new key
$new_key = self::_generate_key();
// Insert the new key
if (self::_insert_key($new_key, array('level' => $key_details->level, 'ignore_limits' => $key_details->ignore_limits))) {
// Suspend old key
self::_update_key($old_key, array('level' => 0));
$this->response(array('status' => 1, 'key' => $new_key), 201); // 201 = Created
} else {
$this->response(array('status' => 0, 'error' => 'Could not save the key.'), 500); // 500 = Internal Server Error
}
}
// --------------------------------------------------------------------
/* Helper Methods */
private function _generate_key()
{
$this->load->helper('security');
do {
$salt = do_hash(time() . mt_rand());
$new_key = substr($salt, 0, config_item('rest_key_length'));
}
// Already in the DB? Fail. Try again
while (self::_key_exists($new_key));
return $new_key;
}
// --------------------------------------------------------------------
/* Private Data Methods */
private function _get_key($key)
{
return $this->rest->db->where('key', $key)->get(config_item('rest_keys_table'))->row();
}
// --------------------------------------------------------------------
private function _key_exists($key)
{
return $this->rest->db->where('key', $key)->count_all_results(config_item('rest_keys_table')) > 0;
}
// --------------------------------------------------------------------
private function _insert_key($key, $data)
{
$data['key'] = $key;
$data['date_created'] = function_exists('now') ? now() : time();
return $this->rest->db->set($data)->insert(config_item('rest_keys_table'));
}
// --------------------------------------------------------------------
private function _update_key($key, $data)
{
return $this->rest->db->where('key', $key)->update(config_item('rest_keys_table'), $data);
}
// --------------------------------------------------------------------
private function _delete_key($key)
{
return $this->rest->db->where('key', $key)->delete(config_item('rest_keys_table'));
}
}

54
application/controllers/api/radio.php Normal file
View File

@@ -0,0 +1,54 @@
<?php defined('BASEPATH') or exit('No direct script access allowed');
require APPPATH . '/libraries/REST_Controller.php';
class Radio extends REST_Controller
{
private $tokenChecked;
public function __construct()
{
parent::__construct();
$this->load->library('RadioService', array(), 'radioService');
$this->tokenChecked = $this->radioService->checkToken();
}
public function index_get()
{
echo 'Invalid Access';
}
public function schedule_get()
{
if (is_null($this->tokenChecked)) {
$this->res(200, 'Success', $this->radioService->getSchedule($this->get('categoryId'), $this->get('day')));
} else if ($this->tokenChecked == 402) {
$this->res(402, 'Token expired');
} else if ($this->tokenChecked == 401){
$this->res(401, 'error');
}
}
public function category_get()
{
if (is_null($this->tokenChecked)) {
$this->res(200, 'Success', $this->radioService->getCategory($this->radioService->getAppId($this->get('appId'))));
} else if ($this->tokenChecked == 402) {
$this->res(402, 'Token expired');
} else if ($this->tokenChecked == 401){
$this->res(401, 'error');
}
}
public function app_get()
{
if (is_null($this->tokenChecked)) {
$this->res(200, 'Success', $this->radioService->getApp($this->radioService->getAppId($this->get('appId'))));
} else if ($this->tokenChecked == 402) {
$this->res(402, 'Token expired');
} else if ($this->tokenChecked == 401){
$this->res(401, 'error');
}
}
}

866
application/controllers/auth.php Normal file
View File

@@ -0,0 +1,866 @@
<?php defined('BASEPATH') OR exit('No direct script access allowed');
/**
* Class Auth
* @property Ion_auth|Ion_auth_model $ion_auth The ION Auth spark
* @property CI_Form_validation $form_validation The form validation library
*/
class Auth extends MY_Controller
{
public function __construct()
{
parent::__construct();
$this->load->database();
$this->load->library(array('ion_auth', 'form_validation'));
$this->load->helper(array('url', 'language'));
$this->form_validation->set_error_delimiters($this->config->item('error_start_delimiter', 'ion_auth'), $this->config->item('error_end_delimiter', 'ion_auth'));
$this->lang->load('auth');
}
/**
* Redirect if needed, otherwise display the user list
*/
public function index()
{
if (!$this->ion_auth->logged_in())
{
// redirect them to the login page
redirect('auth/login', 'refresh');
}
else if (!$this->ion_auth->is_admin()) // remove this elseif if you want to enable this for non-admins
{
// redirect them to the home page because they must be an administrator to view this
return show_error('You must be an administrator to view this page.');
}
else
{
// set the flash data error message if there is one
$this->data['message'] = (validation_errors()) ? validation_errors() : $this->session->flashdata('message');
//list the users
$this->data['users'] = $this->ion_auth->users()->result();
foreach ($this->data['users'] as $k => $user)
{
$this->data['users'][$k]->groups = $this->ion_auth->get_users_groups($user->id)->result();
}
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'index', $this->data);
}
}
/**
* Log the user in
*/
public function login()
{
$this->data['title'] = $this->lang->line('login_heading');
// validate form input
$this->form_validation->set_rules('identity', str_replace(':', '', $this->lang->line('login_identity_label')), 'required');
$this->form_validation->set_rules('password', str_replace(':', '', $this->lang->line('login_password_label')), 'required');
if ($this->form_validation->run() === TRUE)
{
// check to see if the user is logging in
// check for "remember me"
$remember = (bool)$this->input->post('remember');
if ($this->ion_auth->login($this->input->post('identity'), $this->input->post('password'), $remember))
{
//if the login is successful
//redirect them back to the home page
$this->session->set_flashdata('message', $this->ion_auth->messages());
redirect('/', 'refresh');
}
else
{
// if the login was un-successful
// redirect them back to the login page
$this->session->set_flashdata('message', $this->ion_auth->errors());
redirect('auth/login', 'refresh'); // use redirects instead of loading views for compatibility with MY_Controller libraries
}
}
else
{
// the user is not logging in so display the login page
// set the flash data error message if there is one
$this->data['message'] = (validation_errors()) ? validation_errors() : $this->session->flashdata('message');
$this->data['identity'] = array('name' => 'identity',
'id' => 'identity',
'type' => 'text',
'value' => $this->form_validation->set_value('identity'),
);
$this->data['password'] = array('name' => 'password',
'id' => 'password',
'type' => 'password',
);
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'login', $this->data);
}
}
/**
* Log the user out
*/
public function logout()
{
$this->data['title'] = "Logout";
// log the user out
$logout = $this->ion_auth->logout();
// redirect them to the login page
$this->session->set_flashdata('message', $this->ion_auth->messages());
redirect('auth/login', 'refresh');
}
/**
* Change password
*/
public function change_password()
{
$this->form_validation->set_rules('old', $this->lang->line('change_password_validation_old_password_label'), 'required');
$this->form_validation->set_rules('new', $this->lang->line('change_password_validation_new_password_label'), 'required|min_length[' . $this->config->item('min_password_length', 'ion_auth') . ']|max_length[' . $this->config->item('max_password_length', 'ion_auth') . ']|matches[new_confirm]');
$this->form_validation->set_rules('new_confirm', $this->lang->line('change_password_validation_new_password_confirm_label'), 'required');
if (!$this->ion_auth->logged_in())
{
redirect('auth/login', 'refresh');
}
$user = $this->ion_auth->user()->row();
if ($this->form_validation->run() === FALSE)
{
// display the form
// set the flash data error message if there is one
$this->data['message'] = (validation_errors()) ? validation_errors() : $this->session->flashdata('message');
$this->data['min_password_length'] = $this->config->item('min_password_length', 'ion_auth');
$this->data['old_password'] = array(
'name' => 'old',
'id' => 'old',
'type' => 'password',
);
$this->data['new_password'] = array(
'name' => 'new',
'id' => 'new',
'type' => 'password',
'pattern' => '^.{' . $this->data['min_password_length'] . '}.*$',
);
$this->data['new_password_confirm'] = array(
'name' => 'new_confirm',
'id' => 'new_confirm',
'type' => 'password',
'pattern' => '^.{' . $this->data['min_password_length'] . '}.*$',
);
$this->data['user_id'] = array(
'name' => 'user_id',
'id' => 'user_id',
'type' => 'hidden',
'value' => $user->id,
);
// render
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'change_password', $this->data);
}
else
{
$identity = $this->session->userdata('identity');
$change = $this->ion_auth->change_password($identity, $this->input->post('old'), $this->input->post('new'));
if ($change)
{
//if the password was successfully changed
$this->session->set_flashdata('message', $this->ion_auth->messages());
$this->logout();
}
else
{
$this->session->set_flashdata('message', $this->ion_auth->errors());
redirect('auth/change_password', 'refresh');
}
}
}
/**
* Forgot password
*/
public function forgot_password()
{
// setting validation rules by checking whether identity is username or email
if ($this->config->item('identity', 'ion_auth') != 'email')
{
$this->form_validation->set_rules('identity', $this->lang->line('forgot_password_identity_label'), 'required');
}
else
{
$this->form_validation->set_rules('identity', $this->lang->line('forgot_password_validation_email_label'), 'required|valid_email');
}
if ($this->form_validation->run() === FALSE)
{
$this->data['type'] = $this->config->item('identity', 'ion_auth');
// setup the input
$this->data['identity'] = array('name' => 'identity',
'id' => 'identity',
);
if ($this->config->item('identity', 'ion_auth') != 'email')
{
$this->data['identity_label'] = $this->lang->line('forgot_password_identity_label');
}
else
{
$this->data['identity_label'] = $this->lang->line('forgot_password_email_identity_label');
}
// set any errors and display the form
$this->data['message'] = (validation_errors()) ? validation_errors() : $this->session->flashdata('message');
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'forgot_password', $this->data);
}
else
{
$identity_column = $this->config->item('identity', 'ion_auth');
$identity = $this->ion_auth->where($identity_column, $this->input->post('identity'))->users()->row();
if (empty($identity))
{
if ($this->config->item('identity', 'ion_auth') != 'email')
{
$this->ion_auth->set_error('forgot_password_identity_not_found');
}
else
{
$this->ion_auth->set_error('forgot_password_email_not_found');
}
$this->session->set_flashdata('message', $this->ion_auth->errors());
redirect("auth/forgot_password", 'refresh');
}
// run the forgotten password method to email an activation code to the user
$forgotten = $this->ion_auth->forgotten_password($identity->{$this->config->item('identity', 'ion_auth')});
if ($forgotten)
{
// if there were no errors
$this->session->set_flashdata('message', $this->ion_auth->messages());
redirect("auth/login", 'refresh'); //we should display a confirmation page here instead of the login page
}
else
{
$this->session->set_flashdata('message', $this->ion_auth->errors());
redirect("auth/forgot_password", 'refresh');
}
}
}
/**
* Reset password - final step for forgotten password
*
* @param string|null $code The reset code
*/
public function reset_password($code = NULL)
{
if (!$code)
{
show_404();
}
$user = $this->ion_auth->forgotten_password_check($code);
if ($user)
{
// if the code is valid then display the password reset form
$this->form_validation->set_rules('new', $this->lang->line('reset_password_validation_new_password_label'), 'required|min_length[' . $this->config->item('min_password_length', 'ion_auth') . ']|max_length[' . $this->config->item('max_password_length', 'ion_auth') . ']|matches[new_confirm]');
$this->form_validation->set_rules('new_confirm', $this->lang->line('reset_password_validation_new_password_confirm_label'), 'required');
if ($this->form_validation->run() === FALSE)
{
// display the form
// set the flash data error message if there is one
$this->data['message'] = (validation_errors()) ? validation_errors() : $this->session->flashdata('message');
$this->data['min_password_length'] = $this->config->item('min_password_length', 'ion_auth');
$this->data['new_password'] = array(
'name' => 'new',
'id' => 'new',
'type' => 'password',
'pattern' => '^.{' . $this->data['min_password_length'] . '}.*$',
);
$this->data['new_password_confirm'] = array(
'name' => 'new_confirm',
'id' => 'new_confirm',
'type' => 'password',
'pattern' => '^.{' . $this->data['min_password_length'] . '}.*$',
);
$this->data['user_id'] = array(
'name' => 'user_id',
'id' => 'user_id',
'type' => 'hidden',
'value' => $user->id,
);
$this->data['csrf'] = $this->_get_csrf_nonce();
$this->data['code'] = $code;
// render
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'reset_password', $this->data);
}
else
{
// do we have a valid request?
if ($this->_valid_csrf_nonce() === FALSE || $user->id != $this->input->post('user_id'))
{
// something fishy might be up
$this->ion_auth->clear_forgotten_password_code($code);
show_error($this->lang->line('error_csrf'));
}
else
{
// finally change the password
$identity = $user->{$this->config->item('identity', 'ion_auth')};
$change = $this->ion_auth->reset_password($identity, $this->input->post('new'));
if ($change)
{
// if the password was successfully changed
$this->session->set_flashdata('message', $this->ion_auth->messages());
redirect("auth/login", 'refresh');
}
else
{
$this->session->set_flashdata('message', $this->ion_auth->errors());
redirect('auth/reset_password/' . $code, 'refresh');
}
}
}
}
else
{
// if the code is invalid then send them back to the forgot password page
$this->session->set_flashdata('message', $this->ion_auth->errors());
redirect("auth/forgot_password", 'refresh');
}
}
/**
* Activate the user
*
* @param int $id The user ID
* @param string|bool $code The activation code
*/
public function activate($id, $code = FALSE)
{
if ($code !== FALSE)
{
$activation = $this->ion_auth->activate($id, $code);
}
else if ($this->ion_auth->is_admin())
{
$activation = $this->ion_auth->activate($id);
}
if ($activation)
{
// redirect them to the auth page
$this->session->set_flashdata('message', $this->ion_auth->messages());
redirect("auth", 'refresh');
}
else
{
// redirect them to the forgot password page
$this->session->set_flashdata('message', $this->ion_auth->errors());
redirect("auth/forgot_password", 'refresh');
}
}
/**
* Deactivate the user
*
* @param int|string|null $id The user ID
*/
public function deactivate($id = NULL)
{
if (!$this->ion_auth->logged_in() || !$this->ion_auth->is_admin())
{
// redirect them to the home page because they must be an administrator to view this
return show_error('You must be an administrator to view this page.');
}
$id = (int)$id;
$this->load->library('form_validation');
$this->form_validation->set_rules('confirm', $this->lang->line('deactivate_validation_confirm_label'), 'required');
$this->form_validation->set_rules('id', $this->lang->line('deactivate_validation_user_id_label'), 'required|alpha_numeric');
if ($this->form_validation->run() === FALSE)
{
// insert csrf check
$this->data['csrf'] = $this->_get_csrf_nonce();
$this->data['user'] = $this->ion_auth->user($id)->row();
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'deactivate_user', $this->data);
}
else
{
// do we really want to deactivate?
if ($this->input->post('confirm') == 'yes')
{
// do we have a valid request?
if ($this->_valid_csrf_nonce() === FALSE || $id != $this->input->post('id'))
{
return show_error($this->lang->line('error_csrf'));
}
// do we have the right userlevel?
if ($this->ion_auth->logged_in() && $this->ion_auth->is_admin())
{
$this->ion_auth->deactivate($id);
}
}
// redirect them back to the auth page
redirect('auth', 'refresh');
}
}
/**
* Create a new user
*/
public function create_user()
{
$this->data['title'] = $this->lang->line('create_user_heading');
if (!$this->ion_auth->logged_in() || !$this->ion_auth->is_admin())
{
redirect('auth', 'refresh');
}
$tables = $this->config->item('tables', 'ion_auth');
$identity_column = $this->config->item('identity', 'ion_auth');
$this->data['identity_column'] = $identity_column;
// validate form input
$this->form_validation->set_rules('first_name', $this->lang->line('create_user_validation_fname_label'), 'trim|required');
$this->form_validation->set_rules('last_name', $this->lang->line('create_user_validation_lname_label'), 'trim|required');
if ($identity_column !== 'email')
{
$this->form_validation->set_rules('identity', $this->lang->line('create_user_validation_identity_label'), 'trim|required|is_unique[' . $tables['users'] . '.' . $identity_column . ']');
$this->form_validation->set_rules('email', $this->lang->line('create_user_validation_email_label'), 'trim|required|valid_email');
}
else
{
$this->form_validation->set_rules('email', $this->lang->line('create_user_validation_email_label'), 'trim|required|valid_email|is_unique[' . $tables['users'] . '.email]');
}
$this->form_validation->set_rules('phone', $this->lang->line('create_user_validation_phone_label'), 'trim');
$this->form_validation->set_rules('company', $this->lang->line('create_user_validation_company_label'), 'trim');
$this->form_validation->set_rules('password', $this->lang->line('create_user_validation_password_label'), 'required|min_length[' . $this->config->item('min_password_length', 'ion_auth') . ']|max_length[' . $this->config->item('max_password_length', 'ion_auth') . ']|matches[password_confirm]');
$this->form_validation->set_rules('password_confirm', $this->lang->line('create_user_validation_password_confirm_label'), 'required');
if ($this->form_validation->run() === TRUE)
{
$email = strtolower($this->input->post('email'));
$identity = ($identity_column === 'email') ? $email : $this->input->post('identity');
$password = $this->input->post('password');
$additional_data = array(
'first_name' => $this->input->post('first_name'),
'last_name' => $this->input->post('last_name'),
'company' => $this->input->post('company'),
'phone' => $this->input->post('phone'),
);
}
if ($this->form_validation->run() === TRUE && $this->ion_auth->register($identity, $password, $email, $additional_data))
{
// check to see if we are creating the user
// redirect them back to the admin page
$this->session->set_flashdata('message', $this->ion_auth->messages());
redirect("auth", 'refresh');
}
else
{
// display the create user form
// set the flash data error message if there is one
$this->data['message'] = (validation_errors() ? validation_errors() : ($this->ion_auth->errors() ? $this->ion_auth->errors() : $this->session->flashdata('message')));
$this->data['first_name'] = array(
'name' => 'first_name',
'id' => 'first_name',
'type' => 'text',
'value' => $this->form_validation->set_value('first_name'),
);
$this->data['last_name'] = array(
'name' => 'last_name',
'id' => 'last_name',
'type' => 'text',
'value' => $this->form_validation->set_value('last_name'),
);
$this->data['identity'] = array(
'name' => 'identity',
'id' => 'identity',
'type' => 'text',
'value' => $this->form_validation->set_value('identity'),
);
$this->data['email'] = array(
'name' => 'email',
'id' => 'email',
'type' => 'text',
'value' => $this->form_validation->set_value('email'),
);
$this->data['company'] = array(
'name' => 'company',
'id' => 'company',
'type' => 'text',
'value' => $this->form_validation->set_value('company'),
);
$this->data['phone'] = array(
'name' => 'phone',
'id' => 'phone',
'type' => 'text',
'value' => $this->form_validation->set_value('phone'),
);
$this->data['password'] = array(
'name' => 'password',
'id' => 'password',
'type' => 'password',
'value' => $this->form_validation->set_value('password'),
);
$this->data['password_confirm'] = array(
'name' => 'password_confirm',
'id' => 'password_confirm',
'type' => 'password',
'value' => $this->form_validation->set_value('password_confirm'),
);
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'create_user', $this->data);
}
}
/**
* Redirect a user checking if is admin
*/
public function redirectUser(){
if ($this->ion_auth->is_admin()){
redirect('auth', 'refresh');
}
redirect('/', 'refresh');
}
/**
* Edit a user
*
* @param int|string $id
*/
public function edit_user($id)
{
$this->data['title'] = $this->lang->line('edit_user_heading');
if (!$this->ion_auth->logged_in() || (!$this->ion_auth->is_admin() && !($this->ion_auth->user()->row()->id == $id)))
{
redirect('auth', 'refresh');
}
$user = $this->ion_auth->user($id)->row();
$groups = $this->ion_auth->groups()->result_array();
$currentGroups = $this->ion_auth->get_users_groups($id)->result();
// validate form input
$this->form_validation->set_rules('first_name', $this->lang->line('edit_user_validation_fname_label'), 'trim|required');
$this->form_validation->set_rules('last_name', $this->lang->line('edit_user_validation_lname_label'), 'trim|required');
$this->form_validation->set_rules('phone', $this->lang->line('edit_user_validation_phone_label'), 'trim|required');
$this->form_validation->set_rules('company', $this->lang->line('edit_user_validation_company_label'), 'trim|required');
if (isset($_POST) && !empty($_POST))
{
// do we have a valid request?
if ($this->_valid_csrf_nonce() === FALSE || $id != $this->input->post('id'))
{
show_error($this->lang->line('error_csrf'));
}
// update the password if it was posted
if ($this->input->post('password'))
{
$this->form_validation->set_rules('password', $this->lang->line('edit_user_validation_password_label'), 'required|min_length[' . $this->config->item('min_password_length', 'ion_auth') . ']|max_length[' . $this->config->item('max_password_length', 'ion_auth') . ']|matches[password_confirm]');
$this->form_validation->set_rules('password_confirm', $this->lang->line('edit_user_validation_password_confirm_label'), 'required');
}
if ($this->form_validation->run() === TRUE)
{
$data = array(
'first_name' => $this->input->post('first_name'),
'last_name' => $this->input->post('last_name'),
'company' => $this->input->post('company'),
'phone' => $this->input->post('phone'),
);
// update the password if it was posted
if ($this->input->post('password'))
{
$data['password'] = $this->input->post('password');
}
// Only allow updating groups if user is admin
if ($this->ion_auth->is_admin())
{
// Update the groups user belongs to
$groupData = $this->input->post('groups');
if (isset($groupData) && !empty($groupData))
{
$this->ion_auth->remove_from_group('', $id);
foreach ($groupData as $grp)
{
$this->ion_auth->add_to_group($grp, $id);
}
}
}
// check to see if we are updating the user
if ($this->ion_auth->update($user->id, $data))
{
// redirect them back to the admin page if admin, or to the base url if non admin
$this->session->set_flashdata('message', $this->ion_auth->messages());
$this->redirectUser();
}
else
{
// redirect them back to the admin page if admin, or to the base url if non admin
$this->session->set_flashdata('message', $this->ion_auth->errors());
$this->redirectUser();
}
}
}
// display the edit user form
$this->data['csrf'] = $this->_get_csrf_nonce();
// set the flash data error message if there is one
$this->data['message'] = (validation_errors() ? validation_errors() : ($this->ion_auth->errors() ? $this->ion_auth->errors() : $this->session->flashdata('message')));
// pass the user to the view
$this->data['user'] = $user;
$this->data['groups'] = $groups;
$this->data['currentGroups'] = $currentGroups;
$this->data['first_name'] = array(
'name' => 'first_name',
'id' => 'first_name',
'type' => 'text',
'value' => $this->form_validation->set_value('first_name', $user->first_name),
);
$this->data['last_name'] = array(
'name' => 'last_name',
'id' => 'last_name',
'type' => 'text',
'value' => $this->form_validation->set_value('last_name', $user->last_name),
);
$this->data['company'] = array(
'name' => 'company',
'id' => 'company',
'type' => 'text',
'value' => $this->form_validation->set_value('company', $user->company),
);
$this->data['phone'] = array(
'name' => 'phone',
'id' => 'phone',
'type' => 'text',
'value' => $this->form_validation->set_value('phone', $user->phone),
);
$this->data['password'] = array(
'name' => 'password',
'id' => 'password',
'type' => 'password'
);
$this->data['password_confirm'] = array(
'name' => 'password_confirm',
'id' => 'password_confirm',
'type' => 'password'
);
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'edit_user', $this->data);
}
/**
* Create a new group
*/
public function create_group()
{
$this->data['title'] = $this->lang->line('create_group_title');
if (!$this->ion_auth->logged_in() || !$this->ion_auth->is_admin())
{
redirect('auth', 'refresh');
}
// validate form input
$this->form_validation->set_rules('group_name', $this->lang->line('create_group_validation_name_label'), 'trim|required|alpha_dash');
if ($this->form_validation->run() === TRUE)
{
$new_group_id = $this->ion_auth->create_group($this->input->post('group_name'), $this->input->post('description'));
if ($new_group_id)
{
// check to see if we are creating the group
// redirect them back to the admin page
$this->session->set_flashdata('message', $this->ion_auth->messages());
redirect("auth", 'refresh');
}
}
else
{
// display the create group form
// set the flash data error message if there is one
$this->data['message'] = (validation_errors() ? validation_errors() : ($this->ion_auth->errors() ? $this->ion_auth->errors() : $this->session->flashdata('message')));
$this->data['group_name'] = array(
'name' => 'group_name',
'id' => 'group_name',
'type' => 'text',
'value' => $this->form_validation->set_value('group_name'),
);
$this->data['description'] = array(
'name' => 'description',
'id' => 'description',
'type' => 'text',
'value' => $this->form_validation->set_value('description'),
);
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'create_group', $this->data);
}
}
/**
* Edit a group
*
* @param int|string $id
*/
public function edit_group($id)
{
// bail if no group id given
if (!$id || empty($id))
{
redirect('auth', 'refresh');
}
$this->data['title'] = $this->lang->line('edit_group_title');
if (!$this->ion_auth->logged_in() || !$this->ion_auth->is_admin())
{
redirect('auth', 'refresh');
}
$group = $this->ion_auth->group($id)->row();
// validate form input
$this->form_validation->set_rules('group_name', $this->lang->line('edit_group_validation_name_label'), 'required|alpha_dash');
if (isset($_POST) && !empty($_POST))
{
if ($this->form_validation->run() === TRUE)
{
$group_update = $this->ion_auth->update_group($id, $_POST['group_name'], $_POST['group_description']);
if ($group_update)
{
$this->session->set_flashdata('message', $this->lang->line('edit_group_saved'));
}
else
{
$this->session->set_flashdata('message', $this->ion_auth->errors());
}
redirect("auth", 'refresh');
}
}
// set the flash data error message if there is one
$this->data['message'] = (validation_errors() ? validation_errors() : ($this->ion_auth->errors() ? $this->ion_auth->errors() : $this->session->flashdata('message')));
// pass the user to the view
$this->data['group'] = $group;
$readonly = $this->config->item('admin_group', 'ion_auth') === $group->name ? 'readonly' : '';
$this->data['group_name'] = array(
'name' => 'group_name',
'id' => 'group_name',
'type' => 'text',
'value' => $this->form_validation->set_value('group_name', $group->name),
$readonly => $readonly,
);
$this->data['group_description'] = array(
'name' => 'group_description',
'id' => 'group_description',
'type' => 'text',
'value' => $this->form_validation->set_value('group_description', $group->description),
);
$this->_render_page('auth' . DIRECTORY_SEPARATOR . 'edit_group', $this->data);
}
/**
* @return array A CSRF key-value pair
*/
public function _get_csrf_nonce()
{
$this->load->helper('string');
$key = random_string('alnum', 8);
$value = random_string('alnum', 20);
$this->session->set_flashdata('csrfkey', $key);
$this->session->set_flashdata('csrfvalue', $value);
return array($key => $value);
}
/**
* @return bool Whether the posted CSRF token matches
*/
public function _valid_csrf_nonce(){
$csrfkey = $this->input->post($this->session->flashdata('csrfkey'));
if ($csrfkey && $csrfkey === $this->session->flashdata('csrfvalue')){
return TRUE;
}
return FALSE;
}
/**
* @param string $view
* @param array|null $data
* @param bool $returnhtml
*
* @return mixed
*/
public function _render_page($view, $data = NULL, $returnhtml = FALSE)//I think this makes more sense
{
$this->viewdata = (empty($data)) ? $this->data : $data;
$view_html = $this->load->view($view, $this->viewdata, $returnhtml);
// This will return html on 3rd argument being true
if ($returnhtml)
{
return $view_html;
}
}
}

10
application/controllers/index.html Normal file
View File

@@ -0,0 +1,10 @@
<html>
<head>
<title>403 Forbidden</title>
</head>
<body>
<p>Directory access is forbidden.</p>
</body>
</html>

27
application/controllers/welcome.php Normal file
View File

@@ -0,0 +1,27 @@
<?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');
class Welcome extends MY_Controller {
/**
* Index Page for this controller.
*
* Maps to the following URL
* http://example.com/index.php/welcome
* - or -
* http://example.com/index.php/welcome/index
* - or -
* Since this controller is set as the default controller in
* config/routes.php, it's displayed at http://example.com/
*
* So any other public methods not prefixed with an underscore will
* map to /index.php/welcome/<method_name>
* @see http://codeigniter.com/user_guide/general/urls.html
*/
public function index()
{
$this->load->view('welcome_message');
}
}
/* End of file welcome.php */
/* Location: ./application/controllers/welcome.php */