src/Controller/UserController.php line 163

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  6. use Symfony\Component\HttpFoundation\Response;
  7. use Symfony\Component\Routing\Annotation\Route;
  8. use Doctrine\ORM\EntityManagerInterface;
  9. use Symfony\Component\HttpFoundation\RequestStack;
  12. use App\Entity\User;
  13. use App\Entity\Userlog;
  14. use App\Entity\Cart;
  19. class UserController extends AbstractController
  20. {
  21.     private $requestStack;
  23.     public function __construct(RequestStack $requestStack)
  24.     {
  25.         $this->requestStack = $requestStack;
  27.         // Accessing the session in the constructor is *NOT* recommended, since
  28.         // it might not be accessible yet or lead to unwanted side-effects
  29.         // $this->session = $requestStack->getSession();
  30.     }
  32.     /**
  33.      * @Route("/loggedin/" , name="loggedin")
  34.      */
  35.     public function loggedin()
  36.     {
  37.         include("./include/function.php");
  38.         include("./include/global.php");
  40.         $user = $this->get('security.token_storage')->getToken()->getUser();
  41.         if($user->getId() != 0)
  42.         {
  43.             $em = $this->getDoctrine()->getManager();
  44.             $d = new \DateTime(strtotime('Y-m-d H:i:s'));
  45.             $user->setULastlogin($d);
  46.         
  47.             $em->persist($user);
  48.             $em->flush();
  49.         
  50.             
  51.             $session = $this->requestStack->getSession(); //$session = $this->get('session');
  52.             $placeid = $session->get('place');
  54.             $log = new Userlog();
  55.             if($this->get('security.token_storage')->getToken()->getUser() == 'anon.'){
  56.                 $log->setUlUid(0);
  57.             }
  58.             else{
  59.                 $log->setUlUid( $user->getId());
  60.             }
  61.             $log->setUlSessionid($session->getId());
  62.             $log->setUlBrowser($_SERVER['HTTP_USER_AGENT']);
  63.             $log->setUlIp($_SERVER['REMOTE_ADDR']);
  64.             
  65.             $now = new \DateTime(date("Y-m-d H:i:s"));
  66.             $log->setUlNow($now);
  67.             if($placeid == NULL)
  68.             {
  69.                 $log->setUlPlace(0);
  70.             }
  71.             else
  72.             {
  73.                 $log->setUlPlace($placeid);
  74.             }
  75.             $log->setUlAction(1);
  76.             $log->setUlReferer($_SERVER['HTTP_REFERER']);
  77.             $log->setUlCurrentPage($_SERVER['REQUEST_URI']);
  79.             $em = $this->getDoctrine()->getManager();
  80.             $em->persist($log);
  81.             $em->flush();
  85.             $conn = $this->getDoctrine()->getManager()->getConnection();
  86.             $query = "DELETE FROM cart WHERE  ca_now <= ?";
  87.             
  88.             $conn->executeQuery(
  89.                 $query
  90.                 ,array(
  91.                     date("Y-m-d 00:00:00")
  92.                 )
  93.              );
  95.         }
  97.         $session = $this->requestStack->getSession(); //$session = $this->get('session');
  98.         if($company == 'KVO')
  99.         {
  100.             $placeid = 1;
  101.         }
  102.         else
  103.         {
  104.             $placeid = $session->get('place');
  105.         }
  106.         
  107.         //$response = $this->forward('App\Controller\CourseController::homepage', []);
  108.         $response = $this->forward('App\Controller\CourseController::homepage2', ['placeid' => $placeid]);
  109.         return $response;
  110.     }
  112.     /**
  113.      * @Route("/usersettings" , name="userSettings")
  114.      */
  115.     public function settings(): Response
  116.     {
  117.        
  118.         if($this->get('security.token_storage')->getToken()->getUser() == 'anon.')
  119.         {
  120.             $response = $this->forward('App\Controller\CourseController::homepage', []);
  121.             return $response;
  122.         }
  124.         $user = $this->get('security.token_storage')->getToken()->getUser();
  125.         $user->getId();
  126.         
  127.         
  128.         $t1 = $user->getUBirthday(); ;
  129.         $t1 = $t1->format('d.m.Y'); 
  131.         $session = $this->requestStack->getSession(); //$session = $this->get('session');
  132.         $place = $session->get('place');
  134.         return $this->render('user/settings.html.twig', [
  135.             'first' => $user->getUFirstname(),
  136.             'last' => $user->getULastname(),
  137.             'email' => $user->getUEmail(),
  138.             'username' => $user->getUUsername(),
  139.             'password' => $user->getUPassword(),
  140.             'street' => $user->getUStreet(),
  141.             'zip' => $user->getUZip(),
  142.             'city' => $user->getUCity(),
  143.             'birthday' => $t1,
  144.             'place' => $place,
  145.             'telephone' => $user->getUTelephone()
  146.         ]);
  147.     }
  150.     /**
  151.      * @Route("/register" , name="register")
  152.      */
  153.     public function register(): Response
  154.     {
  155.         $session = $this->requestStack->getSession(); //$session = $this->get('session');
  156.         $place = $session->get('place');
  157.         return $this->render('user/register.html.twig',['place' => $place]);
  158.     }
  159.     
  160.     /**
  161.      * @Route("/pwforgot" , name="pwforgot")
  162.      */
  163.     public function pwforgot(): Response
  164.     {
  165.         $session = $this->requestStack->getSession(); //$session = $this->get('session');
  166.         $place = $session->get('place');
  167.         return $this->render('user/pwforgot.html.twig',['place' => $place]);
  168.     }
  169.     
  170.     /**
  171.      * @Route("/sendNewPw/{mail}/{username}/" , name="sendNewPw", options={"expose"=true})
  172.      */
  173.     public function sendNewPw($mail, $username)
  174.     {
  175.         include("./include/function.php");
  176.         include("./include/global.php");
  178.         if(trim(checkUserInput($username)) == ""  || trim(checkUserInput($mail)) == ""){ return new Response('error2'); die(); }
  179.         
  180.         $repository = $this->getDoctrine()->getRepository(User::class);
  181.         $user = $repository->findOneBy([
  182.         'u_username' => trim(checkUserInput($username)),
  183.         'u_email' => trim(checkUserInput($mail))
  184.         ]);
  186.         if(empty($user)) 
  187.         {
  188.             return new Response('error1');
  189.             die();
  190.         }
  191.         
  192.         
  193.         $session = $this->requestStack->getSession(); //$session = $this->get('session');
  194.         $placeid = $session->get('place');
  195.         
  196.         if($placeid == "" || $placeid == NULL || $placeid == 0)
  197.         {
  198.             $placeid = 2;
  199.         }
  200.         
  201.         $newpw = $this->generateRandomString(10);
  202.         
  203.         ini_set('max_execution_time', 30);
  204.         
  205.         require("./include/phpmailer/PHPMailerAutoload.php");
  206.         $mail2             = new \PHPMailer();
  207.         $mail2->IsSMTP();
  208.         $mail2->SMTPDebug  = 0;
  209.         $mail2->Host       = $smtp_mail_host;
  210.         $mail2->Port       = $smtp_mail_port;
  211.         if(!empty($smtp_mail_user[$placeid])) {
  212.             $mail2->SMTPAuth   = true;
  213.             $mail2->Username   = $smtp_mail_user[$placeid];
  214.             $mail2->Password   = $smtp_mail_pass[$placeid];
  215.         } else {
  216.             $mail2->SMTPAuth   = false;
  217.         }
  218.         if($smtp_mail_secured) 
  219.         {
  220.             $mail2->SMTPSecure = "ssl";
  221.         }
  222.                     
  223.                     
  224.         $mail2->SetFrom($mailFromAdress[$placeid], $mailFromAdressName);
  225.         
  226.         $mail2->Subject = "Ihr neues Passwort";
  227.         
  228.         $txt = "Sehr geehrte Damen und Herren, <br><br>";
  229.         $txt .= "anbei senden wir Ihnen Ihr neues Passwort f&uuml;r das Kurstool.<br><br>";
  230.         $txt .= "Ihr neues Passwort lautet: ".$newpw."<br><br>";
  231.         $txt .= "Mit freundlichen Gr&uuml;&szlig;en,<br>";
  232.         $txt .= "".$companyFull;
  233.         
  234.         $mail2->MsgHTML($txt);
  235.         
  236.         $mail2->AddAddress(checkUserInput($mail));
  237.         if(!$mail2->Send()) 
  238.         {
  239.             debugText("Die E-Mail konnte nicht versendet werden! Bitte wenden Sie sich an den Administrator!<br><br>" . $mail2->ErrorInfo);
  240.             return new Response("nok");
  241.         }
  242.         else
  243.         {
  244.             $em = $this->getDoctrine()->getManager();
  245.             $user->setUPassword(password_hash($newpw,  PASSWORD_BCRYPT ));
  246.             $em->persist($user);
  247.             $em->flush();
  249.            return new Response('ok');
  250.             die();
  251.         }
  253.     }
  254.     
  255.     function generateRandomString($length = 10) 
  256.     {
  257.         $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
  258.         $charactersLength = strlen($characters);
  259.         $randomString = '';
  260.         for ($i = 0; $i < $length; $i++) {
  261.             $randomString .= $characters[rand(0, $charactersLength - 1)];
  262.         }
  263.         return $randomString;
  264.     }
  266.     /**
  267.      * @Route("/setAccountInfos/{email}/{username}/{first}/{last}/{pw}/{street}/{zip}/{city}/{birthday}/{telephone}/" , name="setAccountInfos", options={"expose"=true})
  268.      */
  269.     public function setAccountInfos($email, $username, $first, $last, $pw, $street, $zip, $city, $birthday, $telephone)
  270.     {
  272.         if($this->get('security.token_storage')->getToken()->getUser() == 'anon.')
  273.         {
  274.             $response = $this->forward('App\Controller\CourseController::homepage', []);
  275.             return $response;
  276.         }
  278.         include("./include/function.php");
  279.         
  280.         if($pw == "empty"){$pw = "";}
  281.         if($first == "empty"){$first = "";}
  282.         if($last == "empty"){$last = "";}
  283.         if($street == "empty"){$street = "";}
  284.         if($zip == "empty"){$zip = 0;}
  285.         if($city == "empty"){$city = "";}
  286.         
  287.         if(!is_numeric($zip)){$zip = 0;}
  290.         if(trim(checkUserInput($username)) == "" || trim(checkUserInput($email)) == "" || trim(checkUserInput($birthday)) == ""){ return new Response('error2'); die(); }
  291.         
  292.         $pw = checkUserInput(trim($pw));
  293.         
  294.         
  295.         if($pw != "")
  296.         {
  297.             if (strlen($pw) < 8) {
  298.                 return new Response('error3');die();
  299.             }
  301.             if (!preg_match("#[0-9]+#", $pw)) {
  302.                 return new Response('error4');die();
  303.             }
  305.             if (!preg_match("#[a-zA-Z]+#", $pw)) {
  306.                 return new Response('error5');die();
  307.             }  
  308.         }
  310.         $em = $this->getDoctrine()->getManager();
  311.         $user = $this->get('security.token_storage')->getToken()->getUser();
  314.         $repository = $this->getDoctrine()->getRepository(User::class);
  315.         $user2 = $repository->findOneBy(['u_username' => trim(checkUserInput($username))]);
  316.         if($user2) 
  317.         {
  318.             if($user2->getUUsername() != $user->getUUsername())
  319.             {
  320.                 return new Response('error1');
  321.                 die();
  322.             }
  323.         }
  325.         if(trim(checkUserInput($first)) != "")
  326.         {
  327.             $user->setUFirstName(checkUserInput($first));
  328.         }
  329.         if(trim(checkUserInput($last)) != "")
  330.         {
  331.             $user->setULastName(checkUserInput($last));
  332.         }
  333.         $user->setUUsername(checkUserInput($username));
  334.         $user->setUEmail(checkUserInput($email));
  335.         if($pw != "")
  336.         {
  337.             $user->setUPassword(password_hash($pw,  PASSWORD_BCRYPT ));
  338.         }
  339.         $user->setUStreet(checkUserInput($street));
  340.         $user->setUZip(checkUserInput($zip));
  341.         $user->setUCity(checkUserInput($city));
  342.         $user->setUTelephone(checkUserInput($telephone));
  345.         $d = new \DateTime(date('Y-m-d',strtotime(checkUserInput($birthday))));
  346.         $user->setUBirthday($d);
  348.       
  349.         $em->persist($user);
  350.         $em->flush();
  351.         return new Response('ok');die();
  352.     }
  355.     /**
  356.      * @Route("/checkNewUser/{mail}/{username}/{pw}/{birthday}/{first}/{last}/{street}/{zip}/{city}/{telephone}" , name="checkNewUser", options={"expose"=true})
  357.      */
  358.     public function checkNewUser($mail, $username, $pw, $birthday, $first, $last, $street,$zip, $city, $telephone )
  359.     {
  360.         include("./include/function.php");
  361.         
  362.         if(trim(checkUserInput($username)) == "" || trim(checkUserInput($pw)) == "" || trim(checkUserInput($mail)) == "" || trim(checkUserInput($birthday)) == "" ){ return new Response('error2'); die(); }
  363.         
  364.         $repository = $this->getDoctrine()->getRepository(User::class);
  365.         $user = $repository->findOneBy(['u_username' => trim(checkUserInput($username))]);
  366.         if($user) 
  367.         {
  368.             return new Response('error1');
  369.             die();
  370.         }
  371.         
  372.         $pw = checkUserInput($pw);
  373.         
  374.         if (strlen($pw) < 8) {
  375.             return new Response('error3');die();
  376.         }
  378.         if (!preg_match("#[0-9]+#", $pw)) {
  379.             return new Response('error4');die();
  380.         }
  382.         if (!preg_match("#[a-zA-Z]+#", $pw)) {
  383.             return new Response('error5');die();
  384.         }  
  385.         
  386.         
  387.         
  388.         $em = $this->getDoctrine()->getManager();
  389.         
  390.         if($first == '###'){$first = "";}
  391.         if($last == '###'){$last = "";}
  392.         if($street == '###'){$street = "";}
  393.         if($zip == '###'){$zip = 0;}
  394.         if($city == '###'){$city = "";}
  395.         if($telephone == '###'){$telephone = "";}
  397.         if(!is_numeric($zip)){$zip = 0;}
  399.         
  400.         $d = new \DateTime(strtotime('Y-m-d H:i:s'));
  401.         
  402.         $user = new User();
  403.         $user->setUUsername($username);
  404.         $user->setUPassword(password_hash($pw,  PASSWORD_BCRYPT ));
  405.         $user->setUEmail(checkUserInput($mail));
  406.         $user->setURole(1);
  407.         $user->setULocked(0);
  408.         $user->setUFirstname(checkUserInput($first));
  409.         $user->setULastname(checkUserInput($last));
  410.         $user->setULastlogin($d);
  411.         $user->setUStreet(checkUserInput($street));
  412.         $user->setUCity(checkUserInput($city));
  413.         $user->setUZip(checkUserInput($zip));
  414.         $user->setUHouseadmin(0);
  415.         $user->setUTelephone(checkUserInput($telephone));
  416.         $user->setUCompany(0);
  418.         $d = new \DateTime(date('Y-m-d',strtotime(checkUserInput($birthday))));
  419.         $user->setUBirthday($d);
  421.         // tell Doctrine you want to (eventually) save the Product (no queries yet)
  422.         $em->persist($user);
  423.         // actually executes the queries (i.e. the INSERT query)
  424.         $em->flush();
  428.         $session = $this->requestStack->getSession(); //$session = $this->get('session');
  429.         $placeid = $session->get('place');
  431.         $log = new Userlog();
  432.         $log->setUlUid( $user->getId());
  433.         $log->setUlSessionid($session->getId());
  434.         $log->setUlBrowser($_SERVER['HTTP_USER_AGENT']);
  435.         $log->setUlIp($_SERVER['REMOTE_ADDR']);
  436.         
  437.         $now = new \DateTime(date("Y-m-d H:i:s"));
  438.         $log->setUlNow($now);
  439.         if($placeid == NULL)
  440.         {
  441.             $log->setUlPlace(0);
  442.         }
  443.         else
  444.         {
  445.             $log->setUlPlace($placeid);
  446.         }
  447.         $log->setUlAction(4);
  448.         $log->setUlReferer($_SERVER['HTTP_REFERER']);
  449.         $log->setUlCurrentPage($_SERVER['REQUEST_URI']);
  451.         $em = $this->getDoctrine()->getManager();
  452.         $em->persist($log);
  453.         $em->flush();
  456.         return new Response('ok');
  457.         
  458.     }
  459. }