summaryrefslogtreecommitdiff
path: root/src/application/actions/auth
diff options
context:
space:
mode:
authorJonas Kohl2024-10-10 17:33:13 +0200
committerJonas Kohl2024-10-10 17:33:13 +0200
commit64b1ec0fabbf7328a79a20ff58502ebfa80fad8b (patch)
tree88f2281295b347bdd3beee5bc45f68314f2051dc /src/application/actions/auth
parent4ffc399a847ce4f328d4f14adebb48d06ad033f9 (diff)
Break up actions into individual files
Diffstat (limited to 'src/application/actions/auth')
-rw-r--r--src/application/actions/auth/_common.php6
-rw-r--r--src/application/actions/auth/get.php10
-rw-r--r--src/application/actions/auth/post.php21
3 files changed, 37 insertions, 0 deletions
diff --git a/src/application/actions/auth/_common.php b/src/application/actions/auth/_common.php
new file mode 100644
index 0000000..2b8911a
--- /dev/null
+++ b/src/application/actions/auth/_common.php
@@ -0,0 +1,6 @@
+<?php
+
+if ($currentUser) {
+ header("Location: " . ($_GET["next"] ?? "."));
+ exit;
+}
diff --git a/src/application/actions/auth/get.php b/src/application/actions/auth/get.php
new file mode 100644
index 0000000..2ff38ff
--- /dev/null
+++ b/src/application/actions/auth/get.php
@@ -0,0 +1,10 @@
+<?php
+
+use mystic\forum\utils\RequestUtils;
+
+_view("template_start", ["_title" => __("Log in")]);
+_view("template_navigation_start");
+_view("template_navigation", ["user" => RequestUtils::getAuthorizedUser($db)]);
+_view("template_navigation_end");
+_view("form_login");
+_view("template_end", [...getThemeAndLangInfo()]);
diff --git a/src/application/actions/auth/post.php b/src/application/actions/auth/post.php
new file mode 100644
index 0000000..e9b5138
--- /dev/null
+++ b/src/application/actions/auth/post.php
@@ -0,0 +1,21 @@
+<?php
+
+use mystic\forum\orm\User;
+use mystic\forum\utils\RequestUtils;
+
+$formId = "login";
+$username = RequestUtils::getRequiredField("username", $formId);
+$password = RequestUtils::getRequiredField("password", $formId);
+
+$user = new User();
+$user->name = $username;
+if (!$db->fetchWhere($user, "name") || !password_verify($password, $user->passwordHash)) {
+ RequestUtils::triggerFormError(__("Username or password incorrect!"), $formId);
+}
+
+if (!$user->activated) {
+ RequestUtils::triggerFormError(__("Please activate your user account first!"), $formId);
+}
+
+RequestUtils::setAuthorizedUser($user);
+header("Location: " . ($_GET["next"] ?? "."));