106 lines
3.8 KiB
PHP
106 lines
3.8 KiB
PHP
<?php defined("SYSPATH") or die("No direct script access.");
|
|
/**
|
|
* Gallery - a web based photo album viewer and editor
|
|
* Copyright (C) 2000-2013 Bharat Mediratta
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or (at
|
|
* your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*/
|
|
class Reauthenticate_Controller extends Controller {
|
|
public function index() {
|
|
$is_ajax = Session::instance()->get_once("is_ajax_request", request::is_ajax());
|
|
if (!identity::active_user()->admin) {
|
|
if ($is_ajax) {
|
|
// We should never be able to get here since Admin_Controller::_reauth_check() won't work
|
|
// for non-admins.
|
|
access::forbidden();
|
|
} else {
|
|
url::redirect(item::root()->abs_url());
|
|
}
|
|
}
|
|
|
|
// On redirects from the admin controller, the ajax request indicator is lost,
|
|
// so we store it in the session.
|
|
if ($is_ajax) {
|
|
$v = new View("reauthenticate.html");
|
|
$v->form = self::_form();
|
|
$v->user_name = identity::active_user()->name;
|
|
print $v;
|
|
} else {
|
|
self::_show_form(self::_form());
|
|
}
|
|
}
|
|
|
|
public function auth() {
|
|
if (!identity::active_user()->admin) {
|
|
access::forbidden();
|
|
}
|
|
access::verify_csrf();
|
|
|
|
$form = self::_form();
|
|
$valid = $form->validate();
|
|
$user = identity::active_user();
|
|
if ($valid) {
|
|
module::event("user_auth", $user);
|
|
if (!request::is_ajax()) {
|
|
message::success(t("Successfully re-authenticated!"));
|
|
}
|
|
url::redirect(Session::instance()->get_once("continue_url"));
|
|
} else {
|
|
$name = $user->name;
|
|
log::warning("user", t("Failed re-authentication for %name", array("name" => $name)));
|
|
module::event("user_auth_failed", $name);
|
|
if (request::is_ajax()) {
|
|
$v = new View("reauthenticate.html");
|
|
$v->form = $form;
|
|
$v->user_name = identity::active_user()->name;
|
|
json::reply(array("html" => (string)$v));
|
|
} else {
|
|
self::_show_form($form);
|
|
}
|
|
}
|
|
}
|
|
|
|
private static function _show_form($form) {
|
|
$view = new Theme_View("page.html", "other", "reauthenticate");
|
|
$view->page_title = t("Re-authenticate");
|
|
$view->content = new View("reauthenticate.html");
|
|
$view->content->form = $form;
|
|
$view->content->user_name = identity::active_user()->name;
|
|
|
|
print $view;
|
|
}
|
|
|
|
private static function _form() {
|
|
$form = new Forge("reauthenticate/auth", "", "post", array("id" => "g-reauthenticate-form"));
|
|
$form->set_attr("class", "g-narrow");
|
|
$group = $form->group("reauthenticate")->label(t("Re-authenticate"));
|
|
$group->password("password")->label(t("Password"))->id("g-password")->class(null)
|
|
->callback("auth::validate_too_many_failed_auth_attempts")
|
|
->callback("Reauthenticate_Controller::valid_password")
|
|
->error_messages("invalid_password", t("Incorrect password"))
|
|
->error_messages(
|
|
"too_many_failed_auth_attempts",
|
|
t("Too many incorrect passwords. Try again later"));
|
|
$group->submit("")->value(t("Submit"));
|
|
return $form;
|
|
}
|
|
|
|
static function valid_password($password_input) {
|
|
if (!identity::is_correct_password(identity::active_user(), $password_input->value)) {
|
|
$password_input->add_error("invalid_password", 1);
|
|
}
|
|
}
|
|
}
|