@@ -1,715 +1,718 | |||||
1 | <?php |
|
1 | <?php | |
2 | class UsersController extends ControllerBase{ |
|
2 | class UsersController extends ControllerBase{ | |
3 |
|
3 | |||
4 | public function ingresar(){ |
|
4 | public function ingresar(){ | |
5 |
|
5 | |||
6 | if(isset($_SESSION['usersession']['iduser'])){ |
|
6 | if(isset($_SESSION['usersession']['iduser'])){ | |
7 | require 'models/UsersModel.php'; |
|
7 | require 'models/UsersModel.php'; | |
8 |
|
8 | |||
9 | $user = new UsersModel(); |
|
9 | $user = new UsersModel(); | |
10 | $session = new SessionsModel(); |
|
10 | $session = new SessionsModel(); | |
11 |
|
11 | |||
12 | $datos_validados = $user->obtenerUsuarioxId($_SESSION['usersession']['iduser']); |
|
12 | $datos_validados = $user->obtenerUsuarioxId($_SESSION['usersession']['iduser']); | |
13 | $datos_session_validados = $session->validarSession($_SESSION['usersession']['iduser']); |
|
13 | $datos_session_validados = $session->validarSession($_SESSION['usersession']['iduser']); | |
14 |
|
14 | |||
15 | $datos_usuario = $datos_validados->fetch(); |
|
15 | $datos_usuario = $datos_validados->fetch(); | |
16 | $datos_session = $datos_session_validados->fetch(); |
|
16 | $datos_session = $datos_session_validados->fetch(); | |
17 |
|
17 | |||
18 | if(is_array($datos_usuario) && is_array($datos_session) && ($datos_usuario['usertype'] == 2) ){ |
|
18 | if(is_array($datos_usuario) && is_array($datos_session) && ($datos_usuario['usertype'] == 2) ){ | |
19 | //$resultado_log = $items->registrarLogIngreso($datos_usuario["id_usu"]); ///??? |
|
19 | //$resultado_log = $items->registrarLogIngreso($datos_usuario["id_usu"]); ///??? | |
20 | //require 'components'.DS.'com_messages'.DS.'models'.DS.'MailBoxesModel.php'; |
|
20 | //require 'components'.DS.'com_messages'.DS.'models'.DS.'MailBoxesModel.php'; | |
21 |
|
21 | |||
22 | $date_last_activity = new DateTime(date("Y-m-d H:i:s")); |
|
22 | $date_last_activity = new DateTime(date("Y-m-d H:i:s")); | |
23 |
|
23 | |||
24 | //$mailbox = new MailBoxesModel(); |
|
24 | //$mailbox = new MailBoxesModel(); | |
25 |
|
25 | |||
26 | //$rs_boxes = $mailbox->getMailBoxesSystem($datos_usuario['iduser']); |
|
26 | //$rs_boxes = $mailbox->getMailBoxesSystem($datos_usuario['iduser']); | |
27 |
|
27 | |||
28 | //$idtypemb = 1; |
|
28 | //$idtypemb = 1; | |
29 | //$rsMailBox = $mailbox->getMailBoxType($datos_usuario['iduser'], $idtypemb); |
|
29 | //$rsMailBox = $mailbox->getMailBoxType($datos_usuario['iduser'], $idtypemb); | |
30 | //$datosMailBox = $rsMailBox->fetch(); |
|
30 | //$datosMailBox = $rsMailBox->fetch(); | |
31 |
|
31 | |||
32 | //$lista_mensajes = $mailbox->getMessagesNoRead($datosMailBox['idmailbox']); |
|
32 | //$lista_mensajes = $mailbox->getMessagesNoRead($datosMailBox['idmailbox']); | |
33 | //$idmailbox = $datosMailBox['idmailbox']; |
|
33 | //$idmailbox = $datosMailBox['idmailbox']; | |
34 |
|
34 | |||
35 | $_SESSION['usersession']['attempt'] = 0; |
|
35 | $_SESSION['usersession']['attempt'] = 0; | |
36 | $_SESSION['usersession']['iduser'] = $datos_usuario['iduser']; |
|
36 | $_SESSION['usersession']['iduser'] = $datos_usuario['iduser']; | |
37 | $_SESSION['usersession']['date_last_activity'] = $date_last_activity->format("Y-m-d H:i:s") ; |
|
37 | $_SESSION['usersession']['date_last_activity'] = $date_last_activity->format("Y-m-d H:i:s") ; | |
38 | $_SESSION['usersession']['idsession'] = $datos_session['idsession']; |
|
38 | $_SESSION['usersession']['idsession'] = $datos_session['idsession']; | |
39 |
|
39 | |||
40 | $datos['idsession'] = $datos_session['idsession']; |
|
40 | $datos['idsession'] = $datos_session['idsession']; | |
41 | $datos['date_last_activity'] = $date_last_activity->format("Y-m-d H:i:s") ; |
|
41 | $datos['date_last_activity'] = $date_last_activity->format("Y-m-d H:i:s") ; | |
42 |
|
42 | |||
43 | if($datos_usuario['state'] == 1){ |
|
43 | if($datos_usuario['state'] == 1){ | |
44 | $data['datos_usuario'] = $datos_usuario; |
|
44 | $data['datos_usuario'] = $datos_usuario; | |
45 | $data['inicio'] = 0; |
|
45 | $data['inicio'] = 0; | |
46 | //$data['rs_boxes'] = $rs_boxes; |
|
46 | //$data['rs_boxes'] = $rs_boxes; | |
47 | //$data['lista_mensajes'] = $lista_mensajes; |
|
47 | //$data['lista_mensajes'] = $lista_mensajes; | |
48 | //$data['idmailbox'] = $idmailbox; |
|
48 | //$data['idmailbox'] = $idmailbox; | |
49 | $data['content'] = "components".DS."com_users".DS."views".DS."home.php"; |
|
49 | $data['content'] = "components".DS."com_users".DS."views".DS."home.php"; | |
50 | $data['title'] = "WELCOME:::::::::::::"; |
|
50 | $data['title'] = "WELCOME:::::::::::::"; | |
51 |
|
51 | |||
52 | $this->view->show("template.php", $data); |
|
52 | $this->view->show("template.php", $data); | |
53 | }else{ |
|
53 | }else{ | |
54 | $data = array(); |
|
54 | $data = array(); | |
55 | $data['xin'] = ''; |
|
55 | $data['xin'] = ''; | |
56 | $data['forget'] = 'no'; |
|
56 | $data['forget'] = 'no'; | |
57 | $data['force'] = 'yes'; |
|
57 | $data['force'] = 'yes'; | |
58 |
|
58 | |||
59 | $this->view->show("usersNewPasswordForm.php", $data); |
|
59 | $this->view->show("usersNewPasswordForm.php", $data); | |
60 | } |
|
60 | } | |
61 | }else{ |
|
61 | }else{ | |
62 | $data = array(); |
|
62 | $data = array(); | |
63 | $this->view->show("login.php", $data); |
|
63 | $this->view->show("login.php", $data); | |
64 | } |
|
64 | } | |
65 | }else{ |
|
65 | }else{ | |
66 | $data = array(); |
|
66 | $data = array(); | |
67 | $this->view->show("login.php", $data); |
|
67 | $this->view->show("login.php", $data); | |
68 | } |
|
68 | } | |
69 | } |
|
69 | } | |
70 |
|
70 | |||
71 | public function validarUsuario(){ |
|
71 | public function validarUsuario(){ | |
72 |
|
72 | |||
73 | $valor_intervalo = 30; |
|
73 | $valor_intervalo = 30; | |
74 | $intervalo = 'PT'.$valor_intervalo.'M'; |
|
74 | $intervalo = 'PT'.$valor_intervalo.'M'; | |
75 | $tiempo_bloqueo = new DateInterval($intervalo); //minutos |
|
75 | $tiempo_bloqueo = new DateInterval($intervalo); //minutos | |
76 |
|
76 | |||
77 | if(isset($_SESSION['usersession']['timebadlogin'])){ |
|
77 | if(isset($_SESSION['usersession']['timebadlogin'])){ | |
78 | $valor_timebadlogin = $_SESSION['usersession']['timebadlogin']; |
|
78 | $valor_timebadlogin = $_SESSION['usersession']['timebadlogin']; | |
79 | $timebadlogin = new DateTime($valor_timebadlogin); |
|
79 | $timebadlogin = new DateTime($valor_timebadlogin); | |
80 | date_add($timebadlogin, $tiempo_bloqueo); |
|
80 | date_add($timebadlogin, $tiempo_bloqueo); | |
81 | $timeactual = new DateTime(date("Y-m-d H:i:s")); |
|
81 | $timeactual = new DateTime(date("Y-m-d H:i:s")); | |
82 |
|
82 | |||
83 | if($timeactual > $timebadlogin){ |
|
83 | if($timeactual > $timebadlogin){ | |
84 | $_SESSION['usersession']['disabled'] = false; |
|
84 | $_SESSION['usersession']['disabled'] = false; | |
85 | $_SESSION['usersession']['attempt'] = 0; |
|
85 | $_SESSION['usersession']['attempt'] = 0; | |
86 | unset($_SESSION['usersession']['timebadlogin']); |
|
86 | unset($_SESSION['usersession']['timebadlogin']); | |
87 | } |
|
87 | } | |
88 | } |
|
88 | } | |
89 |
|
89 | |||
90 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; |
|
90 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; | |
91 |
|
91 | |||
92 | $user = new UsersModel(); |
|
92 | $user = new UsersModel(); | |
93 | $session = new SessionsModel(); |
|
93 | $session = new SessionsModel(); | |
94 |
|
94 | |||
95 | $username = $_REQUEST["username"]; |
|
95 | $username = $_REQUEST["username"]; | |
96 | $password = $_REQUEST["passwd"]; |
|
96 | $password = $_REQUEST["passwd"]; | |
97 |
|
97 | |||
98 | if( (@$_SESSION['usersession']['attempt'] < 3) && ( @!$_SESSION['usersession']['disabled'] ) ){ |
|
98 | if( (@$_SESSION['usersession']['attempt'] < 3) && ( @!$_SESSION['usersession']['disabled'] ) ){ | |
99 |
|
99 | |||
100 | $datos_usuario = ""; |
|
100 | $datos_usuario = ""; | |
101 | $rs_usuario = $user->validateUsers($username,$password); |
|
101 | $rs_usuario = $user->validateUsers($username,$password); | |
102 | $datos_usuario = $rs_usuario->fetch(); |
|
102 | $datos_usuario = $rs_usuario->fetch(); | |
103 |
|
103 | |||
104 | if(@is_array($datos_usuario)){ |
|
104 | if(@is_array($datos_usuario)){ | |
105 | $_SESSION["usersession"]["iduser"] = $datos_usuario['iduser']; |
|
105 | $_SESSION["usersession"]["iduser"] = $datos_usuario['iduser']; | |
106 | $_SESSION["usersession"]["username"] = $datos_usuario['username']; |
|
106 | $_SESSION["usersession"]["username"] = $datos_usuario['username']; | |
107 | $_SESSION["usersession"]["firstname"] = $datos_usuario['firstname']; |
|
107 | $_SESSION["usersession"]["firstname"] = $datos_usuario['firstname']; | |
108 | $_SESSION["usersession"]["lastname"] = $datos_usuario['lastname']; |
|
108 | $_SESSION["usersession"]["lastname"] = $datos_usuario['lastname']; | |
109 | $_SESSION["usersession"]["photo"] = $datos_usuario['photo']; |
|
109 | $_SESSION["usersession"]["photo"] = $datos_usuario['photo']; | |
110 | $_SESSION["usersession"]["type"] = $datos_usuario['usertype']; |
|
110 | $_SESSION["usersession"]["type"] = $datos_usuario['usertype']; | |
111 |
|
111 | |||
112 | $date_session = new DateTime(date('Y-m-d H:i:s')); |
|
112 | $date_session = new DateTime(date('Y-m-d H:i:s')); | |
113 | $date_last_activity = new DateTime(date("Y-m-d H:i:s")); |
|
113 | $date_last_activity = new DateTime(date("Y-m-d H:i:s")); | |
114 |
|
114 | |||
115 | $datos['idsession'] = ""; |
|
115 | $datos['idsession'] = ""; | |
116 | $datos['iduser'] = $datos_usuario['iduser']; |
|
116 | $datos['iduser'] = $datos_usuario['iduser']; | |
117 | $datos['client_ip'] = $_SERVER['REMOTE_ADDR']; |
|
117 | $datos['client_ip'] = $_SERVER['REMOTE_ADDR']; | |
118 | $datos['date_session'] = $date_session->format('Y-m-d H:i:s'); |
|
118 | $datos['date_session'] = $date_session->format('Y-m-d H:i:s'); | |
119 | $datos['date_last_activity'] = $date_last_activity->format("Y-m-d H:i:s") ; |
|
119 | $datos['date_last_activity'] = $date_last_activity->format("Y-m-d H:i:s") ; | |
120 | $datos['state'] = 1; |
|
120 | $datos['state'] = 1; | |
121 |
|
121 | |||
122 | list($rs_session, $idsession, $message) = $session->addItem($datos); |
|
122 | list($rs_session, $idsession, $message) = $session->addItem($datos); | |
123 | $_SESSION['usersession']['idsession'] = $idsession; |
|
123 | $_SESSION['usersession']['idsession'] = $idsession; | |
124 |
|
124 | |||
125 | $_SESSION['usersession']['attempt'] = 0; |
|
125 | $_SESSION['usersession']['attempt'] = 0; | |
126 | $_SESSION['usersession']['client_ip'] = $_SERVER['REMOTE_ADDR']; |
|
126 | $_SESSION['usersession']['client_ip'] = $_SERVER['REMOTE_ADDR']; | |
127 | $_SESSION['usersession']['date_session'] = $date_session->format('Y-m-d H:i:s'); |
|
127 | $_SESSION['usersession']['date_session'] = $date_session->format('Y-m-d H:i:s'); | |
128 | $_SESSION['usersession']['date_last_activity'] = $date_last_activity->format("Y-m-d H:i:s"); |
|
128 | $_SESSION['usersession']['date_last_activity'] = $date_last_activity->format("Y-m-d H:i:s"); | |
129 | $_SESSION['usersession']['state'] = 1; |
|
129 | $_SESSION['usersession']['state'] = 1; | |
130 | //coloca los idmailbox dentro de la variable de session |
|
130 | //coloca los idmailbox dentro de la variable de session | |
131 | //$_SESSION['usersession']['inbox'] = $mnuBoxes[0]['idmailbox'];//Inbox |
|
131 | //$_SESSION['usersession']['inbox'] = $mnuBoxes[0]['idmailbox'];//Inbox | |
132 | $_SESSION['usersession']['inbox'] = 1;//Inbox |
|
132 | $_SESSION['usersession']['inbox'] = 1;//Inbox | |
133 | //$_SESSION['usersession']['sent'] = $mnuBoxes[1]['idmailbox'];//Sent |
|
133 | //$_SESSION['usersession']['sent'] = $mnuBoxes[1]['idmailbox'];//Sent | |
134 | $_SESSION['usersession']['sent'] = 2;//Sent |
|
134 | $_SESSION['usersession']['sent'] = 2;//Sent | |
135 | //$_SESSION['usersession']['trash'] = $mnuBoxes[2]['idmailbox'];//Trash |
|
135 | //$_SESSION['usersession']['trash'] = $mnuBoxes[2]['idmailbox'];//Trash | |
136 | $_SESSION['usersession']['trash'] = 3;//Trash |
|
136 | $_SESSION['usersession']['trash'] = 3;//Trash | |
137 |
|
137 | |||
138 | if(($datos_usuario['state'] == 4) || ($datos_usuario['state'] == 5)){ |
|
138 | if(($datos_usuario['state'] == 4) || ($datos_usuario['state'] == 5)){ | |
139 | $url = "index.php?option=com_users&controller=Users&action=getNewPasswordForm"; |
|
139 | $url = "index.php?option=com_users&controller=Users&action=getNewPasswordForm"; | |
140 | header("location: ".$url); |
|
140 | header("location: ".$url); | |
141 | exit(0); |
|
141 | exit(0); | |
142 | } |
|
142 | } | |
143 | if($datos_usuario['state'] == 2){ |
|
143 | if($datos_usuario['state'] == 2){ | |
144 | $data['titulo'] = "Error:: User Locked"; |
|
144 | $data['titulo'] = "Error:: User Locked"; | |
145 | $data['mensaje'] = "Login is disabled by excesses of failed attempts. Contact your 'System Administrator' to solve the problem"; |
|
145 | $data['mensaje'] = "Login is disabled by excesses of failed attempts. Contact your 'System Administrator' to solve the problem"; | |
146 | $this->view->show("errorLogin.php", $data); |
|
146 | $this->view->show("errorLogin.php", $data); | |
147 | exit(0); |
|
147 | exit(0); | |
148 | } |
|
148 | } | |
149 |
|
149 | |||
150 | $flag_activo = true; |
|
150 | $flag_activo = true; | |
151 | //require 'components'.DS.'com_messages'.DS.'models'.DS.'MailBoxesModel.php'; |
|
151 | //require 'components'.DS.'com_messages'.DS.'models'.DS.'MailBoxesModel.php'; | |
152 |
|
152 | |||
153 | //$resultado_log = $items->registrarLogIngreso($datos_usuario["id_usu"]); |
|
153 | //$resultado_log = $items->registrarLogIngreso($datos_usuario["id_usu"]); | |
154 | /* |
|
154 | /* | |
155 | $mailbox = new MailBoxesModel(); |
|
155 | $mailbox = new MailBoxesModel(); | |
156 |
|
156 | |||
157 | $rs_boxes = $mailbox->getMailBoxesSystem($datos_usuario['iduser']); |
|
157 | $rs_boxes = $mailbox->getMailBoxesSystem($datos_usuario['iduser']); | |
158 | //Coloca los idmailbox dentro de variables de session |
|
158 | //Coloca los idmailbox dentro de variables de session | |
159 | $rs_mnuboxes = $mailbox->getIDMailBoxesSystem($datos_usuario['iduser']); |
|
159 | $rs_mnuboxes = $mailbox->getIDMailBoxesSystem($datos_usuario['iduser']); | |
160 | $mnuBoxes = $rs_mnuboxes->fetchAll(); |
|
160 | $mnuBoxes = $rs_mnuboxes->fetchAll(); | |
161 |
|
161 | |||
162 | $idtypemb = 1; |
|
162 | $idtypemb = 1; | |
163 | $rsMailBox = $mailbox->getMailBoxType($datos_usuario['iduser'], $idtypemb); |
|
163 | $rsMailBox = $mailbox->getMailBoxType($datos_usuario['iduser'], $idtypemb); | |
164 | $datosMailBox = $rsMailBox->fetch(); |
|
164 | $datosMailBox = $rsMailBox->fetch(); | |
165 |
|
165 | |||
166 | $lista_mensajes = $mailbox->getMessagesNoRead($datosMailBox['idmailbox']); |
|
166 | $lista_mensajes = $mailbox->getMessagesNoRead($datosMailBox['idmailbox']); | |
167 | $idmailbox = $datosMailBox['idmailbox']; |
|
167 | $idmailbox = $datosMailBox['idmailbox']; | |
168 | */ |
|
168 | */ | |
169 |
|
169 | |||
170 | $data['datos_usuario'] = $datos_usuario; |
|
170 | $data['datos_usuario'] = $datos_usuario; | |
171 | $data['inicio'] = 0; |
|
171 | $data['inicio'] = 0; | |
172 | //$data['rs_boxes'] = $rs_boxes; |
|
172 | //$data['rs_boxes'] = $rs_boxes; | |
173 | //$data['lista_mensajes'] = $lista_mensajes; |
|
173 | //$data['lista_mensajes'] = $lista_mensajes; | |
174 | //$data['idmailbox'] = $idmailbox; |
|
174 | //$data['idmailbox'] = $idmailbox; | |
175 | $data['content'] = "components".DS."com_users".DS."views".DS."home.php"; |
|
175 | $data['content'] = "components".DS."com_users".DS."views".DS."home.php"; | |
176 | $data['title'] = "WELCOME:::::::::::"; |
|
176 | $data['title'] = "WELCOME:::::::::::"; | |
177 |
|
177 | |||
178 | $this->view->show("template.php", $data); |
|
178 | $this->view->show("template.php", $data); | |
179 | }else{ |
|
179 | }else{ | |
180 | $result = $user->obtenerUsuarioxUsername($username); |
|
180 | $result = $user->obtenerUsuarioxUsername($username); | |
181 | $data_user = $result->fetch(); |
|
181 | $data_user = $result->fetch(); | |
182 | if(is_array($data_user)){ |
|
182 | if(is_array($data_user)){ | |
183 | if (!isset($_SESSION['usersession'])) { |
|
183 | if (!isset($_SESSION['usersession'])) { | |
184 | $_SESSION['usersession'] = array(); |
|
184 | $_SESSION['usersession'] = array(); | |
185 | $_SESSION['usersession']['attempt'] = 1; |
|
185 | $_SESSION['usersession']['attempt'] = 1; | |
186 | }else{ |
|
186 | }else{ | |
187 | if (!isset($_SESSION['usersession']['attempt'])) { |
|
187 | if (!isset($_SESSION['usersession']['attempt'])) { | |
188 | $_SESSION['usersession']['attempt'] = 1; |
|
188 | $_SESSION['usersession']['attempt'] = 1; | |
189 | }else{ |
|
189 | }else{ | |
190 | $_SESSION['usersession']['attempt']++; |
|
190 | $_SESSION['usersession']['attempt']++; | |
191 | } |
|
191 | } | |
192 | } |
|
192 | } | |
193 | if ($_SESSION['usersession']['attempt'] == 3){ |
|
193 | if ($_SESSION['usersession']['attempt'] == 3){ | |
194 | $datos['state'] = 2; |
|
194 | $datos['state'] = 2; | |
195 | $user->setIdValue($data_user['iduser']); |
|
195 | $user->setIdValue($data_user['iduser']); | |
196 | list($result, $message) = $user->UpdateItem($datos); |
|
196 | list($result, $message) = $user->UpdateItem($datos); | |
197 |
|
197 | |||
198 | $data['titulo'] = "Failed attempts excess"; |
|
198 | $data['titulo'] = "Failed attempts excess"; | |
199 | $data['mensaje'] = "You have exceeded the number of attempts. <br /> User blocked"; |
|
199 | $data['mensaje'] = "You have exceeded the number of attempts. <br /> User blocked"; | |
200 |
|
200 | |||
201 | $this->view->show("errorLogin.php", $data); |
|
201 | $this->view->show("errorLogin.php", $data); | |
202 | exit(0); |
|
202 | exit(0); | |
203 | } |
|
203 | } | |
204 | }else{ |
|
204 | }else{ | |
205 | if (!isset($_SESSION['usersession'])) { |
|
205 | if (!isset($_SESSION['usersession'])) { | |
206 | $_SESSION['usersession'] = array(); |
|
206 | $_SESSION['usersession'] = array(); | |
207 | $_SESSION['usersession']['attempt'] = 1; |
|
207 | $_SESSION['usersession']['attempt'] = 1; | |
208 | }else{ |
|
208 | }else{ | |
209 | if (!isset($_SESSION['usersession']['attempt'])) { |
|
209 | if (!isset($_SESSION['usersession']['attempt'])) { | |
210 | $_SESSION['usersession']['attempt'] = 1; |
|
210 | $_SESSION['usersession']['attempt'] = 1; | |
211 | }else{ |
|
211 | }else{ | |
212 | $_SESSION['usersession']['attempt']++; |
|
212 | $_SESSION['usersession']['attempt']++; | |
213 | } |
|
213 | } | |
214 | } |
|
214 | } | |
215 | $data['titulo'] = "Error user login / password"; |
|
215 | $data['titulo'] = "Error user login / password"; | |
216 | $data['mensaje'] = "Error user login / password"; |
|
216 | $data['mensaje'] = "Error user login / password"; | |
217 | //Finalmente presentamos nuestra plantilla |
|
217 | //Finalmente presentamos nuestra plantilla | |
218 | $this->view->show("errorLogin.php", $data); |
|
218 | $this->view->show("errorLogin.php", $data); | |
219 | exit(0); |
|
219 | exit(0); | |
220 | } |
|
220 | } | |
221 | } |
|
221 | } | |
222 | }else{ |
|
222 | }else{ | |
223 | //EXCESO DE INTENTOS |
|
223 | //EXCESO DE INTENTOS | |
224 | $timebadlogin = new DateTime(date('Y-m-d H:i:s')); |
|
224 | $timebadlogin = new DateTime(date('Y-m-d H:i:s')); | |
225 | //deshabilitar logueo por determinado tiempo |
|
225 | //deshabilitar logueo por determinado tiempo | |
226 | $data['titulo'] = "Failed attempts excess"; |
|
226 | $data['titulo'] = "Failed attempts excess"; | |
227 | $data['mensaje'] = "You have exceeded the number of attempts.<br />Try again in".$valor_intervalo." minutes"; |
|
227 | $data['mensaje'] = "You have exceeded the number of attempts.<br />Try again in".$valor_intervalo." minutes"; | |
228 | //establecemos la variable que maneje el tiempo de espera |
|
228 | //establecemos la variable que maneje el tiempo de espera | |
229 | $_SESSION['usersession']['disabled'] = true; |
|
229 | $_SESSION['usersession']['disabled'] = true; | |
230 | if(!isset($_SESSION['usersession']['timebadlogin'])){ |
|
230 | if(!isset($_SESSION['usersession']['timebadlogin'])){ | |
231 | $_SESSION['usersession']['timebadlogin'] = $timebadlogin->format('Y-m-d H:i:s'); |
|
231 | $_SESSION['usersession']['timebadlogin'] = $timebadlogin->format('Y-m-d H:i:s'); | |
232 | } |
|
232 | } | |
233 |
|
233 | |||
234 | $this->view->show("errorLogin.php", $data); |
|
234 | $this->view->show("errorLogin.php", $data); | |
235 | } |
|
235 | } | |
236 | } |
|
236 | } | |
237 |
|
237 | |||
238 | public function logout(){ |
|
238 | public function logout(){ | |
239 | //@print_r($_SESSION['usersession']); |
|
239 | //@print_r($_SESSION['usersession']); | |
240 | $session = new SessionsModel(); |
|
240 | $session = new SessionsModel(); | |
241 |
|
241 | |||
242 | $rs_datos_session = $session->validarSession(@$_SESSION['usersession']['iduser']); |
|
242 | $rs_datos_session = $session->validarSession(@$_SESSION['usersession']['iduser']); | |
243 | //print_r($rs_datos_session); |
|
243 | //print_r($rs_datos_session); | |
244 | $datos_session = $rs_datos_session->fetch(); |
|
244 | $datos_session = $rs_datos_session->fetch(); | |
245 | $date_last_activity = new DateTime(date("Y-m-d H:i:s")); |
|
245 | $date_last_activity = new DateTime(date("Y-m-d H:i:s")); | |
246 |
|
246 | |||
247 | //establecemos el arreglo datos. |
|
247 | //establecemos el arreglo datos. | |
248 | $datos['date_last_activity'] = $date_last_activity->format('Y-m-d H:i:s'); |
|
248 | $datos['date_last_activity'] = $date_last_activity->format('Y-m-d H:i:s'); | |
249 | $datos['idsession'] = $datos_session['idsession']; |
|
249 | $datos['idsession'] = $datos_session['idsession']; | |
250 | $rs = $session->setInactive($datos); |
|
250 | $rs = $session->setInactive($datos); | |
251 |
|
251 | |||
252 | unset($_SESSION['usersession']); |
|
252 | unset($_SESSION['usersession']); | |
253 | session_destroy(); |
|
253 | session_destroy(); | |
254 |
|
254 | |||
255 | $data = array(); |
|
255 | $data = array(); | |
256 | $this->view->show("logout.php", $data); |
|
256 | $this->view->show("logout.php", $data); | |
257 | } |
|
257 | } | |
258 |
|
258 | |||
259 | public function getRememberPasswordForm(){ |
|
259 | public function getRememberPasswordForm(){ | |
260 | $data = array(); |
|
260 | $data = array(); | |
261 | $this->view->show("password.php", $data); |
|
261 | $this->view->show("password.php", $data); | |
262 | } |
|
262 | } | |
263 |
|
263 | |||
264 | public function sendPasswordLink(){ |
|
264 | public function sendPasswordLink(){ | |
265 |
|
265 | |||
266 | require 'models/UsersModel.php'; |
|
266 | require 'models/UsersModel.php'; | |
267 | $user = new UsersModel(); |
|
267 | $user = new UsersModel(); | |
268 |
|
268 | |||
269 | $username = $_REQUEST["usuario"]; |
|
269 | $username = $_REQUEST["usuario"]; | |
270 |
|
270 | |||
271 | $rs_usuario = $user->obtenerUsuarioxUsername($username); |
|
271 | $rs_usuario = $user->obtenerUsuarioxUsername($username); | |
272 | $datos_usuario = $rs_usuario->fetch(); |
|
272 | $datos_usuario = $rs_usuario->fetch(); | |
273 |
|
273 | |||
274 | if(is_array($datos_usuario)){ |
|
274 | if(is_array($datos_usuario)){ | |
275 | $servername = $_SERVER['SERVER_NAME']; |
|
275 | $servername = $_SERVER['SERVER_NAME']; | |
276 | $usernamemd5 = md5($datos_usuario['username']); |
|
276 | $usernamemd5 = md5($datos_usuario['username']); | |
277 | $link = 'http://'.$servername.'/?controller=Users&action=getNewPasswordForm&xin='.$usernamemd5.'&forget=yes'; |
|
277 | $link = 'http://'.$servername.'/?controller=Users&action=getNewPasswordForm&xin='.$usernamemd5.'&forget=yes'; | |
278 |
|
278 | |||
279 | $contenido = ''; |
|
279 | $contenido = ''; | |
280 |
|
280 | |||
281 | $destinatario = "nmedina79@gmail.com"; |
|
281 | $destinatario = "nmedina79@gmail.com"; | |
282 | $asunto = "Este mensaje es de prueba"; |
|
282 | $asunto = "Este mensaje es de prueba"; | |
283 | $cuerpo = ' |
|
283 | $cuerpo = ' | |
284 | <html> |
|
284 | <html> | |
285 | <head> |
|
285 | <head> | |
286 | <title>Prueba de correo</title> |
|
286 | <title>Prueba de correo</title> | |
287 | </head> |
|
287 | </head> | |
288 | <body> |
|
288 | <body> | |
289 | <h1>Hola amigos!</h1> |
|
289 | <h1>Hola amigos!</h1> | |
290 | <p> |
|
290 | <p> | |
291 | <b>Bienvenidos a mi correo electronico de prueba</b>. Estoy encantado de tener tantos lectores. Este cuerpo del mensaje es del articulo de envio de mails por PHP. Habria que cambiarlo para poner tu propio cuerpo. Por cierto, cambia tambien las cabeceras del mensaje.<br/> |
|
291 | <b>Bienvenidos a mi correo electronico de prueba</b>. Estoy encantado de tener tantos lectores. Este cuerpo del mensaje es del articulo de envio de mails por PHP. Habria que cambiarlo para poner tu propio cuerpo. Por cierto, cambia tambien las cabeceras del mensaje.<br/> | |
292 | enlace : <a href="'.$link.'" target="_parent">'.$link.'</a> |
|
292 | enlace : <a href="'.$link.'" target="_parent">'.$link.'</a> | |
293 |
|
293 | |||
294 | </p> |
|
294 | </p> | |
295 | </body> |
|
295 | </body> | |
296 | </html> |
|
296 | </html> | |
297 | '; |
|
297 | '; | |
298 |
|
298 | |||
299 | //para el envio en formato HTML |
|
299 | //para el envio en formato HTML | |
300 | $headers = "MIME-Version: 1.0\r\n"; |
|
300 | $headers = "MIME-Version: 1.0\r\n"; | |
301 | $headers .= "Content-type: text/html; charset=iso-8859-1\r\n"; |
|
301 | $headers .= "Content-type: text/html; charset=iso-8859-1\r\n"; | |
302 |
|
302 | |||
303 | //direccion del remitente |
|
303 | //direccion del remitente | |
304 | $headers .= "From: Administrador <admin@epimed.com>\r\n"; |
|
304 | $headers .= "From: Administrador <admin@epimed.com>\r\n"; | |
305 |
|
305 | |||
306 | //direccion de respuesta, si queremos que sea distinta que la del remitente |
|
306 | //direccion de respuesta, si queremos que sea distinta que la del remitente | |
307 | $headers .= "Reply-To: deployment@epimed.com\r\n"; |
|
307 | $headers .= "Reply-To: deployment@epimed.com\r\n"; | |
308 |
|
308 | |||
309 | //ruta del mensaje desde origen a destino |
|
309 | //ruta del mensaje desde origen a destino | |
310 | $headers .= "Return-path: nmedina79@gmail.com\r\n"; |
|
310 | $headers .= "Return-path: nmedina79@gmail.com\r\n"; | |
311 |
|
311 | |||
312 | //direcciones que recibion copia |
|
312 | //direcciones que recibion copia | |
313 | $headers .= "Cc: deployment@epimed.com\r\n"; |
|
313 | $headers .= "Cc: deployment@epimed.com\r\n"; | |
314 |
|
314 | |||
315 | //direcciones que recibiron copia oculta |
|
315 | //direcciones que recibiron copia oculta | |
316 | $headers .= "Bcc: jsalyrosas@poweruptechs.com,hleon@poweruptechs.com\r\n"; |
|
316 | $headers .= "Bcc: jsalyrosas@poweruptechs.com,hleon@poweruptechs.com\r\n"; | |
317 |
|
317 | |||
318 | if(mail($destinatario,$asunto,$cuerpo,$headers)){ |
|
318 | if(mail($destinatario,$asunto,$cuerpo,$headers)){ | |
319 | $mensaje = 'An email with a link to update has been sent to your email.'; |
|
319 | $mensaje = 'An email with a link to update has been sent to your email.'; | |
320 | }else{ |
|
320 | }else{ | |
321 | $mensaje = 'Failed to send link. Try again in a few minutes or contact your system administrator'; |
|
321 | $mensaje = 'Failed to send link. Try again in a few minutes or contact your system administrator'; | |
322 | } |
|
322 | } | |
323 |
|
323 | |||
324 | try{ |
|
324 | try{ | |
325 | mail($destinatario,$asunto,$cuerpo,$headers); |
|
325 | mail($destinatario,$asunto,$cuerpo,$headers); | |
326 | }catch (Exception $e){ |
|
326 | }catch (Exception $e){ | |
327 | echo 'Caught exception: ', $e->getMessage(), "\n"; |
|
327 | echo 'Caught exception: ', $e->getMessage(), "\n"; | |
328 | } |
|
328 | } | |
329 |
|
329 | |||
330 | /* |
|
330 | /* | |
331 | require("class.phpmailer.php"); |
|
331 | require("class.phpmailer.php"); | |
332 | $mail = new PHPMailer(); |
|
332 | $mail = new PHPMailer(); | |
333 |
|
333 | |||
334 | $mail->IsSMTP(); // set mailer to use SMTP |
|
334 | $mail->IsSMTP(); // set mailer to use SMTP | |
335 | $mail->Host = "smtp.innovaciencia.com;smtp.innovaciencia.com"; // specify main and backup server |
|
335 | $mail->Host = "smtp.innovaciencia.com;smtp.innovaciencia.com"; // specify main and backup server | |
336 | $mail->SMTPAuth = true; // turn on SMTP authentication |
|
336 | $mail->SMTPAuth = true; // turn on SMTP authentication | |
337 | $mail->Username = "jsalyrosas"; // SMTP username |
|
337 | $mail->Username = "jsalyrosas"; // SMTP username | |
338 | $mail->Password = "j05e4nt0n10"; // SMTP password |
|
338 | $mail->Password = "j05e4nt0n10"; // SMTP password | |
339 |
|
339 | |||
340 | $mail->From = "Admin@epimed.com"; |
|
340 | $mail->From = "Admin@epimed.com"; | |
341 | $mail->FromName = "Admin"; |
|
341 | $mail->FromName = "Admin"; | |
342 | $mail->AddAddress("nmedina79@gmail.com", "Josh Adams"); |
|
342 | $mail->AddAddress("nmedina79@gmail.com", "Josh Adams"); | |
343 | $mail->AddAddress("nmedina79@gmail.com"); // name is optional |
|
343 | $mail->AddAddress("nmedina79@gmail.com"); // name is optional | |
344 | $mail->AddReplyTo("nmedina79@hotmail.com", "Information"); |
|
344 | $mail->AddReplyTo("nmedina79@hotmail.com", "Information"); | |
345 |
|
345 | |||
346 | $mail->WordWrap = 50; // set word wrap to 50 characters |
|
346 | $mail->WordWrap = 50; // set word wrap to 50 characters | |
347 | //$mail->AddAttachment("/var/tmp/file.tar.gz"); // add attachments |
|
347 | //$mail->AddAttachment("/var/tmp/file.tar.gz"); // add attachments | |
348 | //$mail->AddAttachment("/tmp/image.jpg", "new.jpg"); // optional name |
|
348 | //$mail->AddAttachment("/tmp/image.jpg", "new.jpg"); // optional name | |
349 | $mail->IsHTML(true); // set email format to HTML |
|
349 | $mail->IsHTML(true); // set email format to HTML | |
350 |
|
350 | |||
351 | $mail->Subject = "Here is the subject"; |
|
351 | $mail->Subject = "Here is the subject"; | |
352 | //$mail->Body = "This is the HTML message body <b>in bold!</b>".$cuerpo; |
|
352 | //$mail->Body = "This is the HTML message body <b>in bold!</b>".$cuerpo; | |
353 | $mail->Body = $cuerpo; |
|
353 | $mail->Body = $cuerpo; | |
354 | $mail->AltBody = "This is the body in plain text for non-HTML mail clients"; |
|
354 | $mail->AltBody = "This is the body in plain text for non-HTML mail clients"; | |
355 |
|
355 | |||
356 | if(!$mail->Send()){ |
|
356 | if(!$mail->Send()){ | |
357 | echo "Message could not be sent. <p>"; |
|
357 | echo "Message could not be sent. <p>"; | |
358 | echo "Mailer Error: " . $mail->ErrorInfo; |
|
358 | echo "Mailer Error: " . $mail->ErrorInfo; | |
359 | exit; |
|
359 | exit; | |
360 | } |
|
360 | } | |
361 |
|
361 | |||
362 | echo "Message has been sent"; |
|
362 | echo "Message has been sent"; | |
363 | */ |
|
363 | */ | |
364 | }else{ |
|
364 | }else{ | |
365 | $mensaje = " User doesn't exist."; |
|
365 | $mensaje = " User doesn't exist."; | |
366 | } |
|
366 | } | |
367 |
|
367 | |||
368 | $data = array(); |
|
368 | $data = array(); | |
369 | $data['mensaje'] = $mensaje; |
|
369 | $data['mensaje'] = $mensaje; | |
370 | $data['link'] = $link; |
|
370 | $data['link'] = $link; | |
371 |
|
371 | |||
372 | $this->view->show("password.php", $data); |
|
372 | $this->view->show("password.php", $data); | |
373 | } |
|
373 | } | |
374 |
|
374 | |||
375 | public function getNewPasswordForm(){ |
|
375 | public function getNewPasswordForm(){ | |
376 | (!empty($_REQUEST['forget']))?$forget = $_REQUEST['forget']:$forget='no'; |
|
376 | (!empty($_REQUEST['forget']))?$forget = $_REQUEST['forget']:$forget='no'; | |
377 | (!empty($_REQUEST['xin']))?$xin = $_REQUEST['xin']:$xin=''; |
|
377 | (!empty($_REQUEST['xin']))?$xin = $_REQUEST['xin']:$xin=''; | |
378 | (!empty($_REQUEST['force']))?$force = $_REQUEST['force']:$force='yes'; |
|
378 | (!empty($_REQUEST['force']))?$force = $_REQUEST['force']:$force='yes'; | |
379 |
|
379 | |||
380 | //@$forget = $_REQUEST['forget']; |
|
380 | //@$forget = $_REQUEST['forget']; | |
381 | //@$xin = $_REQUEST['xin']; |
|
381 | //@$xin = $_REQUEST['xin']; | |
382 | $data = array(); |
|
382 | $data = array(); | |
383 | $data['forget'] = $forget; |
|
383 | $data['forget'] = $forget; | |
384 | $data['force'] = $force; |
|
384 | $data['force'] = $force; | |
385 | $data['xin'] = $xin; |
|
385 | $data['xin'] = $xin; | |
386 |
|
386 | |||
387 | $this->view->show("change_passwd.php", $data); |
|
387 | $this->view->show("change_passwd.php", $data); | |
388 | } |
|
388 | } | |
389 |
|
389 | |||
390 | public function passwordUpdate(){ |
|
390 | public function passwordUpdate(){ | |
391 |
|
391 | |||
392 | $datos = $_REQUEST['datos']; |
|
392 | $datos = $_REQUEST['datos']; | |
393 | (!empty($_REQUEST['forget']))?$forget = $_REQUEST['forget']:$forget='no'; |
|
393 | (!empty($_REQUEST['forget']))?$forget = $_REQUEST['forget']:$forget='no'; | |
394 | (!empty($_REQUEST['usernamemd5']))?$usernamemd5 = $_REQUEST['xin']:$usernamemd5=''; |
|
394 | (!empty($_REQUEST['usernamemd5']))?$usernamemd5 = $_REQUEST['xin']:$usernamemd5=''; | |
395 | (!empty($_REQUEST['force']))?$force = $_REQUEST['force']:$force=''; |
|
395 | (!empty($_REQUEST['force']))?$force = $_REQUEST['force']:$force=''; | |
396 | //@$forget = $_REQUEST['forget']; |
|
396 | //@$forget = $_REQUEST['forget']; | |
397 | //@$usernamemd5 = $_REQUEST['xin']; |
|
397 | //@$usernamemd5 = $_REQUEST['xin']; | |
398 | //@$force = $_REQUEST['force']; |
|
398 | //@$force = $_REQUEST['force']; | |
399 |
|
399 | |||
400 | //print_r($datos); |
|
400 | //print_r($datos); | |
401 |
|
401 | |||
402 | require 'models/UsersModel.php'; |
|
402 | require 'models/UsersModel.php'; | |
403 |
|
403 | |||
404 | $user = new UsersModel(); |
|
404 | $user = new UsersModel(); | |
405 |
|
405 | |||
406 | if( $datos['new_password'] == $datos['new_password_again']){ |
|
406 | if( $datos['new_password'] == $datos['new_password_again']){ | |
407 |
|
407 | |||
408 | if($forget == 'yes'){ |
|
408 | if($forget == 'yes'){ | |
409 | //echo $usernamemd5; |
|
409 | //echo $usernamemd5; | |
410 | $rs_usuario = $user->obtenerUsuarioxUsernameMD5($usernamemd5); |
|
410 | $rs_usuario = $user->obtenerUsuarioxUsernameMD5($usernamemd5); | |
411 | //print_r($rs_usuario); |
|
411 | //print_r($rs_usuario); | |
412 | $datos_usuario = $rs_usuario->fetch(); |
|
412 | $datos_usuario = $rs_usuario->fetch(); | |
413 | $iduser = $datos_usuario['iduser']; |
|
413 | $iduser = $datos_usuario['iduser']; | |
414 | $password = $datos['new_password']; |
|
414 | $password = $datos['new_password']; | |
415 | $rs_updatePassword = $user->setNewPassword($iduser,$password); |
|
415 | $rs_updatePassword = $user->setNewPassword($iduser,$password); | |
416 | //print_r($rs_updatePassword); |
|
416 | //print_r($rs_updatePassword); | |
417 | $data['xin'] = $usernamemd5; |
|
417 | $data['xin'] = $usernamemd5; | |
418 | $data['forget'] = $forget; |
|
418 | $data['forget'] = $forget; | |
419 | $data['force'] = $force; |
|
419 | $data['force'] = $force; | |
420 |
|
420 | |||
421 | $data['mensaje'] = ' your password has been updated<br/><a href="?controller=Users&action=ingresar">next</a>'; |
|
421 | $data['mensaje'] = ' your password has been updated<br/><a href="?controller=Users&action=ingresar">next</a>'; | |
422 | unset($_SESSION['sessionuser']); |
|
422 | unset($_SESSION['sessionuser']); | |
423 | $this->view->show("usersNewPasswordForm.php", $data); |
|
423 | $this->view->show("usersNewPasswordForm.php", $data); | |
424 |
|
424 | |||
425 | }else{ |
|
425 | }else{ | |
426 | if(!empty($datos['current_password'])){ |
|
426 | if(!empty($datos['current_password'])){ | |
427 | //validarAdministrador($username,$password) |
|
427 | //validarAdministrador($username,$password) | |
428 | if(!empty($_SESSION['usersession']['iduser'])){ |
|
428 | if(!empty($_SESSION['usersession']['iduser'])){ | |
429 | $iduser = $_SESSION['usersession']['iduser']; |
|
429 | $iduser = $_SESSION['usersession']['iduser']; | |
430 | $password = $datos['new_password']; |
|
430 | $password = $datos['new_password']; | |
431 | $rs_usuario = $user->obtenerUsuarioxId($iduser); |
|
431 | $rs_usuario = $user->obtenerUsuarioxId($iduser); | |
432 | $datos_usuario = $rs_usuario->fetch(); |
|
432 | $datos_usuario = $rs_usuario->fetch(); | |
433 |
|
433 | |||
434 | //validamos la existencia del usuario |
|
434 | //validamos la existencia del usuario | |
435 | $username = $datos_usuario['username']; |
|
435 | $username = $datos_usuario['username']; | |
436 | $current_password = $datos['current_password'];// |
|
436 | $current_password = $datos['current_password'];// | |
437 | $rs_validado = $user->validarAdministrador($username,$current_password); |
|
437 | $rs_validado = $user->validarAdministrador($username,$current_password); | |
438 | $datos_validado = $rs_validado->fetch(); |
|
438 | $datos_validado = $rs_validado->fetch(); | |
439 |
|
439 | |||
440 | if(is_array($datos_validado)){ |
|
440 | if(is_array($datos_validado)){ | |
441 | //actualizamos el nuevo password |
|
441 | //actualizamos el nuevo password | |
442 | $rs_updatePassword = $user->setNewPassword($iduser,$password); |
|
442 | $rs_updatePassword = $user->setNewPassword($iduser,$password); | |
443 | //cambiar el estado del usuario |
|
443 | //cambiar el estado del usuario | |
444 | $rs_updatePassword = $user->setActive($iduser); |
|
444 | $rs_updatePassword = $user->setActive($iduser); | |
445 |
|
445 | |||
446 | unset($_SESSION['usersession']); |
|
446 | unset($_SESSION['usersession']); | |
447 | $data = array(); |
|
447 | $data = array(); | |
448 | $data['forget'] = $forget; |
|
448 | $data['forget'] = $forget; | |
449 | $data['mensaje'] = ' your password has been updated<br/><a href="send.php?controller=Users&action=logout" target="enviar">continuar</a>'; |
|
449 | $data['mensaje'] = ' your password has been updated<br/><a href="send.php?controller=Users&action=logout" target="enviar">continuar</a>'; | |
450 | $this->view->show("usersNewPasswordForm.php", $data); |
|
450 | $this->view->show("usersNewPasswordForm.php", $data); | |
451 |
|
451 | |||
452 |
|
452 | |||
453 | }else{ |
|
453 | }else{ | |
454 | $data['mensaje'] = ' your current password is invalid '; |
|
454 | $data['mensaje'] = ' your current password is invalid '; | |
455 | $this->view->show("usersNewPasswordForm.php", $data); |
|
455 | $this->view->show("usersNewPasswordForm.php", $data); | |
456 | } |
|
456 | } | |
457 | }else{ |
|
457 | }else{ | |
458 | $data['mensaje'] = ' you have not started your user session.<br/> '; |
|
458 | $data['mensaje'] = ' you have not started your user session.<br/> '; | |
459 | $this->view->show("login.php", $data); |
|
459 | $this->view->show("login.php", $data); | |
460 | } |
|
460 | } | |
461 | }else{ |
|
461 | }else{ | |
462 | //$data['xin'] = $usernamemd5; |
|
462 | //$data['xin'] = $usernamemd5; | |
463 | //$data['forget'] = $forget; |
|
463 | //$data['forget'] = $forget; | |
464 | $data['mensaje'] = ' did not enter the current password '; |
|
464 | $data['mensaje'] = ' did not enter the current password '; | |
465 | $this->view->show("usersNewPasswordForm.php", $data); |
|
465 | $this->view->show("usersNewPasswordForm.php", $data); | |
466 | } |
|
466 | } | |
467 | } |
|
467 | } | |
468 |
|
468 | |||
469 | }else{ |
|
469 | }else{ | |
470 | $data['xin'] = $usernamemd5; |
|
470 | $data['xin'] = $usernamemd5; | |
471 | $data['forget'] = $forget; |
|
471 | $data['forget'] = $forget; | |
472 | $data['mensaje'] = 'the new password entered does not match'; |
|
472 | $data['mensaje'] = 'the new password entered does not match'; | |
473 | $this->view->show("usersNewPasswordForm.php", $data); |
|
473 | $this->view->show("usersNewPasswordForm.php", $data); | |
474 | } |
|
474 | } | |
475 |
|
475 | |||
476 | } |
|
476 | } | |
477 |
|
477 | |||
478 | public function dolist(){ |
|
478 | public function dolist(){ | |
479 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; |
|
479 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; | |
480 | $users = new UsersModel(); |
|
480 | $users = new UsersModel(); | |
481 |
|
481 | |||
482 | if(!empty($_REQUEST['inicio'])){ |
|
482 | if(!empty($_REQUEST['inicio'])){ | |
483 | $inicio = $_REQUEST['inicio']; |
|
483 | $inicio = $_REQUEST['inicio']; | |
484 | }else{ |
|
484 | }else{ | |
485 | $inicio = 0; |
|
485 | $inicio = 0; | |
486 | } |
|
486 | } | |
487 |
|
487 | |||
488 | $tamanio = 15; |
|
488 | $tamanio = 15; | |
489 | $parametros = array("inicio" => $inicio, "tamanio" => $tamanio); |
|
489 | $parametros = array("inicio" => $inicio, "tamanio" => $tamanio); | |
490 | list($list_users, $paginas, $navegador) = $users->dolist($parametros); |
|
490 | list($list_users, $paginas, $navegador) = $users->dolist($parametros); | |
491 |
|
491 | |||
492 | $data['listUsers'] = $list_users; |
|
492 | $data['listUsers'] = $list_users; | |
493 | $data['paginas'] = $paginas; |
|
493 | $data['paginas'] = $paginas; | |
494 | $data['navegador'] = $navegador; |
|
494 | $data['navegador'] = $navegador; | |
495 | $data['inicio'] = $inicio; |
|
495 | $data['inicio'] = $inicio; | |
496 | $data['content'] = "components".DS."com_users".DS."views".DS."dolist.php"; |
|
496 | $data['content'] = "components".DS."com_users".DS."views".DS."dolist.php"; | |
497 | $data['title'] = "USUARIOS::::::::::::"; |
|
497 | $data['title'] = "USUARIOS::::::::::::"; | |
498 |
|
498 | |||
499 | $this->view->show("template.php", $data); |
|
499 | $this->view->show("template.php", $data); | |
500 | } |
|
500 | } | |
501 |
|
501 | |||
502 | public function newUser(){ |
|
502 | public function newUser(){ | |
503 | if(!empty($_REQUEST['message'])){ |
|
503 | if(!empty($_REQUEST['message'])){ | |
504 | $message = $_REQUEST['message']; |
|
504 | $message = $_REQUEST['message']; | |
505 | }else{ |
|
505 | }else{ | |
506 | $message = ""; |
|
506 | $message = ""; | |
507 | } |
|
507 | } | |
508 | $data['message'] = $message; |
|
508 | $data['message'] = $message; | |
509 | $data['content'] = "components".DS."com_users".DS."views".DS."newUser.php"; |
|
509 | $data['content'] = "components".DS."com_users".DS."views".DS."newUser.php"; | |
510 | $data['title'] = "NEW USER:::::"; |
|
510 | $data['title'] = "NEW USER:::::"; | |
511 |
|
511 | |||
512 | $this->view->show("template.php", $data); |
|
512 | $this->view->show("template.php", $data); | |
513 | } |
|
513 | } | |
514 |
|
514 | |||
515 | public function addUser(){ |
|
515 | public function addUser(){ | |
516 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; |
|
516 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; | |
517 | $user = new UsersModel(); |
|
517 | $user = new UsersModel(); | |
518 |
|
518 | |||
519 | $data_user = $_REQUEST["data_user"]; |
|
519 | $data_user = $_REQUEST["data_user"]; | |
520 | $data_user['username'] = $_REQUEST["newusername"]; |
|
520 | $data_user['username'] = $_REQUEST["newusername"]; | |
521 | $data_user['password'] = md5($_REQUEST["newpasswd"]); |
|
521 | $data_user['password'] = md5($_REQUEST["newpasswd"]); | |
522 | $data_user['email'] = $_REQUEST["txt_email"]; |
|
522 | $data_user['email'] = $_REQUEST["txt_email"]; | |
523 | $data_user['usertype'] = 1; |
|
523 | $data_user['usertype'] = 1; | |
524 | $data_user['state'] = 4; |
|
524 | $data_user['state'] = 4; | |
525 |
|
525 | |||
526 | $urlphoto = "avatar.jpg"; |
|
526 | $urlphoto = "avatar.jpg"; | |
527 |
|
527 | |||
528 | $url = explode(DS, trim(dirname(__DIR__))); |
|
528 | $url = explode(DS, trim(dirname(__DIR__))); | |
529 | array_pop($url); |
|
529 | array_pop($url); | |
530 | array_pop($url); |
|
530 | array_pop($url); | |
531 | array_pop($url); |
|
531 | array_pop($url); | |
532 | array_pop($url); |
|
532 | array_pop($url); | |
533 | $path = implode(DS, $url); |
|
533 | $path = implode(DS, $url); | |
534 |
|
534 | |||
535 | $flag = FALSE; |
|
535 | $flag = FALSE; | |
536 | $result = $user->getAllUsers(); |
|
536 | $result = $user->getAllUsers(); | |
537 | $data_list = $result->fetchAll(); |
|
537 | $data_list = $result->fetchAll(); | |
538 | foreach($data_list as $userdata){ |
|
538 | foreach($data_list as $userdata){ | |
539 | if(strtolower($data_user['username']) == strtolower($userdata['username'])){$flag = TRUE; break;} |
|
539 | if(strtolower($data_user['username']) == strtolower($userdata['username'])){$flag = TRUE; break;} | |
540 | } |
|
540 | } | |
541 |
|
541 | |||
542 | if($flag === FALSE){ |
|
542 | if($flag === FALSE){ | |
543 | if($_FILES['fphoto']['tmp_name'] != ""){ |
|
543 | if($_FILES['fphoto']['tmp_name'] != ""){ | |
544 | if (is_uploaded_file($_FILES['fphoto']['tmp_name'])){ |
|
544 | if (is_uploaded_file($_FILES['fphoto']['tmp_name'])){ | |
545 | $psize = $_FILES ['fphoto']['size']; |
|
545 | $psize = $_FILES ['fphoto']['size']; | |
546 | $pname = $_FILES ['fphoto']['name']; |
|
546 | $pname = $_FILES ['fphoto']['name']; | |
547 | $type = substr( $pname, strlen($pname)-4); |
|
547 | $type = substr( $pname, strlen($pname)-4); | |
548 | if($type==".jpg" || $type==".gif" || $type==".png" || $type==".JPG" || $type==".GIF" || $type==".PNG"){ |
|
548 | if($type==".jpg" || $type==".gif" || $type==".png" || $type==".JPG" || $type==".GIF" || $type==".PNG"){ | |
549 | copy($_FILES['fphoto']['tmp_name'], $path.DS."files".DS."photos".DS.$username.$type); |
|
549 | copy($_FILES['fphoto']['tmp_name'], $path.DS."files".DS."photos".DS.$username.$type); | |
550 | $urlphoto = "photos".DS.$username.$type; |
|
550 | $urlphoto = "photos".DS.$username.$type; | |
551 | }else{ |
|
551 | }else{ | |
552 | $mensaje_upload = ". Uploaded failed: No image file.";// error por tipo |
|
552 | $mensaje_upload = ". Uploaded failed: No image file.";// error por tipo | |
553 | } |
|
553 | } | |
554 | }else{ |
|
554 | }else{ | |
555 | $mensaje_upload = ". Uploaded failed.";// error por tamanio |
|
555 | $mensaje_upload = ". Uploaded failed.";// error por tamanio | |
556 | } |
|
556 | } | |
557 | }else{ |
|
557 | }else{ | |
558 | $mensaje_upload = "Error: Uploaded failed."; |
|
558 | $mensaje_upload = "Error: Uploaded failed."; | |
559 | } |
|
559 | } | |
560 |
|
560 | |||
561 | $data_user['photo'] = $urlphoto; |
|
561 | $data_user['photo'] = $urlphoto; | |
562 | list($result, $id, $message) = $user->addItem($data_user); |
|
562 | list($result, $id, $message) = $user->addItem($data_user); | |
563 |
|
563 | |||
564 | $url = 'index.php?option=com_users&controller=Users&action=dolist'; |
|
564 | $url = 'index.php?option=com_users&controller=Users&action=dolist'; | |
565 | }else{ |
|
565 | }else{ | |
566 | $message = "Error::: Username unavailable."; |
|
566 | $message = "Error::: Username unavailable."; | |
567 | $url = 'index.php?option=com_users&controller=Users&action=newUser&message='.$message; |
|
567 | $url = 'index.php?option=com_users&controller=Users&action=newUser&message='.$message; | |
568 | } |
|
568 | } | |
569 | header("location: ".$url); |
|
569 | header("location: ".$url); | |
570 | exit(); |
|
570 | exit(); | |
571 | } |
|
571 | } | |
572 |
|
572 | |||
573 | public function editUser(){ |
|
573 | public function editUser(){ | |
574 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; |
|
574 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; | |
575 |
|
575 | |||
576 | $user = new UsersModel(); |
|
576 | $user = new UsersModel(); | |
577 |
|
577 | |||
578 | $iduser = $_REQUEST['user']; |
|
578 | $iduser = $_REQUEST['user']; | |
579 | $newuser = $user->editUser($iduser); |
|
579 | $newuser = $user->editUser($iduser); | |
580 | $method = "edit"; |
|
580 | $method = "edit"; | |
581 |
|
581 | |||
582 | $data['usuario'] = $newuser->fetch(); |
|
582 | $data['usuario'] = $newuser->fetch(); | |
583 | $data['edit'] = true; |
|
583 | $data['edit'] = true; | |
584 | $data['method'] = $method; |
|
584 | $data['method'] = $method; | |
585 | $data['iduser'] = $iduser; |
|
585 | $data['iduser'] = $iduser; | |
586 | $data['content'] = "components".DS."com_users".DS."views".DS."editUser.php"; |
|
586 | $data['content'] = "components".DS."com_users".DS."views".DS."editUser.php"; | |
587 | $data['title'] = "EDIT USER::::::::::::::::"; |
|
587 | $data['title'] = "EDIT USER::::::::::::::::"; | |
588 |
|
588 | |||
589 | $this->view->show("template.php", $data); |
|
589 | $this->view->show("template.php", $data); | |
590 | } |
|
590 | } | |
591 |
|
591 | |||
592 | public function view(){ |
|
592 | public function view(){ | |
593 | require 'models/UsersModel.php'; |
|
593 | require 'models/UsersModel.php'; | |
594 |
|
594 | |||
595 | $user = new UsersModel(); |
|
595 | $user = new UsersModel(); | |
596 |
|
596 | |||
597 | $iduser = $_REQUEST['user']; |
|
597 | $iduser = $_REQUEST['user']; | |
598 | $newuser = $user->editUser($iduser); |
|
598 | $newuser = $user->editUser($iduser); | |
599 | $method = "view"; |
|
599 | $method = "view"; | |
600 |
|
600 | |||
601 | $data['usuario'] = $newuser->fetch(); |
|
601 | $data['usuario'] = $newuser->fetch(); | |
602 | $data['edit'] = false; |
|
602 | $data['edit'] = false; | |
603 | $data['method'] = $method; |
|
603 | $data['method'] = $method; | |
604 | $data['iduser'] = $iduser; |
|
604 | $data['iduser'] = $iduser; | |
605 | $data['content'] = "components".DS."com_users".DS."views".DS."editUser.php"; |
|
605 | $data['content'] = "components".DS."com_users".DS."views".DS."editUser.php"; | |
606 |
|
606 | |||
607 | $this->view->show("template.php", $data); |
|
607 | $this->view->show("template.php", $data); | |
608 | } |
|
608 | } | |
609 |
|
609 | |||
610 | public function updateUser(){ |
|
610 | public function updateUser(){ | |
611 |
require 'models |
|
611 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; | |
612 |
|
612 | |||
613 | $user = new UsersModel(); |
|
613 | $user = new UsersModel(); | |
614 |
$iduser |
|
614 | $iduser = $_POST['iduser']; | |
615 |
$firstname = $_ |
|
615 | $datos['firstname'] = $_POST['firstname']; | |
616 |
$lastname = $_ |
|
616 | $datos['lastname'] = $_POST['lastname']; | |
617 |
$ |
|
617 | $datos['state'] = $_POST['state']; | |
618 | $edituser = $user->updateUser($iduser, $firstname, $lastname, $state); |
|
618 | ||
619 |
|
619 | $user->setIdValue($iduser); | ||
620 | $data['url'] = '?controller=Users&action=getUsers'; |
|
620 | list($result, $message) = $user->UpdateItem($datos); | |
621 | $this->view->show("actualizar.php", $data); |
|
621 | ||
|
622 | $url = 'index.php?option=com_users&controller=Users&action=dolist'; | |||
|
623 | header("location: ".$url); | |||
|
624 | exit(); | |||
622 | } |
|
625 | } | |
623 |
|
626 | |||
624 | public function remove(){ |
|
627 | public function remove(){ | |
625 | require 'models/UsersModel.php'; |
|
628 | require 'models/UsersModel.php'; | |
626 | $user = new UsersModel(); |
|
629 | $user = new UsersModel(); | |
627 | $iduser = $_REQUEST['user']; |
|
630 | $iduser = $_REQUEST['user']; | |
628 |
|
631 | |||
629 | $data_user['state'] = 3; |
|
632 | $data_user['state'] = 3; | |
630 |
|
633 | |||
631 | $user->setIdValue($iduser); |
|
634 | $user->setIdValue($iduser); | |
632 | //list($result, $message) = $user->DeleteItem(); |
|
635 | //list($result, $message) = $user->DeleteItem(); | |
633 | list($result, $message) = $user->UpdateItem($data_user); |
|
636 | list($result, $message) = $user->UpdateItem($data_user); | |
634 |
|
637 | |||
635 | $url = 'index.php?option=com_users&controller=Users&action=getUsers'; |
|
638 | $url = 'index.php?option=com_users&controller=Users&action=getUsers'; | |
636 |
|
639 | |||
637 | header("location: ".$url); |
|
640 | header("location: ".$url); | |
638 | exit(); |
|
641 | exit(); | |
639 | } |
|
642 | } | |
640 |
|
643 | |||
641 | public function searchUser(){ |
|
644 | public function searchUser(){ | |
642 | require 'models/UsersModel.php'; |
|
645 | require 'models/UsersModel.php'; | |
643 |
|
646 | |||
644 | $user = new UsersModel(); |
|
647 | $user = new UsersModel(); | |
645 | $username = $_REQUEST['value']; |
|
648 | $username = $_REQUEST['value']; | |
646 | $newuser = $user->searchUserbyUName($username); |
|
649 | $newuser = $user->searchUserbyUName($username); | |
647 | $usuario = $newuser->fetch(); |
|
650 | $usuario = $newuser->fetch(); | |
648 |
|
651 | |||
649 | if(!is_array($usuario)){ |
|
652 | if(!is_array($usuario)){ | |
650 | $generatePassword = substr(md5($username.time('YmdHis')),0,5); |
|
653 | $generatePassword = substr(md5($username.time('YmdHis')),0,5); | |
651 | } |
|
654 | } | |
652 |
|
655 | |||
653 | $data['username'] = $username; |
|
656 | $data['username'] = $username; | |
654 | $data['usuario'] = $usuario; |
|
657 | $data['usuario'] = $usuario; | |
655 | @$data['key'] = $generatePassword; |
|
658 | @$data['key'] = $generatePassword; | |
656 |
|
659 | |||
657 | $this->view->show("searchUser.php", $data); |
|
660 | $this->view->show("searchUser.php", $data); | |
658 | } |
|
661 | } | |
659 |
|
662 | |||
660 | public function changePasswd(){ |
|
663 | public function changePasswd(){ | |
661 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; |
|
664 | require 'components'.DS.'com_users'.DS.'models'.DS.'UsersModel.php'; | |
662 |
|
665 | |||
663 | $iduser = $_POST['iduser']; |
|
666 | $iduser = $_POST['iduser']; | |
664 | try{ |
|
667 | try{ | |
665 | if(isset ($_POST['chgPasswd'])){ |
|
668 | if(isset ($_POST['chgPasswd'])){ | |
666 | $type_login = $_POST['chgPasswd']; |
|
669 | $type_login = $_POST['chgPasswd']; | |
667 | $user = new UsersModel(); |
|
670 | $user = new UsersModel(); | |
668 |
|
671 | |||
669 | if($type_login == 4){ |
|
672 | if($type_login == 4){ | |
670 |
|
673 | |||
671 | $datos['password'] = md5($_POST['passwd']); |
|
674 | $datos['password'] = md5($_POST['passwd']); | |
672 | $datos['state'] = 1; |
|
675 | $datos['state'] = 1; | |
673 | $user->setIdValue($iduser); |
|
676 | $user->setIdValue($iduser); | |
674 | list($result, $message) = $user->UpdateItem($datos); |
|
677 | list($result, $message) = $user->UpdateItem($datos); | |
675 |
|
678 | |||
676 | $url = 'index.php?option=com_users&controller=Users&action=home'; |
|
679 | $url = 'index.php?option=com_users&controller=Users&action=home'; | |
677 |
|
680 | |||
678 | header("location: ".$url); |
|
681 | header("location: ".$url); | |
679 | exit(); |
|
682 | exit(); | |
680 | }else{ |
|
683 | }else{ | |
681 |
|
684 | |||
682 | $oldpasswd = $_POST['oldpasswd']; |
|
685 | $oldpasswd = $_POST['oldpasswd']; | |
683 | $datos['password'] = $_POST['newpasswd']; |
|
686 | $datos['password'] = $_POST['newpasswd']; | |
684 | $check_password = $_POST['retypepasswd']; |
|
687 | $check_password = $_POST['retypepasswd']; | |
685 |
|
688 | |||
686 | $result = $user->getPasswd($iduser); |
|
689 | $result = $user->getPasswd($iduser); | |
687 | $data_model = $result->fetch(); |
|
690 | $data_model = $result->fetch(); | |
688 | $db_old_passwd = $data_model[0]; |
|
691 | $db_old_passwd = $data_model[0]; | |
689 |
|
692 | |||
690 | if($db_old_passwd == md5($oldpasswd)){ |
|
693 | if($db_old_passwd == md5($oldpasswd)){ | |
691 | $user->setIdValue($iduser); |
|
694 | $user->setIdValue($iduser); | |
692 | $datos['password'] = md5($datos['password']); |
|
695 | $datos['password'] = md5($datos['password']); | |
693 | list($result, $message) = $user->UpdateItem($datos); |
|
696 | list($result, $message) = $user->UpdateItem($datos); | |
694 | } |
|
697 | } | |
695 |
|
698 | |||
696 | $url = 'index.php?controller=Users&action=editUser&user='.$iduser; |
|
699 | $url = 'index.php?controller=Users&action=editUser&user='.$iduser; | |
697 |
|
700 | |||
698 | header("location: ".$url); |
|
701 | header("location: ".$url); | |
699 | exit(); |
|
702 | exit(); | |
700 | } |
|
703 | } | |
701 | } |
|
704 | } | |
702 | } catch (Exception $e){ |
|
705 | } catch (Exception $e){ | |
703 | var_dump($e->getMessage()); |
|
706 | var_dump($e->getMessage()); | |
704 | } |
|
707 | } | |
705 | } |
|
708 | } | |
706 |
|
709 | |||
707 | public function home(){ |
|
710 | public function home(){ | |
708 | $data['content'] = "components".DS."com_users".DS."views".DS."home.php"; |
|
711 | $data['content'] = "components".DS."com_users".DS."views".DS."home.php"; | |
709 | $data['title'] = "WELCOME:::::::::::"; |
|
712 | $data['title'] = "WELCOME:::::::::::"; | |
710 |
|
713 | |||
711 | $this->view->show("template.php", $data); |
|
714 | $this->view->show("template.php", $data); | |
712 | } |
|
715 | } | |
713 | } |
|
716 | } | |
714 |
|
717 | |||
715 | ?> No newline at end of file |
|
718 | ?> |
General Comments 0
You need to be logged in to leave comments.
Login now